{"report_id":"6f7802c3-b223-4f9c-9668-c52bd57e1d4e","version":6,"status":"done","tags":[],"date":"2025-12-24T02:52:04Z","url":{"schema":"http","addr":"bizdavar.com/","fqdn":"bizdavar.com","domain":"bizdavar.com","tld":"com"},"ip":{"addr":"172.67.192.157","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"bizdavar.com/","fqdn":"bizdavar.com","domain":"bizdavar.com","tld":"com"},"title":"Bizdavar Group | خدمات دیجیتال، تامین تجهیزات صنعتی و توسعه کسب‌وکار","dom":{"size":136247,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (11055)","md5":"06b89c8e119fdfba9586476dddf12698","sha1":"e01bd78ed00cf8c4ef096da8babce6218029a6d5","sha256":"6ea055fd3c79ae4d555877c42a4fa015f173b1e265adf93449b16de59918f5de","sha512":"a06768f52458ed26ba50efaaf643d867a030d68b7be043328a9e1f501b5034c855ec23e3dac3cde9004fdf7655c18449631254d4a7f50b05c74c093dd0ca4a67","ssdeep":"1536:ZqPe/auw3ACCKCFypEMURxy8hJw7jH3qrq9ETz4AH5lleYeSxKB1:ZqPe/auipT+k+Jw7jarqyzH5lleFSG1","tlshash":"2bd3197679ed1436265f92cb80273a1c61cbd8a7c566d9e4f2ff01245ff0d9232a3628","dom_hash":"domhashe86afc9a8a597d0419030ee500362788","first_seen":"2025-12-24T02:52:14.431233Z","last_seen":"2025-12-24T02:52:14.431233Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"bizdavar.com/","fqdn":"bizdavar.com","domain":"bizdavar.com","tld":"com"},"ip":{"addr":"172.67.192.157","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-01-28T02:52:04Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":2}},"detection":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-12-24","alert":"Sinkholed","trigger":"bizdavar.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-24","alert":"Sinkholed","trigger":"bizdavar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"bizdavar.com","ip":{"addr":"104.21.20.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2023-05-30","domain_rank":0,"first_seen":"2025-07-25T23:48:19.392468Z","last_seen":"2025-07-25T23:48:19.392468Z","alert_count":184,"request_count":92,"received_data":17813321,"sent_data":45398,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Complianz","description":"Complianz is a GDPR/CCPA Cookie Consent plugin that supports GDPR, DSGVO, CCPA and PIPEDA with a conditional Cookie Notice and customized Cookie Policy based on the results of the built-in Cookie Scan.","website":"https://complianz.io","common_platform_enumeration":"","icon":"Complianz.png","categories":["A/B Testing","Cookie compliance","WordPress plugins"]},{"name":"jQuery Migrate:3.4.1","description":"Query Migrate is a javascript library that allows you to preserve the compatibility of your jQuery code developed for versions of jQuery older than 1.9.","website":"https://github.com/jquery/jquery-migrate","common_platform_enumeration":"","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Site Kit:1.165.0","description":"Site Kit is a one-stop solution for WordPress users to use everything Google has to offer to make them successful on the web.","website":"https://sitekit.withgoogle.com/","common_platform_enumeration":"","icon":"Google.svg","categories":["Analytics","WordPress plugins"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]},{"name":"Yoast SEO:26.3","description":"Yoast SEO is a search engine optimisation plugin for WordPress and other platforms.","website":"https://yoast.com/wordpress/plugins/seo/","common_platform_enumeration":"","icon":"Yoast SEO.png","categories":["SEO","WordPress plugins"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Elementor:3.32.5","description":"Elementor is a website builder platform for professionals on WordPress.","website":"https://elementor.com","common_platform_enumeration":"","icon":"Elementor.svg","categories":["Page builders","WordPress plugins"]},{"name":"WordPress","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Google Analytics","description":"Google Analytics is a free web analytics service that tracks and reports website traffic.","website":"https://google.com/analytics","common_platform_enumeration":"","icon":"Google Analytics.svg","categories":["Analytics"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.250.74.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2025-12-21T22:14:03.270461Z","alert_count":0,"request_count":1,"received_data":38591,"sent_data":547,"comment":"","tags":null,"fingerprints":null},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.251.38.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2025-12-21T22:17:07.06462Z","alert_count":0,"request_count":3,"received_data":159999,"sent_data":1737,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"www.googletagmanager.com","ip":{"addr":"142.251.38.104","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2011-11-11","domain_rank":283,"first_seen":"2012-10-04T01:07:32Z","last_seen":"2025-12-21T22:17:33.83847Z","alert_count":0,"request_count":1,"received_data":408961,"sent_data":433,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"bizdavar.com/wp-content/plugins/elementor/assets/js/frontend.min.js?ver=3.32.5","fqdn":"bizdavar.com","domain":"bizdavar.com","tld":"com"},"ip":{"addr":"104.21.20.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"c0092f4ab132f0e6a7af09817638e421","sha1":"bc811db8bec0a3d08ac57ddf71e07ce8fe882587","sha256":"f2c7fb7be0ca17cd31dfc249f866c7b14b073768d61508882e4eb917607aedc4","sha512":"ad1dbeeb5741eac1f8af6745f166f702d52b315574b6b7137e3fd2059d6585f20355579f8566093b2fd0064afa7f48d294ec1d21b6467acb369cde93e635f96a","ssdeep":"768:Dj1cI21yHLRd1M4ZBOh0hbuNFXCz1k8MtJR8RjDKv//Dpl1XkLVgbpM+MpKEnzBv:VcaRd1MMBOhSmF7tJR8RjD8/mLVliEnN","tlshash":"63e209523296d4a2069f48a3f4331119f3769dd9b80af095b2bcdce6a471f877362b34","size":32362,"data":"","first_seen":"2025-10-21T14:39:27.087456Z","last_seen":"2026-08-11T09:37:39.157928Z","times_seen":14186,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bizdavar.com/google_gtagjs-js-after","fqdn":"bizdavar.com","domain":"bizdavar.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"4981a7e2ab78d1a82725444710fafcd5","sha1":"a0d52792fdb047a987d36c1b0284ed7654649e49","sha256":"e0103beaf477c54e25f82b0112e1a82cf8e9fb23b6c7bfe3b3c6e335812fff85","sha512":"f5a21db1944c654562ae39c7488b1fae5520a6eb15f31b751cd7de6c1fee7c7050d27031cb253c60d6c7dfb8449063589a47e86090b59e8d5c9cec287a8e1fd1","ssdeep":"","tlshash":"bb01d273e0811afac9aaa8325b562799365232dad6b4641089dc161424bfe97e0d4cc8","size":813,"data":"","first_seen":"2025-12-24T02:52:14.533723Z","last_seen":"2025-12-24T02:52:14.533723Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bizdavar.com/wp-content/plugins/elementor-pro/assets/js/webpack-pro.runtime.min.js?ver=3.32.2","fqdn":"bizdavar.com","domain":"bizdavar.com","tld":"com"},"ip":{"addr":"104.21.20.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"bdd515e79fd529e7583fa682eef99f0f","sha1":"4ec3ae5e2aff05a1e5ae1ac61e9aea8e616cb055","sha256":"24291b575df47ad5d581d096fa92f29184f797ca069e5f931fd272b4d98d125c","sha512":"d64896ba8912e0474d7cd112c56dde64a62af01b43a166f0be4e7bd399f871bd25b60cca181850894a5de5d33747550efaaa18868bf4aa9c5c0bb545f5375684","ssdeep":"96:BqRdxwrudvR4x4boFkEO/HfOYAWY4N53hsstJQPCl2e/VtFVKdpYQGK0Vz38k2:ETXdve4boFemUN537MPa/pMdOQ8Mk2","tlshash":"ead1549809489d2b26e43ad8b19b6b741a3dd0323c5ad991e611eddc18fcfd183ea532","size":6248,"data":"","first_seen":"2025-09-29T16:46:42.899216Z","last_seen":"2026-08-11T20:57:59.625283Z","times_seen":7513,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bizdavar.com/wp-includes/js/dist/i18n.min.js?ver=c26c3dc7bed366793375","fqdn":"bizdavar.com","domain":"bizdavar.com","tld":"com"},"ip":{"addr":"104.21.20.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"3a5838d1182eb0b11f5a58bfe26e2529","sha1":"920b2291e65d62eb55c1958911768540abaff5cf","sha256":"d4efe709c65438ae90dff385486421fea45762880f21fc4e0dca3fa96210f428","sha512":"bc41d50cd2e5c17c75ba737c303f2f498cc94e2c3fe402b2f15c5f10531e53633598093da98579b2dee65733dce0f763d77380ae35a9591d8bf91f975b7c6845","ssdeep":"96:L9emIWL7lnv93ssmAeGejQVnmggoC7arVCG0GXF730IQRDdlZq+SxSD3LmD:8mIWZVszMuinmg3rQ8Xd30DDdlZq+Sx3","tlshash":"2bb157dcb9d57022235121a0597fb409f3357d6470ebb8006ba9c4a47eb15cfb1a2fad","size":5314,"data":"","first_seen":"2025-10-27T08:47:54.280246Z","last_seen":"2026-08-12T07:15:32.405492Z","times_seen":201013,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bizdavar.com/cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js","fqdn":"bizdavar.com","domain":"bizdavar.com","tld":"com"},"ip":{"addr":"104.21.20.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"9e8f56e8e1806253ba01a95cfc3d392c","sha1":"a8af90d7482e1e99d03de6bf88fed2315c5dd728","sha256":"2595496fe48df6fcf9b1bc57c29a744c121eb4dd11566466bc13d2e52e6bbcc8","sha512":"63f0f6f94fbabadc3f774ccaa6a401696e8a7651a074bc077d214f91da080b36714fd799eb40fed64154972008e34fc733d6ee314ac675727b37b58ffbebebee","ssdeep":"","tlshash":"6021d5743a18107e226a0133e56f66cee1f23715fd17e440408ad89566e4fe5063fed9","size":1239,"data":"","first_seen":"2023-03-07T01:02:00Z","last_seen":"2026-08-12T08:36:42.050233Z","times_seen":418484,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bizdavar.com/","fqdn":"bizdavar.com","domain":"bizdavar.com","tld":"com"},"ip":{"addr":"104.21.20.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"17a9c5273fc992d02e2f4b8b9dca01fc","sha1":"e9d14bb62a9ac1682517054d96c274ad3b6fb002","sha256":"f1893f7b6d9970c0fffec0029cfe0ec45a416dd69ce543ba7a51484a02f04c47","sha512":"36fb5702af67fba4a20b38a9737a78281a4fd0b16e11c3e41417ab3c986ab4d18df9f022c08e5192c720662d78a784f967067d92d591a4fe47c8bf5a9e07bc81","ssdeep":"","tlshash":"0b01287320c11afbc9bba8025b563799361333dad6b4641089dc161434bfe97e0d4cc8","size":735,"data":"","first_seen":"2025-12-24T02:52:14.534754Z","last_seen":"2025-12-24T02:52:14.534754Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bizdavar.com/wp-includes/js/jquery/ui/core.min.js?ver=1.13.3","fqdn":"bizdavar.com","domain":"bizdavar.com","tld":"com"},"ip":{"addr":"104.21.20.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"da215ae12b95b3aeeb2047667016c7f8","sha1":"480a7087aa74b5b47c47f05a11670e823a3ae4c0","sha256":"699210a5ed06e497b4730ec83bb65ac4c2269ae4a0ee8af3f24aae7ee5b66b76","sha512":"d256ddc828c06f7b84f7df706a4481928a186ea6d3e1358254a1ec02f403d72d2f3aecd682a93aad61b8f236f17dbcf7e6ca100f78c30a348682bf8ee125d8ff","ssdeep":"384:G/rsrDr8LVyraS3dtrqorqr8hrpCip8fuxNhlGX0CiS9rH/OrLrErJ29FkFvd:iS33ZdvK47kv","tlshash":"06a2d94eb246380586f7a2a5402f521fb132e25cb105c8ddf468d8da3c7eea95173f79","size":21464,"data":"","first_seen":"2025-04-15T23:53:17.313193Z","last_seen":"2026-08-12T08:41:02.73336Z","times_seen":341294,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bizdavar.com/wp-content/plugins/complianz-gdpr/cookiebanner/js/complianz.min.js?ver=1762498392","fqdn":"bizdavar.com","domain":"bizdavar.com","tld":"com"},"ip":{"addr":"104.21.20.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"087de03e5dc079a0742ac8478a5f8c87","sha1":"b14ad9cfa3fa6ae9381806189e7f35f543d185ed","sha256":"fe345dc92f2c901c2eccac134294ff2216e70177dd054ba6f104af6015959ee9","sha512":"5742b4c16babac5856080614523b47dff4f3dff7cc102a3a5474ab1e0c82de4a1e987327beb303775042727b35d3f2498f6916c6283117415725dce206c437ef","ssdeep":"768:k4cjy6JZaYSJjv+YfzwLpstNyuGFGgxesKNVhIkYJO2ybEXoHHFC1aRHQpmiVKbX:IZal8OHQpmZNemLECFKAJ","tlshash":"3903e8b93a9c90b416ee87ed37abab48e4303961dc0fc8609565dc542258dc70f9bfb1","size":40647,"data":"","first_seen":"2025-10-07T21:11:17.93794Z","last_seen":"2026-08-11T18:03:55.596382Z","times_seen":8249,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bizdavar.com/cmplz-cookiebanner-js-after","fqdn":"bizdavar.com","domain":"bizdavar.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"53310b181a638beebaed15dd3374fd49","sha1":"fe59bcdf4daa3a17e8b9a441da0ab383c1108b96","sha256":"090ba390cdd39a3b0220a2f2b72cc1436cab8d16136f758abf77437968cae670","sha512":"43947a61f19d6b1637a827d2308e498a70eae1ac5ca92517cf3c416ece4dffad9a411fdef593e6d5056dd716b3f7e46e1dea80b094749b6ddbf1203499b149c7","ssdeep":"96:IME+DnaGyu8F6m3OILpci5mDp4wDUdDXLpci5mDp+wD/ujWKkrkJ:IP+7aG+FBwDhDUFwDvDmClAJ","tlshash":"d6c1daa8fb9e007365ff127a1d4765cc294ca0f6c4592cf6beb0dc2851d4d8c2ab85e2","size":5630,"data":"","first_seen":"2025-12-24T02:52:14.535751Z","last_seen":"2026-05-05T19:13:51.637488Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bizdavar.com/elementor-frontend-js-before","fqdn":"bizdavar.com","domain":"bizdavar.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"3c9c85d2bf969f391039357f5d1e7a2e","sha1":"29606426c66af5e321056bd73bf57ff09b23f9c9","sha256":"49fa0a8d971736cead38959f506c76f38244d3088f143de2e506a841c1dd3583","sha512":"b52f5b012fb8dad6e383298e56ede3c3c21f2c53998b35f96d5fb3f7f48a97fcac19931565d5171e29be6762416a7c355083e5614f807ac09cbb6792cfa4abaf","ssdeep":"48:K4AFkP0H8c9i7MDybJyNp6pt3ZrvPCWFGYJixJLl/UrGRzDM4ELHhyLWGdoR22as:K5qPUiMu9XhJwJ5M6RzaFPGaR2s","tlshash":"e8c121d9f7296abd457aeb30bc3aff8c045c0c80c457b074ab2c539481b11993a8a7c3","size":5784,"data":"","first_seen":"2025-12-24T02:52:14.536967Z","last_seen":"2025-12-24T02:52:14.536967Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bizdavar.com/wp-includes/js/wp-emoji-loader.min.js","fqdn":"bizdavar.com","domain":"bizdavar.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"6cd03bc20dff3edc57df2946ed5fe04a","sha1":"ac4c4b311b8fec457d5d738ce31bdc6e2fc499f6","sha256":"646e182c23e601badd1c3f6f1e4980f743bc57fb5fe825b186313966dbbb9166","sha512":"6fee464643e40902e59ceaca647d051bcc741598bb697e409f947a052c1e01ee8d803689087a51f4b1ab65cd04a8195dd194bbb7a791f0254e35fe0b06cfdc84","ssdeep":"96:cvcHtHRA5NTDXnM2E0+1lfYsPHgRhR3SU:5N0LE0+1lfYsvSX","tlshash":"f991869ae77638dbb2f900f2697e0d47eb614435d6c8d438c9bea3141cb5893c274a46","size":4624,"data":"","first_seen":"2025-12-24T02:52:14.537974Z","last_seen":"2025-12-24T02:52:14.537974Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bizdavar.com/wp-content/plugins/elementor/assets/js/frontend-modules.min.js?ver=3.32.5","fqdn":"bizdavar.com","domain":"bizdavar.com","tld":"com"},"ip":{"addr":"104.21.20.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"c116e15b70f12dc84fb0bb8080af81c7","sha1":"c90eef327c627b38eabf8c3e7a9d972c73e6551e","sha256":"1550de841a4e7899fa03fc14c4d69dc2fa75ab7d24b7fa9722102a401b0f152e","sha512":"89ce2994089a11f347f910190d0cf6ad12150b4ef2d51c186debd092680b32d06ebcfacfe57eaf8f868e208de03c8b6da0f3d7b0f92da53b2d75276cbf5c57a1","ssdeep":"1536:LGuxmDuqHrrUN3KQ5RSSYeAjA6c9CSTwk83FKm184cR8+esOAexXKh83YNQAzeLB:86SOEAu","tlshash":"5d43e9863552f4b70beb44dad03f450af25708a4a40da4d4bfe9dce594b0d8a133bb79","size":59579,"data":"","first_seen":"2025-10-21T14:39:27.195995Z","last_seen":"2026-08-11T09:37:39.037864Z","times_seen":14026,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bizdavar.com/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.4.1","fqdn":"bizdavar.com","domain":"bizdavar.com","tld":"com"},"ip":{"addr":"104.21.20.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"9ffeb32e2d9efbf8f70caabded242267","sha1":"3ad0c10e501ac2a9bfa18f9cd7e700219b378738","sha256":"5274f11e6fb32ae0cf2dfb9f8043272865c397a7c4223b4cfa7d50ea52fbde89","sha512":"8d6be545508a1c38278b8ad780c3758ae48a25e4e12eee443375aa56031d9b356f8c90f22d4f251140fa3f65603af40523165e33cae2e2d62fc78ec106e3d731","ssdeep":"192:5rprDN+sag6ifKIUpQI99P1tLm9kdgyq1+J3aCJQ+h4MPLORq:5rprxaefKI0LP19m4q1WW+h4Mjp","tlshash":"9952c8adb56679724eb721b8f03bd24f71b205de560d8940d19cc4f6282dc6e812bf78","size":13577,"data":"","first_seen":"2023-05-09T19:21:05Z","last_seen":"2026-08-12T08:29:04.71492Z","times_seen":929918,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bizdavar.com/wp-content/plugins/elementor-pro/assets/lib/sticky/jquery.sticky.min.js?ver=3.32.2","fqdn":"bizdavar.com","domain":"bizdavar.com","tld":"com"},"ip":{"addr":"104.21.20.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"3e31a0ddb1f910fc672d22e6435b95ed","sha1":"f478fd262840bfb394da94a2f5dd95eed4991194","sha256":"34bbd1c367ffc7d80fcff86c7e5f8777e70f4911bb324e8ecfc7dd3604a96e68","sha512":"6c9f642880c702862e17f6866ebb60d7b82c6a7688d28b971c2ee7fa3ad301d8e45a23bb4e7f67062d9193374f764b0335e83423e7ea123410edbddbf7a4e0ea","ssdeep":"","tlshash":"4d714208f304743a45ebf3a2127bc84c72b76524b4ced808656d96aa1d5b48b60b3ffd","size":3721,"data":"","first_seen":"2023-03-08T14:24:56Z","last_seen":"2026-08-12T08:29:04.619516Z","times_seen":70286,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bizdavar.com/wp-content/plugins/elementor/assets/js/text-editor.abc8f59c62f2820dc25a.bundle.min.js","fqdn":"bizdavar.com","domain":"bizdavar.com","tld":"com"},"ip":{"addr":"104.21.20.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"3ef02081587e9123813483ccd3cb32f1","sha1":"10cc6fa0a7ac74f714e54658e95d8c88837cae6c","sha256":"158d26ffd857515c75b3398b277471d79eedd593c894dd50ee7ad77f5ac49cce","sha512":"a54e09a1aed57a930b8001532b704c2a8187b7337401fccbe46594a19072f35979955eea13a46c598ea1a46e38c42ba03f203261ff554034ca5c60af6f1f1ca8","ssdeep":"","tlshash":"2d2103f370a39ced48cf148a35522d16f1570c5cb885a01ef5aa08db2472e853362634","size":1392,"data":"","first_seen":"2025-10-21T14:39:27.204651Z","last_seen":"2026-08-11T09:37:39.152689Z","times_seen":11331,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bizdavar.com/wp-content/plugins/elementor-pro/assets/js/frontend.min.js?ver=3.32.2","fqdn":"bizdavar.com","domain":"bizdavar.com","tld":"com"},"ip":{"addr":"104.21.20.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"f92058c128529d2332f62a15e59a207c","sha1":"d1a2c287dff61ef6cd496720716356197ce435b7","sha256":"0822d22dda2c884059eae18b7dd3cfc4a4e9a0a454c7a68440f31ab3c594fa95","sha512":"f2c702c2dab8ce6c32818b77aa8883154edde5b2bd897d8dbbc7176f37fd0f4eab9c8c20f825aa7bf92ce23e652320977885258567b307b88414148e5928d1b7","ssdeep":"384:mxpy+EVxFm6cKJskdHd7taQtHuGJswg/i+TSQDTWmMo7YtDTVHJiMqkoh+vFWN7F:mxw+EVxFm6cKikdHd7taQtHuGJswg/D9","tlshash":"24b2d9013163ac7a50cf815be467420e7b374895740570ed7abc6cdba5b8e9a33ea339","size":24288,"data":"","first_seen":"2025-09-29T16:46:42.89459Z","last_seen":"2026-08-11T20:57:59.65011Z","times_seen":7547,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bizdavar.com/wp-content/plugins/elementor-pro/assets/js/elements-handlers.min.js?ver=3.32.2","fqdn":"bizdavar.com","domain":"bizdavar.com","tld":"com"},"ip":{"addr":"104.21.20.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"337018bcf0b1df28442e2edcb05bda8f","sha1":"9bc075dba1d9433b5041caf313573e7df43ea0b0","sha256":"f9d6caa55bdad7ca867a343c1cdab1729e36bd9fa4017efac3c688d76f97c66e","sha512":"d7cc0c78b5d3a86a539084f8187bfbd001733d26b9f0a80f99c40c412e7015276296ffda6eb084469190ba88743d25e9cacec6faa1aae9d61147b3d22cad475e","ssdeep":"768:g/bt9JJD1+WE9A5yLce/J9d0dbdTdGdadWdDdILdUd1dvd6dfdMdxdndTdVdFg7y:Ct5D1+WE9A5yLcWJ9mBtIoERuWfRMBKr","tlshash":"2d13a511716aca6945cf84abf463164fb7225cacf413f0e67afc8d82b464e87a394731","size":44670,"data":"","first_seen":"2025-09-29T16:46:42.886348Z","last_seen":"2026-08-11T20:57:59.63801Z","times_seen":7547,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bizdavar.com/wp-content/plugins/elementor/assets/js/shared-frontend-handlers.4c8abccc3e268b0767b2.bundle.min.js","fqdn":"bizdavar.com","domain":"bizdavar.com","tld":"com"},"ip":{"addr":"104.21.20.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"eb8a6bc67322f891cf9f80eb9c499767","sha1":"30f7326ce536c99f372d7c7a9b242f485b272d49","sha256":"2371fe085e4a98b4aeb71496e7098e897977ae806518aea247ccc75524c7ee98","sha512":"7c3596d8b5dd1b78849c5d7c9e1f9d7b7bd87b1f29cd643361ed7539b94b44449921c72d5685a06616b4d07e95bd6b860187da997c57530e10be2b7ec56fa999","ssdeep":"192:xwfFpzqxODCWV5lxZmdXLf+UvDZ5CMtakRhPZT8cMkCw+v10QITpRHvcwxDnPoGg:qHzqxOPV5lxodXLfpvD/NtakRhPZT8ck","tlshash":"8b02310a74c1982db58b58ba3532432866a8014de1018f6db1bf79fb85a6d82377b7f1","size":8525,"data":"","first_seen":"2025-10-21T14:39:27.189407Z","last_seen":"2026-08-11T09:37:39.021763Z","times_seen":14315,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bizdavar.com/wp-includes/js/dist/hooks.min.js?ver=dd5603f07f9220ed27f1","fqdn":"bizdavar.com","domain":"bizdavar.com","tld":"com"},"ip":{"addr":"104.21.20.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"90e932bd9e62583fc494c00498cfe7f5","sha1":"4f57e11bff609f90f49174187a0b5a6ba847ad28","sha256":"87cee5f49ba0d3017efc409579fc58b91a717f8f14751f7d804447ac9bcbaf4b","sha512":"ed9c129faf972ddfa705f05c3207884e5e9cd175baa45d49ce9d42bc0d01e4e8f36e627731bdd97214b1e2400fdd5012262a42f9800cd4f5565dbf183ba58507","ssdeep":"96:wXDE/3s/0EBM6ZUUCRTH+zl4NsBjcEmDtrGV2C2yics6w1RfGdzsvqZTq:wzg3kBFZYH+zhjngRw2cLzw1RfGdzsvx","tlshash":"56c153847983b970b2337057f0ff48d561baeba575298081964ec4a05d7388ee0a7abd","size":5661,"data":"","first_seen":"2025-10-27T08:47:54.273294Z","last_seen":"2026-08-12T07:15:32.456782Z","times_seen":204074,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bizdavar.com/wp-content/plugins/elementor/assets/js/webpack.runtime.min.js?ver=3.32.5","fqdn":"bizdavar.com","domain":"bizdavar.com","tld":"com"},"ip":{"addr":"104.21.20.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"176feb740e09f9cd12c0fbf6efa28e18","sha1":"c0904f444c4f3457f029fc5c1f865b062fbdbd3d","sha256":"b9d02e35eda5a0d58077a83e2a26b16bec7645cb112c98b7426f78ece2bee853","sha512":"ae075b8f814ee3440caf984dbad620d6c50f0e826ed9e5d8251739ae4627351b7147b7f5cd5eaa9ab699718b52e2857a8a57cc61d22963d981192ce027ae0b7c","ssdeep":"96:B8RAtsNuAZDXQ6jqj9vXzl8OW6mVMcbMejl3tGVfLUVscj2KobV7bDbT802:9sNukQ6jq9OVM6MeHGlQTvog02","tlshash":"60c154941a54fd2b21e135d9e41b9734663ec0333c1afdc1fa21dce955e8ed183aa531","size":5707,"data":"","first_seen":"2025-10-21T14:39:27.156916Z","last_seen":"2026-08-11T09:37:38.911322Z","times_seen":14037,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bizdavar.com/wp-content/themes/hello-elementor/assets/js/hello-frontend.js?ver=3.4.5","fqdn":"bizdavar.com","domain":"bizdavar.com","tld":"com"},"ip":{"addr":"104.21.20.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"1d18b2ccd0ac9b96603ea918df33ae9f","sha1":"860694ebba3acee39d4db64a690359d4002600c9","sha256":"268cae8c2e7a7330526dd33b7dadc1bbd08b039bca4acd70390d81a7ef644767","sha512":"53afc81e7061aa8b603d280a4730dc93b5cd3bde3ab17d9224b4997b412f18f189cf2474fcc890fa919f936699606277107e3bb850070b0bdd8a723dfaf14f32","ssdeep":"","tlshash":"af314766724a5d3a045ec2b72b4baa9fb166958f9441807c703efecf0560dd123e33b2","size":1830,"data":"","first_seen":"2025-10-27T16:30:12.654691Z","last_seen":"2026-08-12T07:29:30.777181Z","times_seen":27015,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bizdavar.com/cmplz-cookiebanner-js-extra","fqdn":"bizdavar.com","domain":"bizdavar.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"19aef2a441beb90fc28aac36a14d487e","sha1":"68686b27356056bd015aa5489e3164550f0a7ea9","sha256":"1b514bde08d70716ec9bb2c27e1172d55490d4b6f3ddc2f2c86e15cc7fb0905f","sha512":"0981097053ea42de30b607fffecd18e56a64aad2a944e0f18b47dc833186b8497c346ea917ee60b82e4fc8325e9bfa247e75d4a2af5cff0a46c82d10934feaf4","ssdeep":"","tlshash":"db51cc3bfeac94fe4bc493f416484d1ba1cc6014e1abd58ce149ac3c06b835b5b89b17","size":2587,"data":"","first_seen":"2025-12-24T02:52:14.538878Z","last_seen":"2025-12-24T02:52:14.538878Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bizdavar.com/wp-content/plugins/elementor-pro/assets/lib/smartmenus/jquery.smartmenus.min.js?ver=1.2.1","fqdn":"bizdavar.com","domain":"bizdavar.com","tld":"com"},"ip":{"addr":"104.21.20.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"9e7c898d1649315173db5d2d8730fb75","sha1":"364a6836a90b28329404b7d7f58a524861ef63f5","sha256":"f9b60ae2f2938c589960ef00d9b9a644f0847f7183f597cdc3fbf8cfe904c552","sha512":"4ed0541755c25dd9afbf9da3b64ac082a2f7119720e4b8a21fbc7cb302278aa2d2e15d0e3f735f14a9913a38508c85c45b3df22922609adfe551541396881601","ssdeep":"384:rrfXI5z0Yuyh4LsvaJWlN7nTZFjR52E4FM3vaqJZdNYh3JqhiyJDl54H4Qoh5cCK:HwEyOLsva8lBrVUEmM3vaqJbNYh3Uiym","tlshash":"e5b2b4ce314174a386eba1f8512f162652336466e20649dd7c3faec55f28e6931b2f3c","size":24109,"data":"","first_seen":"2023-11-22T22:20:37Z","last_seen":"2026-08-12T08:41:02.799013Z","times_seen":105172,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bizdavar.com/wp-includes/js/wp-emoji-release.min.js?ver=cda41b6d010f1481783b8a5595ba74ea","fqdn":"bizdavar.com","domain":"bizdavar.com","tld":"com"},"ip":{"addr":"104.21.20.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"f0cc9ba5cf46af0cd73d521803e3b07e","sha1":"7d2a74f87dc70a39eccce3bae1d4cc404cb134f4","sha256":"fd59b0ebf6282ed71647bf2f6e0d1925bbfd1f270865a832079ebb60259aabca","sha512":"7ec44f08676c195547a623504c7105ef3d0acea5839675599598043f3e0b5a3386452e3db6fbea90722f7be9e6effdae1b89c49e2b05b22b8c415616e07d471d","ssdeep":"384:WzevzApRZTbXU/3o//bEPhXgA5POkpJTX:Wsk9XU/3o//YpXgAs+hX","tlshash":"7fa2959ba33a4e8f343e3bd78d968f4dc9da555321c0e079dbefb6c169a00568274c80","size":22762,"data":"","first_seen":"2025-11-10T19:52:32.864936Z","last_seen":"2026-08-12T08:29:04.661633Z","times_seen":310935,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bizdavar.com/cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js","fqdn":"bizdavar.com","domain":"bizdavar.com","tld":"com"},"ip":{"addr":"104.21.20.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"9e8f56e8e1806253ba01a95cfc3d392c","sha1":"a8af90d7482e1e99d03de6bf88fed2315c5dd728","sha256":"2595496fe48df6fcf9b1bc57c29a744c121eb4dd11566466bc13d2e52e6bbcc8","sha512":"63f0f6f94fbabadc3f774ccaa6a401696e8a7651a074bc077d214f91da080b36714fd799eb40fed64154972008e34fc733d6ee314ac675727b37b58ffbebebee","ssdeep":"","tlshash":"6021d5743a18107e226a0133e56f66cee1f23715fd17e440408ad89566e4fe5063fed9","size":1239,"data":"","first_seen":"2023-03-07T01:02:00Z","last_seen":"2026-08-12T08:36:42.050233Z","times_seen":418484,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bizdavar.com/","fqdn":"bizdavar.com","domain":"bizdavar.com","tld":"com"},"ip":{"addr":"104.21.20.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"b607172511ec63b31b27c2dbe4f04908","sha1":"a8ea7b49e6049be66bfb5b661bf441643af177b4","sha256":"c938d897ac74e15cd1d300dd170acecc88e5ebe23a7f730495bb5245b0924ade","sha512":"abb629d149b056a3ec739bb3fcaa8c932dc1319d99c8df8651814243cd553d37407d92efad652d542fd56cffc977e9a04d38340238d790b851db3c464c3c5325","ssdeep":"","tlshash":"31e0ab160ab60930b1ab25bd0257b2c86d22a0137600ecc43c0dca889fe0570d4e76cd","size":432,"data":"","first_seen":"2025-12-24T02:52:14.539885Z","last_seen":"2025-12-24T02:52:14.539885Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bizdavar.com/wp-i18n-js-after","fqdn":"bizdavar.com","domain":"bizdavar.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"fe8c1e5a7968b7729c219d834e1aefd2","sha1":"1561d67d0b53e06a091a43a215d23b88d2a18aa1","sha256":"2e82c67e6f9b29b7280084a6d78240f79254f24029049024c0a73327fba14d2f","sha512":"44afc3aa56ec6d63265b53c40ecb51da034cb11f88d08d9b8a950cf3777f7e618c44c6d37082e66b0c78323038e9c76a38bcb67fd7771875450bdf5fae19dad8","ssdeep":"","tlshash":"7f3112c7f4aa3c50864fcab44d23be0144102487c2aed50834a5dd3496718c0b4c362f","size":1745,"data":"","first_seen":"2025-12-24T02:52:14.541087Z","last_seen":"2025-12-24T02:52:14.541087Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-F2WGXTVK7F","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.251.38.104","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"f7672784919061653d277a15be61f420","sha1":"965f25dea555e56a3970bbff41d4cf69145dd191","sha256":"e7496a563b0cf95aef4681503e6317378ccbd41c89e28ed40d95061b0d08a71a","sha512":"62b992866b6f81535b0b0a8cdad40bffd42bd9c7c136bda95dac799930b481527be3e57348bded90fb8157d19eaf41d9c355085436692f54649b48ae5e9a210f","ssdeep":"6144:sIe7mZ2bulKY/1u99xHDmHYmyBFzvnsNO6JWoNPad4FpC1+9:NCpbu7/1mbrnsVWbMpB","tlshash":"b39419ce73c674669396f078503f118ba57b29a2b44cc895f189cce42d74aaa4237f7c","size":408357,"data":"","first_seen":"2025-12-24T02:52:14.515728Z","last_seen":"2025-12-24T02:52:14.515728Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bizdavar.com/wp-content/plugins/elementor-pro/assets/js/search-form.b7065999d77832a1b764.bundle.min.js","fqdn":"bizdavar.com","domain":"bizdavar.com","tld":"com"},"ip":{"addr":"104.21.20.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"27dfd557c0c60b606098c64783b83535","sha1":"204dbb83ee729400ac410e431b296b1aa3c7cb9c","sha256":"328af60f5225f12536208901c2de0d631777b91e12f7f7bf9dc90d9923a8cf09","sha512":"225b30762a79981495e82b4178d8921e798490d35c871cb469f79ec5a233e108b6bbe24f85631e59026755bdff11f4a8d2bc70d4916e54a52142e2a115525a42","ssdeep":"","tlshash":"31415112756326ea08bf403f748b654cb62a35b9b94632927069447f16fbc443352a72","size":2124,"data":"","first_seen":"2025-09-29T23:27:14.633398Z","last_seen":"2026-08-11T20:57:59.63375Z","times_seen":630,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bizdavar.com/wp-includes/js/jquery/jquery.min.js?ver=3.7.1","fqdn":"bizdavar.com","domain":"bizdavar.com","tld":"com"},"ip":{"addr":"104.21.20.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"826eb77e86b02ab7724fe3d0141ff87c","sha1":"79cd3587d565afe290076a8d36c31c305a573d18","sha256":"cb6f2d32c49d1c2b25e9ffc9aaafa3f83075346c01bcd4ae6eb187392a4292cf","sha512":"fc79fdb76763025dc39fac045a215ff155ef2f492a0e9640079d6f089fa6218af2b3ab7c6eaf636827dee9294e6939a95ab24554e870c976679c25567ad6374c","ssdeep":"1536:0RUX9uDgwxcy2KVBNwchN6SLaHEk2BSrBESp+a/IEk4aAocVi8SMBQ47GKO:sHNwcv9VBQpLl88SMBQ47GKO","tlshash":"7483f8df77ca702247ab30b9006f550bf276199d684d4400f159d8e9bcb8a4a827bf7e","size":87553,"data":"","first_seen":"2023-11-03T09:26:43Z","last_seen":"2026-08-12T08:29:04.681065Z","times_seen":1015141,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bizdavar.com/elementor-pro-frontend-js-before","fqdn":"bizdavar.com","domain":"bizdavar.com","tld":"com"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"788a2d16c5a698263251cc3e2728c4f8","sha1":"d09bfc75d88e0eed34d42b0ecbe5ea274e3bdb50","sha256":"2034c7c6a58db108c954d617c91990496cc64a28f8af19023125942ee509f151","sha512":"e75268bb60202f3d2f2d062a8fffc2a2b1aaf95fbc4ddc626c29bf59b76fbabf98ee905624fec7a08eacdf735221a49cbf187c3fdf42edfd2aa3987df8e6e271","ssdeep":"","tlshash":"54518b5aea214e6497aea7f831ca3a7f44c00332d5e5b54d52dae07401f7cdee0492a3","size":2978,"data":"","first_seen":"2025-12-24T02:52:14.542102Z","last_seen":"2025-12-24T02:52:14.542102Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bizdavar.com/wp-content/plugins/elementor-pro/assets/js/nav-menu.0edc0c22e9f3101552ed.bundle.min.js","fqdn":"bizdavar.com","domain":"bizdavar.com","tld":"com"},"ip":{"addr":"104.21.20.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"fe98ff7c4a3b033d2e3067f6490cfb65","sha1":"51850ec411e195dad7d5228ffe3d2390bf37b681","sha256":"c2a49ba19e6da5ecb6639d8d321771cd9bfb8e43416a85c1c386881fc1f18e8f","sha512":"29652f398e03fee60001d70877fdb0f1eb3d99066946e80cbfa048fbc72ee3cb2d097245bd7fa13628b9764d0a5e91b0ea10399752768421f018e3d63be9ecd3","ssdeep":"96:Bq5m3CQcqOf55/UEljUkkRk7PA2goL/V2VsVQKSGffr/xZdUyKfKAtZ2JWEfPvku:imSjqOf55/UEpUTW7vgoL91SEj/xZdUE","tlshash":"a3b14262729229a7c58f815b77534a2df2322a98740656ad7a396cef11f1ec033f1b34","size":5301,"data":"","first_seen":"2025-09-29T16:46:42.905182Z","last_seen":"2026-08-11T20:57:59.617853Z","times_seen":4237,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"bizdavar.com/wp-content/uploads/2024/07/F-PS64-Radarsensor-Fuellstandsmessung-80-Mounting.png","fqdn":"bizdavar.com","domain":"bizdavar.com","tld":"com"},"ip":{"addr":"104.21.20.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bizdavar.com/","date":"2025-12-24T02:51:40.516Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bizdavar.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 30 Oct 2025 20:00:29 GMT","end":"Wed, 28 Jan 2026 20:57:57 GMT"},"fingerprint":{"sha1":"5D:CD:8B:95:13:4B:07:86:69:DB:63:BB:CB:C1:77:82:AC:0D:A7:26","sha256":"9E:35:D3:AC:31:17:9B:4D:33:29:6C:FD:AA:22:4F:CD:B5:4E:69:36:49:D7:30:36:9E:13:20:86:77:04:F3:0B"}}},"request":{"raw":"GET /wp-content/uploads/2024/07/F-PS64-Radarsensor-Fuellstandsmessung-80-Mounting.png HTTP/1.1\r\nHost: bizdavar.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://bizdavar.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 24 Dec 2025 02:51:40 GMT\r\nserver: cloudflare\r\nlast-modified: Mon, 29 Jul 2024 13:36:15 GMT\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\ncontent-length: 237997\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: image/png\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=PoC%2Bi3HfLf45U9v8Z3TusCLaLB%2FUNtaHhWbEW%2FbTdd4CXiQrqqpCFJq4lzGngOebyb4Gh90N8Mt%2FI7roFdDmR3KouIXnvM8Pusv6hA%3D%3D\"}]}\r\nvary: accept-encoding\r\ncf-ray: 9b2ccc59db472efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":237997,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 617 x 740, 8-bit/color RGBA, non-interlaced","md5":"bb9a9d96b92ce7da335f612736933b70","sha1":"78a4e68e3a27558469b97dc40a7000f4653ffd24","sha256":"b905d91e3d07a8df9bd826d1c163334c6079aae4256f29c62e13ce73ddc73533","sha512":"c14d52bccdd2416abad5047459dcb9d8521246ddb080dabb80c1b4ff2340810e8b4e4592425eacb8c809cc6ddc783e34c46f554a37179e1f194a2430e24ee000","ssdeep":"6144:Klwrbeu88/2rX7cPKzhxyjVFKSy5mtiNsvPaGNakMDPT7n:7ryx8/2rXRjaa5qiNsPIjr7n","tlshash":"783413e0fc5b9c2604f4faa348a64d17584ab5d87c8c35017afd80d2be95211d77baec","first_seen":"2025-12-24T02:52:14.433068Z","last_seen":"2025-12-24T02:52:14.433068Z","times_seen":1,"resource_available":false,"data":null}},"time_used":292,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":126,"receive":166,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-12-24","alert":"Sinkholed","trigger":"bizdavar.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-24","alert":"Sinkholed","trigger":"bizdavar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bizdavar.com/wp-content/uploads/2025/05/bz-payment-logo.png","fqdn":"bizdavar.com","domain":"bizdavar.com","tld":"com"},"ip":{"addr":"104.21.20.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bizdavar.com/","date":"2025-12-24T02:51:40.547Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bizdavar.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 30 Oct 2025 20:00:29 GMT","end":"Wed, 28 Jan 2026 20:57:57 GMT"},"fingerprint":{"sha1":"5D:CD:8B:95:13:4B:07:86:69:DB:63:BB:CB:C1:77:82:AC:0D:A7:26","sha256":"9E:35:D3:AC:31:17:9B:4D:33:29:6C:FD:AA:22:4F:CD:B5:4E:69:36:49:D7:30:36:9E:13:20:86:77:04:F3:0B"}}},"request":{"raw":"GET /wp-content/uploads/2025/05/bz-payment-logo.png HTTP/1.1\r\nHost: bizdavar.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://bizdavar.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 24 Dec 2025 02:51:40 GMT\r\nserver: cloudflare\r\nlast-modified: Sun, 18 May 2025 18:18:34 GMT\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\ncontent-length: 18593\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: image/png\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=UiMtzCpjaD5iahYek%2FZx5j4nKmxzVw0s5MJnbQ8wfAXkW4K%2BqPFKMTRUCp1jP%2BGKp1U911AfSt%2FYkOFm7VdVGIiXMsggosQWvYtaNg%3D%3D\"}]}\r\nvary: accept-encoding\r\ncf-ray: 9b2ccc59fb632efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":18593,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 500 x 353, 8-bit colormap, non-interlaced","md5":"e683cbf3008fa38ac4ef0ac91239e9a4","sha1":"d43ed43027e000d09ead19478c6f345ed1e1cf7f","sha256":"a47023d66d83e3c1bd536c27d425955685bd9b3478a26a520847831914b1fc3c","sha512":"2e91ae8c89db9566eeea7d46433344b646c3195b340e435bc6058057b619eb6a69e2aa830b2254cddb1ca5de737ad70b17b41d0421cfef4d3711536e054d6f0d","ssdeep":"384:Ldsa6qmIqMdh771aBGvFR6CESLCJkRtPwB5wzAFSDYLT:ASd51aBGvv6CEYCG/wBmz10LT","tlshash":"9b82cfe8b88cda3de53125eaf53641255cbc891df41c4ae6739094a0760a93a18dfdce","first_seen":"2025-12-24T02:52:14.434268Z","last_seen":"2025-12-24T02:52:14.434268Z","times_seen":1,"resource_available":false,"data":null}},"time_used":189,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":139,"receive":50,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-24","alert":"Sinkholed","trigger":"bizdavar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-12-24","alert":"Sinkholed","trigger":"bizdavar.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bizdavar.com/wp-content/themes/hello-elementor/assets/js/hello-frontend.js?ver=3.4.5","fqdn":"bizdavar.com","domain":"bizdavar.com","tld":"com"},"ip":{"addr":"104.21.20.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bizdavar.com/","date":"2025-12-24T02:51:40.587Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bizdavar.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 30 Oct 2025 20:00:29 GMT","end":"Wed, 28 Jan 2026 20:57:57 GMT"},"fingerprint":{"sha1":"5D:CD:8B:95:13:4B:07:86:69:DB:63:BB:CB:C1:77:82:AC:0D:A7:26","sha256":"9E:35:D3:AC:31:17:9B:4D:33:29:6C:FD:AA:22:4F:CD:B5:4E:69:36:49:D7:30:36:9E:13:20:86:77:04:F3:0B"}}},"request":{"raw":"GET /wp-content/themes/hello-elementor/assets/js/hello-frontend.js?ver=3.4.5 HTTP/1.1\r\nHost: bizdavar.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://bizdavar.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 24 Dec 2025 02:51:40 GMT\r\nserver: cloudflare\r\nlast-modified: Mon, 27 Oct 2025 12:45:10 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: accept-encoding\r\ncontent-encoding: br\r\ncontent-type: text/javascript\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=iVG1Y%2BfmgsIWjrwv6GDk9MqekfTckRYGWPGQp8aQG0YB%2BEW%2FwnbU6AysTLDGL2y72ZLwJhJvvrtsVlVeObqpo6GA1ssPeoWOMimVOQ%3D%3D\"}]}\r\ncf-ray: 9b2ccc5a7b6f2efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1830,"size_decoded":0,"mime_type":"text/javascript","magic":"ASCII text, with very long lines (1830), with no line terminators","md5":"1d18b2ccd0ac9b96603ea918df33ae9f","sha1":"860694ebba3acee39d4db64a690359d4002600c9","sha256":"268cae8c2e7a7330526dd33b7dadc1bbd08b039bca4acd70390d81a7ef644767","sha512":"53afc81e7061aa8b603d280a4730dc93b5cd3bde3ab17d9224b4997b412f18f189cf2474fcc890fa919f936699606277107e3bb850070b0bdd8a723dfaf14f32","ssdeep":"","tlshash":"af314766724a5d3a045ec2b72b4baa9fb166958f9441807c703efecf0560dd123e33b2","first_seen":"2025-10-27T16:30:12.654691Z","last_seen":"2026-08-12T07:29:30.777181Z","times_seen":27015,"resource_available":true,"data":null}},"time_used":148,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":148,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-24","alert":"Sinkholed","trigger":"bizdavar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-12-24","alert":"Sinkholed","trigger":"bizdavar.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bizdavar.com/wp-content/uploads/2024/07/logo-with-claim.svg","fqdn":"bizdavar.com","domain":"bizdavar.com","tld":"com"},"ip":{"addr":"104.21.20.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bizdavar.com/","date":"2025-12-24T02:51:40.517Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bizdavar.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 30 Oct 2025 20:00:29 GMT","end":"Wed, 28 Jan 2026 20:57:57 GMT"},"fingerprint":{"sha1":"5D:CD:8B:95:13:4B:07:86:69:DB:63:BB:CB:C1:77:82:AC:0D:A7:26","sha256":"9E:35:D3:AC:31:17:9B:4D:33:29:6C:FD:AA:22:4F:CD:B5:4E:69:36:49:D7:30:36:9E:13:20:86:77:04:F3:0B"}}},"request":{"raw":"GET /wp-content/uploads/2024/07/logo-with-claim.svg HTTP/1.1\r\nHost: bizdavar.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://bizdavar.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 24 Dec 2025 02:51:40 GMT\r\nserver: cloudflare\r\nlast-modified: Mon, 29 Jul 2024 15:34:24 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\ncontent-encoding: br\r\ncontent-type: image/svg+xml\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=WP46RmMuBYsxad1GCmdmdeLdvkZa8yVLcuF63r4yJ74NqA%2FikcWXwsityMCoiKV%2F4iZLlZZbhVnTONZ82WGS11ocILIeQeCq3jcX1A%3D%3D\"}]}\r\ncf-ray: 9b2ccc59db482efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3859,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"b80dabba719e90c37966c1878c164353","sha1":"c3bf4e8a16dfbcd94264e14ee360b469bbb88ab5","sha256":"7c2e8da38b9724e5cec270c5c6d3d59c4bef3230f28ebf6f728e1fd4fcda6464","sha512":"a936e8bfa999f53ae185d396610ee51b33b9b5578caac58b191a473d6976ad268aabcada92a1d44cbcb4b9f320ac1d3562a1b7f6edf2c9dbfb69df6e12911398","ssdeep":"","tlshash":"758174e8872593f1ec8893efb33a3425766d58e947a0c6d8c3809f15b8c669d8c11dc3","first_seen":"2025-12-24T02:52:14.436001Z","last_seen":"2025-12-24T02:52:14.436001Z","times_seen":1,"resource_available":false,"data":null}},"time_used":139,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":139,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-24","alert":"Sinkholed","trigger":"bizdavar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-12-24","alert":"Sinkholed","trigger":"bizdavar.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bizdavar.com/wp-content/plugins/elementor-pro/assets/js/search-form.b7065999d77832a1b764.bundle.min.js","fqdn":"bizdavar.com","domain":"bizdavar.com","tld":"com"},"ip":{"addr":"104.21.20.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bizdavar.com/","date":"2025-12-24T02:51:41.673Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bizdavar.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 30 Oct 2025 20:00:29 GMT","end":"Wed, 28 Jan 2026 20:57:57 GMT"},"fingerprint":{"sha1":"5D:CD:8B:95:13:4B:07:86:69:DB:63:BB:CB:C1:77:82:AC:0D:A7:26","sha256":"9E:35:D3:AC:31:17:9B:4D:33:29:6C:FD:AA:22:4F:CD:B5:4E:69:36:49:D7:30:36:9E:13:20:86:77:04:F3:0B"}}},"request":{"raw":"GET /wp-content/plugins/elementor-pro/assets/js/search-form.b7065999d77832a1b764.bundle.min.js HTTP/1.1\r\nHost: bizdavar.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://bizdavar.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: _ga_F2WGXTVK7F=GS2.1.s1766544701$o1$g0$t1766544701$j60$l0$h0; _ga=GA1.1.1382880001.1766544701\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 24 Dec 2025 02:51:41 GMT\r\nserver: cloudflare\r\nlast-modified: Thu, 06 Nov 2025 16:20:38 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: accept-encoding\r\ncontent-encoding: br\r\ncontent-type: text/javascript\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1SWJ%2FDUyO%2BdVSW02Xqa8q%2BYjWrz2pSBlyw3DqYQ8r1KlsI%2B6xBOL8TU3MbEM1kcQ8uVHRpzK4F%2FCuR%2FRZySuUr5jWk0dTNLoAIpZ5A%3D%3D\"}]}\r\ncf-ray: 9b2ccc617beb2efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2124,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (2080)","md5":"27dfd557c0c60b606098c64783b83535","sha1":"204dbb83ee729400ac410e431b296b1aa3c7cb9c","sha256":"328af60f5225f12536208901c2de0d631777b91e12f7f7bf9dc90d9923a8cf09","sha512":"225b30762a79981495e82b4178d8921e798490d35c871cb469f79ec5a233e108b6bbe24f85631e59026755bdff11f4a8d2bc70d4916e54a52142e2a115525a42","ssdeep":"","tlshash":"31415112756326ea08bf403f748b654cb62a35b9b94632927069447f16fbc443352a72","first_seen":"2025-09-29T23:27:14.633398Z","last_seen":"2026-08-11T20:57:59.63375Z","times_seen":630,"resource_available":true,"data":null}},"time_used":456,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":456,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-24","alert":"Sinkholed","trigger":"bizdavar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-12-24","alert":"Sinkholed","trigger":"bizdavar.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bizdavar.com/wp-content/uploads/elementor/css/post-9.css?ver=1765008745","fqdn":"bizdavar.com","domain":"bizdavar.com","tld":"com"},"ip":{"addr":"104.21.20.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://bizdavar.com/","date":"2025-12-24T02:51:40.479Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bizdavar.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 30 Oct 2025 20:00:29 GMT","end":"Wed, 28 Jan 2026 20:57:57 GMT"},"fingerprint":{"sha1":"5D:CD:8B:95:13:4B:07:86:69:DB:63:BB:CB:C1:77:82:AC:0D:A7:26","sha256":"9E:35:D3:AC:31:17:9B:4D:33:29:6C:FD:AA:22:4F:CD:B5:4E:69:36:49:D7:30:36:9E:13:20:86:77:04:F3:0B"}}},"request":{"raw":"GET /wp-content/uploads/elementor/css/post-9.css?ver=1765008745 HTTP/1.1\r\nHost: bizdavar.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://bizdavar.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 24 Dec 2025 02:51:40 GMT\r\nserver: cloudflare\r\nlast-modified: Sat, 06 Dec 2025 08:12:25 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nvary: accept-encoding\r\ncontent-encoding: br\r\ncontent-type: text/css\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vv0T%2BFhd%2F15%2FCDsN5DwIn5N%2F1CjyasLKC5hCUj%2Buwj9%2FQHpZcMTL4jaDi5%2BHgYDHDcA1Z016ocPv2qNxXOYRhpoWAWAdC32rMuiFig%3D%3D\"}]}\r\ncf-ray: 9b2ccc59ab2c2efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2052,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (1733)","md5":"b49fa38edf78c8d8e081075d5163b775","sha1":"cf390fa5b2c8ea62618218e23fd3084f9fef2724","sha256":"3c52676515d54ec62318e80abb7b90254b2c8acaf6a9d10c0eef0617e4298830","sha512":"16b3e9d7dd71e91df12c2b3d396607c4e86716b2335bbc83cf17aebdcb8d7c23f2c3ca55f7fc819e730f4724b5f87d4a401a5147bee460c9b4e18b3b267107ec","ssdeep":"","tlshash":"e7417906bd53e021e277092ff1c7b82c0558846e906b89dbb81e8789f9aed461369787","first_seen":"2025-12-24T02:52:14.438262Z","last_seen":"2025-12-24T02:52:14.438262Z","times_seen":1,"resource_available":false,"data":null}},"time_used":92,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":92,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-12-24","alert":"Sinkholed","trigger":"bizdavar.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-24","alert":"Sinkholed","trigger":"bizdavar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bizdavar.com/wp-content/plugins/elementor/assets/css/widget-image-rtl.min.css?ver=3.32.5","fqdn":"bizdavar.com","domain":"bizdavar.com","tld":"com"},"ip":{"addr":"104.21.20.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://bizdavar.com/","date":"2025-12-24T02:51:40.486Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bizdavar.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 30 Oct 2025 20:00:29 GMT","end":"Wed, 28 Jan 2026 20:57:57 GMT"},"fingerprint":{"sha1":"5D:CD:8B:95:13:4B:07:86:69:DB:63:BB:CB:C1:77:82:AC:0D:A7:26","sha256":"9E:35:D3:AC:31:17:9B:4D:33:29:6C:FD:AA:22:4F:CD:B5:4E:69:36:49:D7:30:36:9E:13:20:86:77:04:F3:0B"}}},"request":{"raw":"GET /wp-content/plugins/elementor/assets/css/widget-image-rtl.min.css?ver=3.32.5 HTTP/1.1\r\nHost: bizdavar.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://bizdavar.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 24 Dec 2025 02:51:40 GMT\r\nserver: cloudflare\r\nlast-modified: Thu, 06 Nov 2025 16:18:10 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nvary: accept-encoding\r\ncontent-encoding: br\r\ncontent-type: text/css\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=yKLsGU538%2Bgm6nHFL%2FGECqOSDdPPkFZM1hayK7NVALFnsodgzCscPIfHtYgIOHQ3azOQtaNmGisQQIKaooVWtXqHwi9hqLhwcvWJLQ%3D%3D\"}]}\r\ncf-ray: 9b2ccc59ab302efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":254,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"a5ccf2eb0d4653e3649330d7fb9c7c5f","sha1":"0a56ee543c16e79cd04b0e84b41cf06653db0f22","sha256":"53690bf3df75d541a186297979035a6c70bb643f59e44b9f252dd1e32f206f7e","sha512":"721cc1a2dd32c479b5d7d56f8fa2cfe399c43fa6c69ab4a83c5f6727809ba0b25f5c6816f27730f370acab854945255e9bc66c638c13e482409ed8dcee6442dc","ssdeep":"","tlshash":"97d05e40742747c2301f596926af2aae3cd01ddcf246cb90eca166625bbacc83376120","first_seen":"2025-10-21T14:39:27.104087Z","last_seen":"2026-08-11T09:37:39.003464Z","times_seen":10334,"resource_available":false,"data":null}},"time_used":154,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":154,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-24","alert":"Sinkholed","trigger":"bizdavar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-12-24","alert":"Sinkholed","trigger":"bizdavar.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bizdavar.com/wp-content/uploads/2025/05/arianpumps-logo.png","fqdn":"bizdavar.com","domain":"bizdavar.com","tld":"com"},"ip":{"addr":"104.21.20.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bizdavar.com/","date":"2025-12-24T02:51:40.529Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bizdavar.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 30 Oct 2025 20:00:29 GMT","end":"Wed, 28 Jan 2026 20:57:57 GMT"},"fingerprint":{"sha1":"5D:CD:8B:95:13:4B:07:86:69:DB:63:BB:CB:C1:77:82:AC:0D:A7:26","sha256":"9E:35:D3:AC:31:17:9B:4D:33:29:6C:FD:AA:22:4F:CD:B5:4E:69:36:49:D7:30:36:9E:13:20:86:77:04:F3:0B"}}},"request":{"raw":"GET /wp-content/uploads/2025/05/arianpumps-logo.png HTTP/1.1\r\nHost: bizdavar.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://bizdavar.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 24 Dec 2025 02:51:40 GMT\r\nserver: cloudflare\r\nlast-modified: Sun, 18 May 2025 18:07:30 GMT\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\ncontent-length: 129792\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: image/png\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=lzfUbgZkWrfhyInQfsstOsXKUgzVs3y54WWu%2B81lBnF4movBFP8RWdZXJigCvzSFpuBW8ibHo0M5C7itzUqqUBKY3OXpkebCMkKe0A%3D%3D\"}]}\r\nvary: accept-encoding\r\ncf-ray: 9b2ccc59fb572efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":129792,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 500 x 500, 8-bit/color RGBA, non-interlaced","md5":"235193470cff7e4bab6be97f3d609c70","sha1":"53a1c975f096afcb1893e56bedc85497461da631","sha256":"02e15c93b39b7c849a0591ba9adc83da25a1806331e1af1e2eb3b671f621f45b","sha512":"2619ee12912dfefd843e814d15f58370d89c2b8c335afb6b4d3817e5a35f9ac7d161857ff557f0e3b8ede9b4dd1f30ad899c7864ffd104c862135d44c991a613","ssdeep":"3072:ltfIE6bsxNkwHFpJ17V+wARiZd7BLXZ9WJGnrY5lO:/fLx+SFFRxH1LX7WJG0lO","tlshash":"30c3125114042fc5d17bee69aba91c4fac12da9dccf709fdade24762040c59613a23fa","first_seen":"2025-12-24T02:52:14.439918Z","last_seen":"2025-12-24T02:52:14.439918Z","times_seen":1,"resource_available":false,"data":null}},"time_used":290,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":144,"receive":146,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-24","alert":"Sinkholed","trigger":"bizdavar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-12-24","alert":"Sinkholed","trigger":"bizdavar.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bizdavar.com/wp-content/uploads/2025/05/broker-vector-logo-2048x512-1.png","fqdn":"bizdavar.com","domain":"bizdavar.com","tld":"com"},"ip":{"addr":"104.21.20.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bizdavar.com/","date":"2025-12-24T02:51:40.540Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bizdavar.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 30 Oct 2025 20:00:29 GMT","end":"Wed, 28 Jan 2026 20:57:57 GMT"},"fingerprint":{"sha1":"5D:CD:8B:95:13:4B:07:86:69:DB:63:BB:CB:C1:77:82:AC:0D:A7:26","sha256":"9E:35:D3:AC:31:17:9B:4D:33:29:6C:FD:AA:22:4F:CD:B5:4E:69:36:49:D7:30:36:9E:13:20:86:77:04:F3:0B"}}},"request":{"raw":"GET /wp-content/uploads/2025/05/broker-vector-logo-2048x512-1.png HTTP/1.1\r\nHost: bizdavar.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://bizdavar.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 24 Dec 2025 02:51:40 GMT\r\nserver: cloudflare\r\nlast-modified: Sun, 18 May 2025 18:12:28 GMT\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\ncontent-length: 60844\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: image/png\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ceAbKNc87Ac%2BakeS0H56u6n3k0bM6EHVjByCyM306MiLJwPKhvQQRq52lFtEuzz0vvnuANxoVMkvyCXXAnJz382XaVZr0MALkyc%2Fcg%3D%3D\"}]}\r\nvary: accept-encoding\r\ncf-ray: 9b2ccc59fb5f2efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":60844,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 2048 x 512, 8-bit/color RGBA, non-interlaced","md5":"8269f2f4387cbf283b9d94930755ad61","sha1":"e380fe96b824607f7f53a47402198aeb4b3bf962","sha256":"d0b2ad891a3d0c3c237b70fa39f3b90447cb371ccd2989f6f3326ea9726a27d7","sha512":"a31be79223ee910e763f9f6908be3cd00ad5c4315b74e6c47e5c013735c6820a4e5321bc55378f50076872fbd056a4cc9442f26ab7a4a481dbecfb0fe241b1b3","ssdeep":"1536:DErgMui6HuzwEM5iIiz4XXirLiXdqGVEYyICq:1i6HgwjvCrZGqSZ","tlshash":"ae53f1f1a133cafd9d0b7c588b7270e96ee01473a047adf199b65464f58a62623fc08d","first_seen":"2025-12-24T02:52:14.440957Z","last_seen":"2025-12-24T02:52:14.440957Z","times_seen":1,"resource_available":false,"data":null}},"time_used":222,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":137,"receive":85,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-12-24","alert":"Sinkholed","trigger":"bizdavar.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-24","alert":"Sinkholed","trigger":"bizdavar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bizdavar.com/wp-content/plugins/complianz-gdpr/cookiebanner/js/complianz.min.js?ver=1762498392","fqdn":"bizdavar.com","domain":"bizdavar.com","tld":"com"},"ip":{"addr":"104.21.20.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bizdavar.com/","date":"2025-12-24T02:51:40.601Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bizdavar.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 30 Oct 2025 20:00:29 GMT","end":"Wed, 28 Jan 2026 20:57:57 GMT"},"fingerprint":{"sha1":"5D:CD:8B:95:13:4B:07:86:69:DB:63:BB:CB:C1:77:82:AC:0D:A7:26","sha256":"9E:35:D3:AC:31:17:9B:4D:33:29:6C:FD:AA:22:4F:CD:B5:4E:69:36:49:D7:30:36:9E:13:20:86:77:04:F3:0B"}}},"request":{"raw":"GET /wp-content/plugins/complianz-gdpr/cookiebanner/js/complianz.min.js?ver=1762498392 HTTP/1.1\r\nHost: bizdavar.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://bizdavar.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 24 Dec 2025 02:51:40 GMT\r\nserver: cloudflare\r\nlast-modified: Fri, 07 Nov 2025 06:53:12 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: accept-encoding\r\ncontent-encoding: br\r\ncontent-type: text/javascript\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=gpq7OgFCGWavHK4lYAyT9MaVFvJtw8CkDrOchb1N%2FQjKssmhfG%2BydtxXq0Myyzbm%2BisrNxKeX1SjxBFnKzxkiGDxwDC2uDDWO3JKGw%3D%3D\"}]}\r\ncf-ray: 9b2ccc5a8b792efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":40647,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (40647), with no line terminators","md5":"087de03e5dc079a0742ac8478a5f8c87","sha1":"b14ad9cfa3fa6ae9381806189e7f35f543d185ed","sha256":"fe345dc92f2c901c2eccac134294ff2216e70177dd054ba6f104af6015959ee9","sha512":"5742b4c16babac5856080614523b47dff4f3dff7cc102a3a5474ab1e0c82de4a1e987327beb303775042727b35d3f2498f6916c6283117415725dce206c437ef","ssdeep":"768:k4cjy6JZaYSJjv+YfzwLpstNyuGFGgxesKNVhIkYJO2ybEXoHHFC1aRHQpmiVKbX:IZal8OHQpmZNemLECFKAJ","tlshash":"3903e8b93a9c90b416ee87ed37abab48e4303961dc0fc8609565dc542258dc70f9bfb1","first_seen":"2025-10-07T21:11:17.93794Z","last_seen":"2026-08-11T18:03:55.596382Z","times_seen":8249,"resource_available":true,"data":null}},"time_used":236,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":146,"receive":90,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-12-24","alert":"Sinkholed","trigger":"bizdavar.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-24","alert":"Sinkholed","trigger":"bizdavar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bizdavar.com/wp-content/uploads/2024/12/Vazirmatn-Medium.woff2","fqdn":"bizdavar.com","domain":"bizdavar.com","tld":"com"},"ip":{"addr":"104.21.20.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://bizdavar.com/","date":"2025-12-24T02:51:41.114Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bizdavar.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 30 Oct 2025 20:00:29 GMT","end":"Wed, 28 Jan 2026 20:57:57 GMT"},"fingerprint":{"sha1":"5D:CD:8B:95:13:4B:07:86:69:DB:63:BB:CB:C1:77:82:AC:0D:A7:26","sha256":"9E:35:D3:AC:31:17:9B:4D:33:29:6C:FD:AA:22:4F:CD:B5:4E:69:36:49:D7:30:36:9E:13:20:86:77:04:F3:0B"}}},"request":{"raw":"GET /wp-content/uploads/2024/12/Vazirmatn-Medium.woff2 HTTP/1.1\r\nHost: bizdavar.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bizdavar.com/wp-content/uploads/elementor/css/post-9.css?ver=1765008745\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 Not Found\r\ndate: Wed, 24 Dec 2025 02:51:41 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=63072000; includeSubDomains;preload\r\nx-xss-protection: 0\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-frame-options: SAMEORIGIN\r\ncontent-security-policy: frame-ancestors 'self' ; upgrade-insecure-requests;\r\nexpires: Wed, 11 Jan 1984 05:00:00 GMT\r\ncache-control: no-cache, must-revalidate, max-age=0, no-store, private\r\nlink: \u003chttps://bizdavar.com/wp-json/\u003e; rel=\"https://api.w.org/\"\r\nvary: accept-encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncontent-type: text/html; charset=UTF-8\r\ncf-cache-status: BYPASS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=i%2FmNBlkly4cRHvLSsSVgMbO1njUeFWZHdT0lWxESlYxjfxWF0iOMOLiejK2mYx03oCihy0nFFgtZ06RPVUY9a4U1W%2FECXDmv0bgw1A%3D%3D\"}]}\r\ncf-ray: 9b2ccc5dfb9f2efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Complianz","description":"Complianz is a GDPR/CCPA Cookie Consent plugin that supports GDPR, DSGVO, CCPA and PIPEDA with a conditional Cookie Notice and customized Cookie Policy based on the results of the built-in Cookie Scan.","website":"https://complianz.io","common_platform_enumeration":"","icon":"Complianz.png","categories":["A/B Testing","Cookie compliance","WordPress plugins"]},{"name":"jQuery Migrate:3.4.1","description":"Query Migrate is a javascript library that allows you to preserve the compatibility of your jQuery code developed for versions of jQuery older than 1.9.","website":"https://github.com/jquery/jquery-migrate","common_platform_enumeration":"","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Site Kit:1.165.0","description":"Site Kit is a one-stop solution for WordPress users to use everything Google has to offer to make them successful on the web.","website":"https://sitekit.withgoogle.com/","common_platform_enumeration":"","icon":"Google.svg","categories":["Analytics","WordPress plugins"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]},{"name":"Yoast SEO:26.3","description":"Yoast SEO is a search engine optimisation plugin for WordPress and other platforms.","website":"https://yoast.com/wordpress/plugins/seo/","common_platform_enumeration":"","icon":"Yoast SEO.png","categories":["SEO","WordPress plugins"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Elementor:3.32.5","description":"Elementor is a website builder platform for professionals on WordPress.","website":"https://elementor.com","common_platform_enumeration":"","icon":"Elementor.svg","categories":["Page builders","WordPress plugins"]},{"name":"WordPress","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Google Analytics","description":"Google Analytics is a free web analytics service that tracks and reports website traffic.","website":"https://google.com/analytics","common_platform_enumeration":"","icon":"Google Analytics.svg","categories":["Analytics"]}],"data":{"size":89916,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (11055)","md5":"29051b1ef44086dfac528c2a2f279d2b","sha1":"1b11faef24670eb15e0b850f319f002ecc885d20","sha256":"df00adea9c38f16374b03f685be399c52d481d6a513c225e42076c8decc9f09c","sha512":"dc1f0acace10d0a701d6dbed816158087f019b511791f31294e426707e5f4014e1e0acc53e8f93822f21a057bbef9aa66be544a6f764e5d6c4f2751d6e52d5aa","ssdeep":"1536:czQnuw3ACCKCDypIhgw7jH3dnEq9ET04AH5lleYeSxK3QZ:csnuiTAgw7jNnEqy0H5lleFS4QZ","tlshash":"e2932872b9ae103a265f83ca852b771c218e98b7c956d5f4f6fa00145fb0de132a3619","first_seen":"2025-12-24T02:52:14.442599Z","last_seen":"2025-12-24T02:52:14.442599Z","times_seen":1,"resource_available":false,"data":null}},"time_used":453,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":354,"receive":98,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-12-24","alert":"Sinkholed","trigger":"bizdavar.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-24","alert":"Sinkholed","trigger":"bizdavar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bizdavar.com/wp-includes/js/jquery/jquery.min.js?ver=3.7.1","fqdn":"bizdavar.com","domain":"bizdavar.com","tld":"com"},"ip":{"addr":"104.21.20.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bizdavar.com/","date":"2025-12-24T02:51:40.500Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bizdavar.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 30 Oct 2025 20:00:29 GMT","end":"Wed, 28 Jan 2026 20:57:57 GMT"},"fingerprint":{"sha1":"5D:CD:8B:95:13:4B:07:86:69:DB:63:BB:CB:C1:77:82:AC:0D:A7:26","sha256":"9E:35:D3:AC:31:17:9B:4D:33:29:6C:FD:AA:22:4F:CD:B5:4E:69:36:49:D7:30:36:9E:13:20:86:77:04:F3:0B"}}},"request":{"raw":"GET /wp-includes/js/jquery/jquery.min.js?ver=3.7.1 HTTP/1.1\r\nHost: bizdavar.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://bizdavar.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 24 Dec 2025 02:51:40 GMT\r\nserver: cloudflare\r\nlast-modified: Mon, 28 Aug 2023 17:14:23 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nvary: accept-encoding\r\ncontent-encoding: br\r\ncontent-type: text/javascript\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=P5s0P%2FRIwG3QH9SDizXR%2FuTM%2BR6NOgirpYzEvQJwC%2BVRJeHFyfNKwvg5kCy99ZGPgMC6JqxblsABG8h5Y9CyGUPkGbY9LqFxiNcgAw%3D%3D\"}]}\r\ncf-ray: 9b2ccc59cb392efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":87553,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (65447)","md5":"826eb77e86b02ab7724fe3d0141ff87c","sha1":"79cd3587d565afe290076a8d36c31c305a573d18","sha256":"cb6f2d32c49d1c2b25e9ffc9aaafa3f83075346c01bcd4ae6eb187392a4292cf","sha512":"fc79fdb76763025dc39fac045a215ff155ef2f492a0e9640079d6f089fa6218af2b3ab7c6eaf636827dee9294e6939a95ab24554e870c976679c25567ad6374c","ssdeep":"1536:0RUX9uDgwxcy2KVBNwchN6SLaHEk2BSrBESp+a/IEk4aAocVi8SMBQ47GKO:sHNwcv9VBQpLl88SMBQ47GKO","tlshash":"7483f8df77ca702247ab30b9006f550bf276199d684d4400f159d8e9bcb8a4a827bf7e","first_seen":"2023-11-03T09:26:43Z","last_seen":"2026-08-12T08:29:04.681065Z","times_seen":1015141,"resource_available":true,"data":null}},"time_used":232,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":143,"receive":89,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-24","alert":"Sinkholed","trigger":"bizdavar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-12-24","alert":"Sinkholed","trigger":"bizdavar.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bizdavar.com/wp-content/uploads/2024/07/other-gas-detectors.webp","fqdn":"bizdavar.com","domain":"bizdavar.com","tld":"com"},"ip":{"addr":"104.21.20.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bizdavar.com/","date":"2025-12-24T02:51:40.515Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bizdavar.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 30 Oct 2025 20:00:29 GMT","end":"Wed, 28 Jan 2026 20:57:57 GMT"},"fingerprint":{"sha1":"5D:CD:8B:95:13:4B:07:86:69:DB:63:BB:CB:C1:77:82:AC:0D:A7:26","sha256":"9E:35:D3:AC:31:17:9B:4D:33:29:6C:FD:AA:22:4F:CD:B5:4E:69:36:49:D7:30:36:9E:13:20:86:77:04:F3:0B"}}},"request":{"raw":"GET /wp-content/uploads/2024/07/other-gas-detectors.webp HTTP/1.1\r\nHost: bizdavar.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://bizdavar.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 24 Dec 2025 02:51:40 GMT\r\nserver: cloudflare\r\nlast-modified: Mon, 29 Jul 2024 12:31:20 GMT\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\ncontent-length: 19714\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: image/webp\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=WPLwIu6%2FMQCN8Vi2EIJeKBieokkfZhDI%2FKQrihXCPlh%2FTAwYxRLU7ocuFytiLfrX3rrfoN0jv%2BajPzLpyTXJuBrKLVBvzso%2FfCrh2A%3D%3D\"}]}\r\nvary: accept-encoding\r\ncf-ray: 9b2ccc59db462efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":19714,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"62204b65ecf4629de5444c3aeb4a4d54","sha1":"f26cbb8b7532bddc7502eed912382e7a1bc42053","sha256":"a1cc65269c77eec16968cc5cde95b06a16fe7277aa76ccf0cc88a1dd41634d63","sha512":"f12ecc6919ab369cee20a04ab11d1633ffbe3fffdf6ccc17d26d45df4fc8107fda1721cbb2462d13c9e5fd88e7f5b960e26307271fad0f7cbad08172e3b9c13a","ssdeep":"384:EOJAe6FKMR5ymxKVlRHzsliIcGYceJrgECPxf/T01GXUFPjQZ28Z2A:EAF6lQBV34liIcGTeJqxHTEMUFPULX","tlshash":"9f92d0b32468e5e4ecf27c612637355c32caa680cc9491f7ae35a4b68639061fd9e4d3","first_seen":"2025-12-24T02:52:14.444252Z","last_seen":"2025-12-24T02:52:14.444252Z","times_seen":1,"resource_available":false,"data":null}},"time_used":167,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":127,"receive":40,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-24","alert":"Sinkholed","trigger":"bizdavar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-12-24","alert":"Sinkholed","trigger":"bizdavar.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bizdavar.com/wp-content/uploads/elementor/css/post-12.css?ver=1765008745","fqdn":"bizdavar.com","domain":"bizdavar.com","tld":"com"},"ip":{"addr":"104.21.20.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://bizdavar.com/","date":"2025-12-24T02:51:40.493Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bizdavar.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 30 Oct 2025 20:00:29 GMT","end":"Wed, 28 Jan 2026 20:57:57 GMT"},"fingerprint":{"sha1":"5D:CD:8B:95:13:4B:07:86:69:DB:63:BB:CB:C1:77:82:AC:0D:A7:26","sha256":"9E:35:D3:AC:31:17:9B:4D:33:29:6C:FD:AA:22:4F:CD:B5:4E:69:36:49:D7:30:36:9E:13:20:86:77:04:F3:0B"}}},"request":{"raw":"GET /wp-content/uploads/elementor/css/post-12.css?ver=1765008745 HTTP/1.1\r\nHost: bizdavar.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://bizdavar.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 24 Dec 2025 02:51:40 GMT\r\nserver: cloudflare\r\nlast-modified: Sat, 06 Dec 2025 08:12:25 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nvary: accept-encoding\r\ncontent-encoding: br\r\ncontent-type: text/css\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6I9kHSi3WomsB66CaOboDcGmrtobiBCwfu50eCo3fY28NmAR8ySHmH0%2FWDdyZrfUGx5bf%2B2tPiml87XGm3ptcnDhrbnKNrc%2Femz0aw%3D%3D\"}]}\r\ncf-ray: 9b2ccc59bb362efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":12555,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (5847)","md5":"98f8aced95eca89ef230e14e2723bacd","sha1":"8e49aa979cdc937510da693252e3fda2c7a7e29c","sha256":"23d4f82e49eeb7045e70f88969d7171627179cb0036c6d0778dcd92783134d61","sha512":"b6aec5ea99b46f55faccda5d6a548ecba1039c2f79fd7bb977780f6e87e7693b84b750f977bae16a031d588965ed21fb80d4e42657517aecd3b805bcc6638243","ssdeep":"192:Ehd9+nJWySqCAGe2uJJ2uJRCs2uJYchB16/ZLR/zsB16XsLR/zrS:T52uJJ2uJr2uJPy/JR/gyXGR/vS","tlshash":"1142fc9d3d232118b15fa07b58a775dca12a9897c54eaec2f8e01116ededde133b870c","first_seen":"2025-12-24T02:52:14.445657Z","last_seen":"2025-12-24T02:52:14.445657Z","times_seen":1,"resource_available":false,"data":null}},"time_used":176,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":137,"receive":39,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-24","alert":"Sinkholed","trigger":"bizdavar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-12-24","alert":"Sinkholed","trigger":"bizdavar.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bizdavar.com/wp-content/plugins/elementor-pro/assets/js/elements-handlers.min.js?ver=3.32.2","fqdn":"bizdavar.com","domain":"bizdavar.com","tld":"com"},"ip":{"addr":"104.21.20.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bizdavar.com/","date":"2025-12-24T02:51:40.613Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bizdavar.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 30 Oct 2025 20:00:29 GMT","end":"Wed, 28 Jan 2026 20:57:57 GMT"},"fingerprint":{"sha1":"5D:CD:8B:95:13:4B:07:86:69:DB:63:BB:CB:C1:77:82:AC:0D:A7:26","sha256":"9E:35:D3:AC:31:17:9B:4D:33:29:6C:FD:AA:22:4F:CD:B5:4E:69:36:49:D7:30:36:9E:13:20:86:77:04:F3:0B"}}},"request":{"raw":"GET /wp-content/plugins/elementor-pro/assets/js/elements-handlers.min.js?ver=3.32.2 HTTP/1.1\r\nHost: bizdavar.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://bizdavar.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 24 Dec 2025 02:51:40 GMT\r\nserver: cloudflare\r\nlast-modified: Thu, 06 Nov 2025 16:20:38 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: accept-encoding\r\ncontent-encoding: br\r\ncontent-type: text/javascript\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=pBjBmF6LlbK6BemphBqbm9z80egokGSXD52IDdgh63U8lPAQfFkawV%2BfAMvg0u0k48g6VGORoE0ZiQTqzShCZNfSkNwsAgJOgj8%2FoA%3D%3D\"}]}\r\ncf-ray: 9b2ccc5a9b802efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":44670,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (44626)","md5":"337018bcf0b1df28442e2edcb05bda8f","sha1":"9bc075dba1d9433b5041caf313573e7df43ea0b0","sha256":"f9d6caa55bdad7ca867a343c1cdab1729e36bd9fa4017efac3c688d76f97c66e","sha512":"d7cc0c78b5d3a86a539084f8187bfbd001733d26b9f0a80f99c40c412e7015276296ffda6eb084469190ba88743d25e9cacec6faa1aae9d61147b3d22cad475e","ssdeep":"768:g/bt9JJD1+WE9A5yLce/J9d0dbdTdGdadWdDdILdUd1dvd6dfdMdxdndTdVdFg7y:Ct5D1+WE9A5yLcWJ9mBtIoERuWfRMBKr","tlshash":"2d13a511716aca6945cf84abf463164fb7225cacf413f0e67afc8d82b464e87a394731","first_seen":"2025-09-29T16:46:42.886348Z","last_seen":"2026-08-11T20:57:59.63801Z","times_seen":7547,"resource_available":true,"data":null}},"time_used":226,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":138,"receive":88,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-12-24","alert":"Sinkholed","trigger":"bizdavar.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-24","alert":"Sinkholed","trigger":"bizdavar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bizdavar.com/wp-content/uploads/2024/07/BIZ-RED-01-1536x1086.png","fqdn":"bizdavar.com","domain":"bizdavar.com","tld":"com"},"ip":{"addr":"104.21.20.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://bizdavar.com/","date":"2025-12-24T02:51:40.504Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bizdavar.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 30 Oct 2025 20:00:29 GMT","end":"Wed, 28 Jan 2026 20:57:57 GMT"},"fingerprint":{"sha1":"5D:CD:8B:95:13:4B:07:86:69:DB:63:BB:CB:C1:77:82:AC:0D:A7:26","sha256":"9E:35:D3:AC:31:17:9B:4D:33:29:6C:FD:AA:22:4F:CD:B5:4E:69:36:49:D7:30:36:9E:13:20:86:77:04:F3:0B"}}},"request":{"raw":"GET /wp-content/uploads/2024/07/BIZ-RED-01-1536x1086.png HTTP/1.1\r\nHost: bizdavar.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://bizdavar.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 24 Dec 2025 02:51:40 GMT\r\nserver: cloudflare\r\nlast-modified: Thu, 25 Jul 2024 11:29:57 GMT\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\ncontent-length: 30396\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: image/png\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=DTB2TLiLtVXxnP%2FbnReNgPt6BfKK8cD1CUmRK4dHjNFYvluXDMZlfsNrbklz6rMP21yDVuOkCyYiALizZQH2Hpk5Y0iCWpojNyvfQQ%3D%3D\"}]}\r\nvary: accept-encoding\r\ncf-ray: 9b2ccc59cb3b2efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":30396,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1536 x 1086, 8-bit/color RGBA, non-interlaced","md5":"6b9f54c861c24ccfd0c8e2ef968b2c32","sha1":"2bd528dac7587225d24abed19013825f0720a334","sha256":"cb3d5d71c743e2f80a12f685440700f3fe5b446138d2de56ba0ca544b74d2597","sha512":"08b5bc511ae7fceb743ec320e79496d920c4b1be8640209803c63d3241793fce48c74e62fd991d02a83f8ea9648f9b528aa3663875a7eee7abdaf27813af85d5","ssdeep":"384:xrEi+S/FTI7rxPrnU/RXNOmvM1dEf1deNYNT9/DpF16w3abO9Emu:WV4a79rjmvKdm/ecBpFQLi9Emu","tlshash":"dcd2d0c323f63a84c06016f9ce6e0db8d55ca761bff4a73a1600901ba79bb940e1d970","first_seen":"2025-12-24T02:52:14.447268Z","last_seen":"2025-12-24T02:52:14.447268Z","times_seen":1,"resource_available":false,"data":null}},"time_used":212,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":159,"receive":53,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-12-24","alert":"Sinkholed","trigger":"bizdavar.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-24","alert":"Sinkholed","trigger":"bizdavar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bizdavar.com/header-scripts.js","fqdn":"bizdavar.com","domain":"bizdavar.com","tld":"com"},"ip":{"addr":"104.21.20.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bizdavar.com/","date":"2025-12-24T02:51:40.523Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bizdavar.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 30 Oct 2025 20:00:29 GMT","end":"Wed, 28 Jan 2026 20:57:57 GMT"},"fingerprint":{"sha1":"5D:CD:8B:95:13:4B:07:86:69:DB:63:BB:CB:C1:77:82:AC:0D:A7:26","sha256":"9E:35:D3:AC:31:17:9B:4D:33:29:6C:FD:AA:22:4F:CD:B5:4E:69:36:49:D7:30:36:9E:13:20:86:77:04:F3:0B"}}},"request":{"raw":"GET /header-scripts.js HTTP/1.1\r\nHost: bizdavar.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://bizdavar.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 Not Found\r\ndate: Wed, 24 Dec 2025 02:51:40 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=63072000; includeSubDomains;preload\r\nx-xss-protection: 0\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-frame-options: SAMEORIGIN\r\ncontent-security-policy: frame-ancestors 'self' ; upgrade-insecure-requests;\r\nexpires: Wed, 11 Jan 1984 05:00:00 GMT\r\ncache-control: no-cache, must-revalidate, max-age=0, no-store, private\r\nlink: \u003chttps://bizdavar.com/wp-json/\u003e; rel=\"https://api.w.org/\"\r\nvary: accept-encoding\r\ncontent-encoding: br\r\npriority: u=3,i=?0\r\ncontent-type: text/html; charset=UTF-8\r\ncf-cache-status: BYPASS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=tGQ%2Fi5gsjBomz7fQdmuD4qcNWHCnsqTAkXcw%2FZVmeftPK4uUHbbWymUcgV4Vj0nc%2FXJVGh%2BWhFaYv896eYW0qTRBojaOF0WXHa4XMw%3D%3D\"}]}\r\ncf-ray: 9b2ccc59eb512efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"WordPress","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-12T08:40:50.123104Z","times_seen":17852352,"resource_available":true,"data":null}},"time_used":589,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":442,"receive":147,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-24","alert":"Sinkholed","trigger":"bizdavar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-12-24","alert":"Sinkholed","trigger":"bizdavar.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/montserrat/v31/JTUSjIg1_i6t8kCHKm459WlhyyTn89ddpQ.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://bizdavar.com/","date":"2025-12-24T02:51:41.122Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 15:53:13 GMT","end":"Wed, 25 Feb 2026 15:53:12 GMT"},"fingerprint":{"sha1":"5A:E3:E3:B6:18:F9:10:0B:5B:11:FA:CB:BF:0C:9B:5C:0E:34:70:78","sha256":"FC:46:B0:C1:1E:B2:21:60:D9:7E:6A:ED:42:56:B2:CF:2A:E4:D2:F1:1C:63:63:98:2B:A3:0F:6C:4A:98:74:D6"}}},"request":{"raw":"GET /s/montserrat/v31/JTUSjIg1_i6t8kCHKm459WlhyyTn89ddpQ.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://bizdavar.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 37756\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Fri, 19 Dec 2025 19:29:36 GMT\r\nexpires: Sat, 19 Dec 2026 19:29:36 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Thu, 04 Sep 2025 17:09:21 GMT\r\ncontent-type: font/woff2\r\nage: 372125\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":37756,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 37756, version 1.0","md5":"8a6a885dd57e60ddd85f3190737fa209","sha1":"dbca56b7fe8ee5e4bfb648d639fc6a3bfc5c6e85","sha256":"b9b102f608e8252e3c1e7287309832b16af7dcc6e788651fa503a3faacd7fb2f","sha512":"2bd785869777dc57dbb5934d4c6915b66f89746dd79897820eb4bbd0d262b2612bafdfb07c1e092658ad819f582a97e6a196531f74187d8a0b0bbd07fcbba56a","ssdeep":"768:sqRKhgpCf9U72WeD4A/5IqtBr0ikGvEaQh38/LBu3Emdc043RpgZKMqjkEfO1m:jKgp+9U7Ve8A/7Ai9Et3EBKEUE3RqMMu","tlshash":"3e030130df5884edcc0ba371fdeea81fc7a332a594c0b3368297af1b80111499d99e49","first_seen":"2025-09-05T00:25:10.258656Z","last_seen":"2026-08-12T08:34:23.439784Z","times_seen":548681,"resource_available":false,"data":null}},"time_used":254,"timings":{"blocked":74,"dns":1,"connect":21,"send":0,"wait":22,"receive":76,"ssl":57},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bizdavar.com/wp-content/uploads/2025/04/imensa.png","fqdn":"bizdavar.com","domain":"bizdavar.com","tld":"com"},"ip":{"addr":"104.21.20.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bizdavar.com/","date":"2025-12-24T02:51:40.524Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bizdavar.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 30 Oct 2025 20:00:29 GMT","end":"Wed, 28 Jan 2026 20:57:57 GMT"},"fingerprint":{"sha1":"5D:CD:8B:95:13:4B:07:86:69:DB:63:BB:CB:C1:77:82:AC:0D:A7:26","sha256":"9E:35:D3:AC:31:17:9B:4D:33:29:6C:FD:AA:22:4F:CD:B5:4E:69:36:49:D7:30:36:9E:13:20:86:77:04:F3:0B"}}},"request":{"raw":"GET /wp-content/uploads/2025/04/imensa.png HTTP/1.1\r\nHost: bizdavar.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://bizdavar.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 24 Dec 2025 02:51:40 GMT\r\nserver: cloudflare\r\nlast-modified: Wed, 02 Apr 2025 12:09:35 GMT\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\ncontent-length: 43134\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: image/png\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=WBUEVzoVqPLkxT6bTIog8T0%2Bo4jJLWt%2FMm6LQDu7lsUGWk2GB%2BS5tVBp3n%2FkzMA3eakAvQ%2F6K3HqTMF83%2FUkieGu72KpLtZUcMOqRA%3D%3D\"}]}\r\nvary: accept-encoding\r\ncf-ray: 9b2ccc59eb522efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":43134,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 500 x 242, 8-bit/color RGBA, non-interlaced","md5":"c96a0aeb0f472188d498cf05725dbb60","sha1":"65400fe80a15973831eb560eedbf267d2d0452fa","sha256":"cae1eb680395ac8dc79a60e5ad5f7dbdaab504abd1247e7804153a3d273327d6","sha512":"1d000cc9aa39861b2c8979ab1a4fd6d4fa1374ff6bf3ab6fff96e832059f8257f03dd9353c9f304cf3f32a31f5f5e54916ac9b6bd85872aaa6238fd56952efa2","ssdeep":"768:03om7/Kh9oeWfP0QzgtSmA5UvPFFbzJXJ1OFvoGjR6gxH4QtoLgVYStatR:1m7StWfMzyUvPfbNXJ0R7jR94QtontR","tlshash":"48130248b2bde213f078be731fdcc5f895841e27226a2765f9bb2650c458e636b44074","first_seen":"2025-07-01T02:18:26.417437Z","last_seen":"2025-12-24T02:52:14.451117Z","times_seen":2,"resource_available":false,"data":null}},"time_used":263,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":161,"receive":102,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-12-24","alert":"Sinkholed","trigger":"bizdavar.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-24","alert":"Sinkholed","trigger":"bizdavar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bizdavar.com/wp-content/uploads/2025/04/desktop-logo.png","fqdn":"bizdavar.com","domain":"bizdavar.com","tld":"com"},"ip":{"addr":"104.21.20.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bizdavar.com/","date":"2025-12-24T02:51:40.528Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bizdavar.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 30 Oct 2025 20:00:29 GMT","end":"Wed, 28 Jan 2026 20:57:57 GMT"},"fingerprint":{"sha1":"5D:CD:8B:95:13:4B:07:86:69:DB:63:BB:CB:C1:77:82:AC:0D:A7:26","sha256":"9E:35:D3:AC:31:17:9B:4D:33:29:6C:FD:AA:22:4F:CD:B5:4E:69:36:49:D7:30:36:9E:13:20:86:77:04:F3:0B"}}},"request":{"raw":"GET /wp-content/uploads/2025/04/desktop-logo.png HTTP/1.1\r\nHost: bizdavar.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://bizdavar.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 24 Dec 2025 02:51:40 GMT\r\nserver: cloudflare\r\nlast-modified: Wed, 02 Apr 2025 11:59:44 GMT\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\ncontent-length: 5428\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: image/png\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=61dJ8CdYIy4GzroxL2F0EOLoFMtW0OejV9lzgaaJTVmfodUmbJGD6iHLgyMUlsErVy7MxepMPcZ7JQE1cGO%2F8KbPn2eG3Q0JpltKkg%3D%3D\"}]}\r\nvary: accept-encoding\r\ncf-ray: 9b2ccc59fb562efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5428,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 228 x 172, 8-bit/color RGBA, non-interlaced","md5":"e33305ac32fd8f51801d792fd4b674c2","sha1":"33907f8cf45400cf9dd433737a4ca12887637f75","sha256":"f0651f4dbf40ac3ece2cb8f323c62dc74deef12c1c6896532cfedbc9192bb7a2","sha512":"83d0e696d6df2b3dedfe2387e4e82508c7c37390f7c5d00887f99c90d92565a5b9c5ffa58fa344ed70309325590318d23d4732cc3892321f5dbe777e889b2439","ssdeep":"96:O4+InOUHsUGo/9sy/3nTo6Ozi5hYwDPqaVlxldzdSah6FSDc:BO+s5olsy/3TZOscarxldzgc6FSDc","tlshash":"0ab18edd98f6a5ea96c66cb3421d1b2038b54a0f122af7ce8143a51dde6713c83299cd","first_seen":"2025-12-24T02:52:14.452786Z","last_seen":"2025-12-24T02:52:14.452786Z","times_seen":1,"resource_available":false,"data":null}},"time_used":122,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":121,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-12-24","alert":"Sinkholed","trigger":"bizdavar.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-24","alert":"Sinkholed","trigger":"bizdavar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bizdavar.com/wp-content/uploads/complianz/css/banner-1-optin.css?v=7334","fqdn":"bizdavar.com","domain":"bizdavar.com","tld":"com"},"ip":{"addr":"104.21.20.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://bizdavar.com/","date":"2025-12-24T02:51:41.258Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bizdavar.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 30 Oct 2025 20:00:29 GMT","end":"Wed, 28 Jan 2026 20:57:57 GMT"},"fingerprint":{"sha1":"5D:CD:8B:95:13:4B:07:86:69:DB:63:BB:CB:C1:77:82:AC:0D:A7:26","sha256":"9E:35:D3:AC:31:17:9B:4D:33:29:6C:FD:AA:22:4F:CD:B5:4E:69:36:49:D7:30:36:9E:13:20:86:77:04:F3:0B"}}},"request":{"raw":"GET /wp-content/uploads/complianz/css/banner-1-optin.css?v=7334 HTTP/1.1\r\nHost: bizdavar.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://bizdavar.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 24 Dec 2025 02:51:41 GMT\r\nserver: cloudflare\r\nlast-modified: Fri, 07 Nov 2025 06:53:45 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nvary: accept-encoding\r\ncontent-encoding: br\r\ncontent-type: text/css\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xE60RasURU3CFPTS%2Bhjlhow83%2FEZVpALzHY0UZCQjiZjnXSQRP068bH3VE1Kr5VeUECSf1ZEtkiIO%2B5%2BIy2lsBDB8acWvUoUCfrIgg%3D%3D\"}]}\r\ncf-ray: 9b2ccc5f1bc62efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":15250,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (15250), with no line terminators","md5":"944bd7096442d711b96feca9f2acbaf8","sha1":"08af8434f490d8367ae36111678f58f248ded9e8","sha256":"4cac5a89f2e55dd7267e695668956c5e0c0677eb38a60671a464060fd5c7bea9","sha512":"4689f2069598d6603fd30bab6e41f3f820df3b1a9f2320f0121b5db272658d2a63c94e64f47ed46e34b649a3d818fe60e9cf299173bb83d0c7086d8d91deb84e","ssdeep":"96:susOppeDJjeWeyne6nxZ1csUi5p8Z1cAvqlIWurrkTobudlYLhf8Iqb56qlym6Om:70EpVAWDi5cWi2IWRzZbb3sMBEj","tlshash":"c4622fa99e0c1164e3cfdf1d37aa9a0e9114b731b29d1af824a17850f2fe5d11d2e387","first_seen":"2025-11-08T10:19:53.078164Z","last_seen":"2026-06-24T13:28:37.212421Z","times_seen":21,"resource_available":false,"data":null}},"time_used":113,"timings":{"blocked":42,"dns":0,"connect":0,"send":0,"wait":39,"receive":32,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-12-24","alert":"Sinkholed","trigger":"bizdavar.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-24","alert":"Sinkholed","trigger":"bizdavar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bizdavar.com/wp-content/uploads/2024/07/Liquid-Solid-Video-final-2.mp4","fqdn":"bizdavar.com","domain":"bizdavar.com","tld":"com"},"ip":{"addr":"104.21.20.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://bizdavar.com/","date":"2025-12-24T02:51:41.156Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bizdavar.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 30 Oct 2025 20:00:29 GMT","end":"Wed, 28 Jan 2026 20:57:57 GMT"},"fingerprint":{"sha1":"5D:CD:8B:95:13:4B:07:86:69:DB:63:BB:CB:C1:77:82:AC:0D:A7:26","sha256":"9E:35:D3:AC:31:17:9B:4D:33:29:6C:FD:AA:22:4F:CD:B5:4E:69:36:49:D7:30:36:9E:13:20:86:77:04:F3:0B"}}},"request":{"raw":"GET /wp-content/uploads/2024/07/Liquid-Solid-Video-final-2.mp4 HTTP/1.1\r\nHost: bizdavar.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.5\r\nReferer: https://bizdavar.com/\r\nRange: bytes=0-\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: video\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nAccept-Encoding: identity\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 206 Partial Content\r\ndate: Wed, 24 Dec 2025 02:51:41 GMT\r\nserver: cloudflare\r\nlast-modified: Mon, 29 Jul 2024 12:33:23 GMT\r\ncontent-type: video/mp4\r\npriority: u=4,i=?0\r\ncontent-length: 7245696\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-range: bytes 0-7245695/7245696\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xNsNvLS6XONZdmkcAux7qwxeXspSRxjwsApaXfBSdiOnFaDa1SHU5yqUZ%2F61%2BXGi9uAbuA7mXyH0ydw6ZhJeLaMmFmydaUPgBBwCRg%3D%3D\"}]}\r\nvary: accept-encoding\r\ncf-ray: 9b2ccc5e2ba62efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7245696,"size_decoded":0,"mime_type":"video/mp4","magic":"ISO Media, Apple iTunes Video (.M4V) Video","md5":"d26efde10071c21f6da1038c0449f563","sha1":"5052e6e4702db8954d0897d025a97ed980f59b0e","sha256":"8ef4489a27973f811ee4c7d0312642b4f50c8144827adbae8b4a200b363e06e6","sha512":"60aefc111090b959e30d5aab463d4342ff14537c64af3d1481aba4cf5c50cf5d28066a40c96fb50f6cda1d455bbe2c38f3774d8b30d021154753cea53c9584bd","ssdeep":"24576:YEjhRc94ejiQuDOwjDwSy2yklBLZrm8RkVEM3AR0:l9rrQssFCZrPRGA+","tlshash":"d4252339e7c40cb2d56625385edfd3c766a1a6e5c0fab3067a4f409e271e093a81d1f2","first_seen":"2025-12-24T02:52:14.45482Z","last_seen":"2025-12-24T02:52:14.45482Z","times_seen":1,"resource_available":false,"data":null}},"time_used":976,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":49,"receive":927,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-24","alert":"Sinkholed","trigger":"bizdavar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-12-24","alert":"Sinkholed","trigger":"bizdavar.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bizdavar.com/wp-content/uploads/2024/07/logo.png","fqdn":"bizdavar.com","domain":"bizdavar.com","tld":"com"},"ip":{"addr":"104.21.20.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bizdavar.com/","date":"2025-12-24T02:51:40.515Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bizdavar.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 30 Oct 2025 20:00:29 GMT","end":"Wed, 28 Jan 2026 20:57:57 GMT"},"fingerprint":{"sha1":"5D:CD:8B:95:13:4B:07:86:69:DB:63:BB:CB:C1:77:82:AC:0D:A7:26","sha256":"9E:35:D3:AC:31:17:9B:4D:33:29:6C:FD:AA:22:4F:CD:B5:4E:69:36:49:D7:30:36:9E:13:20:86:77:04:F3:0B"}}},"request":{"raw":"GET /wp-content/uploads/2024/07/logo.png HTTP/1.1\r\nHost: bizdavar.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://bizdavar.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 24 Dec 2025 02:51:40 GMT\r\nserver: cloudflare\r\nlast-modified: Mon, 29 Jul 2024 15:34:30 GMT\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\ncontent-length: 18979\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: image/png\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=kUaVP8mraM%2F6uvM9BF8ja7kPiHiwAGTag3Yk12Fb6RN73x5mAFBx8lr9CDmr7KTbcqEfm4d4utniDcGEjGQF371vsJVLkqiSb%2FEqFw%3D%3D\"}]}\r\nvary: accept-encoding\r\ncf-ray: 9b2ccc59db452efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":18979,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 225 x 56, 8-bit/color RGBA, non-interlaced","md5":"dc31a169785a568bde3251e1a43cfb8d","sha1":"8d969a275364e0d7b6887a249298952db3682a67","sha256":"bb10ada08cd1efe4b7fbd01c8ac0b43b910a5d1e3b7c2b090c9d121d85f47604","sha512":"3f17a6a69490456d863b4b9872df46f85a8035b4b2c1c48e61b0c6d6f4518d5115194be0e82c0be3b05b2e28d4281682533c222b0bc7f870b5518d93c7381aa1","ssdeep":"96:9SZ8kEWmMVWVmVrVUxNX7sc5ltTlb0Gi+qmse3p9dz6ysCtXvHEclqC/reY/nkkq:9S2k6MVWVmVrVqtlbcSDb0CBEcAYfe","tlshash":"1e825c60fcf137b85644ea722cd528096d334a83dac08e407d8d6c31af247e86cab287","first_seen":"2025-12-24T02:52:14.456384Z","last_seen":"2025-12-24T02:52:14.456384Z","times_seen":1,"resource_available":false,"data":null}},"time_used":192,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":145,"receive":47,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-24","alert":"Sinkholed","trigger":"bizdavar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-12-24","alert":"Sinkholed","trigger":"bizdavar.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bizdavar.com/wp-content/plugins/elementor/assets/css/frontend-rtl.min.css?ver=3.32.5","fqdn":"bizdavar.com","domain":"bizdavar.com","tld":"com"},"ip":{"addr":"104.21.20.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://bizdavar.com/","date":"2025-12-24T02:51:40.477Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bizdavar.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 30 Oct 2025 20:00:29 GMT","end":"Wed, 28 Jan 2026 20:57:57 GMT"},"fingerprint":{"sha1":"5D:CD:8B:95:13:4B:07:86:69:DB:63:BB:CB:C1:77:82:AC:0D:A7:26","sha256":"9E:35:D3:AC:31:17:9B:4D:33:29:6C:FD:AA:22:4F:CD:B5:4E:69:36:49:D7:30:36:9E:13:20:86:77:04:F3:0B"}}},"request":{"raw":"GET /wp-content/plugins/elementor/assets/css/frontend-rtl.min.css?ver=3.32.5 HTTP/1.1\r\nHost: bizdavar.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://bizdavar.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 24 Dec 2025 02:51:40 GMT\r\nserver: cloudflare\r\nlast-modified: Thu, 06 Nov 2025 16:18:10 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nvary: accept-encoding\r\ncontent-encoding: br\r\ncontent-type: text/css\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=fRDhP6O9NoFvOpzfpQf%2BDtSw2RAM7sX7ISMoIv8iTYpsR2s5guRIYkVAlly0MT%2BFqWF8EeSB9x0k9XixhtJtgcdJXallc5JH7lFNOg%3D%3D\"}]}\r\ncf-ray: 9b2ccc59ab2b2efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":53614,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (53574)","md5":"73ae0604a8387eb29ac9e9a73f1816d0","sha1":"c4f83130f23a21e2d890da8c441528035c327b4b","sha256":"e549579849a4df54e6e282af4ecc65954799c07c7daf2b3a2be8c27f10ba8782","sha512":"ee97374d6bfaf3d34216daa0195d3391bff6b354544889e768058abfc481ee44efc5ed0c7276fe97f89c080b0c244dc7c842f220ae0553f8fa99c97dd226dd65","ssdeep":"384:6srJS/vmyeUaEMoZ0qk0e/RmRC5Cz9TfikvmGkvmCFlr3faE2ksYrOk:uLRdL2t7RlljX7svk","tlshash":"a633fb623d13b269226f442b82d7364c526495c1ee4376d9fa04c523dafece63b36c1b","first_seen":"2025-10-21T18:16:12.078678Z","last_seen":"2026-07-28T04:10:26.870918Z","times_seen":186,"resource_available":false,"data":null}},"time_used":239,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":148,"receive":91,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-24","alert":"Sinkholed","trigger":"bizdavar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-12-24","alert":"Sinkholed","trigger":"bizdavar.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bizdavar.com/wp-content/uploads/2025/04/ChatGPT-Image-Apr-2-2025-03_14_32-PM.png","fqdn":"bizdavar.com","domain":"bizdavar.com","tld":"com"},"ip":{"addr":"104.21.20.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bizdavar.com/","date":"2025-12-24T02:51:40.511Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bizdavar.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 30 Oct 2025 20:00:29 GMT","end":"Wed, 28 Jan 2026 20:57:57 GMT"},"fingerprint":{"sha1":"5D:CD:8B:95:13:4B:07:86:69:DB:63:BB:CB:C1:77:82:AC:0D:A7:26","sha256":"9E:35:D3:AC:31:17:9B:4D:33:29:6C:FD:AA:22:4F:CD:B5:4E:69:36:49:D7:30:36:9E:13:20:86:77:04:F3:0B"}}},"request":{"raw":"GET /wp-content/uploads/2025/04/ChatGPT-Image-Apr-2-2025-03_14_32-PM.png HTTP/1.1\r\nHost: bizdavar.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://bizdavar.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 24 Dec 2025 02:51:40 GMT\r\nserver: cloudflare\r\nlast-modified: Wed, 02 Apr 2025 12:14:57 GMT\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\ncontent-length: 1792612\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: image/png\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9ktJeYQ9jkTr595E%2F8nC744tEAD7KB4fSDkdH2XHJF9PqimtiaApZnF4DUk3zR8fo8DC5FfmR72gUnkY6vXxkcbE7bOD9XhDiKj1MQ%3D%3D\"}]}\r\nvary: accept-encoding\r\ncf-ray: 9b2ccc59cb412efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1792612,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1536 x 1024, 8-bit/color RGB, non-interlaced","md5":"77eaa1867a744895556559610a75f247","sha1":"bbe3034ad17320b07be5a997f2b7648b127170e7","sha256":"27ce010b828d93efa6ed72fc125d5dec50f6bc9caa37d4e1b9043f8935dc6f6d","sha512":"3f723aa77a03d2399cd5e33cd221d97e4e5b409f1c1df3a0e3358aeb5fba90b9fd81992116f55150a21453f6df58ed6dd3148424e6dbe4b056c6d8c4dd6b7697","ssdeep":"24576:9hdUFcwMewGki9EVxGCdc/4xofsS4WdSvo0hFxtfNqUlyNT:XdU2wzwG3KBd7xofsSBSAMxtoUlyNT","tlshash":"ea2533c4da420352d193aab5f1759f01253ceec23bb62b92a43f4cd65f1bfa19323256","first_seen":"2025-12-24T02:52:14.458815Z","last_seen":"2025-12-24T02:52:14.458815Z","times_seen":1,"resource_available":false,"data":null}},"time_used":522,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":126,"receive":396,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-24","alert":"Sinkholed","trigger":"bizdavar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-12-24","alert":"Sinkholed","trigger":"bizdavar.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bizdavar.com/wp-content/uploads/2025/04/adaksepehr-logo.png","fqdn":"bizdavar.com","domain":"bizdavar.com","tld":"com"},"ip":{"addr":"104.21.20.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bizdavar.com/","date":"2025-12-24T02:51:40.534Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bizdavar.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 30 Oct 2025 20:00:29 GMT","end":"Wed, 28 Jan 2026 20:57:57 GMT"},"fingerprint":{"sha1":"5D:CD:8B:95:13:4B:07:86:69:DB:63:BB:CB:C1:77:82:AC:0D:A7:26","sha256":"9E:35:D3:AC:31:17:9B:4D:33:29:6C:FD:AA:22:4F:CD:B5:4E:69:36:49:D7:30:36:9E:13:20:86:77:04:F3:0B"}}},"request":{"raw":"GET /wp-content/uploads/2025/04/adaksepehr-logo.png HTTP/1.1\r\nHost: bizdavar.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://bizdavar.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 24 Dec 2025 02:51:40 GMT\r\nserver: cloudflare\r\nlast-modified: Wed, 02 Apr 2025 11:54:23 GMT\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\ncontent-length: 11283\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: image/png\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2BDtc8G4dKxswOMVuKYW84DKMo6CiI17grhwmEyVa1%2FJKR8B2lUdBSsDr6cRrivQIKv73D0zrOfN8th8NL7Nk6mbwwRlOfrbWDcUkPg%3D%3D\"}]}\r\nvary: accept-encoding\r\ncf-ray: 9b2ccc59fb5b2efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":11283,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 300 x 46, 8-bit/color RGBA, non-interlaced","md5":"7b9850ae9bab246cc36af0a01c20e1e2","sha1":"c5f3c8156a37fe10c87e5c517f3d4c981b358d9b","sha256":"1da0b71d3d46480131275ea33b668bbea3ac46e5842a4a35e472673663f82c05","sha512":"bdab27569e01a836196db90187fbc5760398703b672a18ac043f97c7bdbc385238f26a97b0ea6c3fff5518b330c5c800414356c14bcbcf57fe760e27b054ee8b","ssdeep":"192:Ea7IhNhg1fi/gJHFZARL1+lky4NHmliutAtU0f2z16TRs4pRIHbnAlV++G4JvvNe:tchNh4JHFZQty4NGli3UzzIdFHIbMQrv","tlshash":"8d32b0d3994142fac00721a621b6523bb5e0df46d93b8dec663b96afc555390f25cb08","first_seen":"2025-12-24T02:52:14.459947Z","last_seen":"2025-12-24T02:52:14.459947Z","times_seen":1,"resource_available":false,"data":null}},"time_used":200,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":153,"receive":47,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-24","alert":"Sinkholed","trigger":"bizdavar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-12-24","alert":"Sinkholed","trigger":"bizdavar.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bizdavar.com/wp-content/plugins/elementor/assets/js/text-editor.abc8f59c62f2820dc25a.bundle.min.js","fqdn":"bizdavar.com","domain":"bizdavar.com","tld":"com"},"ip":{"addr":"104.21.20.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bizdavar.com/","date":"2025-12-24T02:51:41.820Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bizdavar.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 30 Oct 2025 20:00:29 GMT","end":"Wed, 28 Jan 2026 20:57:57 GMT"},"fingerprint":{"sha1":"5D:CD:8B:95:13:4B:07:86:69:DB:63:BB:CB:C1:77:82:AC:0D:A7:26","sha256":"9E:35:D3:AC:31:17:9B:4D:33:29:6C:FD:AA:22:4F:CD:B5:4E:69:36:49:D7:30:36:9E:13:20:86:77:04:F3:0B"}}},"request":{"raw":"GET /wp-content/plugins/elementor/assets/js/text-editor.abc8f59c62f2820dc25a.bundle.min.js HTTP/1.1\r\nHost: bizdavar.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://bizdavar.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: _ga_F2WGXTVK7F=GS2.1.s1766544701$o1$g0$t1766544701$j60$l0$h0; _ga=GA1.1.1382880001.1766544701\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 24 Dec 2025 02:51:42 GMT\r\nserver: cloudflare\r\nlast-modified: Thu, 06 Nov 2025 16:18:10 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: accept-encoding\r\ncontent-encoding: br\r\ncontent-type: text/javascript\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1bTh7S%2FPzY2vpO26xQtF4zqc%2FCLJZYYOFPNeFAkHmps0uh81b5C2Gmsvcnfm7TUFXNyA%2BrJ1dC2u7fr5cxMcN61wVIN1xl5ZxY1xtQ%3D%3D\"}]}\r\ncf-ray: 9b2ccc644c092efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1392,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (1352)","md5":"3ef02081587e9123813483ccd3cb32f1","sha1":"10cc6fa0a7ac74f714e54658e95d8c88837cae6c","sha256":"158d26ffd857515c75b3398b277471d79eedd593c894dd50ee7ad77f5ac49cce","sha512":"a54e09a1aed57a930b8001532b704c2a8187b7337401fccbe46594a19072f35979955eea13a46c598ea1a46e38c42ba03f203261ff554034ca5c60af6f1f1ca8","ssdeep":"","tlshash":"2d2103f370a39ced48cf148a35522d16f1570c5cb885a01ef5aa08db2472e853362634","first_seen":"2025-10-21T14:39:27.204651Z","last_seen":"2026-08-11T09:37:39.152689Z","times_seen":11331,"resource_available":true,"data":null}},"time_used":359,"timings":{"blocked":310,"dns":0,"connect":0,"send":0,"wait":49,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-24","alert":"Sinkholed","trigger":"bizdavar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-12-24","alert":"Sinkholed","trigger":"bizdavar.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bizdavar.com/wp-content/uploads/elementor/css/post-74.css?ver=1765008745","fqdn":"bizdavar.com","domain":"bizdavar.com","tld":"com"},"ip":{"addr":"104.21.20.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://bizdavar.com/","date":"2025-12-24T02:51:40.495Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bizdavar.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 30 Oct 2025 20:00:29 GMT","end":"Wed, 28 Jan 2026 20:57:57 GMT"},"fingerprint":{"sha1":"5D:CD:8B:95:13:4B:07:86:69:DB:63:BB:CB:C1:77:82:AC:0D:A7:26","sha256":"9E:35:D3:AC:31:17:9B:4D:33:29:6C:FD:AA:22:4F:CD:B5:4E:69:36:49:D7:30:36:9E:13:20:86:77:04:F3:0B"}}},"request":{"raw":"GET /wp-content/uploads/elementor/css/post-74.css?ver=1765008745 HTTP/1.1\r\nHost: bizdavar.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://bizdavar.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 24 Dec 2025 02:51:40 GMT\r\nserver: cloudflare\r\nlast-modified: Sat, 06 Dec 2025 08:12:25 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nvary: accept-encoding\r\ncontent-encoding: br\r\ncontent-type: text/css\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=CshixcI0AsZmwhtKzReRQ%2FhhP1g4kTwyjDmBgkaLg9eIpXFykceMxe1E2L8O%2Fhi%2BV%2B%2BWhbfdPQz1jtTKJj1gw4W8OCyvaxeFmvgZ7g%3D%3D\"}]}\r\ncf-ray: 9b2ccc59bb382efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8472,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (8472), with no line terminators","md5":"3a2cdc0f975f6bbfd544f4e345c58f5e","sha1":"0c9068e3eca350b0cb9926b7236e9ad079d416d9","sha256":"16c148037fb28c55acb3cb29f41d8eb17e6b422e7f1cd3322702e93c1987df01","sha512":"9593f8219c55142d195ab3698dd5d9977cc0a4365c07199bc03034dd396286a88a07c617eb4d0db5ce175d02a091af8d959ec60a07995fd2cf88f07ff0f6c54a","ssdeep":"192:E2F0NBScnJWuVt2uJG0NubHM2uJG0NjV92S2uJE0NvZw0KZ:E2m72uJz52uJzpj2uJhi","tlshash":"66025a553e039228b22f146f5013f96ca824accfd56ea7dbf8656123f4bbd9133a0b15","first_seen":"2025-12-24T02:52:14.461826Z","last_seen":"2025-12-24T02:52:14.461826Z","times_seen":1,"resource_available":false,"data":null}},"time_used":122,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":122,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-24","alert":"Sinkholed","trigger":"bizdavar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-12-24","alert":"Sinkholed","trigger":"bizdavar.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bizdavar.com/wp-content/uploads/2024/07/consulting-service.jpg","fqdn":"bizdavar.com","domain":"bizdavar.com","tld":"com"},"ip":{"addr":"104.21.20.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bizdavar.com/","date":"2025-12-24T02:51:40.506Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bizdavar.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 30 Oct 2025 20:00:29 GMT","end":"Wed, 28 Jan 2026 20:57:57 GMT"},"fingerprint":{"sha1":"5D:CD:8B:95:13:4B:07:86:69:DB:63:BB:CB:C1:77:82:AC:0D:A7:26","sha256":"9E:35:D3:AC:31:17:9B:4D:33:29:6C:FD:AA:22:4F:CD:B5:4E:69:36:49:D7:30:36:9E:13:20:86:77:04:F3:0B"}}},"request":{"raw":"GET /wp-content/uploads/2024/07/consulting-service.jpg HTTP/1.1\r\nHost: bizdavar.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://bizdavar.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 24 Dec 2025 02:51:40 GMT\r\nserver: cloudflare\r\nlast-modified: Mon, 29 Jul 2024 09:29:39 GMT\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\ncontent-length: 52337\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: image/jpeg\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=NAjtLjdrRm%2F16Eg2G72JpNW01TESzv5PLzCbGsr73loK0m3TiO2XHPkXNBgz99GvLeoWiSqfvnhEviJmUmduG2%2BCg9oHTVmPG3HByA%3D%3D\"}]}\r\nvary: accept-encoding\r\ncf-ray: 9b2ccc59cb3c2efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":52337,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 800x600, components 3","md5":"53a14281e63ca6c1208fc3aba9814c89","sha1":"6ee0dd298d119e38867c625520b538db275d90c1","sha256":"0f397d3007b0ef2e0273ed4976ade1532287bae721f5dab3c9933883a830fb5b","sha512":"096c2aee7dc76124f5dd3b539b6102c151915a74cfb44e6356dacdbbaf65827ab476b949525936a14d1bb090b94d2368b6f12bc31f7e0ac0f026ee5d4cbac912","ssdeep":"768:ZcTK5XLzFIlGAG+bqXyFDxkgpqnKzWa+zBHVxxB3iQb8VcsmI0OsR5y+PqeJZPPC:Z0AmlD1Gnk/4B/HsmTR53ZDmqcd","tlshash":"ab33f1475d2b41bf8b4042fa1ee416b92dd912fa6fb390d5376c7c60d90eef462021a5","first_seen":"2025-12-24T02:52:14.462988Z","last_seen":"2025-12-24T02:52:14.462988Z","times_seen":1,"resource_available":false,"data":null}},"time_used":251,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":154,"receive":97,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-12-24","alert":"Sinkholed","trigger":"bizdavar.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-24","alert":"Sinkholed","trigger":"bizdavar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bizdavar.com/wp-content/uploads/2025/04/logo.webp","fqdn":"bizdavar.com","domain":"bizdavar.com","tld":"com"},"ip":{"addr":"104.21.20.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bizdavar.com/","date":"2025-12-24T02:51:40.531Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bizdavar.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 30 Oct 2025 20:00:29 GMT","end":"Wed, 28 Jan 2026 20:57:57 GMT"},"fingerprint":{"sha1":"5D:CD:8B:95:13:4B:07:86:69:DB:63:BB:CB:C1:77:82:AC:0D:A7:26","sha256":"9E:35:D3:AC:31:17:9B:4D:33:29:6C:FD:AA:22:4F:CD:B5:4E:69:36:49:D7:30:36:9E:13:20:86:77:04:F3:0B"}}},"request":{"raw":"GET /wp-content/uploads/2025/04/logo.webp HTTP/1.1\r\nHost: bizdavar.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://bizdavar.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 24 Dec 2025 02:51:40 GMT\r\nserver: cloudflare\r\nlast-modified: Wed, 02 Apr 2025 11:54:34 GMT\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\ncontent-length: 3702\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: image/webp\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=h5zbuDat5uW5C3dT2I5kC66wCweGX%2F40WaYT%2Fa6LvIXKSFRKtaPSJsrh6KuFecDAqn6QA1jmqP4PWcmnsZIuNate%2B6%2FWynBkBmM5xw%3D%3D\"}]}\r\nvary: accept-encoding\r\ncf-ray: 9b2ccc59fb582efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3702,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"d549bf884b6b3ec7e16dd6769ad0e7ce","sha1":"0c606c7e780933768157c448bc1ff8f462fd22f1","sha256":"379b4d12559d2fa2b921d822494252bdd2722327b1d73ac89dceba478d461c28","sha512":"c2035117123612828c1af48e6aa3fcf77cd4dc311bf060ac55c83c82ec50633a584c5e41b90d10b16a45bf425e25d9c2a1e4141063c36f62be8788dc2d1d120d","ssdeep":"","tlshash":"c5715cb195c7119034fb5be048a70394ab8e6125afe55cf850030cdb94e3295ff3d6a6","first_seen":"2025-12-24T02:52:14.464055Z","last_seen":"2025-12-24T02:52:14.464055Z","times_seen":1,"resource_available":false,"data":null}},"time_used":133,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":133,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-12-24","alert":"Sinkholed","trigger":"bizdavar.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-24","alert":"Sinkholed","trigger":"bizdavar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bizdavar.com/wp-content/uploads/2025/05/smithtradeland-logo.webp","fqdn":"bizdavar.com","domain":"bizdavar.com","tld":"com"},"ip":{"addr":"104.21.20.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bizdavar.com/","date":"2025-12-24T02:51:40.544Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bizdavar.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 30 Oct 2025 20:00:29 GMT","end":"Wed, 28 Jan 2026 20:57:57 GMT"},"fingerprint":{"sha1":"5D:CD:8B:95:13:4B:07:86:69:DB:63:BB:CB:C1:77:82:AC:0D:A7:26","sha256":"9E:35:D3:AC:31:17:9B:4D:33:29:6C:FD:AA:22:4F:CD:B5:4E:69:36:49:D7:30:36:9E:13:20:86:77:04:F3:0B"}}},"request":{"raw":"GET /wp-content/uploads/2025/05/smithtradeland-logo.webp HTTP/1.1\r\nHost: bizdavar.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://bizdavar.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 24 Dec 2025 02:51:40 GMT\r\nserver: cloudflare\r\nlast-modified: Sun, 18 May 2025 18:15:54 GMT\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\ncontent-length: 15948\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: image/webp\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=lrlARs3WWMsmrAI5tYbj1ULvYFmwz79pZ41NnPDUCYvDwVTBe%2Fm3vLgouMQ5Mw%2BesDBZYE4NNbFJl7lsVYLsZLjIVFSu%2FcS89Fo%2BGQ%3D%3D\"}]}\r\nvary: accept-encoding\r\ncf-ray: 9b2ccc59fb622efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":15948,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"8a7a5b8c78a4853b9643bdbeedb03948","sha1":"ca6dd321d1a868fe19e7ec2cc407600c5ccd9cba","sha256":"92bb909b49b242ddfcb9c111207e1fb3e14d0787fbefaabb0d67bdceb7142d6c","sha512":"b53eb8b7c1967763db0047006f0418656e0af8ffe91fe8bda1db794147ffa59e18a364bf9868c719b7cc014d9cafd2c214fc113917ca4216eea2fca2fe72b2f9","ssdeep":"192:WYYNMtKwBYNMtKwBYNMtKwyu8rjGNSqKlXQ/3ZdIPhySqO8k9LojIeOaau5wK:FYNg7BYNg7BYNg7188lxdIPhh7CIer9","tlshash":"5762bfb9af63d6a7fe7ae878a9e16be481d3a634f332549439305b108153104dacd0df","first_seen":"2025-12-24T02:52:14.465392Z","last_seen":"2025-12-24T02:52:14.465392Z","times_seen":1,"resource_available":false,"data":null}},"time_used":162,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":123,"receive":39,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-12-24","alert":"Sinkholed","trigger":"bizdavar.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-24","alert":"Sinkholed","trigger":"bizdavar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bizdavar.com/wp-content/plugins/elementor-pro/assets/js/webpack-pro.runtime.min.js?ver=3.32.2","fqdn":"bizdavar.com","domain":"bizdavar.com","tld":"com"},"ip":{"addr":"104.21.20.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bizdavar.com/","date":"2025-12-24T02:51:40.604Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bizdavar.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 30 Oct 2025 20:00:29 GMT","end":"Wed, 28 Jan 2026 20:57:57 GMT"},"fingerprint":{"sha1":"5D:CD:8B:95:13:4B:07:86:69:DB:63:BB:CB:C1:77:82:AC:0D:A7:26","sha256":"9E:35:D3:AC:31:17:9B:4D:33:29:6C:FD:AA:22:4F:CD:B5:4E:69:36:49:D7:30:36:9E:13:20:86:77:04:F3:0B"}}},"request":{"raw":"GET /wp-content/plugins/elementor-pro/assets/js/webpack-pro.runtime.min.js?ver=3.32.2 HTTP/1.1\r\nHost: bizdavar.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://bizdavar.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 24 Dec 2025 02:51:40 GMT\r\nserver: cloudflare\r\nlast-modified: Thu, 06 Nov 2025 16:20:38 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: accept-encoding\r\ncontent-encoding: br\r\ncontent-type: text/javascript\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=WZafN%2FzTnQ2nS4wPnswq6pYcwnAr2cKsejrTt2uXDV62neNHwJ7GYRP0yY02KT8%2FisSmYzM5%2FCgONoqEUpoXe3gIctPSvYSH%2Bd3kbw%3D%3D\"}]}\r\ncf-ray: 9b2ccc5a8b7c2efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6248,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (6204)","md5":"bdd515e79fd529e7583fa682eef99f0f","sha1":"4ec3ae5e2aff05a1e5ae1ac61e9aea8e616cb055","sha256":"24291b575df47ad5d581d096fa92f29184f797ca069e5f931fd272b4d98d125c","sha512":"d64896ba8912e0474d7cd112c56dde64a62af01b43a166f0be4e7bd399f871bd25b60cca181850894a5de5d33747550efaaa18868bf4aa9c5c0bb545f5375684","ssdeep":"96:BqRdxwrudvR4x4boFkEO/HfOYAWY4N53hsstJQPCl2e/VtFVKdpYQGK0Vz38k2:ETXdve4boFemUN537MPa/pMdOQ8Mk2","tlshash":"ead1549809489d2b26e43ad8b19b6b741a3dd0323c5ad991e611eddc18fcfd183ea532","first_seen":"2025-09-29T16:46:42.899216Z","last_seen":"2026-08-11T20:57:59.625283Z","times_seen":7513,"resource_available":true,"data":null}},"time_used":112,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":112,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-24","alert":"Sinkholed","trigger":"bizdavar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-12-24","alert":"Sinkholed","trigger":"bizdavar.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css?family=Roboto+Slab:100,100italic,200,200italic,300,300italic,400,400italic,500,500italic,600,600italic,700,700italic,800,800italic,900,900italic\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.251.38.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://bizdavar.com/","date":"2025-12-24T02:51:40.498Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 15:53:13 GMT","end":"Wed, 25 Feb 2026 15:53:12 GMT"},"fingerprint":{"sha1":"A8:BA:6B:80:7C:EC:B1:6F:C1:C2:03:D7:C9:27:6E:75:DE:4B:AA:47","sha256":"4E:2C:B9:C5:81:56:5E:97:93:07:22:12:66:E2:52:C6:0A:2E:17:72:FF:9B:5F:2A:B9:E1:21:80:05:6D:8B:3D"}}},"request":{"raw":"GET /css?family=Roboto+Slab:100,100italic,200,200italic,300,300italic,400,400italic,500,500italic,600,600italic,700,700italic,800,800italic,900,900italic\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://bizdavar.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Wed, 24 Dec 2025 02:51:40 GMT\r\ndate: Wed, 24 Dec 2025 02:51:40 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":22365,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"63c1df95a2b11b7542db5b48c56125f1","sha1":"b4116959b5ecbc00779addd320d98d8863692210","sha256":"7ead28f8032c788137532c3a88e9a7bda1411143e54ed4c066271c29f90340b7","sha512":"a5e42a035be607f6a98d7f73a26c37ad2e03a81dd0b54f2cc7bc5dc94a41b3b80af855ce9604e2b2283a7936df9008f068a8285c4cd8e4e960ab411c9c687d4f","ssdeep":"384:bvWLvKvXvUwvzv+vLWaZOUPSVsWJqtUghWVWInkUBALWWXYjUyvsHWm1iUz+54WD:bv0vKvXv3vzv+vLrZOuSVsMqtNhWV1nR","tlshash":"66a2bdd6486ba405ab870cc163dfbfa2ad9e5151a081c4becbfd2cb86cd6d32136075d","first_seen":"2025-09-17T18:46:03.2743Z","last_seen":"2026-08-12T07:55:25.276199Z","times_seen":21484,"resource_available":false,"data":null}},"time_used":472,"timings":{"blocked":196,"dns":0,"connect":20,"send":0,"wait":21,"receive":0,"ssl":232},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bizdavar.com/wp-content/uploads/2024/07/it-service.jpg","fqdn":"bizdavar.com","domain":"bizdavar.com","tld":"com"},"ip":{"addr":"104.21.20.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bizdavar.com/","date":"2025-12-24T02:51:40.507Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bizdavar.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 30 Oct 2025 20:00:29 GMT","end":"Wed, 28 Jan 2026 20:57:57 GMT"},"fingerprint":{"sha1":"5D:CD:8B:95:13:4B:07:86:69:DB:63:BB:CB:C1:77:82:AC:0D:A7:26","sha256":"9E:35:D3:AC:31:17:9B:4D:33:29:6C:FD:AA:22:4F:CD:B5:4E:69:36:49:D7:30:36:9E:13:20:86:77:04:F3:0B"}}},"request":{"raw":"GET /wp-content/uploads/2024/07/it-service.jpg HTTP/1.1\r\nHost: bizdavar.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://bizdavar.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 24 Dec 2025 02:51:40 GMT\r\nserver: cloudflare\r\nlast-modified: Mon, 29 Jul 2024 09:29:40 GMT\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\ncontent-length: 60140\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: image/jpeg\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=nMZPUhnX2g3a0%2FBN8K487A3G%2BuytD6gF%2FTw8hG5Bekk4muTUSCU1Njw8LWlNIopDfD1EH8J73AiDpwyVEgiKGzZHJ3yyTDYkxnt0bg%3D%3D\"}]}\r\nvary: accept-encoding\r\ncf-ray: 9b2ccc59cb3d2efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":60140,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 800x600, components 3","md5":"6b16c2838b11686f5d20f1cdcd81ac20","sha1":"f920332ff4f6b694d8eaa4e44a0a51792d2a4e9d","sha256":"33a93066dbaf08308c7323e7f6a07b06ede9242549c3b281f8c04410434a58bc","sha512":"263fceb8f6e0ec757c5073ed82d0a5c4048ea6da0a0fef0928575dba239a84835d7bf984f9e34d0bbcac608f51c4c5744a8dc3ed35102ea9fca643ecce9d5aaf","ssdeep":"1536:ZeU0hrHzqrNCWWeGr0Gn1GiU4QYoIlz793YFmK4GCo0E9F0Mg5z2:EU0hrqDWeVGn1E4LflXeF2ovF0XC","tlshash":"3343028ba8876a44d36cf95497246f0d24f283a760cf7336b8e817d1354972ad0f9adc","first_seen":"2025-12-24T02:52:14.468542Z","last_seen":"2025-12-24T02:52:14.468542Z","times_seen":1,"resource_available":false,"data":null}},"time_used":239,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":146,"receive":93,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-12-24","alert":"Sinkholed","trigger":"bizdavar.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-24","alert":"Sinkholed","trigger":"bizdavar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bizdavar.com/wp-content/uploads/2024/07/web-designer.jpg","fqdn":"bizdavar.com","domain":"bizdavar.com","tld":"com"},"ip":{"addr":"104.21.20.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bizdavar.com/","date":"2025-12-24T02:51:40.513Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bizdavar.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 30 Oct 2025 20:00:29 GMT","end":"Wed, 28 Jan 2026 20:57:57 GMT"},"fingerprint":{"sha1":"5D:CD:8B:95:13:4B:07:86:69:DB:63:BB:CB:C1:77:82:AC:0D:A7:26","sha256":"9E:35:D3:AC:31:17:9B:4D:33:29:6C:FD:AA:22:4F:CD:B5:4E:69:36:49:D7:30:36:9E:13:20:86:77:04:F3:0B"}}},"request":{"raw":"GET /wp-content/uploads/2024/07/web-designer.jpg HTTP/1.1\r\nHost: bizdavar.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://bizdavar.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 24 Dec 2025 02:51:40 GMT\r\nserver: cloudflare\r\nlast-modified: Wed, 31 Jul 2024 13:03:41 GMT\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\ncontent-length: 50215\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: image/jpeg\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=gNccdf4UbFg%2BS9RPewzhVdwGlKF%2F%2FPiiH29Rrm3HF2DOhMzjpfi2R5JMQbSUeic33cjuKHHy1tSuqkplrRq%2FJcxXjQxmzy4UaSqy%2Fw%3D%3D\"}]}\r\nvary: accept-encoding\r\ncf-ray: 9b2ccc59db432efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":50215,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 800x600, components 3","md5":"3858aab1f4627d1f53f4e53516dd21de","sha1":"171c244b1bdc98cb592a6833e3283bdd8842a420","sha256":"c2fdd8cfa0cdf2efc3c2e1a81dacf3b283831e29f99594d43cfb53b1c600079d","sha512":"28b6bc523322479013c618d19aeaaeae12e6926b6f1b0f32138704b86f42b5bbc1626893879c3148e83421e77afb7df17a5d81b372d0149ee0410356fe394981","ssdeep":"1536:ZxNT31opIz1gDvg60Gid6KPyX0j4umZZ2:bXZovT0GidsY47Z2","tlshash":"d933f263096a5b581a2193d9bb07b96d8433968d6464f3e83b60fdef9220c734f4f346","first_seen":"2025-12-24T02:52:14.469539Z","last_seen":"2025-12-24T02:52:14.469539Z","times_seen":1,"resource_available":false,"data":null}},"time_used":232,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":144,"receive":88,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-12-24","alert":"Sinkholed","trigger":"bizdavar.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-24","alert":"Sinkholed","trigger":"bizdavar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bizdavar.com/wp-content/uploads/2025/04/loader.png","fqdn":"bizdavar.com","domain":"bizdavar.com","tld":"com"},"ip":{"addr":"104.21.20.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bizdavar.com/","date":"2025-12-24T02:51:40.532Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bizdavar.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 30 Oct 2025 20:00:29 GMT","end":"Wed, 28 Jan 2026 20:57:57 GMT"},"fingerprint":{"sha1":"5D:CD:8B:95:13:4B:07:86:69:DB:63:BB:CB:C1:77:82:AC:0D:A7:26","sha256":"9E:35:D3:AC:31:17:9B:4D:33:29:6C:FD:AA:22:4F:CD:B5:4E:69:36:49:D7:30:36:9E:13:20:86:77:04:F3:0B"}}},"request":{"raw":"GET /wp-content/uploads/2025/04/loader.png HTTP/1.1\r\nHost: bizdavar.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://bizdavar.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 24 Dec 2025 02:51:40 GMT\r\nserver: cloudflare\r\nlast-modified: Wed, 02 Apr 2025 11:54:30 GMT\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\ncontent-length: 30772\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: image/png\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=gWz%2FMkIO%2B2JjSk8qOTXfsWQDWd39LFiobauMr57UN3Mzkpwa3Z9RW59zhA5P7aW%2B9zmPl24EES8p3XJBJNoXPEH4Q9SO95Qpy0vKYQ%3D%3D\"}]}\r\nvary: accept-encoding\r\ncf-ray: 9b2ccc59fb592efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":30772,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 300 x 53, 8-bit/color RGBA, non-interlaced","md5":"cd5dc1a5ddae366ac12f79cf28001745","sha1":"4df4303abea0c952e1ca14e6b0e4e033c55913e4","sha256":"5452b47078d688f9bf86ae9d6d846f127ed7fb2609e9086882b7adbd23dec646","sha512":"cd3e8f4ef2ff6dc2dae8ac97b95318140bf950506709b9eda7d9df1b83c8c14cff2f0f4700d1b2461d7e597cf32e6040bb14b655724f980c1637018a0cf4f226","ssdeep":"768:E35xEildUPb5nqKIiRJhCZDvMjHWrbRC0AyGvpD+FN9NCibhfiO:7i8TtjIiJhQMj2rlC0bGCNfN1","tlshash":"02d2e154f0f5b7d25aaa4943525f330e5f52839bcf94bb2083990cae49cb0d67724e2d","first_seen":"2025-12-24T02:52:14.470551Z","last_seen":"2025-12-24T02:52:14.470551Z","times_seen":1,"resource_available":false,"data":null}},"time_used":218,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":163,"receive":55,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-12-24","alert":"Sinkholed","trigger":"bizdavar.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-24","alert":"Sinkholed","trigger":"bizdavar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bizdavar.com/wp-content/uploads/2025/05/cc6017c184a59343c7a9482bce918844.png","fqdn":"bizdavar.com","domain":"bizdavar.com","tld":"com"},"ip":{"addr":"104.21.20.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bizdavar.com/","date":"2025-12-24T02:51:40.539Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bizdavar.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 30 Oct 2025 20:00:29 GMT","end":"Wed, 28 Jan 2026 20:57:57 GMT"},"fingerprint":{"sha1":"5D:CD:8B:95:13:4B:07:86:69:DB:63:BB:CB:C1:77:82:AC:0D:A7:26","sha256":"9E:35:D3:AC:31:17:9B:4D:33:29:6C:FD:AA:22:4F:CD:B5:4E:69:36:49:D7:30:36:9E:13:20:86:77:04:F3:0B"}}},"request":{"raw":"GET /wp-content/uploads/2025/05/cc6017c184a59343c7a9482bce918844.png HTTP/1.1\r\nHost: bizdavar.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://bizdavar.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 24 Dec 2025 02:51:40 GMT\r\nserver: cloudflare\r\nlast-modified: Sun, 18 May 2025 18:11:24 GMT\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\ncontent-length: 5503\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: image/png\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=pmbIUJaO%2Bdyg2I5awfeXIDEJE8dBGR4EPPB4Wd1LX8VFqwA%2BcIR%2FEh8h12hCYaLim6BNJMzI25wuicIwcI3cjUcRfdkEYgH2USDtiQ%3D%3D\"}]}\r\nvary: accept-encoding\r\ncf-ray: 9b2ccc59fb5d2efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5503,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 142 x 72, 8-bit/color RGBA, non-interlaced","md5":"c5c901194daa496e6c1913fc402fb62c","sha1":"2d95e936179e1c1b3419c65f3c2a381984d6a265","sha256":"b3bad7eb4325124bf76de03144f1f3a0618a65301493ec3398406711075c79b7","sha512":"cc45c6fcae8092e8c38d2ac27bd2769cd6f22739c17428146791b9512e9d9223f3114bfc2353ab7f7001bae435eac7564501724673adb82913bfbc7974d77de6","ssdeep":"96:IlY8IZmXk1gQQy6ohVnrtX0VIiSmz52TtE5VrsVJ/H8/2M0zRC:I288EUDV5kiiJ3sVJ6yC","tlshash":"97b17ec3e4e286b8aa03b500f646cbeed241eed9d861455534828425835ebd2d1b7a3f","first_seen":"2023-11-17T06:09:33Z","last_seen":"2026-06-01T10:01:47.707223Z","times_seen":4,"resource_available":false,"data":null}},"time_used":152,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":151,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-24","alert":"Sinkholed","trigger":"bizdavar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-12-24","alert":"Sinkholed","trigger":"bizdavar.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css?family=Montserrat:100,100italic,200,200italic,300,300italic,400,400italic,500,500italic,600,600italic,700,700italic,800,800italic,900,900italic\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.251.38.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://bizdavar.com/","date":"2025-12-24T02:51:40.498Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 15:53:13 GMT","end":"Wed, 25 Feb 2026 15:53:12 GMT"},"fingerprint":{"sha1":"A8:BA:6B:80:7C:EC:B1:6F:C1:C2:03:D7:C9:27:6E:75:DE:4B:AA:47","sha256":"4E:2C:B9:C5:81:56:5E:97:93:07:22:12:66:E2:52:C6:0A:2E:17:72:FF:9B:5F:2A:B9:E1:21:80:05:6D:8B:3D"}}},"request":{"raw":"GET /css?family=Montserrat:100,100italic,200,200italic,300,300italic,400,400italic,500,500italic,600,600italic,700,700italic,800,800italic,900,900italic\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://bizdavar.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Wed, 24 Dec 2025 02:51:40 GMT\r\ndate: Wed, 24 Dec 2025 02:51:40 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":34812,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"76e3e3043c43750b4048643e10e5a17b","sha1":"2dae7be8964bb1302e040a78d80621749d6053d8","sha256":"8657d26f0c60d5b2f909f2745b6a2d8df7efad9b3de73c0d33171c6214df8c05","sha512":"16dd77ebf3efd8897bd62ff43852e13251ea57f1661acd3a9650858986215f7a817ee902f5403b937a602154ee8203b85dd682c06629932fd18de0c44c2148ee","ssdeep":"384:A3Cw37F3Y3I3wHwcFFB5YwNFu+GNw+Fr/PWw/FkEUrwAFRd9cwxFqqKRwyF3rz6l:0Zds8FdCWQp","tlshash":"46f2af911057e500ea472cc523cf7e26de4e666674a4c5797ffd2ca8adeac221324b2c","first_seen":"2025-09-05T02:49:53.621529Z","last_seen":"2026-08-12T08:00:54.535708Z","times_seen":13936,"resource_available":false,"data":null}},"time_used":343,"timings":{"blocked":132,"dns":0,"connect":21,"send":0,"wait":21,"receive":0,"ssl":166},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bizdavar.com/wp-content/uploads/2025/04/cropped-sanat-moharek-Logo1.png","fqdn":"bizdavar.com","domain":"bizdavar.com","tld":"com"},"ip":{"addr":"104.21.20.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bizdavar.com/","date":"2025-12-24T02:51:40.533Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bizdavar.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 30 Oct 2025 20:00:29 GMT","end":"Wed, 28 Jan 2026 20:57:57 GMT"},"fingerprint":{"sha1":"5D:CD:8B:95:13:4B:07:86:69:DB:63:BB:CB:C1:77:82:AC:0D:A7:26","sha256":"9E:35:D3:AC:31:17:9B:4D:33:29:6C:FD:AA:22:4F:CD:B5:4E:69:36:49:D7:30:36:9E:13:20:86:77:04:F3:0B"}}},"request":{"raw":"GET /wp-content/uploads/2025/04/cropped-sanat-moharek-Logo1.png HTTP/1.1\r\nHost: bizdavar.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://bizdavar.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 24 Dec 2025 02:51:40 GMT\r\nserver: cloudflare\r\nlast-modified: Wed, 02 Apr 2025 11:54:26 GMT\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\ncontent-length: 2863\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: image/png\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=nCGSa%2FCVhdgyiCnbZpD63ZCWPg5cST4IAVCLPWEpLFlVGZIhMrqYzk2eYSjtgW7HPujAdjLnGDYTCsAE472NkadfwEh7RIEfaMRrWQ%3D%3D\"}]}\r\nvary: accept-encoding\r\ncf-ray: 9b2ccc59fb5a2efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2863,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 75 x 97, 8-bit colormap, non-interlaced","md5":"9adb1235ec6cd8c85582f695bd03942e","sha1":"90c518166e0786fb8329bfc87383bf8f0ceeaedd","sha256":"b5f99c165b3de9a368cb022198dea5e6f262941645721707c86d8e0f5ba6325c","sha512":"e992246ae561352456244ebdec0be441ab4f61f8e1e18203072c3aa50c53ef00b6ad0520c3667c8db31c0bcc09072d52773f08f667fe2e8ff7870fa0ef1d0564","ssdeep":"","tlshash":"9b517d010d2132b0d57f263bdc9114f0233fc0a5375a950e7042a86abd3761707e03fa","first_seen":"2025-12-24T02:52:14.473381Z","last_seen":"2025-12-24T02:52:14.473381Z","times_seen":1,"resource_available":false,"data":null}},"time_used":141,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":141,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-24","alert":"Sinkholed","trigger":"bizdavar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-12-24","alert":"Sinkholed","trigger":"bizdavar.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bizdavar.com/wp-content/uploads/2025/04/full-horizontal.svg","fqdn":"bizdavar.com","domain":"bizdavar.com","tld":"com"},"ip":{"addr":"104.21.20.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bizdavar.com/","date":"2025-12-24T02:51:40.537Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bizdavar.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 30 Oct 2025 20:00:29 GMT","end":"Wed, 28 Jan 2026 20:57:57 GMT"},"fingerprint":{"sha1":"5D:CD:8B:95:13:4B:07:86:69:DB:63:BB:CB:C1:77:82:AC:0D:A7:26","sha256":"9E:35:D3:AC:31:17:9B:4D:33:29:6C:FD:AA:22:4F:CD:B5:4E:69:36:49:D7:30:36:9E:13:20:86:77:04:F3:0B"}}},"request":{"raw":"GET /wp-content/uploads/2025/04/full-horizontal.svg HTTP/1.1\r\nHost: bizdavar.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://bizdavar.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 24 Dec 2025 02:51:40 GMT\r\nserver: cloudflare\r\nlast-modified: Wed, 02 Apr 2025 11:47:12 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\ncontent-encoding: br\r\ncontent-type: image/svg+xml\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=flR9JLXjEl6S8JZ2xbGhWC%2BMD%2BtlX%2BPy%2Bd13DNUIHxRypqIndOtq6mZC3Nw7FiP5b8Y%2BPDpP5hcqvLsNDq6OoZLw8xrP8zHuTdvORg%3D%3D\"}]}\r\ncf-ray: 9b2ccc59fb5e2efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4204,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"79132bb299bc359978c00c2b450f2eb6","sha1":"7cfe21f69d65b3d78d94b81016b602d7ee8cd8df","sha256":"3f567883776696d6f7db8e99f24f6fb6271d868393b3095eb4cb3b0f3e493c8b","sha512":"b52c2c1346845c66034c909182a00bbf236553325f414abc6fe599edd1a7a66b8d7397060b5e3e3239dd6dccadd916f815ab9e8a444454005894aeb2777e20d4","ssdeep":"96:6MuFAxEckYVzNn3nTEjaHNoY7zwRHHLfAGVFh15F4jM2B:6wd7wjaH2Y7aVP1A","tlshash":"268133c81768b7f0b96af7ddafb0e06918463cf9397399a781488d2679150dc8d04ccb","first_seen":"2025-12-24T02:52:14.474347Z","last_seen":"2025-12-24T02:52:14.474347Z","times_seen":1,"resource_available":false,"data":null}},"time_used":164,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":164,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-24","alert":"Sinkholed","trigger":"bizdavar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-12-24","alert":"Sinkholed","trigger":"bizdavar.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bizdavar.com/wp-content/uploads/2024/08/All-Landingpage-Teaser-VEGABAR.png","fqdn":"bizdavar.com","domain":"bizdavar.com","tld":"com"},"ip":{"addr":"104.21.20.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bizdavar.com/","date":"2025-12-24T02:51:40.551Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bizdavar.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 30 Oct 2025 20:00:29 GMT","end":"Wed, 28 Jan 2026 20:57:57 GMT"},"fingerprint":{"sha1":"5D:CD:8B:95:13:4B:07:86:69:DB:63:BB:CB:C1:77:82:AC:0D:A7:26","sha256":"9E:35:D3:AC:31:17:9B:4D:33:29:6C:FD:AA:22:4F:CD:B5:4E:69:36:49:D7:30:36:9E:13:20:86:77:04:F3:0B"}}},"request":{"raw":"GET /wp-content/uploads/2024/08/All-Landingpage-Teaser-VEGABAR.png HTTP/1.1\r\nHost: bizdavar.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://bizdavar.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 24 Dec 2025 02:51:40 GMT\r\nserver: cloudflare\r\nlast-modified: Mon, 05 Aug 2024 14:05:31 GMT\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\ncontent-length: 145763\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: image/png\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=YLrfF2tP5SzO08mDoj2sDHhKloaFmmJD3yu2tPTUR1CP5UXAYnd8Px9ZkYu4PaqKPPjX%2Bm9ewj7nET8HBPMHoIqTjaH7lW%2Bwekpj2A%3D%3D\"}]}\r\nvary: accept-encoding\r\ncf-ray: 9b2ccc5a0b672efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":145763,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 400 x 225, 8-bit/color RGB, non-interlaced","md5":"48709bc412e5fb50a27d962ab9661263","sha1":"8cdf84e7e650618c822d5871308174e2cd3cb2a6","sha256":"f338f12d950a8ad4bfcbd89201836f910a60d260575389902aec2dd1b75f7ce1","sha512":"bad7171c825102e6291027df71f3c8eb5f0e6a4875aefef9d112d2db576199a222d8ee5eb370e38789db17342fea1f502dccf291d39b30127a771e610c84356a","ssdeep":"3072:Xz235Cfnwp4pcvd0dGGLQuRV4YwZHa1nQFtywuCFA:j/fnK4nGGQCwIwtyYA","tlshash":"eae3124e8a225753ec0f09bd057db42fb6014acc607e03cdfa24d17a649d36ae3a2b4d","first_seen":"2025-12-24T02:52:14.475441Z","last_seen":"2026-05-07T13:50:46.234469Z","times_seen":2,"resource_available":false,"data":null}},"time_used":253,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":130,"receive":123,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-12-24","alert":"Sinkholed","trigger":"bizdavar.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-24","alert":"Sinkholed","trigger":"bizdavar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bizdavar.com/wp-content/uploads/2024/07/path-to-your-video.mp4","fqdn":"bizdavar.com","domain":"bizdavar.com","tld":"com"},"ip":{"addr":"104.21.20.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://bizdavar.com/","date":"2025-12-24T02:51:41.351Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bizdavar.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 30 Oct 2025 20:00:29 GMT","end":"Wed, 28 Jan 2026 20:57:57 GMT"},"fingerprint":{"sha1":"5D:CD:8B:95:13:4B:07:86:69:DB:63:BB:CB:C1:77:82:AC:0D:A7:26","sha256":"9E:35:D3:AC:31:17:9B:4D:33:29:6C:FD:AA:22:4F:CD:B5:4E:69:36:49:D7:30:36:9E:13:20:86:77:04:F3:0B"}}},"request":{"raw":"GET /wp-content/uploads/2024/07/path-to-your-video.mp4 HTTP/1.1\r\nHost: bizdavar.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.5\r\nReferer: https://bizdavar.com/\r\nRange: bytes=11927552-\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: _ga_F2WGXTVK7F=GS2.1.s1766544701$o1$g0$t1766544701$j60$l0$h0; _ga=GA1.1.1382880001.1766544701\r\nSec-Fetch-Dest: video\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nAccept-Encoding: identity\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 206 Partial Content\r\ndate: Wed, 24 Dec 2025 02:51:41 GMT\r\nserver: cloudflare\r\nlast-modified: Mon, 29 Jul 2024 12:25:54 GMT\r\nage: 0\r\npriority: u=4,i=?0\r\ncontent-length: 9075\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: video/mp4\r\ncontent-range: bytes 11927552-11936626/11936627\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0w5qe4%2B6IyZ61LdXp4UZ%2BMTBkx9A1l3mQyoYP5e6XGY5rwrAjiYCFlG67dT4oQXxeCjlGOVJ2Q6QHGYPJbNj22akq0W8kPLtIHOTvA%3D%3D\"}]}\r\nvary: accept-encoding\r\ncf-ray: 9b2ccc5f6bc92efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9075,"size_decoded":0,"mime_type":"video/mp4","magic":"DOS executable (COM), start instruction 0xb8bf593c baf1b017","md5":"018a24142aeac5befb1a25a557d5b0a5","sha1":"f2282842a857e5610dd90fcf920eccab3ba2b3c1","sha256":"2ee34825ef422d6db369c6305042866a1656a01e7b3df8e429b16b6f83594b37","sha512":"aef5bcb0f6ef5c561cdb7c785474b08754314d7bd4576c4a8389b293794a0a780b72fa24cfa2900f6d5031fee000a80c6ee9378825e65cbfa8d00a93b94a0fbd","ssdeep":"192:+X4KtV6PBs5Z0QntibvcgAl2mocC2HK8ZBC8x+Hta84jR4kYZ2HD:+IKj6PK/0Qtu0go97CWKIBCT54jOVQHD","tlshash":"dd127e5bd31f26c3c4154bfd13a6a18b131cd0c24315a9e1c685974ea4bfcb3ca9a74c","first_seen":"2025-12-24T02:52:14.477169Z","last_seen":"2025-12-24T02:52:14.477169Z","times_seen":1,"resource_available":false,"data":null}},"time_used":780,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":4,"receive":776,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-12-24","alert":"Sinkholed","trigger":"bizdavar.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-24","alert":"Sinkholed","trigger":"bizdavar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bizdavar.com/wp-content/plugins/complianz-gdpr/assets/css/cookieblocker.min.css?ver=1762498391","fqdn":"bizdavar.com","domain":"bizdavar.com","tld":"com"},"ip":{"addr":"104.21.20.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://bizdavar.com/","date":"2025-12-24T02:51:40.455Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bizdavar.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 30 Oct 2025 20:00:29 GMT","end":"Wed, 28 Jan 2026 20:57:57 GMT"},"fingerprint":{"sha1":"5D:CD:8B:95:13:4B:07:86:69:DB:63:BB:CB:C1:77:82:AC:0D:A7:26","sha256":"9E:35:D3:AC:31:17:9B:4D:33:29:6C:FD:AA:22:4F:CD:B5:4E:69:36:49:D7:30:36:9E:13:20:86:77:04:F3:0B"}}},"request":{"raw":"GET /wp-content/plugins/complianz-gdpr/assets/css/cookieblocker.min.css?ver=1762498391 HTTP/1.1\r\nHost: bizdavar.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://bizdavar.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 24 Dec 2025 02:51:40 GMT\r\nserver: cloudflare\r\nlast-modified: Fri, 07 Nov 2025 06:53:11 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nvary: accept-encoding\r\ncontent-encoding: br\r\ncontent-type: text/css\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=JDd%2F%2BK%2B2Ct5HSVrC%2FSiIiMssvalAGMh30lIAcQJMMde7SEhdJb%2FnWTFaPDcz2mncxHYxJMifQbiITg%2Fhm0qL237dQdCRMYAQD%2Ff2uA%3D%3D\"}]}\r\ncf-ray: 9b2ccc598b252efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2782,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (2782), with no line terminators","md5":"182c31e4b049004a343781556afe8606","sha1":"d37c351aeeadbb654d441621b611bed8d7104aa1","sha256":"afe6634c4de97ea6dd0824fa7ad34f551b6faede0ca95db78516165ab1610f47","sha512":"cbfdfc6c97bb4fc1be24576e61c6accedb203bb5b38054393256ae354851d6beb91bd3afac2d7e5bea7729b3aeb28579dedb848b344f7ee592228fabe7ffa7fc","ssdeep":"","tlshash":"305129756d931890b3feef052d80b9842a29f753c02e0dede162962cb1df586cde6345","first_seen":"2025-03-07T16:44:09.983719Z","last_seen":"2026-08-12T08:15:18.740448Z","times_seen":32477,"resource_available":false,"data":null}},"time_used":125,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":125,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-12-24","alert":"Sinkholed","trigger":"bizdavar.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-24","alert":"Sinkholed","trigger":"bizdavar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bizdavar.com/wp-content/plugins/elementor-pro/assets/css/widget-nav-menu-rtl.min.css?ver=3.32.2","fqdn":"bizdavar.com","domain":"bizdavar.com","tld":"com"},"ip":{"addr":"104.21.20.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://bizdavar.com/","date":"2025-12-24T02:51:40.487Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bizdavar.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 30 Oct 2025 20:00:29 GMT","end":"Wed, 28 Jan 2026 20:57:57 GMT"},"fingerprint":{"sha1":"5D:CD:8B:95:13:4B:07:86:69:DB:63:BB:CB:C1:77:82:AC:0D:A7:26","sha256":"9E:35:D3:AC:31:17:9B:4D:33:29:6C:FD:AA:22:4F:CD:B5:4E:69:36:49:D7:30:36:9E:13:20:86:77:04:F3:0B"}}},"request":{"raw":"GET /wp-content/plugins/elementor-pro/assets/css/widget-nav-menu-rtl.min.css?ver=3.32.2 HTTP/1.1\r\nHost: bizdavar.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://bizdavar.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 24 Dec 2025 02:51:40 GMT\r\nserver: cloudflare\r\nlast-modified: Thu, 06 Nov 2025 16:20:38 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nvary: accept-encoding\r\ncontent-encoding: br\r\ncontent-type: text/css\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=coZFQHTLowjjxmiimj5%2BsFl%2BrjHkeMs7E70M%2FwlFqseT3Kk%2FCLWnhQLUjUh%2BKuqlYhotaMQCu2BvMUfNf6Tc7Km0GSjBD2cZfpAehQ%3D%3D\"}]}\r\ncf-ray: 9b2ccc59bb312efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":27364,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (27319)","md5":"75d4380654d8b6d392c95f2dc71fbb0a","sha1":"2e5b0a590d7180cb362991704468d8ef4dc713db","sha256":"77c0294e33726aad8699696f78317909cbe3d1393a718d963cdd78b048923964","sha512":"d3fdb478f44669744bc92fe7d6d1e9f65427e0973b40ecd5d7d06af1329cc0e968501b18b68878e193d321f3c3cb6cc4664e0341b2147a8188898beb1faeb5f5","ssdeep":"768:urPoScoKjcUlwvGQzKVwGz42lvQz0ABI5PmBMqRIEEtCelEqJUrY+Xz:y","tlshash":"f6c27a81be93592f032f613b91e2c60c4f9519c8b2a176a9f0f5910f41d7d5c6bb7b22","first_seen":"2025-10-02T14:14:34.673476Z","last_seen":"2026-06-06T15:05:21.608114Z","times_seen":50,"resource_available":false,"data":null}},"time_used":166,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":128,"receive":38,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-12-24","alert":"Sinkholed","trigger":"bizdavar.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-24","alert":"Sinkholed","trigger":"bizdavar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bizdavar.com/wp-content/uploads/2025/04/%D9%85%D8%AF%DB%8C%D8%B1%DB%8C%D8%AA-%D8%B4%D8%A8%DA%A9%D9%87%E2%80%8C%D9%87%D8%A7%DB%8C-%D8%A7%D8%AC%D8%AA%D9%85%D8%A7%D8%B9%DB%8C.png","fqdn":"bizdavar.com","domain":"bizdavar.com","tld":"com"},"ip":{"addr":"104.21.20.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bizdavar.com/","date":"2025-12-24T02:51:40.512Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bizdavar.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 30 Oct 2025 20:00:29 GMT","end":"Wed, 28 Jan 2026 20:57:57 GMT"},"fingerprint":{"sha1":"5D:CD:8B:95:13:4B:07:86:69:DB:63:BB:CB:C1:77:82:AC:0D:A7:26","sha256":"9E:35:D3:AC:31:17:9B:4D:33:29:6C:FD:AA:22:4F:CD:B5:4E:69:36:49:D7:30:36:9E:13:20:86:77:04:F3:0B"}}},"request":{"raw":"GET /wp-content/uploads/2025/04/%D9%85%D8%AF%DB%8C%D8%B1%DB%8C%D8%AA-%D8%B4%D8%A8%DA%A9%D9%87%E2%80%8C%D9%87%D8%A7%DB%8C-%D8%A7%D8%AC%D8%AA%D9%85%D8%A7%D8%B9%DB%8C.png HTTP/1.1\r\nHost: bizdavar.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://bizdavar.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 24 Dec 2025 02:51:40 GMT\r\nserver: cloudflare\r\nlast-modified: Wed, 02 Apr 2025 14:01:49 GMT\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\ncontent-length: 1748292\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: image/png\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=J1O2n77ydcNMCt26RYcFokbTc1gMswgdaCyBgW5e4yroeCulsphsGWK7HP%2BlbX9gttdN31cAPfoaEusfMWnyStyFsy3rkJYbf%2FTAyA%3D%3D\"}]}\r\nvary: accept-encoding\r\ncf-ray: 9b2ccc59db422efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1748292,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1536 x 1024, 8-bit/color RGB, non-interlaced","md5":"a45a9d71180124eeaf10d7d436ec1878","sha1":"d6d35ab37c871065d6f75141b1523cf148de5ba5","sha256":"22e50b3cc5c7bf6fc7b622d1669294c447553a236316a13dbb514696df72b8e4","sha512":"0d58f195c0bf6e084b23e385df29b251441ce89772f36af148a012cd00c39c1babad9acb4c37d75ff608de7367dfb1638877ff0bb3885ee48d56ee4368700e6e","ssdeep":"12288:Nbi9PJs6fWxZ+fpkkRJYtotI+ZgV5MntMABtnQIbPieIk6I9Z9e137tER8GtxQA5:Ri9PqhqRWtsI+ZKqMUbRIdI9Z0sxaAkc","tlshash":"f8252373b6a72300c3aa1935847d58f63e6779f0a4221897a1736c873a62fb361075bd","first_seen":"2025-12-24T02:52:14.479399Z","last_seen":"2025-12-24T02:52:14.479399Z","times_seen":1,"resource_available":false,"data":null}},"time_used":660,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":154,"receive":506,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-24","alert":"Sinkholed","trigger":"bizdavar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-12-24","alert":"Sinkholed","trigger":"bizdavar.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bizdavar.com/wp-content/uploads/2024/07/8b0e3340-d056-40c3-961c-10912bbbb17a-1.webp","fqdn":"bizdavar.com","domain":"bizdavar.com","tld":"com"},"ip":{"addr":"104.21.20.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bizdavar.com/","date":"2025-12-24T02:51:40.520Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bizdavar.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 30 Oct 2025 20:00:29 GMT","end":"Wed, 28 Jan 2026 20:57:57 GMT"},"fingerprint":{"sha1":"5D:CD:8B:95:13:4B:07:86:69:DB:63:BB:CB:C1:77:82:AC:0D:A7:26","sha256":"9E:35:D3:AC:31:17:9B:4D:33:29:6C:FD:AA:22:4F:CD:B5:4E:69:36:49:D7:30:36:9E:13:20:86:77:04:F3:0B"}}},"request":{"raw":"GET /wp-content/uploads/2024/07/8b0e3340-d056-40c3-961c-10912bbbb17a-1.webp HTTP/1.1\r\nHost: bizdavar.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://bizdavar.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 24 Dec 2025 02:51:40 GMT\r\nserver: cloudflare\r\nlast-modified: Mon, 29 Jul 2024 13:29:39 GMT\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\ncontent-length: 21448\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: image/webp\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=CRl8m%2FNOedKm%2FWl03o2HAikFAyE6bv05ib7ZWFswI0lnKBRq79EgYUd8EQjQwZpn4fMorZUTAajvPh3MgSvAg%2BisAZCVVMrMKYfCDg%3D%3D\"}]}\r\nvary: accept-encoding\r\ncf-ray: 9b2ccc59eb502efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":21448,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 790x296, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"d34a1fb56095be457e33783ee4e4a575","sha1":"37cf59da3efe2b85b705ba1748f33899bb53b576","sha256":"18edb2d753abc11e6797d5f745e263adc57d4eaf219d7b53af6ab308e722492d","sha512":"9804a1df8c78299be52191923dfca5f95081d4a65feed6cc5e0d1605a40117a1e90ea21d7d3874f257dbba488faed213ee8a4fa88a36437c4bb0a1d5fc19a83b","ssdeep":"384:Dqiw7jJqvb+j4mYIx8Xj3s5MR9yjD1AibsIKMLBZ/BedtbdKjQnzAbXIZAAeAwl:DqvwvCjn9uXW5NpsI1T4djKknzAbrAwl","tlshash":"4fa2d009e2ba0124e2324e99c5343ead6336dcdabd8615e3f24e907c6c566df28fa111","first_seen":"2025-10-21T17:14:21.618533Z","last_seen":"2025-12-24T02:52:14.481295Z","times_seen":2,"resource_available":false,"data":null}},"time_used":180,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":138,"receive":42,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-24","alert":"Sinkholed","trigger":"bizdavar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-12-24","alert":"Sinkholed","trigger":"bizdavar.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bizdavar.com/cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js","fqdn":"bizdavar.com","domain":"bizdavar.com","tld":"com"},"ip":{"addr":"104.21.20.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bizdavar.com/","date":"2025-12-24T02:51:41.133Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bizdavar.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 30 Oct 2025 20:00:29 GMT","end":"Wed, 28 Jan 2026 20:57:57 GMT"},"fingerprint":{"sha1":"5D:CD:8B:95:13:4B:07:86:69:DB:63:BB:CB:C1:77:82:AC:0D:A7:26","sha256":"9E:35:D3:AC:31:17:9B:4D:33:29:6C:FD:AA:22:4F:CD:B5:4E:69:36:49:D7:30:36:9E:13:20:86:77:04:F3:0B"}}},"request":{"raw":"GET /cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js HTTP/1.1\r\nHost: bizdavar.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://bizdavar.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: application/javascript\r\nexpires: Wed, 24 Dec 2025 03:39:41 GMT\r\ncache-control: public\r\nvary: accept-encoding\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9rfLN4uB4WbZbNxaomvToVtHUxBS9YGMSV5%2F%2FziMkQ%2F7MlZwP8wwH76J4PgGwfie%2FC2RPbDVNN%2B5a59k%2Bz35gA7T9Bwnjgrl9%2FP%2BfA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\nserver: cloudflare\r\ndate: Wed, 24 Dec 2025 02:51:41 GMT\r\ncf-ray: 9b2ccc5e0ba42efa-OSL\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1239,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (1238)","md5":"9e8f56e8e1806253ba01a95cfc3d392c","sha1":"a8af90d7482e1e99d03de6bf88fed2315c5dd728","sha256":"2595496fe48df6fcf9b1bc57c29a744c121eb4dd11566466bc13d2e52e6bbcc8","sha512":"63f0f6f94fbabadc3f774ccaa6a401696e8a7651a074bc077d214f91da080b36714fd799eb40fed64154972008e34fc733d6ee314ac675727b37b58ffbebebee","ssdeep":"","tlshash":"6021d5743a18107e226a0133e56f66cee1f23715fd17e440408ad89566e4fe5063fed9","first_seen":"2023-03-07T01:02:00Z","last_seen":"2026-08-12T08:36:42.050233Z","times_seen":418484,"resource_available":true,"data":null}},"time_used":3,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":3,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-24","alert":"Sinkholed","trigger":"bizdavar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-12-24","alert":"Sinkholed","trigger":"bizdavar.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bizdavar.com/wp-content/themes/hello-elementor/assets/css/theme.css?ver=3.4.5","fqdn":"bizdavar.com","domain":"bizdavar.com","tld":"com"},"ip":{"addr":"104.21.20.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://bizdavar.com/","date":"2025-12-24T02:51:40.460Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bizdavar.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 30 Oct 2025 20:00:29 GMT","end":"Wed, 28 Jan 2026 20:57:57 GMT"},"fingerprint":{"sha1":"5D:CD:8B:95:13:4B:07:86:69:DB:63:BB:CB:C1:77:82:AC:0D:A7:26","sha256":"9E:35:D3:AC:31:17:9B:4D:33:29:6C:FD:AA:22:4F:CD:B5:4E:69:36:49:D7:30:36:9E:13:20:86:77:04:F3:0B"}}},"request":{"raw":"GET /wp-content/themes/hello-elementor/assets/css/theme.css?ver=3.4.5 HTTP/1.1\r\nHost: bizdavar.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://bizdavar.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 24 Dec 2025 02:51:40 GMT\r\nserver: cloudflare\r\nlast-modified: Mon, 27 Oct 2025 12:45:10 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nvary: accept-encoding\r\ncontent-encoding: br\r\ncontent-type: text/css\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=pD17CT3P8GiWbQ3IE1VbGsW7mDrz9IDOZZJ4VMjyjR2h8mhXuBAk%2BozygXUSEBD%2Fk2llMcO9F8V%2FpzGvQ2NS%2Bh3vUJVFssPukYLvyg%3D%3D\"}]}\r\ncf-ray: 9b2ccc599b282efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5097,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (5092)","md5":"a480d2bf8c523da1c15b272e519f33f2","sha1":"385993a72c83ebbf0e0db1ed05112d35bfdaf22b","sha256":"9a7cfe03ec7638180859c5cd93ed18a75c0b4519c01849e2b6b2e2c90a0dea2f","sha512":"ef9f08c2afde47cd53f433079b3bd85c66d5a4f1049f75e472e8f03c5b410854e5d4e98727f5cb56ef8a96d2f9f7a9adcb192203ed1c4677840beb92ae5da05e","ssdeep":"96:yE4yyDOT58u6gYRbFdYrZGu3bcgcMNn7MNluMNITMNd0MN77MNbKz:y4yDhgGbMrM6cgjMB","tlshash":"15b1643ef8d1307c293b9b02bac5ab8d646c872ad35309e8db998b59819e750781334d","first_seen":"2025-06-08T21:36:43.869263Z","last_seen":"2026-08-12T08:41:02.781711Z","times_seen":48607,"resource_available":false,"data":null}},"time_used":126,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":126,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-12-24","alert":"Sinkholed","trigger":"bizdavar.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-24","alert":"Sinkholed","trigger":"bizdavar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bizdavar.com/wp-content/uploads/2024/07/BIZ-RED-01-100x100.png","fqdn":"bizdavar.com","domain":"bizdavar.com","tld":"com"},"ip":{"addr":"104.21.20.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bizdavar.com/","date":"2025-12-24T02:51:42.291Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bizdavar.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 30 Oct 2025 20:00:29 GMT","end":"Wed, 28 Jan 2026 20:57:57 GMT"},"fingerprint":{"sha1":"5D:CD:8B:95:13:4B:07:86:69:DB:63:BB:CB:C1:77:82:AC:0D:A7:26","sha256":"9E:35:D3:AC:31:17:9B:4D:33:29:6C:FD:AA:22:4F:CD:B5:4E:69:36:49:D7:30:36:9E:13:20:86:77:04:F3:0B"}}},"request":{"raw":"GET /wp-content/uploads/2024/07/BIZ-RED-01-100x100.png HTTP/1.1\r\nHost: bizdavar.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://bizdavar.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: _ga_F2WGXTVK7F=GS2.1.s1766544701$o1$g0$t1766544701$j60$l0$h0; _ga=GA1.1.1382880001.1766544701\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 24 Dec 2025 02:51:42 GMT\r\nserver: cloudflare\r\nlast-modified: Fri, 21 Mar 2025 12:51:49 GMT\r\naccept-ranges: bytes\r\npriority: u=6,i=?0\r\ncontent-length: 2014\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: image/png\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=QM7UXrOJG0cRoPdu5OTzRCoxICQzl%2B%2BsrasqyTzlz2Hs9uTiB54DNM8R%2FIdmZJ3GbHaEbcgCKtje4ViWwj98nKFWoAq%2BAcQi%2FdlJjw%3D%3D\"}]}\r\nvary: accept-encoding\r\ncf-ray: 9b2ccc654c132efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2014,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 100 x 100, 8-bit/color RGBA, non-interlaced","md5":"0e3061ac5318343ad2fe0c58904bea81","sha1":"8c6c5b292950c4c171ab77d054da264129185b03","sha256":"696b1430efd66e94cf686c565a3b636c4c2f4f7cfbee89233f68c26d38dbe833","sha512":"dcc0d373b8997ec46a653b3b16e350c7fe75a9de5efb68dae017bdc01822471963284f4eb6c97b6e7a45221547954fa79f1bff1252d898338394be984096c495","ssdeep":"","tlshash":"1f41cad713360a20941154fc2ddf520fb4b2fb64c13dddb9e666616c05b35041ce57a1","first_seen":"2025-12-24T02:52:14.483457Z","last_seen":"2025-12-24T02:52:14.483457Z","times_seen":1,"resource_available":false,"data":null}},"time_used":152,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":152,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-12-24","alert":"Sinkholed","trigger":"bizdavar.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-24","alert":"Sinkholed","trigger":"bizdavar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bizdavar.com/wp-content/uploads/2025/04/%D8%A7%D9%81%D8%B2%D8%A7%DB%8C%D8%B4-%D9%81%D8%B1%D9%88%D8%B4-%D9%88-%D8%B3%D8%A6%D9%88-%D9%88%D8%A8%D8%B3%D8%A7%DB%8C%D8%AA.png","fqdn":"bizdavar.com","domain":"bizdavar.com","tld":"com"},"ip":{"addr":"104.21.20.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bizdavar.com/","date":"2025-12-24T02:51:40.509Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bizdavar.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 30 Oct 2025 20:00:29 GMT","end":"Wed, 28 Jan 2026 20:57:57 GMT"},"fingerprint":{"sha1":"5D:CD:8B:95:13:4B:07:86:69:DB:63:BB:CB:C1:77:82:AC:0D:A7:26","sha256":"9E:35:D3:AC:31:17:9B:4D:33:29:6C:FD:AA:22:4F:CD:B5:4E:69:36:49:D7:30:36:9E:13:20:86:77:04:F3:0B"}}},"request":{"raw":"GET /wp-content/uploads/2025/04/%D8%A7%D9%81%D8%B2%D8%A7%DB%8C%D8%B4-%D9%81%D8%B1%D9%88%D8%B4-%D9%88-%D8%B3%D8%A6%D9%88-%D9%88%D8%A8%D8%B3%D8%A7%DB%8C%D8%AA.png HTTP/1.1\r\nHost: bizdavar.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://bizdavar.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 24 Dec 2025 02:51:40 GMT\r\nserver: cloudflare\r\nlast-modified: Wed, 02 Apr 2025 10:08:04 GMT\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\ncontent-length: 446416\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: image/png\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=28v1DIWslE9kis1Mg4tpxqAhXMOZv%2B57eg6AKfJOT6eXy5VeH4eEc9BJRTnhA3TSlI%2Fk3afIVw11VSS9iDc5fNgCu7RqOWpI7s6%2BxQ%3D%3D\"}]}\r\nvary: accept-encoding\r\ncf-ray: 9b2ccc59cb3f2efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":446416,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 800 x 600, 8-bit/color RGB, non-interlaced","md5":"462a62a987e37addbda7b5f7901558d1","sha1":"092d16943c22af6939596f44628d2b564c78560f","sha256":"5ca0d28a9d4abacb75c2a0a4c6a77040ea9fc5899d00e4d960f426089cc21fd8","sha512":"3c7769a7cd905f3b68c7484b9d6e4f78f53b472c409ff57f3690eba7a969d565b5e1eebf1259af80d588e5550e24fe7cda77a44d4d9434242fc8494daff1eb41","ssdeep":"12288:DrpFbWzKC74Dpvyv0WW0opxh175PeVU2RHiYtAaWsyLe8R:XfWNOyv0OWf3wU2RHsa3yeq","tlshash":"b39423c1ea1b6599357e22c9a0327a6c4f7c75d59e24738e50816e52fc0efb49f02a33","first_seen":"2025-12-24T02:52:14.484537Z","last_seen":"2025-12-24T02:52:14.484537Z","times_seen":1,"resource_available":false,"data":null}},"time_used":424,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":160,"receive":264,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-12-24","alert":"Sinkholed","trigger":"bizdavar.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-24","alert":"Sinkholed","trigger":"bizdavar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bizdavar.com/wp-content/uploads/2025/04/ChatGPT-Image-Apr-2-2025-02_28_48-PM.png","fqdn":"bizdavar.com","domain":"bizdavar.com","tld":"com"},"ip":{"addr":"104.21.20.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bizdavar.com/","date":"2025-12-24T02:51:40.510Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bizdavar.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 30 Oct 2025 20:00:29 GMT","end":"Wed, 28 Jan 2026 20:57:57 GMT"},"fingerprint":{"sha1":"5D:CD:8B:95:13:4B:07:86:69:DB:63:BB:CB:C1:77:82:AC:0D:A7:26","sha256":"9E:35:D3:AC:31:17:9B:4D:33:29:6C:FD:AA:22:4F:CD:B5:4E:69:36:49:D7:30:36:9E:13:20:86:77:04:F3:0B"}}},"request":{"raw":"GET /wp-content/uploads/2025/04/ChatGPT-Image-Apr-2-2025-02_28_48-PM.png HTTP/1.1\r\nHost: bizdavar.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://bizdavar.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 24 Dec 2025 02:51:40 GMT\r\nserver: cloudflare\r\nlast-modified: Wed, 02 Apr 2025 11:29:13 GMT\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\ncontent-length: 1692064\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: image/png\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Fj1xJQNNqHCV53WiK%2BT8tzS7JmnSStLLlT0KuYSQWrDg4hqLCnOqlQFgq5eGFMPJ1h98xVPHz8dF1uNQLI7froZ8lDaxvnRXXq2Cbg%3D%3D\"}]}\r\nvary: accept-encoding\r\ncf-ray: 9b2ccc59cb402efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1692064,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1536 x 1024, 8-bit/color RGB, non-interlaced","md5":"edd003918fc471cacfc6c5e092dd8716","sha1":"9e0b3e74a2ff78f60246803aeefbd243dc9c31e8","sha256":"014c743c7123ac3a09caa718cefd8bc4e757491947fa44bc748f0e1f0b028e53","sha512":"274f4ae7d54e40fa489ce22416f0796e51fcd82c4c11efd3e3327481c8078413733d91297e53f94fb38ad3002fc3e2fea796d69555aa787e7e417a21501d320b","ssdeep":"24576:o5ThKK0Qzq7rZFIBvbYkMm+tuZVDRLa1cg9FhHNTqLl/6i:ewKfuraskMm+tSBMV9XHNTW6i","tlshash":"1d2533376b038713d795db7600ea0c9fab79e64026b05a4e07aada8dce1c775443707b","first_seen":"2025-12-24T02:52:14.485622Z","last_seen":"2025-12-24T02:52:14.485622Z","times_seen":1,"resource_available":false,"data":null}},"time_used":590,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":140,"receive":450,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-24","alert":"Sinkholed","trigger":"bizdavar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-12-24","alert":"Sinkholed","trigger":"bizdavar.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bizdavar.com/wp-content/uploads/2024/08/Screenshot-2024-08-05-170302.png","fqdn":"bizdavar.com","domain":"bizdavar.com","tld":"com"},"ip":{"addr":"104.21.20.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bizdavar.com/","date":"2025-12-24T02:51:40.553Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bizdavar.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 30 Oct 2025 20:00:29 GMT","end":"Wed, 28 Jan 2026 20:57:57 GMT"},"fingerprint":{"sha1":"5D:CD:8B:95:13:4B:07:86:69:DB:63:BB:CB:C1:77:82:AC:0D:A7:26","sha256":"9E:35:D3:AC:31:17:9B:4D:33:29:6C:FD:AA:22:4F:CD:B5:4E:69:36:49:D7:30:36:9E:13:20:86:77:04:F3:0B"}}},"request":{"raw":"GET /wp-content/uploads/2024/08/Screenshot-2024-08-05-170302.png HTTP/1.1\r\nHost: bizdavar.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://bizdavar.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 24 Dec 2025 02:51:40 GMT\r\nserver: cloudflare\r\nlast-modified: Mon, 05 Aug 2024 14:06:04 GMT\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\ncontent-length: 749080\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: image/png\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=mzvjEBdkBmavIpy4F6v2c92hAjX1bi04w%2FTaBKw3knqEWss1MF10mS2sEUm6vniwmy0RCC4Fy7bDCxx3OliWBSwfgxYAI8VzSBtTyQ%3D%3D\"}]}\r\nvary: accept-encoding\r\ncf-ray: 9b2ccc5a0b692efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":749080,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 909 x 741, 8-bit/color RGBA, non-interlaced","md5":"89f7af58f6231952d62e4a0e69ca75ac","sha1":"1f1896f9ac56c6856105adeb16d0285968f20403","sha256":"ba7a882f7874c019633a56b9b61a73ce68fc09c12cbaa3b17af41531566a20ea","sha512":"48ddd458cee989db925c90118bd9233d752ce7ba6207ae384455a87770969ca5ee406c0202de6f062e6d42424e7fd4ce8a201c33fb891bbb665bf1fa58ea4350","ssdeep":"12288:B6wky2fcKtD2UDHdm01fylu9x+fyLB+b/I1kGmZKaQts2EMdnh0XPG3mKK:kwkBptD2UDHs0/1+jI1vmZYtsXM1h0XT","tlshash":"b2f4338d972f0840dc226627d9ab63ba9c39a5750b2856ff1c559a3da0b1d31cf3c21f","first_seen":"2025-12-24T02:52:14.486965Z","last_seen":"2025-12-24T02:52:14.486965Z","times_seen":1,"resource_available":false,"data":null}},"time_used":415,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":140,"receive":275,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-24","alert":"Sinkholed","trigger":"bizdavar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-12-24","alert":"Sinkholed","trigger":"bizdavar.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bizdavar.com/wp-includes/js/dist/i18n.min.js?ver=c26c3dc7bed366793375","fqdn":"bizdavar.com","domain":"bizdavar.com","tld":"com"},"ip":{"addr":"104.21.20.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bizdavar.com/","date":"2025-12-24T02:51:40.608Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bizdavar.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 30 Oct 2025 20:00:29 GMT","end":"Wed, 28 Jan 2026 20:57:57 GMT"},"fingerprint":{"sha1":"5D:CD:8B:95:13:4B:07:86:69:DB:63:BB:CB:C1:77:82:AC:0D:A7:26","sha256":"9E:35:D3:AC:31:17:9B:4D:33:29:6C:FD:AA:22:4F:CD:B5:4E:69:36:49:D7:30:36:9E:13:20:86:77:04:F3:0B"}}},"request":{"raw":"GET /wp-includes/js/dist/i18n.min.js?ver=c26c3dc7bed366793375 HTTP/1.1\r\nHost: bizdavar.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://bizdavar.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 24 Dec 2025 02:51:40 GMT\r\nserver: cloudflare\r\nlast-modified: Thu, 04 Dec 2025 14:40:42 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: accept-encoding\r\ncontent-encoding: br\r\ncontent-type: text/javascript\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=BM6WG0tMovDWjb6nTsA488OphmL6B1sCphhMnH1OeysJBLY%2FqveVSwkVKF2IYpY%2BVCbf0EvvliX3WTOW%2BfjIt4KNXeAqA3n5RjCzPw%3D%3D\"}]}\r\ncf-ray: 9b2ccc5a8b7e2efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5314,"size_decoded":0,"mime_type":"text/javascript","magic":"data","md5":"3a5838d1182eb0b11f5a58bfe26e2529","sha1":"920b2291e65d62eb55c1958911768540abaff5cf","sha256":"d4efe709c65438ae90dff385486421fea45762880f21fc4e0dca3fa96210f428","sha512":"bc41d50cd2e5c17c75ba737c303f2f498cc94e2c3fe402b2f15c5f10531e53633598093da98579b2dee65733dce0f763d77380ae35a9591d8bf91f975b7c6845","ssdeep":"96:L9emIWL7lnv93ssmAeGejQVnmggoC7arVCG0GXF730IQRDdlZq+SxSD3LmD:8mIWZVszMuinmg3rQ8Xd30DDdlZq+Sx3","tlshash":"2bb157dcb9d57022235121a0597fb409f3357d6470ebb8006ba9c4a47eb15cfb1a2fad","first_seen":"2025-10-27T08:47:54.280246Z","last_seen":"2026-08-12T07:15:32.405492Z","times_seen":201013,"resource_available":true,"data":null}},"time_used":163,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":163,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-12-24","alert":"Sinkholed","trigger":"bizdavar.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-24","alert":"Sinkholed","trigger":"bizdavar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bizdavar.com/wp-content/uploads/2024/07/path-to-your-video.mp4","fqdn":"bizdavar.com","domain":"bizdavar.com","tld":"com"},"ip":{"addr":"104.21.20.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://bizdavar.com/","date":"2025-12-24T02:51:41.149Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bizdavar.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 30 Oct 2025 20:00:29 GMT","end":"Wed, 28 Jan 2026 20:57:57 GMT"},"fingerprint":{"sha1":"5D:CD:8B:95:13:4B:07:86:69:DB:63:BB:CB:C1:77:82:AC:0D:A7:26","sha256":"9E:35:D3:AC:31:17:9B:4D:33:29:6C:FD:AA:22:4F:CD:B5:4E:69:36:49:D7:30:36:9E:13:20:86:77:04:F3:0B"}}},"request":{"raw":"GET /wp-content/uploads/2024/07/path-to-your-video.mp4 HTTP/1.1\r\nHost: bizdavar.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.5\r\nReferer: https://bizdavar.com/\r\nRange: bytes=0-\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: video\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nAccept-Encoding: identity\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 206 Partial Content\r\ndate: Wed, 24 Dec 2025 02:51:41 GMT\r\nserver: cloudflare\r\nlast-modified: Mon, 29 Jul 2024 12:25:54 GMT\r\ncontent-type: video/mp4\r\npriority: u=4,i=?0\r\ncontent-length: 11936627\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-range: bytes 0-11936626/11936627\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=rPS8Q%2FiMM6%2FeXU4xD1CmnXXYMCE9E28B7ttDWcTHtyz4FjNeWRWXccz0TJ6jOK1inSSj7v4cX3XC0BlmBkUhJPWgwCFy%2FB3R6z7tEA%3D%3D\"}]}\r\nvary: accept-encoding\r\ncf-ray: 9b2ccc5e1ba52efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":95946,"size_decoded":0,"mime_type":"video/mp4","magic":"ISO Media, MP4 Base Media v1 [ISO 14496-12:2003]","md5":"484453d998b4e468da48ce0bb96280e4","sha1":"43d2ce7813bfed803b4a69528cfae478fa1172ac","sha256":"bc26f3eba2797d03708b9ba3a5d1b661f3a0ba07277749df18fc594d0c5558ce","sha512":"e1cd0794eae5575d0e7f40751387bee7cb0d422c68555481b38f9450ac7e28b8ecf42fda379b32db16a365596779c5b6aceea1a25ded278649a042fed42d1e53","ssdeep":"1536:MXTL4ePxOqsHneN7BvrIYckkoDuCmbxrCm76iSQMQjrHweBm8WlKn60soCiQ81Ut:MXTfPxS+ZBkNnCa771nMNmtWlD0soEnX","tlshash":"599312e6cbdd5cdf8192e154304477958413261122babccc98a9dd8afaad5ccf02fb74","first_seen":"2025-12-24T02:52:14.488574Z","last_seen":"2025-12-24T02:52:14.488574Z","times_seen":1,"resource_available":false,"data":null}},"time_used":196,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":56,"receive":140,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-24","alert":"Sinkholed","trigger":"bizdavar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-12-24","alert":"Sinkholed","trigger":"bizdavar.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bizdavar.com/wp-content/uploads/2024/07/path-to-your-video.webm","fqdn":"bizdavar.com","domain":"bizdavar.com","tld":"com"},"ip":{"addr":"104.21.20.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://bizdavar.com/","date":"2025-12-24T02:51:42.177Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bizdavar.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 30 Oct 2025 20:00:29 GMT","end":"Wed, 28 Jan 2026 20:57:57 GMT"},"fingerprint":{"sha1":"5D:CD:8B:95:13:4B:07:86:69:DB:63:BB:CB:C1:77:82:AC:0D:A7:26","sha256":"9E:35:D3:AC:31:17:9B:4D:33:29:6C:FD:AA:22:4F:CD:B5:4E:69:36:49:D7:30:36:9E:13:20:86:77:04:F3:0B"}}},"request":{"raw":"GET /wp-content/uploads/2024/07/path-to-your-video.webm HTTP/1.1\r\nHost: bizdavar.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.5\r\nReferer: https://bizdavar.com/\r\nRange: bytes=0-\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: _ga_F2WGXTVK7F=GS2.1.s1766544701$o1$g0$t1766544701$j60$l0$h0; _ga=GA1.1.1382880001.1766544701\r\nSec-Fetch-Dest: video\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nAccept-Encoding: identity\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 Not Found\r\ndate: Wed, 24 Dec 2025 02:51:42 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=63072000; includeSubDomains;preload\r\nx-xss-protection: 0\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-frame-options: SAMEORIGIN\r\ncontent-security-policy: frame-ancestors 'self' ; upgrade-insecure-requests;\r\nexpires: Wed, 11 Jan 1984 05:00:00 GMT\r\ncache-control: no-cache, must-revalidate, max-age=0, no-store, private\r\nlink: \u003chttps://bizdavar.com/wp-json/\u003e; rel=\"https://api.w.org/\"\r\nvary: accept-encoding\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncontent-type: text/html; charset=UTF-8\r\ncf-cache-status: BYPASS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Ym1wreoDf0EPtQpoNowAv55xYxIfXrszuzlNeg87glKp6P90N8DjxtGSsMOs%2FftNWHAn4zfnpM73ppo6MmJ1PNvp4N5Kal%2F%2BOCYZMQ%3D%3D\"}]}\r\ncf-ray: 9b2ccc649c0e2efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Google Analytics","description":"Google Analytics is a free web analytics service that tracks and reports website traffic.","website":"https://google.com/analytics","common_platform_enumeration":"","icon":"Google Analytics.svg","categories":["Analytics"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"WordPress","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Site Kit:1.165.0","description":"Site Kit is a one-stop solution for WordPress users to use everything Google has to offer to make them successful on the web.","website":"https://sitekit.withgoogle.com/","common_platform_enumeration":"","icon":"Google.svg","categories":["Analytics","WordPress plugins"]},{"name":"Yoast SEO:26.3","description":"Yoast SEO is a search engine optimisation plugin for WordPress and other platforms.","website":"https://yoast.com/wordpress/plugins/seo/","common_platform_enumeration":"","icon":"Yoast SEO.png","categories":["SEO","WordPress plugins"]},{"name":"jQuery Migrate:3.4.1","description":"Query Migrate is a javascript library that allows you to preserve the compatibility of your jQuery code developed for versions of jQuery older than 1.9.","website":"https://github.com/jquery/jquery-migrate","common_platform_enumeration":"","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]}],"data":{"size":8128,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (1210)","md5":"c08b0bb0172435ceed44a4854f3aecfe","sha1":"efcc3e048257e2fa45c17ea61aa693eca88ffac1","sha256":"0198a15aa7b75ed9c0f34f5f60b9c5f115ea729f6c04a666acf80205c17e1057","sha512":"2d27259201847863a23e37cf053095fe485b4df6955384c2f0b4ae01252bef36cae965d536d208c11c5a0a2afed5dea2bc3fc6c8d706240826eabc7d5157009d","ssdeep":"96:6fOJU+EfHKUfKivpvr73KQt/Foz4BAMz+AMvjAMNxiYOD1Wdf2NTQlWHu:7JU+EDfKUF73KQt/Foz4BF+lHgYC1W+O","tlshash":"5df1c73b7c5544072b9a8603ee1f395cc59a94eee3bbc254d8f8803d2af4fe22166d54","first_seen":"2025-12-24T02:52:14.489612Z","last_seen":"2025-12-24T02:52:14.489612Z","times_seen":1,"resource_available":false,"data":null}},"time_used":337,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":334,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-12-24","alert":"Sinkholed","trigger":"bizdavar.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-24","alert":"Sinkholed","trigger":"bizdavar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bizdavar.com/wp-content/plugins/elementor/assets/css/conditionals/apple-webkit.min.css?ver=3.32.5","fqdn":"bizdavar.com","domain":"bizdavar.com","tld":"com"},"ip":{"addr":"104.21.20.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://bizdavar.com/","date":"2025-12-24T02:51:40.491Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bizdavar.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 30 Oct 2025 20:00:29 GMT","end":"Wed, 28 Jan 2026 20:57:57 GMT"},"fingerprint":{"sha1":"5D:CD:8B:95:13:4B:07:86:69:DB:63:BB:CB:C1:77:82:AC:0D:A7:26","sha256":"9E:35:D3:AC:31:17:9B:4D:33:29:6C:FD:AA:22:4F:CD:B5:4E:69:36:49:D7:30:36:9E:13:20:86:77:04:F3:0B"}}},"request":{"raw":"GET /wp-content/plugins/elementor/assets/css/conditionals/apple-webkit.min.css?ver=3.32.5 HTTP/1.1\r\nHost: bizdavar.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://bizdavar.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 24 Dec 2025 02:51:40 GMT\r\nserver: cloudflare\r\nlast-modified: Thu, 06 Nov 2025 16:18:10 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nvary: accept-encoding\r\ncontent-encoding: br\r\ncontent-type: text/css\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=P9KVpmU2O1he1uy7mhV2tmJ4zteiDUs1nT3jfdGpOOboSiF7OGyvW5qB1BEX9GEs84c1BgsbGU0aUyJ96nHAtBIAUoNkE4pTLc0plw%3D%3D\"}]}\r\ncf-ray: 9b2ccc59bb342efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7025,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (7025), with no line terminators","md5":"e9b1e2081a27f02916ca1f02303c6adf","sha1":"96a85e6703454bb25109acf38dc9756cbfc347f4","sha256":"02c3b1394964fd713f366fd878ba6c450f8e51618d7d98dcc3ba0b6e94ef3800","sha512":"b8ecb12d64c674463b669f5288a7c4a1906536177d9eb15764c7420fd71b2d43af88e3dd21a63ff67b29ac1517cfe74f4e38a6615298df3b4c1c727990d8d1ee","ssdeep":"192:lozzzlztzFTIeIUI8IxiEzWEznI1zk7mdz0zaz6zGsIXIBIhI6iJzLJzQIuz9dry:KnhBkXIuYY2+5hSTqmwsfBOd","tlshash":"efe194757f1b6a398c6b2c5b5397a06f768050e99182a382c04358039cf7fda7bb857c","first_seen":"2024-12-17T09:11:11.367183Z","last_seen":"2026-08-12T06:15:35.980626Z","times_seen":56681,"resource_available":false,"data":null}},"time_used":143,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":143,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-24","alert":"Sinkholed","trigger":"bizdavar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-12-24","alert":"Sinkholed","trigger":"bizdavar.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bizdavar.com/wp-content/uploads/elementor/css/post-10296.css?ver=1765008745","fqdn":"bizdavar.com","domain":"bizdavar.com","tld":"com"},"ip":{"addr":"104.21.20.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://bizdavar.com/","date":"2025-12-24T02:51:40.494Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bizdavar.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 30 Oct 2025 20:00:29 GMT","end":"Wed, 28 Jan 2026 20:57:57 GMT"},"fingerprint":{"sha1":"5D:CD:8B:95:13:4B:07:86:69:DB:63:BB:CB:C1:77:82:AC:0D:A7:26","sha256":"9E:35:D3:AC:31:17:9B:4D:33:29:6C:FD:AA:22:4F:CD:B5:4E:69:36:49:D7:30:36:9E:13:20:86:77:04:F3:0B"}}},"request":{"raw":"GET /wp-content/uploads/elementor/css/post-10296.css?ver=1765008745 HTTP/1.1\r\nHost: bizdavar.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://bizdavar.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 24 Dec 2025 02:51:40 GMT\r\nserver: cloudflare\r\nlast-modified: Sat, 06 Dec 2025 08:12:25 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nvary: accept-encoding\r\ncontent-encoding: br\r\ncontent-type: text/css\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=T7OA439%2F9SmEgrnFZC%2BlQvdCGKy50oYALkxyKz%2Fci8SN8Vwj4LSnYCC4UeRx%2BTyS4FafhIvp%2F372f%2FeMSf4oyd6lnI66b1PB%2BztxMg%3D%3D\"}]}\r\ncf-ray: 9b2ccc59bb372efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":23346,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (6245), with CRLF, LF line terminators","md5":"ee92be66d9e3fe3f7a972d0ebbc48b72","sha1":"6d85e6bd28d33e74ae0a2d44b2b06870cefdba06","sha256":"bdeaa2d74b840716ec65038fc5267fe987c1698e398371e172b8f2dd413e8589","sha512":"0829453865facd900db588e4c233d71f1f3b029724d14f7eab1028fd8af8125d8fcc00e5b57d0d5a443ee412026bd0b8f15949d63d2adf22031711f55817112f","ssdeep":"384:cz2bf2hL2uJYJShjJenDUzd9f2k7TcnZXS9EXQ5:cqbO0UaShjJenDUzd9OTZXS9E0","tlshash":"2da2a9a63ce3a119733f201f505bb89c2e649ceed67976c2f460a103f8b6d6137d4a15","first_seen":"2025-12-24T02:52:14.491218Z","last_seen":"2025-12-24T02:52:14.491218Z","times_seen":1,"resource_available":false,"data":null}},"time_used":192,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":148,"receive":44,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-24","alert":"Sinkholed","trigger":"bizdavar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-12-24","alert":"Sinkholed","trigger":"bizdavar.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bizdavar.com/wp-content/uploads/2025/05/honar-shop-logo.png","fqdn":"bizdavar.com","domain":"bizdavar.com","tld":"com"},"ip":{"addr":"104.21.20.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bizdavar.com/","date":"2025-12-24T02:51:40.526Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bizdavar.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 30 Oct 2025 20:00:29 GMT","end":"Wed, 28 Jan 2026 20:57:57 GMT"},"fingerprint":{"sha1":"5D:CD:8B:95:13:4B:07:86:69:DB:63:BB:CB:C1:77:82:AC:0D:A7:26","sha256":"9E:35:D3:AC:31:17:9B:4D:33:29:6C:FD:AA:22:4F:CD:B5:4E:69:36:49:D7:30:36:9E:13:20:86:77:04:F3:0B"}}},"request":{"raw":"GET /wp-content/uploads/2025/05/honar-shop-logo.png HTTP/1.1\r\nHost: bizdavar.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://bizdavar.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 24 Dec 2025 02:51:40 GMT\r\nserver: cloudflare\r\nlast-modified: Sun, 18 May 2025 18:09:10 GMT\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\ncontent-length: 23587\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: image/png\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=wpKjAEkH3bymL4MOY%2Fa0T6ApCzEVmS900qDU66IWixpr%2BEDuRrKM0tDoygcZSF8GrdLHf%2FAUu48kmoXo5nxmDND432uH0jERU7XvLQ%3D%3D\"}]}\r\nvary: accept-encoding\r\ncf-ray: 9b2ccc59eb532efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":23587,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 500 x 500, 8-bit/color RGBA, non-interlaced","md5":"4fa4f39c74d27a4bdf32940ccd17847e","sha1":"5c733c816ebe3b3501497aaf6db82b63b727df49","sha256":"de919b2498451e071b41955ba3a69f4cde051a0adbb25395ec97225add589506","sha512":"0751563a19618c0454d68106b07a5af0cf8b4ab6da1ab3004c15c360428fb8eb8943a3bc1b761d7f596e31397b35d786436ba8d060704ac34e6b82f36808b3a4","ssdeep":"384:0jG9vMkhh/DX85Vh2MdoXbhFz/c32d8a1Z87qSHOsUF98aa31PhjCJViVxGK/Vn4:OGNMKZ8vs4U1/c32ROWQOsumbgiVxJbM","tlshash":"79b2bea190f3886f841862838edbf662dd711996ac97e4014eb7cf881f9735037e5ac7","first_seen":"2025-12-24T02:52:14.492334Z","last_seen":"2025-12-24T02:52:14.492334Z","times_seen":1,"resource_available":false,"data":null}},"time_used":202,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":156,"receive":46,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-24","alert":"Sinkholed","trigger":"bizdavar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-12-24","alert":"Sinkholed","trigger":"bizdavar.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bizdavar.com/wp-content/uploads/2024/08/424-uretim.jpg","fqdn":"bizdavar.com","domain":"bizdavar.com","tld":"com"},"ip":{"addr":"104.21.20.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bizdavar.com/","date":"2025-12-24T02:51:40.552Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bizdavar.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 30 Oct 2025 20:00:29 GMT","end":"Wed, 28 Jan 2026 20:57:57 GMT"},"fingerprint":{"sha1":"5D:CD:8B:95:13:4B:07:86:69:DB:63:BB:CB:C1:77:82:AC:0D:A7:26","sha256":"9E:35:D3:AC:31:17:9B:4D:33:29:6C:FD:AA:22:4F:CD:B5:4E:69:36:49:D7:30:36:9E:13:20:86:77:04:F3:0B"}}},"request":{"raw":"GET /wp-content/uploads/2024/08/424-uretim.jpg HTTP/1.1\r\nHost: bizdavar.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://bizdavar.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 24 Dec 2025 02:51:40 GMT\r\nserver: cloudflare\r\nlast-modified: Mon, 05 Aug 2024 14:06:11 GMT\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\ncontent-length: 101718\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: image/jpeg\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0a0C7cfj3jaUd3ohz4IcuSWMIsl3iyGS%2Be6SLxNjo0Rw4zxHq%2FnOnxgtV0Jauf55I6%2F529u5jnKs9QQABuxMlSA%2BXcdhNpyIBHH6tA%3D%3D\"}]}\r\nvary: accept-encoding\r\ncf-ray: 9b2ccc5a0b682efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":101718,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.02, resolution (DPI), density 300x300, segment length 16, baseline, precision 8, 1131x838, components 3","md5":"0c83830bc5e67948a12a5ba6d11e33a0","sha1":"3b25f86d410378ba81303e74675099b1a51814ab","sha256":"c7deb710f8296659f625fe3586f2389917163c3ff62b194ce14daed1ed3d76d0","sha512":"5738209ff95a170583e9e1aa582fbb4a7cfe783ad886842551afd87ad81f725187621b1d176081fa1870c818351b9f550952888565c6003eddaf8f5780e48fb3","ssdeep":"1536:Cy/EiVCGhhwSUE7G7GQQ6cAy0H0a3T6qqU8tomwE8WIVx32nmsL189P:CcPwUizQiyUBqUsH98W8wZ1AP","tlshash":"f2a30212ae9b03c0c5b9127499cfe7b86adab27f97185dc71b3d6dbb9392880011c580","first_seen":"2025-12-24T02:52:14.493347Z","last_seen":"2025-12-24T02:52:14.493347Z","times_seen":1,"resource_available":false,"data":null}},"time_used":240,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":124,"receive":116,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-12-24","alert":"Sinkholed","trigger":"bizdavar.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-24","alert":"Sinkholed","trigger":"bizdavar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bizdavar.com/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.4.1","fqdn":"bizdavar.com","domain":"bizdavar.com","tld":"com"},"ip":{"addr":"104.21.20.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bizdavar.com/","date":"2025-12-24T02:51:40.501Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bizdavar.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 30 Oct 2025 20:00:29 GMT","end":"Wed, 28 Jan 2026 20:57:57 GMT"},"fingerprint":{"sha1":"5D:CD:8B:95:13:4B:07:86:69:DB:63:BB:CB:C1:77:82:AC:0D:A7:26","sha256":"9E:35:D3:AC:31:17:9B:4D:33:29:6C:FD:AA:22:4F:CD:B5:4E:69:36:49:D7:30:36:9E:13:20:86:77:04:F3:0B"}}},"request":{"raw":"GET /wp-includes/js/jquery/jquery-migrate.min.js?ver=3.4.1 HTTP/1.1\r\nHost: bizdavar.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://bizdavar.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 24 Dec 2025 02:51:40 GMT\r\nserver: cloudflare\r\nlast-modified: Fri, 09 Jun 2023 05:49:24 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nvary: accept-encoding\r\ncontent-encoding: br\r\ncontent-type: text/javascript\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=30cTNqiAAa1Dck4aZyZDPABjDYzW1oSlQXjcOaVgLBDkjQQ4XkUnG%2FCp0nLd40R%2BmA5ViraZKrKtJNXv55l5v08TtKQ42psc5g390A%3D%3D\"}]}\r\ncf-ray: 9b2ccc59cb3a2efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":13577,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (13479)","md5":"9ffeb32e2d9efbf8f70caabded242267","sha1":"3ad0c10e501ac2a9bfa18f9cd7e700219b378738","sha256":"5274f11e6fb32ae0cf2dfb9f8043272865c397a7c4223b4cfa7d50ea52fbde89","sha512":"8d6be545508a1c38278b8ad780c3758ae48a25e4e12eee443375aa56031d9b356f8c90f22d4f251140fa3f65603af40523165e33cae2e2d62fc78ec106e3d731","ssdeep":"192:5rprDN+sag6ifKIUpQI99P1tLm9kdgyq1+J3aCJQ+h4MPLORq:5rprxaefKI0LP19m4q1WW+h4Mjp","tlshash":"9952c8adb56679724eb721b8f03bd24f71b205de560d8940d19cc4f6282dc6e812bf78","first_seen":"2023-05-09T19:21:05Z","last_seen":"2026-08-12T08:29:04.71492Z","times_seen":929918,"resource_available":true,"data":null}},"time_used":197,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":151,"receive":46,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-24","alert":"Sinkholed","trigger":"bizdavar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-12-24","alert":"Sinkholed","trigger":"bizdavar.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bizdavar.com/wp-content/plugins/elementor-pro/assets/lib/sticky/jquery.sticky.min.js?ver=3.32.2","fqdn":"bizdavar.com","domain":"bizdavar.com","tld":"com"},"ip":{"addr":"104.21.20.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bizdavar.com/","date":"2025-12-24T02:51:40.599Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bizdavar.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 30 Oct 2025 20:00:29 GMT","end":"Wed, 28 Jan 2026 20:57:57 GMT"},"fingerprint":{"sha1":"5D:CD:8B:95:13:4B:07:86:69:DB:63:BB:CB:C1:77:82:AC:0D:A7:26","sha256":"9E:35:D3:AC:31:17:9B:4D:33:29:6C:FD:AA:22:4F:CD:B5:4E:69:36:49:D7:30:36:9E:13:20:86:77:04:F3:0B"}}},"request":{"raw":"GET /wp-content/plugins/elementor-pro/assets/lib/sticky/jquery.sticky.min.js?ver=3.32.2 HTTP/1.1\r\nHost: bizdavar.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://bizdavar.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 24 Dec 2025 02:51:40 GMT\r\nserver: cloudflare\r\nlast-modified: Thu, 06 Nov 2025 16:20:38 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: accept-encoding\r\ncontent-encoding: br\r\ncontent-type: text/javascript\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=huuedIiESxAGgn74kJBwky7hhDjB5VfnOP%2BLedcWuOJ1a6dGp5lk4PKyW90KgueWw5qGrSYI08UOXDajpQoEFho0%2Bbd44X2TmxBEug%3D%3D\"}]}\r\ncf-ray: 9b2ccc5a8b772efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3721,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (3720)","md5":"3e31a0ddb1f910fc672d22e6435b95ed","sha1":"f478fd262840bfb394da94a2f5dd95eed4991194","sha256":"34bbd1c367ffc7d80fcff86c7e5f8777e70f4911bb324e8ecfc7dd3604a96e68","sha512":"6c9f642880c702862e17f6866ebb60d7b82c6a7688d28b971c2ee7fa3ad301d8e45a23bb4e7f67062d9193374f764b0335e83423e7ea123410edbddbf7a4e0ea","ssdeep":"","tlshash":"4d714208f304743a45ebf3a2127bc84c72b76524b4ced808656d96aa1d5b48b60b3ffd","first_seen":"2023-03-08T14:24:56Z","last_seen":"2026-08-12T08:29:04.619516Z","times_seen":70286,"resource_available":true,"data":null}},"time_used":152,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":152,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-12-24","alert":"Sinkholed","trigger":"bizdavar.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-24","alert":"Sinkholed","trigger":"bizdavar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bizdavar.com/wp-includes/js/wp-emoji-release.min.js?ver=cda41b6d010f1481783b8a5595ba74ea","fqdn":"bizdavar.com","domain":"bizdavar.com","tld":"com"},"ip":{"addr":"104.21.20.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bizdavar.com/","date":"2025-12-24T02:51:41.443Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bizdavar.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 30 Oct 2025 20:00:29 GMT","end":"Wed, 28 Jan 2026 20:57:57 GMT"},"fingerprint":{"sha1":"5D:CD:8B:95:13:4B:07:86:69:DB:63:BB:CB:C1:77:82:AC:0D:A7:26","sha256":"9E:35:D3:AC:31:17:9B:4D:33:29:6C:FD:AA:22:4F:CD:B5:4E:69:36:49:D7:30:36:9E:13:20:86:77:04:F3:0B"}}},"request":{"raw":"GET /wp-includes/js/wp-emoji-release.min.js?ver=cda41b6d010f1481783b8a5595ba74ea HTTP/1.1\r\nHost: bizdavar.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://bizdavar.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: _ga_F2WGXTVK7F=GS2.1.s1766544701$o1$g0$t1766544701$j60$l0$h0; _ga=GA1.1.1382880001.1766544701\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 24 Dec 2025 02:51:41 GMT\r\nserver: cloudflare\r\nlast-modified: Thu, 04 Dec 2025 14:40:42 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: accept-encoding\r\ncontent-encoding: br\r\ncontent-type: text/javascript\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=sGzv1KTJQSfPzC7jY0zKEt0A4rNihGwPLIcmqELIWNx289YXZ1EEKl7WUIwWLjNdAEXC9QrxpLe1dznDW%2BYybl9ZYU1tSTBJeABjzg%3D%3D\"}]}\r\ncf-ray: 9b2ccc600bd32efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":22762,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (19823)","md5":"f0cc9ba5cf46af0cd73d521803e3b07e","sha1":"7d2a74f87dc70a39eccce3bae1d4cc404cb134f4","sha256":"fd59b0ebf6282ed71647bf2f6e0d1925bbfd1f270865a832079ebb60259aabca","sha512":"7ec44f08676c195547a623504c7105ef3d0acea5839675599598043f3e0b5a3386452e3db6fbea90722f7be9e6effdae1b89c49e2b05b22b8c415616e07d471d","ssdeep":"384:WzevzApRZTbXU/3o//bEPhXgA5POkpJTX:Wsk9XU/3o//YpXgAs+hX","tlshash":"7fa2959ba33a4e8f343e3bd78d968f4dc9da555321c0e079dbefb6c169a00568274c80","first_seen":"2025-11-10T19:52:32.864936Z","last_seen":"2026-08-12T08:29:04.661633Z","times_seen":310935,"resource_available":true,"data":null}},"time_used":106,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":54,"receive":52,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-24","alert":"Sinkholed","trigger":"bizdavar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-12-24","alert":"Sinkholed","trigger":"bizdavar.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bizdavar.com/wp-content/plugins/elementor-pro/assets/js/nav-menu.0edc0c22e9f3101552ed.bundle.min.js","fqdn":"bizdavar.com","domain":"bizdavar.com","tld":"com"},"ip":{"addr":"104.21.20.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bizdavar.com/","date":"2025-12-24T02:51:41.741Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bizdavar.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 30 Oct 2025 20:00:29 GMT","end":"Wed, 28 Jan 2026 20:57:57 GMT"},"fingerprint":{"sha1":"5D:CD:8B:95:13:4B:07:86:69:DB:63:BB:CB:C1:77:82:AC:0D:A7:26","sha256":"9E:35:D3:AC:31:17:9B:4D:33:29:6C:FD:AA:22:4F:CD:B5:4E:69:36:49:D7:30:36:9E:13:20:86:77:04:F3:0B"}}},"request":{"raw":"GET /wp-content/plugins/elementor-pro/assets/js/nav-menu.0edc0c22e9f3101552ed.bundle.min.js HTTP/1.1\r\nHost: bizdavar.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://bizdavar.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: _ga_F2WGXTVK7F=GS2.1.s1766544701$o1$g0$t1766544701$j60$l0$h0; _ga=GA1.1.1382880001.1766544701\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 24 Dec 2025 02:51:42 GMT\r\nserver: cloudflare\r\nlast-modified: Thu, 06 Nov 2025 16:20:38 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: accept-encoding\r\ncontent-encoding: br\r\ncontent-type: text/javascript\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=LqnDiJieCf4Xf8IJaFI5muu9ZBYiKC4p5irb%2FaYY7NC1Jox3xXQWj1bcus3c%2Fh0rQ4JT90qtLk3Sm3wU%2Bv6XOXNWRY4RTKua5qF4pQ%3D%3D\"}]}\r\ncf-ray: 9b2ccc644c082efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5301,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (5257)","md5":"fe98ff7c4a3b033d2e3067f6490cfb65","sha1":"51850ec411e195dad7d5228ffe3d2390bf37b681","sha256":"c2a49ba19e6da5ecb6639d8d321771cd9bfb8e43416a85c1c386881fc1f18e8f","sha512":"29652f398e03fee60001d70877fdb0f1eb3d99066946e80cbfa048fbc72ee3cb2d097245bd7fa13628b9764d0a5e91b0ea10399752768421f018e3d63be9ecd3","ssdeep":"96:Bq5m3CQcqOf55/UEljUkkRk7PA2goL/V2VsVQKSGffr/xZdUyKfKAtZ2JWEfPvku:imSjqOf55/UEpUTW7vgoL91SEj/xZdUE","tlshash":"a3b14262729229a7c58f815b77534a2df2322a98740656ad7a396cef11f1ec033f1b34","first_seen":"2025-09-29T16:46:42.905182Z","last_seen":"2026-08-11T20:57:59.617853Z","times_seen":4237,"resource_available":true,"data":null}},"time_used":445,"timings":{"blocked":389,"dns":0,"connect":0,"send":0,"wait":56,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-24","alert":"Sinkholed","trigger":"bizdavar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-12-24","alert":"Sinkholed","trigger":"bizdavar.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bizdavar.com/wp-content/plugins/elementor/assets/css/widget-heading-rtl.min.css?ver=3.32.5","fqdn":"bizdavar.com","domain":"bizdavar.com","tld":"com"},"ip":{"addr":"104.21.20.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://bizdavar.com/","date":"2025-12-24T02:51:40.492Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bizdavar.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 30 Oct 2025 20:00:29 GMT","end":"Wed, 28 Jan 2026 20:57:57 GMT"},"fingerprint":{"sha1":"5D:CD:8B:95:13:4B:07:86:69:DB:63:BB:CB:C1:77:82:AC:0D:A7:26","sha256":"9E:35:D3:AC:31:17:9B:4D:33:29:6C:FD:AA:22:4F:CD:B5:4E:69:36:49:D7:30:36:9E:13:20:86:77:04:F3:0B"}}},"request":{"raw":"GET /wp-content/plugins/elementor/assets/css/widget-heading-rtl.min.css?ver=3.32.5 HTTP/1.1\r\nHost: bizdavar.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://bizdavar.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 24 Dec 2025 02:51:40 GMT\r\nserver: cloudflare\r\nlast-modified: Thu, 06 Nov 2025 16:18:10 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nvary: accept-encoding\r\ncontent-encoding: br\r\ncontent-type: text/css\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=OX3isy%2BIp2e355jWlr5hbakubZrNFoA84R%2FG3VjDNeNk4Gs5z3WtSADvVYhT7w4EZ5iWGnntwR%2B7%2BJKS0yuoSb06mKt8jOcnaHt4UA%3D%3D\"}]}\r\ncf-ray: 9b2ccc59bb352efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":600,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (560)","md5":"9c24e88a5e065fa5e47dcaa2f956442f","sha1":"b776c46922e1758583646e4fdd2ec25996ecd2c0","sha256":"db6ca0cd431e5969d73fb47722fb1ccb4636679093abf89a3ed72a1bbcb6acbf","sha512":"c473027d4b43ae4289af0f63a6b3adfa136a90d1789a8c579929771a88d8c967938c9ed6069531b7ed51dc2dc94b0576d1878cee641876887502cf08bcd5eb1f","ssdeep":"","tlshash":"cdf012237e4b94aa783f195b1187337c74944ecc93a0a8d8e9fa91436df4ca27334622","first_seen":"2025-10-21T14:39:27.095934Z","last_seen":"2026-08-11T09:37:39.070796Z","times_seen":11384,"resource_available":false,"data":null}},"time_used":159,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":159,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-24","alert":"Sinkholed","trigger":"bizdavar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-12-24","alert":"Sinkholed","trigger":"bizdavar.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bizdavar.com/wp-content/uploads/2024/07/pik-govde-motor-gamak.webp","fqdn":"bizdavar.com","domain":"bizdavar.com","tld":"com"},"ip":{"addr":"104.21.20.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bizdavar.com/","date":"2025-12-24T02:51:40.519Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bizdavar.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 30 Oct 2025 20:00:29 GMT","end":"Wed, 28 Jan 2026 20:57:57 GMT"},"fingerprint":{"sha1":"5D:CD:8B:95:13:4B:07:86:69:DB:63:BB:CB:C1:77:82:AC:0D:A7:26","sha256":"9E:35:D3:AC:31:17:9B:4D:33:29:6C:FD:AA:22:4F:CD:B5:4E:69:36:49:D7:30:36:9E:13:20:86:77:04:F3:0B"}}},"request":{"raw":"GET /wp-content/uploads/2024/07/pik-govde-motor-gamak.webp HTTP/1.1\r\nHost: bizdavar.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://bizdavar.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 24 Dec 2025 02:51:40 GMT\r\nserver: cloudflare\r\nlast-modified: Mon, 29 Jul 2024 13:33:06 GMT\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\ncontent-length: 18874\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: image/webp\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=wbtRxkzv6PaFm0tIVOeMfKg1pQRY0y3rj0Vrs%2FzWZfq54mHjW9G42WrkOvKBP9bIIOpgd8cMFwtw5HF0F0hxe2Z3ACFeiUM%2B3%2BQjWw%3D%3D\"}]}\r\nvary: accept-encoding\r\ncf-ray: 9b2ccc59eb4c2efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":18874,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 618x460, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"69b814f2337c93d784628827a71b9964","sha1":"f41ccd99260d65724a208ce318164f29b529ae4d","sha256":"d2cdc4ffa9dfbbbbede12c498daff8db275428cfb82c49fdd54ad9c8ceb67627","sha512":"9bde40aa9ee32c2873218a07a1764ed790c34814a7fcdf58657d1208f9d37f6c76030092af0204a471fd4512073b9b5fd49c543e4d67b21b70d1426e59d01ac9","ssdeep":"384:VoLpHPKGnYixdw9XORc+bFAK1Cej4h6ZT1y5LI7IWIdMBLXpMG6Ve:VoxYixdKXOO+uKMej460UNNpR6c","tlshash":"4982d00caccddeb1c0085b90f2cb6d7a8515d517a4e1ee49126be49cafb0d8fd052bda","first_seen":"2025-12-24T02:52:14.498135Z","last_seen":"2025-12-24T02:52:14.498135Z","times_seen":1,"resource_available":false,"data":null}},"time_used":194,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":148,"receive":46,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-12-24","alert":"Sinkholed","trigger":"bizdavar.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-24","alert":"Sinkholed","trigger":"bizdavar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bizdavar.com/cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js","fqdn":"bizdavar.com","domain":"bizdavar.com","tld":"com"},"ip":{"addr":"104.21.20.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bizdavar.com/","date":"2025-12-24T02:51:40.521Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bizdavar.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 30 Oct 2025 20:00:29 GMT","end":"Wed, 28 Jan 2026 20:57:57 GMT"},"fingerprint":{"sha1":"5D:CD:8B:95:13:4B:07:86:69:DB:63:BB:CB:C1:77:82:AC:0D:A7:26","sha256":"9E:35:D3:AC:31:17:9B:4D:33:29:6C:FD:AA:22:4F:CD:B5:4E:69:36:49:D7:30:36:9E:13:20:86:77:04:F3:0B"}}},"request":{"raw":"GET /cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js HTTP/1.1\r\nHost: bizdavar.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://bizdavar.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: application/javascript\r\nexpires: Wed, 24 Dec 2025 03:39:40 GMT\r\ncache-control: public\r\nvary: accept-encoding\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=a8rfS990HR7Af9WVDbXUr%2B1gTJ%2B0UCLbCVUE4mx2JD2Oz8A0MLsZh%2FyZYoqx0bOP0KDya4dig9zpwk%2F9IdlP3UrZyuO1Jt4S8i9h6Q%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\nserver: cloudflare\r\ndate: Wed, 24 Dec 2025 02:51:40 GMT\r\ncf-ray: 9b2ccc59eb4e2efa-OSL\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1239,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (1238)","md5":"9e8f56e8e1806253ba01a95cfc3d392c","sha1":"a8af90d7482e1e99d03de6bf88fed2315c5dd728","sha256":"2595496fe48df6fcf9b1bc57c29a744c121eb4dd11566466bc13d2e52e6bbcc8","sha512":"63f0f6f94fbabadc3f774ccaa6a401696e8a7651a074bc077d214f91da080b36714fd799eb40fed64154972008e34fc733d6ee314ac675727b37b58ffbebebee","ssdeep":"","tlshash":"6021d5743a18107e226a0133e56f66cee1f23715fd17e440408ad89566e4fe5063fed9","first_seen":"2023-03-07T01:02:00Z","last_seen":"2026-08-12T08:36:42.050233Z","times_seen":418484,"resource_available":true,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-12-24","alert":"Sinkholed","trigger":"bizdavar.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-24","alert":"Sinkholed","trigger":"bizdavar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bizdavar.com/wp-content/uploads/2025/04/logo-pnz-600x450-1.png","fqdn":"bizdavar.com","domain":"bizdavar.com","tld":"com"},"ip":{"addr":"104.21.20.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bizdavar.com/","date":"2025-12-24T02:51:40.527Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bizdavar.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 30 Oct 2025 20:00:29 GMT","end":"Wed, 28 Jan 2026 20:57:57 GMT"},"fingerprint":{"sha1":"5D:CD:8B:95:13:4B:07:86:69:DB:63:BB:CB:C1:77:82:AC:0D:A7:26","sha256":"9E:35:D3:AC:31:17:9B:4D:33:29:6C:FD:AA:22:4F:CD:B5:4E:69:36:49:D7:30:36:9E:13:20:86:77:04:F3:0B"}}},"request":{"raw":"GET /wp-content/uploads/2025/04/logo-pnz-600x450-1.png HTTP/1.1\r\nHost: bizdavar.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://bizdavar.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 24 Dec 2025 02:51:40 GMT\r\nserver: cloudflare\r\nlast-modified: Wed, 02 Apr 2025 11:59:45 GMT\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\ncontent-length: 10782\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: image/png\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3GQggSPXs5BBcKFSczi0KzsyOlECtpy32tgCbxzx30mXaysOTJb1eCeRo2ua%2B9fX4vkQZGXh%2FTejTBN%2Fvy%2BGQTVYkPWvhd3dJK4zhg%3D%3D\"}]}\r\nvary: accept-encoding\r\ncf-ray: 9b2ccc59fb542efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10782,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 600 x 450, 8-bit/color RGBA, non-interlaced","md5":"027f233bb34fd6e1e9edb0a6a79db51a","sha1":"ea40c5a66ec2205491dee186903af10c58692907","sha256":"5d7438d7eaeadf534870d4810bd3ceb2bb57d58453b1ff27bb56a0a776e87dc5","sha512":"aef5f623cd04c3d793902205b2f291c8f16906fe925d9ea2a4309394abd5161d1ad4fbff68fde2fb8ee6f81f11fea0aab7e12e2bea91edc88f5c981bb92868b0","ssdeep":"192:FmUiDUm5u2Gi9QHDJ/aep3ZTS7TDymcy1au0MO2mT8xu+:YU5m5u2jQHd//pWTDymqu5Aoxv","tlshash":"ba22b02ab05019c5d51cfd31e5b9854fded842a86632316c89c37eca542ccb8bef2641","first_seen":"2025-12-24T02:52:14.499332Z","last_seen":"2025-12-24T02:52:14.499332Z","times_seen":1,"resource_available":false,"data":null}},"time_used":152,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":152,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-12-24","alert":"Sinkholed","trigger":"bizdavar.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-24","alert":"Sinkholed","trigger":"bizdavar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bizdavar.com/wp-content/uploads/2025/05/BZDiamond-Logo.webp","fqdn":"bizdavar.com","domain":"bizdavar.com","tld":"com"},"ip":{"addr":"104.21.20.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bizdavar.com/","date":"2025-12-24T02:51:40.541Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bizdavar.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 30 Oct 2025 20:00:29 GMT","end":"Wed, 28 Jan 2026 20:57:57 GMT"},"fingerprint":{"sha1":"5D:CD:8B:95:13:4B:07:86:69:DB:63:BB:CB:C1:77:82:AC:0D:A7:26","sha256":"9E:35:D3:AC:31:17:9B:4D:33:29:6C:FD:AA:22:4F:CD:B5:4E:69:36:49:D7:30:36:9E:13:20:86:77:04:F3:0B"}}},"request":{"raw":"GET /wp-content/uploads/2025/05/BZDiamond-Logo.webp HTTP/1.1\r\nHost: bizdavar.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://bizdavar.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 24 Dec 2025 02:51:40 GMT\r\nserver: cloudflare\r\nlast-modified: Sun, 18 May 2025 18:13:46 GMT\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\ncontent-length: 4980\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: image/webp\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=RKKl%2BqXYhgZA82%2Br5FDUL9ZW0w3OpCySTm7a8%2FXxe5PwSW0xHCfudNH58rZalGVpGtZjI3%2BH4oaOHdBQuKtQKZJUaKeNd3GoZ0Wt1w%3D%3D\"}]}\r\nvary: accept-encoding\r\ncf-ray: 9b2ccc59fb602efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4980,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"84fd6925d892462e992546855c52b3dd","sha1":"3392638dbb2d7dc43c8c14e27caab6753b8c61de","sha256":"677597628077310f01985c21cb8796657b9e2726f679e24cd0727050888ead89","sha512":"e2aad3842a4b67aea6cc9a0f545de6fce1efc7420dc80d66fef27b466b41435bdb71290aa76ccda003760869793d2ad7536118597802c53c0396752c2c601ac8","ssdeep":"96:aBrfuaAeaJVQsVehB3Q+mhjaMWJ93wnLKmh7BA+ychz+AwmuYQW7:a6TQsANQPfWlmh9A+ycvb/7","tlshash":"42a17ead99136192ec93fb2746799f19a4670248c144856d56fc4728248f281e3e4bde","first_seen":"2025-12-24T02:52:14.500448Z","last_seen":"2025-12-24T02:52:14.500448Z","times_seen":1,"resource_available":false,"data":null}},"time_used":118,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":118,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-12-24","alert":"Sinkholed","trigger":"bizdavar.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-24","alert":"Sinkholed","trigger":"bizdavar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bizdavar.com/wp-content/uploads/2024/07/BIZ-RED-01-300x300.png","fqdn":"bizdavar.com","domain":"bizdavar.com","tld":"com"},"ip":{"addr":"104.21.20.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bizdavar.com/","date":"2025-12-24T02:51:42.290Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bizdavar.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 30 Oct 2025 20:00:29 GMT","end":"Wed, 28 Jan 2026 20:57:57 GMT"},"fingerprint":{"sha1":"5D:CD:8B:95:13:4B:07:86:69:DB:63:BB:CB:C1:77:82:AC:0D:A7:26","sha256":"9E:35:D3:AC:31:17:9B:4D:33:29:6C:FD:AA:22:4F:CD:B5:4E:69:36:49:D7:30:36:9E:13:20:86:77:04:F3:0B"}}},"request":{"raw":"GET /wp-content/uploads/2024/07/BIZ-RED-01-300x300.png HTTP/1.1\r\nHost: bizdavar.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://bizdavar.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: _ga_F2WGXTVK7F=GS2.1.s1766544701$o1$g0$t1766544701$j60$l0$h0; _ga=GA1.1.1382880001.1766544701\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 24 Dec 2025 02:51:42 GMT\r\nserver: cloudflare\r\nlast-modified: Fri, 21 Mar 2025 12:51:48 GMT\r\naccept-ranges: bytes\r\npriority: u=6,i=?0\r\ncontent-length: 6267\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: image/png\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=SF4rV%2BgSCt8Zi4Yxrt7s5Sboy45u7jYlQxAwye3cy1UPTjqmgUHC8INTBN9aX9VCLAZCRhdPvZuvdWxVl76pH9LlgKAhA79boKTvFg%3D%3D\"}]}\r\nvary: accept-encoding\r\ncf-ray: 9b2ccc654c122efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6267,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 300 x 300, 8-bit/color RGBA, non-interlaced","md5":"d96eb291eb4c74617c64a2c6ab41ef02","sha1":"aabc3f3778ecd779eca8c48b904c8e9a3e237c26","sha256":"1babaa3202bcf70bf6ce6e7dba17865baf720c5a0a7064c05a7998b7fac66ed3","sha512":"fa3ac507f7316dac9a024a9e1cf03c9d7f2e05c0950ca890aeaf714a73b25dba17ebf279f07454b19e309c7c85d198a455c180f61d148c9a495b1abc24af7d63","ssdeep":"192:zpi8b2f/aRbQF8Jimq7aWpE3dHHyEyhX6Ala:zRKgbQFQihpE3tBcX6ka","tlshash":"ced16d8602a5ce6e9caf882cb47978e0b937497fc40a6ce4cc57e4d50292d9c5520ede","first_seen":"2025-12-24T02:52:14.50144Z","last_seen":"2025-12-24T02:52:14.50144Z","times_seen":1,"resource_available":false,"data":null}},"time_used":140,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":140,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-12-24","alert":"Sinkholed","trigger":"bizdavar.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-24","alert":"Sinkholed","trigger":"bizdavar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bizdavar.com/wp-content/uploads/2025/05/zedcex-scaled.png","fqdn":"bizdavar.com","domain":"bizdavar.com","tld":"com"},"ip":{"addr":"104.21.20.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bizdavar.com/","date":"2025-12-24T02:51:40.549Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bizdavar.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 30 Oct 2025 20:00:29 GMT","end":"Wed, 28 Jan 2026 20:57:57 GMT"},"fingerprint":{"sha1":"5D:CD:8B:95:13:4B:07:86:69:DB:63:BB:CB:C1:77:82:AC:0D:A7:26","sha256":"9E:35:D3:AC:31:17:9B:4D:33:29:6C:FD:AA:22:4F:CD:B5:4E:69:36:49:D7:30:36:9E:13:20:86:77:04:F3:0B"}}},"request":{"raw":"GET /wp-content/uploads/2025/05/zedcex-scaled.png HTTP/1.1\r\nHost: bizdavar.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://bizdavar.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 24 Dec 2025 02:51:40 GMT\r\nserver: cloudflare\r\nlast-modified: Sun, 18 May 2025 18:19:29 GMT\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\ncontent-length: 211493\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: image/png\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=V1sClTKltudhOu2hiGK4opLUPnBbzLbAgt%2BdtbC05tz4DZYGklJNXcMZEoWkkWwzg9N9kORUrXHNU%2FJWB%2FdRVmg6301p1br8Vjzoxw%3D%3D\"}]}\r\nvary: accept-encoding\r\ncf-ray: 9b2ccc59fb652efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":211493,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 2560 x 829, 8-bit/color RGBA, non-interlaced","md5":"1e51399480285a00937641d978f47167","sha1":"98de53f66257af90738cbab26b3d89eb73b673ed","sha256":"6f7d6313c6b5ed78e118d7eaf0743d1ccbfa3fea908e01797a038727088e2d09","sha512":"4b8944411a2af3f3a68af10d9f88c274a858d3613d1d2e98ba8cac56385cb973f8a97e44927a9227e12dad6209b94455f1db0eb617325af566c6d7117f3657c9","ssdeep":"6144:LBM0z1uVkIfKHE5T3pMPlE/IykTjvJnazTvTh:LBMY1uZllhzc1GTLh","tlshash":"9f241292aa73c916dc07567fb8714bd72b972030c382bcf9a66a414cd61ce8f4946ed2","first_seen":"2025-12-24T02:52:14.502773Z","last_seen":"2025-12-24T02:52:14.502773Z","times_seen":1,"resource_available":false,"data":null}},"time_used":313,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":138,"receive":175,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-24","alert":"Sinkholed","trigger":"bizdavar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-12-24","alert":"Sinkholed","trigger":"bizdavar.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bizdavar.com/wp-content/plugins/elementor/assets/js/frontend-modules.min.js?ver=3.32.5","fqdn":"bizdavar.com","domain":"bizdavar.com","tld":"com"},"ip":{"addr":"104.21.20.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bizdavar.com/","date":"2025-12-24T02:51:40.590Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bizdavar.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 30 Oct 2025 20:00:29 GMT","end":"Wed, 28 Jan 2026 20:57:57 GMT"},"fingerprint":{"sha1":"5D:CD:8B:95:13:4B:07:86:69:DB:63:BB:CB:C1:77:82:AC:0D:A7:26","sha256":"9E:35:D3:AC:31:17:9B:4D:33:29:6C:FD:AA:22:4F:CD:B5:4E:69:36:49:D7:30:36:9E:13:20:86:77:04:F3:0B"}}},"request":{"raw":"GET /wp-content/plugins/elementor/assets/js/frontend-modules.min.js?ver=3.32.5 HTTP/1.1\r\nHost: bizdavar.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://bizdavar.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 24 Dec 2025 02:51:40 GMT\r\nserver: cloudflare\r\nlast-modified: Thu, 06 Nov 2025 16:18:10 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: accept-encoding\r\ncontent-encoding: br\r\ncontent-type: text/javascript\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=IOYoDO2yIINEA5U%2BuNiBY61Ds4ecMLHKSwgUxTYSUuzroI8BCdpil%2By658pmwFGn9ZzNRCG5%2Fn2FssjiuXno0wgn%2BON2fofXiXpCtg%3D%3D\"}]}\r\ncf-ray: 9b2ccc5a7b722efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":59579,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (59538)","md5":"c116e15b70f12dc84fb0bb8080af81c7","sha1":"c90eef327c627b38eabf8c3e7a9d972c73e6551e","sha256":"1550de841a4e7899fa03fc14c4d69dc2fa75ab7d24b7fa9722102a401b0f152e","sha512":"89ce2994089a11f347f910190d0cf6ad12150b4ef2d51c186debd092680b32d06ebcfacfe57eaf8f868e208de03c8b6da0f3d7b0f92da53b2d75276cbf5c57a1","ssdeep":"1536:LGuxmDuqHrrUN3KQ5RSSYeAjA6c9CSTwk83FKm184cR8+esOAexXKh83YNQAzeLB:86SOEAu","tlshash":"5d43e9863552f4b70beb44dad03f450af25708a4a40da4d4bfe9dce594b0d8a133bb79","first_seen":"2025-10-21T14:39:27.195995Z","last_seen":"2026-08-11T09:37:39.037864Z","times_seen":14026,"resource_available":true,"data":null}},"time_used":276,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":168,"receive":108,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-24","alert":"Sinkholed","trigger":"bizdavar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-12-24","alert":"Sinkholed","trigger":"bizdavar.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bizdavar.com/wp-content/plugins/elementor-pro/assets/lib/smartmenus/jquery.smartmenus.min.js?ver=1.2.1","fqdn":"bizdavar.com","domain":"bizdavar.com","tld":"com"},"ip":{"addr":"104.21.20.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bizdavar.com/","date":"2025-12-24T02:51:40.598Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bizdavar.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 30 Oct 2025 20:00:29 GMT","end":"Wed, 28 Jan 2026 20:57:57 GMT"},"fingerprint":{"sha1":"5D:CD:8B:95:13:4B:07:86:69:DB:63:BB:CB:C1:77:82:AC:0D:A7:26","sha256":"9E:35:D3:AC:31:17:9B:4D:33:29:6C:FD:AA:22:4F:CD:B5:4E:69:36:49:D7:30:36:9E:13:20:86:77:04:F3:0B"}}},"request":{"raw":"GET /wp-content/plugins/elementor-pro/assets/lib/smartmenus/jquery.smartmenus.min.js?ver=1.2.1 HTTP/1.1\r\nHost: bizdavar.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://bizdavar.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 24 Dec 2025 02:51:40 GMT\r\nserver: cloudflare\r\nlast-modified: Thu, 06 Nov 2025 16:20:38 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: accept-encoding\r\ncontent-encoding: br\r\ncontent-type: text/javascript\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=KEYkAGiP7NIqJLxMfhq1aaSRrxCSswEKfmx8oiAxigCjoCKnAP6xVYb3CFUb2TxHpvpOwPCbujuDsuwrVo43nVIZPBAZpvvQBfm%2BGA%3D%3D\"}]}\r\ncf-ray: 9b2ccc5a8b762efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":24109,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (24021)","md5":"9e7c898d1649315173db5d2d8730fb75","sha1":"364a6836a90b28329404b7d7f58a524861ef63f5","sha256":"f9b60ae2f2938c589960ef00d9b9a644f0847f7183f597cdc3fbf8cfe904c552","sha512":"4ed0541755c25dd9afbf9da3b64ac082a2f7119720e4b8a21fbc7cb302278aa2d2e15d0e3f735f14a9913a38508c85c45b3df22922609adfe551541396881601","ssdeep":"384:rrfXI5z0Yuyh4LsvaJWlN7nTZFjR52E4FM3vaqJZdNYh3JqhiyJDl54H4Qoh5cCK:HwEyOLsva8lBrVUEmM3vaqJbNYh3Uiym","tlshash":"e5b2b4ce314174a386eba1f8512f162652336466e20649dd7c3faec55f28e6931b2f3c","first_seen":"2023-11-22T22:20:37Z","last_seen":"2026-08-12T08:41:02.799013Z","times_seen":105172,"resource_available":true,"data":null}},"time_used":213,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":166,"receive":47,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-12-24","alert":"Sinkholed","trigger":"bizdavar.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-24","alert":"Sinkholed","trigger":"bizdavar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bizdavar.com/wp-content/plugins/elementor-pro/assets/css/modules/sticky.min.css?ver=3.32.2","fqdn":"bizdavar.com","domain":"bizdavar.com","tld":"com"},"ip":{"addr":"104.21.20.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://bizdavar.com/","date":"2025-12-24T02:51:40.489Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bizdavar.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 30 Oct 2025 20:00:29 GMT","end":"Wed, 28 Jan 2026 20:57:57 GMT"},"fingerprint":{"sha1":"5D:CD:8B:95:13:4B:07:86:69:DB:63:BB:CB:C1:77:82:AC:0D:A7:26","sha256":"9E:35:D3:AC:31:17:9B:4D:33:29:6C:FD:AA:22:4F:CD:B5:4E:69:36:49:D7:30:36:9E:13:20:86:77:04:F3:0B"}}},"request":{"raw":"GET /wp-content/plugins/elementor-pro/assets/css/modules/sticky.min.css?ver=3.32.2 HTTP/1.1\r\nHost: bizdavar.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://bizdavar.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 24 Dec 2025 02:51:40 GMT\r\nserver: cloudflare\r\nlast-modified: Thu, 06 Nov 2025 16:20:38 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nvary: accept-encoding\r\ncontent-encoding: br\r\ncontent-type: text/css\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=CrergfpwilHwAGpH3TV%2BFiGE1AryNo%2BjyCDJ2RlgfjUpnNWtooCmvgVOuTgjN7KcaCNnZUww0QZtgkWX2Ze4mlocK0VweEliLVBhvQ%3D%3D\"}]}\r\ncf-ray: 9b2ccc59bb322efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":162,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7305ed8a30b2e9610fea4e383b7d1756","sha1":"24bef514e8dbd4dc0cbebb686639085dccbb9b4e","sha256":"6f0b2e96bd88c2d8512dfd204adaf2251376467a1f834a51c66ce85f0051979d","sha512":"cb9938e53724a35304cd932207fc9a255f4aa51ea111168e7fe4f9871435e5430a0377886243a4a62b3c2de92f143b88608a460086f6f482e024d251d29be11d","ssdeep":"","tlshash":"82c08c847a8fc830c03fb291088aae1c036ba8c34a90408aac12a00e0aedfe512dc002","first_seen":"2024-10-29T10:46:14.149107Z","last_seen":"2026-08-12T08:29:04.658136Z","times_seen":54943,"resource_available":false,"data":null}},"time_used":127,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":126,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-12-24","alert":"Sinkholed","trigger":"bizdavar.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-24","alert":"Sinkholed","trigger":"bizdavar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css?family=Roboto:100,100italic,200,200italic,300,300italic,400,400italic,500,500italic,600,600italic,700,700italic,800,800italic,900,900italic\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.251.38.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://bizdavar.com/","date":"2025-12-24T02:51:40.497Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 15:53:13 GMT","end":"Wed, 25 Feb 2026 15:53:12 GMT"},"fingerprint":{"sha1":"A8:BA:6B:80:7C:EC:B1:6F:C1:C2:03:D7:C9:27:6E:75:DE:4B:AA:47","sha256":"4E:2C:B9:C5:81:56:5E:97:93:07:22:12:66:E2:52:C6:0A:2E:17:72:FF:9B:5F:2A:B9:E1:21:80:05:6D:8B:3D"}}},"request":{"raw":"GET /css?family=Roboto:100,100italic,200,200italic,300,300italic,400,400italic,500,500italic,600,600italic,700,700italic,800,800italic,900,900italic\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://bizdavar.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Wed, 24 Dec 2025 02:51:40 GMT\r\ndate: Wed, 24 Dec 2025 02:51:40 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":100764,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (1572)","md5":"c1a689e52451e6a409deb9d792dbac30","sha1":"d51f6f8ea1dfdf5fb4c0dcaf3c7978ce4d8eed75","sha256":"55960525d6ce04943c6bde176b9ab7c92f4a27666c7105e5b0d32a336ab1c0b2","sha512":"5839e22aaa92cf2407b1717f337de537822b89e5745d60a1db18ba779cbe19fbdc4266d89a73adba84f7005bc176eaa0d9294903992cf04e1be63072b6f7e675","ssdeep":"768:yDcDaDvDcDzBDFKDeDODO/Re/zUFhl114KF4zLFa+OgN7wNzaFLXnnGE3GzhFUQS:zO3YRSrslIxerANy3El","tlshash":"efa3eda1041b5040ab834ce223cfbe34fe1f92507151d0b9abfd9b6baddbd66526835c","first_seen":"2025-11-19T00:01:22.142754Z","last_seen":"2026-05-31T09:48:00.748269Z","times_seen":5838,"resource_available":false,"data":null}},"time_used":336,"timings":{"blocked":130,"dns":0,"connect":7,"send":0,"wait":19,"receive":0,"ssl":177},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bizdavar.com/wp-includes/js/jquery/ui/core.min.js?ver=1.13.3","fqdn":"bizdavar.com","domain":"bizdavar.com","tld":"com"},"ip":{"addr":"104.21.20.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bizdavar.com/","date":"2025-12-24T02:51:40.594Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bizdavar.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 30 Oct 2025 20:00:29 GMT","end":"Wed, 28 Jan 2026 20:57:57 GMT"},"fingerprint":{"sha1":"5D:CD:8B:95:13:4B:07:86:69:DB:63:BB:CB:C1:77:82:AC:0D:A7:26","sha256":"9E:35:D3:AC:31:17:9B:4D:33:29:6C:FD:AA:22:4F:CD:B5:4E:69:36:49:D7:30:36:9E:13:20:86:77:04:F3:0B"}}},"request":{"raw":"GET /wp-includes/js/jquery/ui/core.min.js?ver=1.13.3 HTTP/1.1\r\nHost: bizdavar.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://bizdavar.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 24 Dec 2025 02:51:40 GMT\r\nserver: cloudflare\r\nlast-modified: Tue, 15 Apr 2025 20:11:41 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: accept-encoding\r\ncontent-encoding: br\r\ncontent-type: text/javascript\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=LrN36mjktEOLTwImppjHmnnX6nOanfE%2B6qu6JlLjCaEUNiY%2FyuPQVQOx2o55Xfb2n2xSKwEbsvlfT74N1A49G%2BpdBya%2Bhr38SlyXqw%3D%3D\"}]}\r\ncf-ray: 9b2ccc5a7b732efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":21464,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (8189)","md5":"da215ae12b95b3aeeb2047667016c7f8","sha1":"480a7087aa74b5b47c47f05a11670e823a3ae4c0","sha256":"699210a5ed06e497b4730ec83bb65ac4c2269ae4a0ee8af3f24aae7ee5b66b76","sha512":"d256ddc828c06f7b84f7df706a4481928a186ea6d3e1358254a1ec02f403d72d2f3aecd682a93aad61b8f236f17dbcf7e6ca100f78c30a348682bf8ee125d8ff","ssdeep":"384:G/rsrDr8LVyraS3dtrqorqr8hrpCip8fuxNhlGX0CiS9rH/OrLrErJ29FkFvd:iS33ZdvK47kv","tlshash":"06a2d94eb246380586f7a2a5402f521fb132e25cb105c8ddf468d8da3c7eea95173f79","first_seen":"2025-04-15T23:53:17.313193Z","last_seen":"2026-08-12T08:41:02.73336Z","times_seen":341294,"resource_available":true,"data":null}},"time_used":215,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":168,"receive":47,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-24","alert":"Sinkholed","trigger":"bizdavar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-12-24","alert":"Sinkholed","trigger":"bizdavar.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bizdavar.com/wp-content/uploads/2025/05/alimila-logo.png","fqdn":"bizdavar.com","domain":"bizdavar.com","tld":"com"},"ip":{"addr":"104.21.20.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bizdavar.com/","date":"2025-12-24T02:51:40.550Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bizdavar.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 30 Oct 2025 20:00:29 GMT","end":"Wed, 28 Jan 2026 20:57:57 GMT"},"fingerprint":{"sha1":"5D:CD:8B:95:13:4B:07:86:69:DB:63:BB:CB:C1:77:82:AC:0D:A7:26","sha256":"9E:35:D3:AC:31:17:9B:4D:33:29:6C:FD:AA:22:4F:CD:B5:4E:69:36:49:D7:30:36:9E:13:20:86:77:04:F3:0B"}}},"request":{"raw":"GET /wp-content/uploads/2025/05/alimila-logo.png HTTP/1.1\r\nHost: bizdavar.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://bizdavar.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 24 Dec 2025 02:51:40 GMT\r\nserver: cloudflare\r\nlast-modified: Sun, 18 May 2025 18:24:39 GMT\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\ncontent-length: 24251\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: image/png\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=E6ZICsEKClASQSxyRypwa62wU3%2FBnc6gF10eQJLfPZPNQdKS%2FRiFP4VWgS4XJLOBQHL1MQTH1pKXuvkcp4%2Bk1QwN9YnWSeTOSuUKHg%3D%3D\"}]}\r\nvary: accept-encoding\r\ncf-ray: 9b2ccc5a0b662efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":24251,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 500 x 500, 8-bit/color RGBA, non-interlaced","md5":"d55cd00015d94d4e595e9fa34f32f740","sha1":"957c775869b7a611165c3ebe1f0843fcf44cb2b2","sha256":"70d254205cb8dc4ee09f91338d1f21abf9e81a8e786366f026637089f4fb2e55","sha512":"2a7e4f39b09e6e5a8eaa3d09bc9422d4de62fcb6ee41f52c8daf6208f6681a7cb8516b97f71d4548d0af048851c2e3d93ebfb676b5038483bd21bf26785f1913","ssdeep":"384:09G9vM3TEv7edhk3bqkuKAcDqpB2fPUGZjBnFJCK9ZZdduzBO9pDimKVLEeB:EGNM3TEv6d0AhA3UGBBrCfnXtE4","tlshash":"55b2bf51b4609c53c806a8cbeec6f27eea790e618c93c0d0ad875c560b6b761efd31e1","first_seen":"2025-12-24T02:52:14.507135Z","last_seen":"2025-12-24T02:52:14.507135Z","times_seen":1,"resource_available":false,"data":null}},"time_used":189,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":144,"receive":45,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-12-24","alert":"Sinkholed","trigger":"bizdavar.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-24","alert":"Sinkholed","trigger":"bizdavar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bizdavar.com/wp-includes/js/dist/hooks.min.js?ver=dd5603f07f9220ed27f1","fqdn":"bizdavar.com","domain":"bizdavar.com","tld":"com"},"ip":{"addr":"104.21.20.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bizdavar.com/","date":"2025-12-24T02:51:40.605Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bizdavar.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 30 Oct 2025 20:00:29 GMT","end":"Wed, 28 Jan 2026 20:57:57 GMT"},"fingerprint":{"sha1":"5D:CD:8B:95:13:4B:07:86:69:DB:63:BB:CB:C1:77:82:AC:0D:A7:26","sha256":"9E:35:D3:AC:31:17:9B:4D:33:29:6C:FD:AA:22:4F:CD:B5:4E:69:36:49:D7:30:36:9E:13:20:86:77:04:F3:0B"}}},"request":{"raw":"GET /wp-includes/js/dist/hooks.min.js?ver=dd5603f07f9220ed27f1 HTTP/1.1\r\nHost: bizdavar.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://bizdavar.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 24 Dec 2025 02:51:40 GMT\r\nserver: cloudflare\r\nlast-modified: Thu, 04 Dec 2025 14:40:42 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: accept-encoding\r\ncontent-encoding: br\r\ncontent-type: text/javascript\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=tfgCGlbdSG0Jt0rrjDoKw2%2F%2FpgxfVpylHejSIH1nEvv9ZVVFoXRmT0h245tmioWsKjr6jFZVuVUppcl6waLBCAdyrXNxC6khUuNtoA%3D%3D\"}]}\r\ncf-ray: 9b2ccc5a8b7d2efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5661,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (5626)","md5":"90e932bd9e62583fc494c00498cfe7f5","sha1":"4f57e11bff609f90f49174187a0b5a6ba847ad28","sha256":"87cee5f49ba0d3017efc409579fc58b91a717f8f14751f7d804447ac9bcbaf4b","sha512":"ed9c129faf972ddfa705f05c3207884e5e9cd175baa45d49ce9d42bc0d01e4e8f36e627731bdd97214b1e2400fdd5012262a42f9800cd4f5565dbf183ba58507","ssdeep":"96:wXDE/3s/0EBM6ZUUCRTH+zl4NsBjcEmDtrGV2C2yics6w1RfGdzsvqZTq:wzg3kBFZYH+zhjngRw2cLzw1RfGdzsvx","tlshash":"56c153847983b970b2337057f0ff48d561baeba575298081964ec4a05d7388ee0a7abd","first_seen":"2025-10-27T08:47:54.273294Z","last_seen":"2026-08-12T07:15:32.456782Z","times_seen":204074,"resource_available":true,"data":null}},"time_used":125,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":125,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-12-24","alert":"Sinkholed","trigger":"bizdavar.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-24","alert":"Sinkholed","trigger":"bizdavar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bizdavar.com/wp-content/plugins/elementor/assets/js/shared-frontend-handlers.4c8abccc3e268b0767b2.bundle.min.js","fqdn":"bizdavar.com","domain":"bizdavar.com","tld":"com"},"ip":{"addr":"104.21.20.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bizdavar.com/","date":"2025-12-24T02:51:41.529Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bizdavar.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 30 Oct 2025 20:00:29 GMT","end":"Wed, 28 Jan 2026 20:57:57 GMT"},"fingerprint":{"sha1":"5D:CD:8B:95:13:4B:07:86:69:DB:63:BB:CB:C1:77:82:AC:0D:A7:26","sha256":"9E:35:D3:AC:31:17:9B:4D:33:29:6C:FD:AA:22:4F:CD:B5:4E:69:36:49:D7:30:36:9E:13:20:86:77:04:F3:0B"}}},"request":{"raw":"GET /wp-content/plugins/elementor/assets/js/shared-frontend-handlers.4c8abccc3e268b0767b2.bundle.min.js HTTP/1.1\r\nHost: bizdavar.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://bizdavar.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: _ga_F2WGXTVK7F=GS2.1.s1766544701$o1$g0$t1766544701$j60$l0$h0; _ga=GA1.1.1382880001.1766544701\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 24 Dec 2025 02:51:41 GMT\r\nserver: cloudflare\r\nlast-modified: Thu, 06 Nov 2025 16:18:10 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: accept-encoding\r\ncontent-encoding: br\r\ncontent-type: text/javascript\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=FpOf8E4WFP1%2BcFfJNVAe35OvJI2fHJiarAx7mMObv3X1X1NmVxVVxiTbMu%2FuI9KP%2F7T%2FRddGilAEu7mLeFWZdpu%2FeRL8qHSDpWdegg%3D%3D\"}]}\r\ncf-ray: 9b2ccc608bd72efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8525,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (8485)","md5":"eb8a6bc67322f891cf9f80eb9c499767","sha1":"30f7326ce536c99f372d7c7a9b242f485b272d49","sha256":"2371fe085e4a98b4aeb71496e7098e897977ae806518aea247ccc75524c7ee98","sha512":"7c3596d8b5dd1b78849c5d7c9e1f9d7b7bd87b1f29cd643361ed7539b94b44449921c72d5685a06616b4d07e95bd6b860187da997c57530e10be2b7ec56fa999","ssdeep":"192:xwfFpzqxODCWV5lxZmdXLf+UvDZ5CMtakRhPZT8cMkCw+v10QITpRHvcwxDnPoGg:qHzqxOPV5lxodXLfpvD/NtakRhPZT8ck","tlshash":"8b02310a74c1982db58b58ba3532432866a8014de1018f6db1bf79fb85a6d82377b7f1","first_seen":"2025-10-21T14:39:27.189407Z","last_seen":"2026-08-11T09:37:39.021763Z","times_seen":14315,"resource_available":true,"data":null}},"time_used":61,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":61,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-12-24","alert":"Sinkholed","trigger":"bizdavar.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-24","alert":"Sinkholed","trigger":"bizdavar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bizdavar.com/","fqdn":"bizdavar.com","domain":"bizdavar.com","tld":"com"},"ip":{"addr":"104.21.20.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-12-24T02:51:39.783Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bizdavar.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 30 Oct 2025 20:00:29 GMT","end":"Wed, 28 Jan 2026 20:57:57 GMT"},"fingerprint":{"sha1":"5D:CD:8B:95:13:4B:07:86:69:DB:63:BB:CB:C1:77:82:AC:0D:A7:26","sha256":"9E:35:D3:AC:31:17:9B:4D:33:29:6C:FD:AA:22:4F:CD:B5:4E:69:36:49:D7:30:36:9E:13:20:86:77:04:F3:0B"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: bizdavar.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Wed, 24 Dec 2025 02:51:40 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nserver: cloudflare\r\nstrict-transport-security: max-age=63072000; includeSubDomains;preload\r\nx-xss-protection: 0\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-frame-options: SAMEORIGIN\r\ncontent-security-policy: frame-ancestors 'self' ; upgrade-insecure-requests;\r\nlink: \u003chttps://bizdavar.com/wp-json/\u003e; rel=\"https://api.w.org/\", \u003chttps://bizdavar.com/wp-json/wp/v2/pages/12\u003e; rel=\"alternate\"; title=\"JSON\"; type=\"application/json\", \u003chttps://bizdavar.com/\u003e; rel=shortlink\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=VZIin0OgyphuezFrGPCw4QYFoNiGxMzr791YJ66KmtBWoHlcNtGsQf%2FJ0d3NfbvIYLhZ573MbiOgj%2FRVLOMq3KihAVhFgbCIVSU%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: br\r\ncf-ray: 9b2ccc55c991b51d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]},{"name":"Site Kit:1.165.0","description":"Site Kit is a one-stop solution for WordPress users to use everything Google has to offer to make them successful on the web.","website":"https://sitekit.withgoogle.com/","common_platform_enumeration":"","icon":"Google.svg","categories":["Analytics","WordPress plugins"]},{"name":"Yoast SEO:26.3","description":"Yoast SEO is a search engine optimisation plugin for WordPress and other platforms.","website":"https://yoast.com/wordpress/plugins/seo/","common_platform_enumeration":"","icon":"Yoast SEO.png","categories":["SEO","WordPress plugins"]},{"name":"Complianz","description":"Complianz is a GDPR/CCPA Cookie Consent plugin that supports GDPR, DSGVO, CCPA and PIPEDA with a conditional Cookie Notice and customized Cookie Policy based on the results of the built-in Cookie Scan.","website":"https://complianz.io","common_platform_enumeration":"","icon":"Complianz.png","categories":["A/B Testing","Cookie compliance","WordPress plugins"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"jQuery Migrate:3.4.1","description":"Query Migrate is a javascript library that allows you to preserve the compatibility of your jQuery code developed for versions of jQuery older than 1.9.","website":"https://github.com/jquery/jquery-migrate","common_platform_enumeration":"","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"WordPress","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"Google Analytics","description":"Google Analytics is a free web analytics service that tracks and reports website traffic.","website":"https://google.com/analytics","common_platform_enumeration":"","icon":"Google Analytics.svg","categories":["Analytics"]},{"name":"Elementor:3.32.5","description":"Elementor is a website builder platform for professionals on WordPress.","website":"https://elementor.com","common_platform_enumeration":"","icon":"Elementor.svg","categories":["Page builders","WordPress plugins"]}],"data":{"size":116471,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (11055), with CRLF, LF line terminators","md5":"aeb44441dee7976ab35f3cb6d37441ec","sha1":"8c0b8fb5011b8ad328712be4860690d590f6111a","sha256":"46efdcb0a7ab5d93cc428bba30e1867420824bcae0449d20bf405e9391d50f6f","sha512":"548ade8499de991dececa164caa1a7331d755fcd0db821a6607da294cbbffe3c3000b4e20d7d46fa7213315ba83fd2e891b89b1343cf7029e8c2377abc8e8c8f","ssdeep":"3072:o+PhLnWiTv9bATkw7janEqy0H5lleFS4QZ:o+PoixbX","tlshash":"4bb3197679de0436362f82cb80273a1ca1cad867c526d9f4f6fe01245ff0d9232a7619","first_seen":"2025-12-24T02:52:14.509145Z","last_seen":"2025-12-24T02:52:14.509145Z","times_seen":1,"resource_available":false,"data":null}},"time_used":491,"timings":{"blocked":23,"dns":0,"connect":2,"send":0,"wait":445,"receive":0,"ssl":18},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-24","alert":"Sinkholed","trigger":"bizdavar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-12-24","alert":"Sinkholed","trigger":"bizdavar.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bizdavar.com/wp-content/plugins/elementor/assets/css/widget-social-icons-rtl.min.css?ver=3.32.5","fqdn":"bizdavar.com","domain":"bizdavar.com","tld":"com"},"ip":{"addr":"104.21.20.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://bizdavar.com/","date":"2025-12-24T02:51:40.490Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bizdavar.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 30 Oct 2025 20:00:29 GMT","end":"Wed, 28 Jan 2026 20:57:57 GMT"},"fingerprint":{"sha1":"5D:CD:8B:95:13:4B:07:86:69:DB:63:BB:CB:C1:77:82:AC:0D:A7:26","sha256":"9E:35:D3:AC:31:17:9B:4D:33:29:6C:FD:AA:22:4F:CD:B5:4E:69:36:49:D7:30:36:9E:13:20:86:77:04:F3:0B"}}},"request":{"raw":"GET /wp-content/plugins/elementor/assets/css/widget-social-icons-rtl.min.css?ver=3.32.5 HTTP/1.1\r\nHost: bizdavar.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://bizdavar.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 24 Dec 2025 02:51:40 GMT\r\nserver: cloudflare\r\nlast-modified: Thu, 06 Nov 2025 16:18:10 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nvary: accept-encoding\r\ncontent-encoding: br\r\ncontent-type: text/css\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=hS9IU7dMSygjJt8ujQZk1Pm2cUW2orueidcHSvzwEUEag9O2CCiriuQi85fT426DqZXwE9jP8c6%2BCyaHyEdVSKPFRgEL5OF8pSCj1Q%3D%3D\"}]}\r\ncf-ray: 9b2ccc59bb332efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5150,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (5110)","md5":"5d1113272f99513312efebed41032e41","sha1":"2ed6b6a0a03d86ac69eef4b460224ed012db69bd","sha256":"59db5c5aecf536168e8663c3fd6d945580099af809696db24cc1d04e40a61b9e","sha512":"f2629c192605f863403ec43788259b6c52e784e92ae2bf16f05baf5d47516a46929514bf25bc1b63a88daaacc56dc1fe69e43f5e0d3f99998a0ef3f96703f889","ssdeep":"48:B8wUDoWozmcbWsiYPt3U/vjfQIeyiZ8Fu2ifnFNZP1NsXUyG9eoL:B85oz/WkBUHjfQL7aFu2if3Jf9HL","tlshash":"75b17650be4f9586721f002a0993f309d05a12c5dc8c6f78f856b16e59b6fe43a73eb2","first_seen":"2025-10-21T14:39:27.109378Z","last_seen":"2026-08-11T09:37:38.95034Z","times_seen":6870,"resource_available":false,"data":null}},"time_used":155,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":155,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-24","alert":"Sinkholed","trigger":"bizdavar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-12-24","alert":"Sinkholed","trigger":"bizdavar.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bizdavar.com/wp-content/plugins/elementor-pro/assets/js/frontend.min.js?ver=3.32.2","fqdn":"bizdavar.com","domain":"bizdavar.com","tld":"com"},"ip":{"addr":"104.21.20.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bizdavar.com/","date":"2025-12-24T02:51:40.611Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bizdavar.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 30 Oct 2025 20:00:29 GMT","end":"Wed, 28 Jan 2026 20:57:57 GMT"},"fingerprint":{"sha1":"5D:CD:8B:95:13:4B:07:86:69:DB:63:BB:CB:C1:77:82:AC:0D:A7:26","sha256":"9E:35:D3:AC:31:17:9B:4D:33:29:6C:FD:AA:22:4F:CD:B5:4E:69:36:49:D7:30:36:9E:13:20:86:77:04:F3:0B"}}},"request":{"raw":"GET /wp-content/plugins/elementor-pro/assets/js/frontend.min.js?ver=3.32.2 HTTP/1.1\r\nHost: bizdavar.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://bizdavar.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 24 Dec 2025 02:51:40 GMT\r\nserver: cloudflare\r\nlast-modified: Thu, 06 Nov 2025 16:20:38 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: accept-encoding\r\ncontent-encoding: br\r\ncontent-type: text/javascript\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=QxeYasaOnB0muZOCHlK4MqNPfYcc9k9H3s5iC0nvuDVJgNRk6iHFGQUagebTLwyYPAeFRqhaoOfmAzgglQPxHKF0%2BQW6Q9ednERF%2Bw%3D%3D\"}]}\r\ncf-ray: 9b2ccc5a9b7f2efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":24288,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (24244)","md5":"f92058c128529d2332f62a15e59a207c","sha1":"d1a2c287dff61ef6cd496720716356197ce435b7","sha256":"0822d22dda2c884059eae18b7dd3cfc4a4e9a0a454c7a68440f31ab3c594fa95","sha512":"f2c702c2dab8ce6c32818b77aa8883154edde5b2bd897d8dbbc7176f37fd0f4eab9c8c20f825aa7bf92ce23e652320977885258567b307b88414148e5928d1b7","ssdeep":"384:mxpy+EVxFm6cKJskdHd7taQtHuGJswg/i+TSQDTWmMo7YtDTVHJiMqkoh+vFWN7F:mxw+EVxFm6cKikdHd7taQtHuGJswg/D9","tlshash":"24b2d9013163ac7a50cf815be467420e7b374895740570ed7abc6cdba5b8e9a33ea339","first_seen":"2025-09-29T16:46:42.89459Z","last_seen":"2026-08-11T20:57:59.65011Z","times_seen":7547,"resource_available":true,"data":null}},"time_used":169,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":130,"receive":39,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-24","alert":"Sinkholed","trigger":"bizdavar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-12-24","alert":"Sinkholed","trigger":"bizdavar.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bizdavar.com/wp-content/uploads/2024/12/Vazirmatn-Medium.ttf","fqdn":"bizdavar.com","domain":"bizdavar.com","tld":"com"},"ip":{"addr":"104.21.20.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://bizdavar.com/","date":"2025-12-24T02:51:41.613Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bizdavar.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 30 Oct 2025 20:00:29 GMT","end":"Wed, 28 Jan 2026 20:57:57 GMT"},"fingerprint":{"sha1":"5D:CD:8B:95:13:4B:07:86:69:DB:63:BB:CB:C1:77:82:AC:0D:A7:26","sha256":"9E:35:D3:AC:31:17:9B:4D:33:29:6C:FD:AA:22:4F:CD:B5:4E:69:36:49:D7:30:36:9E:13:20:86:77:04:F3:0B"}}},"request":{"raw":"GET /wp-content/uploads/2024/12/Vazirmatn-Medium.ttf HTTP/1.1\r\nHost: bizdavar.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://bizdavar.com/wp-content/uploads/elementor/css/post-9.css?ver=1765008745\r\nCookie: _ga_F2WGXTVK7F=GS2.1.s1766544701$o1$g0$t1766544701$j60$l0$h0; _ga=GA1.1.1382880001.1766544701\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 404 Not Found\r\ndate: Wed, 24 Dec 2025 02:51:41 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=63072000; includeSubDomains;preload\r\nx-xss-protection: 0\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-frame-options: SAMEORIGIN\r\ncontent-security-policy: frame-ancestors 'self' ; upgrade-insecure-requests;\r\nexpires: Wed, 11 Jan 1984 05:00:00 GMT\r\ncache-control: no-cache, must-revalidate, max-age=0, no-store, private\r\nlink: \u003chttps://bizdavar.com/wp-json/\u003e; rel=\"https://api.w.org/\"\r\nvary: accept-encoding\r\ncontent-encoding: br\r\npriority: u=4,i=?0\r\ncontent-type: text/html; charset=UTF-8\r\ncf-cache-status: BYPASS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=c6L5c2q2aGMwJxYkrCgv3Jb21CagDeoLqYWZotvsaF2wN3idD440lZxuJFgVYJVwp8DdmwoepiLFwDOn9C%2FmiRXQkqKbdbzctbj5Iw%3D%3D\"}]}\r\ncf-ray: 9b2ccc610bdf2efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Complianz","description":"Complianz is a GDPR/CCPA Cookie Consent plugin that supports GDPR, DSGVO, CCPA and PIPEDA with a conditional Cookie Notice and customized Cookie Policy based on the results of the built-in Cookie Scan.","website":"https://complianz.io","common_platform_enumeration":"","icon":"Complianz.png","categories":["A/B Testing","Cookie compliance","WordPress plugins"]},{"name":"Yoast SEO:26.3","description":"Yoast SEO is a search engine optimisation plugin for WordPress and other platforms.","website":"https://yoast.com/wordpress/plugins/seo/","common_platform_enumeration":"","icon":"Yoast SEO.png","categories":["SEO","WordPress plugins"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"jQuery Migrate:3.4.1","description":"Query Migrate is a javascript library that allows you to preserve the compatibility of your jQuery code developed for versions of jQuery older than 1.9.","website":"https://github.com/jquery/jquery-migrate","common_platform_enumeration":"","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"WordPress","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"Elementor:3.32.5","description":"Elementor is a website builder platform for professionals on WordPress.","website":"https://elementor.com","common_platform_enumeration":"","icon":"Elementor.svg","categories":["Page builders","WordPress plugins"]},{"name":"Site Kit:1.165.0","description":"Site Kit is a one-stop solution for WordPress users to use everything Google has to offer to make them successful on the web.","website":"https://sitekit.withgoogle.com/","common_platform_enumeration":"","icon":"Google.svg","categories":["Analytics","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Google Analytics","description":"Google Analytics is a free web analytics service that tracks and reports website traffic.","website":"https://google.com/analytics","common_platform_enumeration":"","icon":"Google Analytics.svg","categories":["Analytics"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":89916,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (11055)","md5":"39b027d67273f5ec41d74f44dd06519f","sha1":"3a7cb6cb8ce36e776b6e4d4cc45cbab7864bccf6","sha256":"dc9b5dd59f9a35caab65ef0ef66fcde35f5ee2520d094beafc300cea1844e679","sha512":"6e04cd8b44aac0debdd85848dbdd51d105c5df36ef3469b075c3f723b1670da78c4115c2458322171da012d474428b6f93dd49012e8c1a4f61fc92d28458d2c4","ssdeep":"1536:czQnuw3ACCKCDyp/hnw7jH3dnEq9ET04AH5lleYeSxK3QZ:csnuiTDnw7jNnEqy0H5lleFS4QZ","tlshash":"0c932872b9ae103a265f83ca853b771c218e98b7c556d5f8f6fa00145fb0de132a3619","first_seen":"2025-12-24T02:52:14.5112Z","last_seen":"2025-12-24T02:52:14.5112Z","times_seen":1,"resource_available":false,"data":null}},"time_used":525,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":525,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-12-24","alert":"Sinkholed","trigger":"bizdavar.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-24","alert":"Sinkholed","trigger":"bizdavar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bizdavar.com/wp-content/uploads/2024/07/trading-service.jpg","fqdn":"bizdavar.com","domain":"bizdavar.com","tld":"com"},"ip":{"addr":"104.21.20.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bizdavar.com/","date":"2025-12-24T02:51:40.505Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bizdavar.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 30 Oct 2025 20:00:29 GMT","end":"Wed, 28 Jan 2026 20:57:57 GMT"},"fingerprint":{"sha1":"5D:CD:8B:95:13:4B:07:86:69:DB:63:BB:CB:C1:77:82:AC:0D:A7:26","sha256":"9E:35:D3:AC:31:17:9B:4D:33:29:6C:FD:AA:22:4F:CD:B5:4E:69:36:49:D7:30:36:9E:13:20:86:77:04:F3:0B"}}},"request":{"raw":"GET /wp-content/uploads/2024/07/trading-service.jpg HTTP/1.1\r\nHost: bizdavar.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://bizdavar.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 24 Dec 2025 02:51:40 GMT\r\nserver: cloudflare\r\nlast-modified: Mon, 29 Jul 2024 09:29:41 GMT\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\ncontent-length: 89590\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: image/jpeg\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7wVQwhfywQpYbkxhT8URM1aAMHulzsQmDeXN8kKgrgVwhJrTN4Qs1gbMzVmEZb9FlBOAHRaBoROTrYpDIy1Iz34A%2FHdhkbpfaWaoEQ%3D%3D\"}]}\r\nvary: accept-encoding\r\ncf-ray: 9b2ccc59cb3e2efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":89590,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 800x600, components 3","md5":"997fc286d457fbadb15bd0732785e6cf","sha1":"5c2448a4f061b663fe016090436c787b9318d85e","sha256":"55dba61f7bd7a89044aa83f7e7700381b7078be98db1b6153ca7cf334d5ce44b","sha512":"37d29e97732cadc2766704d8a931e546550c8743c7d60922035b853e4df5d8c537aaa5220989a485a5a840feef66dce491fe40bd66a61821862cb0dc294a81c9","ssdeep":"1536:Z+UctX0IS2jwGu0aWtosEbqcm82Ia1XeZ5tfa8lpLJL+E:4nGISkhuKibqcmhlebtS8tRH","tlshash":"b393015c99c8f89d5f12a35d9851dc2f8081fa8637392e29d1cb5834e4a4eea42c3fc3","first_seen":"2025-12-24T02:52:14.512303Z","last_seen":"2025-12-24T02:52:14.512303Z","times_seen":1,"resource_available":false,"data":null}},"time_used":278,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":145,"receive":133,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-12-24","alert":"Sinkholed","trigger":"bizdavar.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-24","alert":"Sinkholed","trigger":"bizdavar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bizdavar.com/wp-content/uploads/2024/07/Gamak.svg","fqdn":"bizdavar.com","domain":"bizdavar.com","tld":"com"},"ip":{"addr":"104.21.20.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bizdavar.com/","date":"2025-12-24T02:51:40.521Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bizdavar.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 30 Oct 2025 20:00:29 GMT","end":"Wed, 28 Jan 2026 20:57:57 GMT"},"fingerprint":{"sha1":"5D:CD:8B:95:13:4B:07:86:69:DB:63:BB:CB:C1:77:82:AC:0D:A7:26","sha256":"9E:35:D3:AC:31:17:9B:4D:33:29:6C:FD:AA:22:4F:CD:B5:4E:69:36:49:D7:30:36:9E:13:20:86:77:04:F3:0B"}}},"request":{"raw":"GET /wp-content/uploads/2024/07/Gamak.svg HTTP/1.1\r\nHost: bizdavar.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://bizdavar.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 24 Dec 2025 02:51:40 GMT\r\nserver: cloudflare\r\nlast-modified: Mon, 29 Jul 2024 15:32:41 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\nvary: accept-encoding\r\ncontent-encoding: br\r\ncontent-type: image/svg+xml\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=tToNktnIsHebmVRCYXRDOWFuawloa2F0zkq7k5vB2PdeECPoH8VQOYK7%2BpYZHzZH1QZU7XC3zrAms7G8lTcxolG%2B%2BDSz9Rml7vgbnQ%3D%3D\"}]}\r\ncf-ray: 9b2ccc59eb4f2efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":12876,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"b2cdb236864628fb3c1a2dbd6ba81790","sha1":"4a62afcd0c37dffaa7f4acb8ab554d80fe097e67","sha256":"ad741297af6bfaf1dadaeb5b8771e90ca7bcd6ff7f0736970f5d3920991849f8","sha512":"b6f525b0d2a20f258b61e237358a57deaccd3ca3b3f2d20b0978e3cbbf0b219ee267cec64251d9bc0304c03c6e15e432d9f96627f564eba5cee809009bbabd9b","ssdeep":"384:th7+oUqjLrwnRQFcHyHFruTHy3sqIHyResUlQaXV8APs5rQi370i:ZzjwkcSHBuTS3sqISResUlQaXVZPs5rp","tlshash":"2042cd4b173c93aca59f12844cbb21e23ad499cbd195f2dca7a7ac17d443af14470fa8","first_seen":"2025-12-24T02:52:14.513263Z","last_seen":"2025-12-24T02:52:14.513263Z","times_seen":1,"resource_available":false,"data":null}},"time_used":180,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":138,"receive":42,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-12-24","alert":"Sinkholed","trigger":"bizdavar.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-24","alert":"Sinkholed","trigger":"bizdavar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bizdavar.com/wp-content/uploads/2024/07/path-to-your-video.mp4","fqdn":"bizdavar.com","domain":"bizdavar.com","tld":"com"},"ip":{"addr":"104.21.20.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"media","requested_by":"https://bizdavar.com/","date":"2025-12-24T02:51:42.141Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bizdavar.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 30 Oct 2025 20:00:29 GMT","end":"Wed, 28 Jan 2026 20:57:57 GMT"},"fingerprint":{"sha1":"5D:CD:8B:95:13:4B:07:86:69:DB:63:BB:CB:C1:77:82:AC:0D:A7:26","sha256":"9E:35:D3:AC:31:17:9B:4D:33:29:6C:FD:AA:22:4F:CD:B5:4E:69:36:49:D7:30:36:9E:13:20:86:77:04:F3:0B"}}},"request":{"raw":"GET /wp-content/uploads/2024/07/path-to-your-video.mp4 HTTP/1.1\r\nHost: bizdavar.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: video/webm,video/ogg,video/*;q=0.9,application/ogg;q=0.7,audio/*;q=0.6,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.5\r\nReferer: https://bizdavar.com/\r\nRange: bytes=65536-\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: _ga_F2WGXTVK7F=GS2.1.s1766544701$o1$g0$t1766544701$j60$l0$h0; _ga=GA1.1.1382880001.1766544701\r\nSec-Fetch-Dest: video\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nAccept-Encoding: identity\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 206 Partial Content\r\ndate: Wed, 24 Dec 2025 02:51:42 GMT\r\nserver: cloudflare\r\nlast-modified: Mon, 29 Jul 2024 12:25:54 GMT\r\nage: 0\r\npriority: u=4,i=?0\r\ncontent-length: 11871091\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: video/mp4\r\ncontent-range: bytes 65536-11936626/11936627\r\ncache-control: max-age=14400\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7JiN1f7APD6J32iVcIw1fu%2BGS9xY%2Ft%2B9qm1LjVpMG8VUGrnNlvmEs33kSdSwO3g3m3PLzDROf9MifXD4xTE8FAWf%2BCKBut7T1vx0zA%3D%3D\"}]}\r\nvary: accept-encoding\r\ncf-ray: 9b2ccc645c0a2efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"206","status_text":"Partial Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1125594,"size_decoded":0,"mime_type":"video/mp4","magic":"data","md5":"b28e3407f2628afa468fdca336cbc3f5","sha1":"85d32db9d4d5902318cd3befff09a17a75706edd","sha256":"a2e2fd79b6b23ad515a4fa8d542960aed39120d955d599d4080e461c28596c30","sha512":"1ca77216c90283e3b6aa4fe31642236311c4956ddc75c53d1049056288074f0be8b061bd00d5fc679d67093e72e9d8902440362d4e82c25c00897e1a88e41547","ssdeep":"24576:ZMv31Qvkcglsj+jH2us+ViARz4pRcyOsxMd7LO2vu0I/D7EF:0/Fy+aOViisq/d7S2vuj/D72","tlshash":"4a2533fffcb72892daf1460ab10e0dbe28953705a3985c850cacf1274b8fb9de516456","first_seen":"2025-12-24T02:52:14.514577Z","last_seen":"2025-12-24T02:52:14.514577Z","times_seen":1,"resource_available":false,"data":null}},"time_used":26,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":4,"receive":22,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-12-24","alert":"Sinkholed","trigger":"bizdavar.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-24","alert":"Sinkholed","trigger":"bizdavar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-F2WGXTVK7F","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.251.38.104","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bizdavar.com/","date":"2025-12-24T02:51:40.503Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Wed, 03 Dec 2025 15:49:27 GMT","end":"Wed, 25 Feb 2026 15:49:26 GMT"},"fingerprint":{"sha1":"2C:B9:1B:62:2A:F9:04:B9:16:E2:30:B0:A8:B2:85:0C:68:BC:79:25","sha256":"AE:CB:A0:2C:92:1E:CB:D2:CB:6C:0D:37:5E:A2:4E:27:AE:4E:CA:0C:EC:53:D5:50:E6:C1:3D:EB:17:C1:F2:C9"}}},"request":{"raw":"GET /gtag/js?id=G-F2WGXTVK7F HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://bizdavar.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Wed, 24 Dec 2025 02:51:40 GMT\r\nexpires: Wed, 24 Dec 2025 02:51:40 GMT\r\ncache-control: private, max-age=900\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\nserver: Google Tag Manager\r\ncontent-length: 137808\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":408357,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (5911)","md5":"f7672784919061653d277a15be61f420","sha1":"965f25dea555e56a3970bbff41d4cf69145dd191","sha256":"e7496a563b0cf95aef4681503e6317378ccbd41c89e28ed40d95061b0d08a71a","sha512":"62b992866b6f81535b0b0a8cdad40bffd42bd9c7c136bda95dac799930b481527be3e57348bded90fb8157d19eaf41d9c355085436692f54649b48ae5e9a210f","ssdeep":"6144:sIe7mZ2bulKY/1u99xHDmHYmyBFzvnsNO6JWoNPad4FpC1+9:NCpbu7/1mbrnsVWbMpB","tlshash":"b39419ce73c674669396f078503f118ba57b29a2b44cc895f189cce42d74aaa4237f7c","first_seen":"2025-12-24T02:52:14.515728Z","last_seen":"2025-12-24T02:52:14.515728Z","times_seen":1,"resource_available":true,"data":null}},"time_used":650,"timings":{"blocked":265,"dns":0,"connect":7,"send":0,"wait":38,"receive":26,"ssl":310},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"bizdavar.com/wp-content/uploads/2025/04/%D9%87%D8%AA%D9%84-%D8%B4%D8%A7%DB%8C%D8%A7%D9%86-%D8%B3%D8%A7%DB%8C%D8%AA-%D9%84%D9%88%DA%AF%D9%88-e1637672870952.png","fqdn":"bizdavar.com","domain":"bizdavar.com","tld":"com"},"ip":{"addr":"104.21.20.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bizdavar.com/","date":"2025-12-24T02:51:40.530Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bizdavar.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 30 Oct 2025 20:00:29 GMT","end":"Wed, 28 Jan 2026 20:57:57 GMT"},"fingerprint":{"sha1":"5D:CD:8B:95:13:4B:07:86:69:DB:63:BB:CB:C1:77:82:AC:0D:A7:26","sha256":"9E:35:D3:AC:31:17:9B:4D:33:29:6C:FD:AA:22:4F:CD:B5:4E:69:36:49:D7:30:36:9E:13:20:86:77:04:F3:0B"}}},"request":{"raw":"GET /wp-content/uploads/2025/04/%D9%87%D8%AA%D9%84-%D8%B4%D8%A7%DB%8C%D8%A7%D9%86-%D8%B3%D8%A7%DB%8C%D8%AA-%D9%84%D9%88%DA%AF%D9%88-e1637672870952.png HTTP/1.1\r\nHost: bizdavar.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://bizdavar.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 24 Dec 2025 02:51:40 GMT\r\nserver: cloudflare\r\nlast-modified: Wed, 02 Apr 2025 11:54:38 GMT\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\ncontent-length: 37492\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: image/png\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=D8nUTIZFfwszk914JSLoJ2J%2Fono%2BpDiMVA2UVOWdQJl2qUHqVyvz8oJB52OJdOqPH7CyoC1n%2BGJyXQ7OfsPLoU7Q%2BPvbPlQBfC5zPg%3D%3D\"}]}\r\nvary: accept-encoding\r\ncf-ray: 9b2ccc59fb552efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":37492,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 198 x 121, 8-bit/color RGBA, non-interlaced","md5":"839d6ce93d24669022746ecb5a8871b8","sha1":"b134ba8674a55491407f02aadff8eeb0940fbcd7","sha256":"afe2bafcfa9bf42ab58a49dfefe8c77ef26fbb381b465e64d8aa0b5193c6b769","sha512":"877dd4f6d674e21ff8fb5ae5cc467df297c0f85c654a06269c97496d463587b5d90b88c4ac2bfd4db1021323681c8e74b2296696fa4e23fc992275fcd4001a51","ssdeep":"768:R6Zb7KcXlrpFRgAgGHr5ByuqRzkzUZ0eUTfGyW9ikF4qBg9aQxnauP5FZ1oCTdV0:RMrlrLCAlr5BRqRzhZ5uflvkmYg9aGhY","tlshash":"1df2f24e4b9ba1e7113e249bf1d91eadc33e3c49640b18dc4b29dab71f5a2529070cb3","first_seen":"2025-12-24T02:52:14.516618Z","last_seen":"2025-12-24T02:52:14.516618Z","times_seen":1,"resource_available":false,"data":null}},"time_used":243,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":152,"receive":91,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-12-24","alert":"Sinkholed","trigger":"bizdavar.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-24","alert":"Sinkholed","trigger":"bizdavar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bizdavar.com/wp-content/plugins/elementor/assets/js/webpack.runtime.min.js?ver=3.32.5","fqdn":"bizdavar.com","domain":"bizdavar.com","tld":"com"},"ip":{"addr":"104.21.20.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bizdavar.com/","date":"2025-12-24T02:51:40.588Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bizdavar.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 30 Oct 2025 20:00:29 GMT","end":"Wed, 28 Jan 2026 20:57:57 GMT"},"fingerprint":{"sha1":"5D:CD:8B:95:13:4B:07:86:69:DB:63:BB:CB:C1:77:82:AC:0D:A7:26","sha256":"9E:35:D3:AC:31:17:9B:4D:33:29:6C:FD:AA:22:4F:CD:B5:4E:69:36:49:D7:30:36:9E:13:20:86:77:04:F3:0B"}}},"request":{"raw":"GET /wp-content/plugins/elementor/assets/js/webpack.runtime.min.js?ver=3.32.5 HTTP/1.1\r\nHost: bizdavar.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://bizdavar.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 24 Dec 2025 02:51:40 GMT\r\nserver: cloudflare\r\nlast-modified: Thu, 06 Nov 2025 16:18:10 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: accept-encoding\r\ncontent-encoding: br\r\ncontent-type: text/javascript\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=p2Xt15tYbjY%2FvaGuQRJvwxp9EOpY608lvxUOkcrNQAZOfuK4oApoFFRyfziQ9nTQ2v%2FQ%2BbwbDIUQEDJlTrn%2FjwY8aupeNyXRO4Ujtw%3D%3D\"}]}\r\ncf-ray: 9b2ccc5a7b712efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5707,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (5667)","md5":"176feb740e09f9cd12c0fbf6efa28e18","sha1":"c0904f444c4f3457f029fc5c1f865b062fbdbd3d","sha256":"b9d02e35eda5a0d58077a83e2a26b16bec7645cb112c98b7426f78ece2bee853","sha512":"ae075b8f814ee3440caf984dbad620d6c50f0e826ed9e5d8251739ae4627351b7147b7f5cd5eaa9ab699718b52e2857a8a57cc61d22963d981192ce027ae0b7c","ssdeep":"96:B8RAtsNuAZDXQ6jqj9vXzl8OW6mVMcbMejl3tGVfLUVscj2KobV7bDbT802:9sNukQ6jq9OVM6MeHGlQTvog02","tlshash":"60c154941a54fd2b21e135d9e41b9734663ec0333c1afdc1fa21dce955e8ed183aa531","first_seen":"2025-10-21T14:39:27.156916Z","last_seen":"2026-08-11T09:37:38.911322Z","times_seen":14037,"resource_available":true,"data":null}},"time_used":148,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":148,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-12-24","alert":"Sinkholed","trigger":"bizdavar.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-24","alert":"Sinkholed","trigger":"bizdavar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bizdavar.com/wp-content/uploads/2024/07/BIZ-RED-01-150x150.png","fqdn":"bizdavar.com","domain":"bizdavar.com","tld":"com"},"ip":{"addr":"104.21.20.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://bizdavar.com/","date":"2025-12-24T02:51:40.554Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bizdavar.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 30 Oct 2025 20:00:29 GMT","end":"Wed, 28 Jan 2026 20:57:57 GMT"},"fingerprint":{"sha1":"5D:CD:8B:95:13:4B:07:86:69:DB:63:BB:CB:C1:77:82:AC:0D:A7:26","sha256":"9E:35:D3:AC:31:17:9B:4D:33:29:6C:FD:AA:22:4F:CD:B5:4E:69:36:49:D7:30:36:9E:13:20:86:77:04:F3:0B"}}},"request":{"raw":"GET /wp-content/uploads/2024/07/BIZ-RED-01-150x150.png HTTP/1.1\r\nHost: bizdavar.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://bizdavar.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 24 Dec 2025 02:51:40 GMT\r\nserver: cloudflare\r\nlast-modified: Thu, 25 Jul 2024 11:29:56 GMT\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\ncontent-length: 2912\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: image/png\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=T1fnvGzxNmPEj7diFWScmX9Ke71OAJGB5Ipmph1iYzma8KOXXm547cdKH6EDCFZBXxuV6HO0rl4z%2FC9S3L7Nrxs80vv24EutUmmqNw%3D%3D\"}]}\r\nvary: accept-encoding\r\ncf-ray: 9b2ccc5a0b6a2efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2912,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 150 x 150, 8-bit/color RGBA, non-interlaced","md5":"34734e5a77c067ad7d3b618786d115d5","sha1":"8ed6302f72e3278f4b163cc9cbf2ff5495d4ded1","sha256":"bc19c9c790f0c8c3b18a33f19fd5345ab0ee575658ec2ab526b3ab31ab184552","sha512":"bbe4cfec919c8d4415e495b15b870df2c70c029c7ec2f5f386aa03ca7f8695c42a0169da046d6bef2c1c24ef41574585f68f252b0c0d63ff7cfaad3553403825","ssdeep":"","tlshash":"b9514bf69241e86bd83e585320fbe642005ecd03e869765775be697cda070c88213a9b","first_seen":"2025-12-24T02:52:14.518245Z","last_seen":"2025-12-24T02:52:14.518245Z","times_seen":1,"resource_available":false,"data":null}},"time_used":143,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":143,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-12-24","alert":"Sinkholed","trigger":"bizdavar.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-24","alert":"Sinkholed","trigger":"bizdavar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bizdavar.com/wp-content/themes/hello-elementor/assets/css/header-footer.css?ver=3.4.5","fqdn":"bizdavar.com","domain":"bizdavar.com","tld":"com"},"ip":{"addr":"104.21.20.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://bizdavar.com/","date":"2025-12-24T02:51:40.472Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bizdavar.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 30 Oct 2025 20:00:29 GMT","end":"Wed, 28 Jan 2026 20:57:57 GMT"},"fingerprint":{"sha1":"5D:CD:8B:95:13:4B:07:86:69:DB:63:BB:CB:C1:77:82:AC:0D:A7:26","sha256":"9E:35:D3:AC:31:17:9B:4D:33:29:6C:FD:AA:22:4F:CD:B5:4E:69:36:49:D7:30:36:9E:13:20:86:77:04:F3:0B"}}},"request":{"raw":"GET /wp-content/themes/hello-elementor/assets/css/header-footer.css?ver=3.4.5 HTTP/1.1\r\nHost: bizdavar.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://bizdavar.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 24 Dec 2025 02:51:40 GMT\r\nserver: cloudflare\r\nlast-modified: Mon, 27 Oct 2025 12:45:10 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nvary: accept-encoding\r\ncontent-encoding: br\r\ncontent-type: text/css\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=HReFblBFyzOTA1FowxWsIOgEtoUi8V6RS7hvaZuzjZ%2BrCbJ0ihgxehVsfCXXWZIgkGAuuWQGeFf77pYlHgUlJs50%2BCZ3yDlhLx1nXQ%3D%3D\"}]}\r\ncf-ray: 9b2ccc599b292efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7182,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (7179)","md5":"86dbb47955bb9db9c74abc72efb0c6f6","sha1":"66e008f8d28438934133a914efc7a40bd9fbad5e","sha256":"5052c28c33de995612b9c064753ee989d1e7755027e2b80292148728f444ec8d","sha512":"4a17290a195e7ead6048fa07dde958455f508f57d3c147f49cdfd32db655b8bc19e0b476611bca8b1a1a7eaf4df88185a861b74aab65366175701809defd6105","ssdeep":"96:3dOg5c2yhjF8MsobtKv1j3ykM0UfU5nJzyC2sy6ZM3zzirdae64Qf3mfOOeZhYD:F/9j3EU5n1lJy6ZNZaL4nh","tlshash":"88e19f67f8f2317813378223a7d047aea07ac10dd807aba551ebc31b05db45227a7f69","first_seen":"2025-04-10T05:14:02.600959Z","last_seen":"2026-08-12T08:41:02.791927Z","times_seen":48563,"resource_available":false,"data":null}},"time_used":160,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":160,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-24","alert":"Sinkholed","trigger":"bizdavar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-12-24","alert":"Sinkholed","trigger":"bizdavar.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bizdavar.com/wp-content/plugins/elementor/assets/css/widget-icon-list-rtl.min.css?ver=3.32.5","fqdn":"bizdavar.com","domain":"bizdavar.com","tld":"com"},"ip":{"addr":"104.21.20.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://bizdavar.com/","date":"2025-12-24T02:51:40.482Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bizdavar.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 30 Oct 2025 20:00:29 GMT","end":"Wed, 28 Jan 2026 20:57:57 GMT"},"fingerprint":{"sha1":"5D:CD:8B:95:13:4B:07:86:69:DB:63:BB:CB:C1:77:82:AC:0D:A7:26","sha256":"9E:35:D3:AC:31:17:9B:4D:33:29:6C:FD:AA:22:4F:CD:B5:4E:69:36:49:D7:30:36:9E:13:20:86:77:04:F3:0B"}}},"request":{"raw":"GET /wp-content/plugins/elementor/assets/css/widget-icon-list-rtl.min.css?ver=3.32.5 HTTP/1.1\r\nHost: bizdavar.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://bizdavar.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 24 Dec 2025 02:51:40 GMT\r\nserver: cloudflare\r\nlast-modified: Thu, 06 Nov 2025 16:18:10 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nvary: accept-encoding\r\ncontent-encoding: br\r\ncontent-type: text/css\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=qBhZjkft2SoVFYGCaK7KKWnq9qrFIrto%2BYpaUENYPS30b%2Fz%2FIRfg%2BfEWyzLJlVOpkxLjjgQZmn0TrxNxa%2BMqd%2BOs4OAMHSgYzOjLBg%3D%3D\"}]}\r\ncf-ray: 9b2ccc59ab2d2efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10470,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (10430)","md5":"cddcff77f9c61ef4b26f7572dbd9b071","sha1":"fb8e222624a6aa81916769ed14ee9f59097d64d0","sha256":"eb7381f23e65d5b6127f3d251564236d13e50fc9bc8a0a256334798fb12e73d3","sha512":"c1a1f3268d89d2ca8689536c71b76fdfa3bc335485e48670de8f37cb4940ccebbb2fb9eb812c04de8fd625b88f3cc85c31872cb71bcaa0cb8b903d625a3465b1","ssdeep":"192:HKTrGZCLG+tl+7LzyXW6OLj0R6AHReTzLc9hXlR0:Hy70","tlshash":"d422d4817d53814e1aff641b141b254ca1c9d4dee9bbecd5e8a6630386fbdc83b31928","first_seen":"2025-10-21T18:16:12.021699Z","last_seen":"2026-07-23T22:24:35.032898Z","times_seen":75,"resource_available":false,"data":null}},"time_used":137,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":137,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-12-24","alert":"Sinkholed","trigger":"bizdavar.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-24","alert":"Sinkholed","trigger":"bizdavar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bizdavar.com/wp-content/plugins/elementor-pro/assets/css/widget-search-form-rtl.min.css?ver=3.32.2","fqdn":"bizdavar.com","domain":"bizdavar.com","tld":"com"},"ip":{"addr":"104.21.20.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://bizdavar.com/","date":"2025-12-24T02:51:40.484Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bizdavar.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 30 Oct 2025 20:00:29 GMT","end":"Wed, 28 Jan 2026 20:57:57 GMT"},"fingerprint":{"sha1":"5D:CD:8B:95:13:4B:07:86:69:DB:63:BB:CB:C1:77:82:AC:0D:A7:26","sha256":"9E:35:D3:AC:31:17:9B:4D:33:29:6C:FD:AA:22:4F:CD:B5:4E:69:36:49:D7:30:36:9E:13:20:86:77:04:F3:0B"}}},"request":{"raw":"GET /wp-content/plugins/elementor-pro/assets/css/widget-search-form-rtl.min.css?ver=3.32.2 HTTP/1.1\r\nHost: bizdavar.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://bizdavar.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 24 Dec 2025 02:51:40 GMT\r\nserver: cloudflare\r\nlast-modified: Thu, 06 Nov 2025 16:20:38 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nvary: accept-encoding\r\ncontent-encoding: br\r\ncontent-type: text/css\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0jYsSzzGoA6LTwz%2BZnWSr%2BXXUuM2CKU0H7Viq%2BQw9kMuh7Y9nqDXWp9XkZ5AUl3SNscAoLW1nhc3CAa6sVnmaEjjnOcFt%2Bsz9VGtRQ%3D%3D\"}]}\r\ncf-ray: 9b2ccc59ab2f2efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4805,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (4761)","md5":"485842166dbc7c797e12399826773d95","sha1":"749ea688dd529ad30a13853aa5e4c2280de4b8c9","sha256":"cf5d97f73624714231f2e6ed2f4a072d9bec51e3819185c4d893a7ad59c4df42","sha512":"09910b6e415ecfb85b3441d76a65b1df20dd81cbb822c1455836eb6b98787eb178b05e6a6a3d96ef3bf6dd8256898649a4e18d32c42c1df61cc8f89fcbff5764","ssdeep":"96:BqEpT9YrA8yG1UTWrvZ1puPJMF9DRdRRkRYAbRdjRLIRnRDLRhwMRRlRRd9RgR+d:F5oU69U7bLIRDFhwMPlPpg+d","tlshash":"e3a18c97be2393a8203f982f31cf7d0c3664e2857ca15755f551c46293ebeb922007da","first_seen":"2025-09-29T23:27:14.683732Z","last_seen":"2026-08-11T20:57:59.632648Z","times_seen":674,"resource_available":false,"data":null}},"time_used":127,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":127,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-12-24","alert":"Sinkholed","trigger":"bizdavar.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-24","alert":"Sinkholed","trigger":"bizdavar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bizdavar.com/wp-content/uploads/2025/05/bamaukvisa-logo.png","fqdn":"bizdavar.com","domain":"bizdavar.com","tld":"com"},"ip":{"addr":"104.21.20.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bizdavar.com/","date":"2025-12-24T02:51:40.546Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bizdavar.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 30 Oct 2025 20:00:29 GMT","end":"Wed, 28 Jan 2026 20:57:57 GMT"},"fingerprint":{"sha1":"5D:CD:8B:95:13:4B:07:86:69:DB:63:BB:CB:C1:77:82:AC:0D:A7:26","sha256":"9E:35:D3:AC:31:17:9B:4D:33:29:6C:FD:AA:22:4F:CD:B5:4E:69:36:49:D7:30:36:9E:13:20:86:77:04:F3:0B"}}},"request":{"raw":"GET /wp-content/uploads/2025/05/bamaukvisa-logo.png HTTP/1.1\r\nHost: bizdavar.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://bizdavar.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 24 Dec 2025 02:51:40 GMT\r\nserver: cloudflare\r\nlast-modified: Sun, 18 May 2025 18:17:18 GMT\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\ncontent-length: 303538\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: image/png\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=weVwYnYAnHGrS5fGnSHTMC%2FSxEoiBLwY0Afe7rwtZlPrpN0keQtg4OWpIaFe6%2Fxn0lz6M7Xvz1ZRi2yXQBzOGq9F2wLiurqFOs0crw%3D%3D\"}]}\r\nvary: accept-encoding\r\ncf-ray: 9b2ccc59fb612efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":303538,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1885 x 2070, 8-bit/color RGBA, non-interlaced","md5":"8c3bba39e2acbae272386ca06fd0cd80","sha1":"6c578f0115fc8e84b4c12fa121b97ac74ff67eb4","sha256":"069cfaf5d821dbcebc442eef50705c474adb524844238ed296af8e65a83ee56d","sha512":"93fd69a5206cbb2c93cbab2f53102bfbcbf4f7ea7c7ea743643f96a978dbcd83e46b756bc802bd938ea1d34909fd66c8bf3fb7f6e5d8c726db0bcda4a794355a","ssdeep":"6144:xY2QxNI0p0tb6yoWLt+FyZReSFTGKxqdqGJMAC/q9XyP40PDfqwxVvil:aTXIC0tb6yoWLtZPkKxMqQMAC/EiP4GO","tlshash":"0c5423c1614cee27ec6913bcb635bdd960a10477e76a3ff7888558a885886c44793fc3","first_seen":"2025-12-24T02:52:14.520981Z","last_seen":"2025-12-24T02:52:14.520981Z","times_seen":1,"resource_available":false,"data":null}},"time_used":370,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":155,"receive":215,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-12-24","alert":"Sinkholed","trigger":"bizdavar.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-24","alert":"Sinkholed","trigger":"bizdavar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bizdavar.com/wp-content/themes/hello-elementor/assets/css/reset.css?ver=3.4.5","fqdn":"bizdavar.com","domain":"bizdavar.com","tld":"com"},"ip":{"addr":"104.21.20.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://bizdavar.com/","date":"2025-12-24T02:51:40.459Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bizdavar.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 30 Oct 2025 20:00:29 GMT","end":"Wed, 28 Jan 2026 20:57:57 GMT"},"fingerprint":{"sha1":"5D:CD:8B:95:13:4B:07:86:69:DB:63:BB:CB:C1:77:82:AC:0D:A7:26","sha256":"9E:35:D3:AC:31:17:9B:4D:33:29:6C:FD:AA:22:4F:CD:B5:4E:69:36:49:D7:30:36:9E:13:20:86:77:04:F3:0B"}}},"request":{"raw":"GET /wp-content/themes/hello-elementor/assets/css/reset.css?ver=3.4.5 HTTP/1.1\r\nHost: bizdavar.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://bizdavar.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 24 Dec 2025 02:51:40 GMT\r\nserver: cloudflare\r\nlast-modified: Mon, 27 Oct 2025 12:45:10 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\nvary: accept-encoding\r\ncontent-encoding: br\r\ncontent-type: text/css\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Wdz94jJ9PypBXUBpdoY1nJSOkwcPI%2FTejhg1vy1PCvbCMzbbP8F5FA94lmEu4qqvwHJhr1I8%2BL7T31mVLP%2B33dGnb686snBZyblWFA%3D%3D\"}]}\r\ncf-ray: 9b2ccc598b262efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5456,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (5455)","md5":"af4b9638d69957103dc5ea259563873e","sha1":"1d048e10f67e855fcef131c910f5e46972181596","sha256":"2f01a854a759c0a6a6911634e4ae5283b86a054908e4587c1fd17561fe4ce3cf","sha512":"434169ae8237d9417f43ee48a8ed3a372c64f73d5e189f5f23656f92a9f2d3c494e07875829341a971ac7aab68472033e8dca833bc37f53a83159fde9a512365","ssdeep":"96:vS+FXXYXqXXXNuoSA1C4pIGRhPCZBG9Hzk09ETReQWe0OhHTZZkUg/2UpGE:vDFHoyHNuL86+hKZBG9HUXhz/ad","tlshash":"b0b15363971031497537c83636d17e947e226215c8332ab4e426aafccbce4275a39f9a","first_seen":"2025-06-08T21:36:43.859934Z","last_seen":"2026-08-12T07:12:58.15928Z","times_seen":43305,"resource_available":false,"data":null}},"time_used":163,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":163,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-12-24","alert":"Sinkholed","trigger":"bizdavar.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-24","alert":"Sinkholed","trigger":"bizdavar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bizdavar.com/wp-content/uploads/2024/07/graphic-design.jpg","fqdn":"bizdavar.com","domain":"bizdavar.com","tld":"com"},"ip":{"addr":"104.21.20.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bizdavar.com/","date":"2025-12-24T02:51:40.514Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bizdavar.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 30 Oct 2025 20:00:29 GMT","end":"Wed, 28 Jan 2026 20:57:57 GMT"},"fingerprint":{"sha1":"5D:CD:8B:95:13:4B:07:86:69:DB:63:BB:CB:C1:77:82:AC:0D:A7:26","sha256":"9E:35:D3:AC:31:17:9B:4D:33:29:6C:FD:AA:22:4F:CD:B5:4E:69:36:49:D7:30:36:9E:13:20:86:77:04:F3:0B"}}},"request":{"raw":"GET /wp-content/uploads/2024/07/graphic-design.jpg HTTP/1.1\r\nHost: bizdavar.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://bizdavar.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 24 Dec 2025 02:51:40 GMT\r\nserver: cloudflare\r\nlast-modified: Wed, 31 Jul 2024 13:03:40 GMT\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\ncontent-length: 51298\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: image/jpeg\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4Af8FQfHHZD5fx06QM1lv0GhU%2Br9MZbMeVBNHxYZe0Vk8utmuDUrSaM1MPNVcbDO7jGYbE5gZM8yPLu1Birxuj%2BMpsgvWhM6pMPw6Q%3D%3D\"}]}\r\nvary: accept-encoding\r\ncf-ray: 9b2ccc59db442efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":51298,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, baseline, precision 8, 800x600, components 3","md5":"6e037498bb031950060b1823cd3c5fe9","sha1":"a1bde337a2eae43814e8969caab172f6425667c2","sha256":"472a799616d6766bb7c00fbe38bbb2c9b5a58f8f5b3053bc6dd974780e27c421","sha512":"4f9cf1822ef202588310a4a0a8afc3c5e2990dbf3dcc24ee4f91d22de6c5682b2cf69d9ae9c0e943379e38dc4ee8b62e2af47aa8d9f1aa3dee1eacc7179af777","ssdeep":"1536:Ziblqwt/Kxgj6crU54eKbSUIjif0m/ECZRI1XSslbQ8v:C5Kxk6cFbtZ18CnUXSo3","tlshash":"9533013199365fc8fb092a25446e2d4f8153d749ab68583f41478ecc1e86cfb6e32e1e","first_seen":"2025-12-24T02:52:14.523015Z","last_seen":"2025-12-24T02:52:14.523015Z","times_seen":1,"resource_available":false,"data":null}},"time_used":189,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":115,"receive":74,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-24","alert":"Sinkholed","trigger":"bizdavar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-12-24","alert":"Sinkholed","trigger":"bizdavar.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bizdavar.com/wp-content/uploads/2025/05/Havana-Logo.png","fqdn":"bizdavar.com","domain":"bizdavar.com","tld":"com"},"ip":{"addr":"104.21.20.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://bizdavar.com/","date":"2025-12-24T02:51:40.538Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bizdavar.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 30 Oct 2025 20:00:29 GMT","end":"Wed, 28 Jan 2026 20:57:57 GMT"},"fingerprint":{"sha1":"5D:CD:8B:95:13:4B:07:86:69:DB:63:BB:CB:C1:77:82:AC:0D:A7:26","sha256":"9E:35:D3:AC:31:17:9B:4D:33:29:6C:FD:AA:22:4F:CD:B5:4E:69:36:49:D7:30:36:9E:13:20:86:77:04:F3:0B"}}},"request":{"raw":"GET /wp-content/uploads/2025/05/Havana-Logo.png HTTP/1.1\r\nHost: bizdavar.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://bizdavar.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 24 Dec 2025 02:51:40 GMT\r\nserver: cloudflare\r\nlast-modified: Sun, 18 May 2025 18:04:28 GMT\r\naccept-ranges: bytes\r\npriority: u=4,i=?0\r\ncontent-length: 56032\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-type: image/png\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=JiPxBdjbbLrbSC3twxutqXCDqGDd77XamO4a3WpoUedj79EkRzBC20Tdg6M%2BlCJyuDfLgkQL6PIWHKE16oeSDSx%2FqsEDWxOa2i%2BSiw%3D%3D\"}]}\r\nvary: accept-encoding\r\ncf-ray: 9b2ccc59fb5c2efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":56032,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 600 x 312, 8-bit/color RGBA, non-interlaced","md5":"f14823c892e267336ee784fa9af04c6c","sha1":"d9308b488174a4b01f6d2ca9f30665ab492570e4","sha256":"462724df4f2f025b7d93013c65bec378b77b892e3c2a0afdf6c8aafe27f97dbb","sha512":"9704df769a5ec07c54f10196cee3403e25fefdc803637b1505128d8248da990a252bf3cf31121922dad4c5a05382aae5b3050209b36b8a45921fcbf158c50b04","ssdeep":"768:4+k4MCIeNO+9xQBlOkKs7DOyL+YIFbDs8L8n3DAuH1Msy1NfTstvBcyrc2cCLTUV:4+kzXIk/2FE8LwAgxWrshBcyrjTUTzt","tlshash":"d043013df5e6c8360adba60aa83e72926bc50c9f46c69f2d387447590ecb7cd6413613","first_seen":"2025-12-24T02:52:14.524058Z","last_seen":"2025-12-24T02:52:14.524058Z","times_seen":1,"resource_available":false,"data":null}},"time_used":230,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":140,"receive":90,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-12-24","alert":"Sinkholed","trigger":"bizdavar.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-24","alert":"Sinkholed","trigger":"bizdavar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"bizdavar.com/wp-content/plugins/elementor/assets/js/frontend.min.js?ver=3.32.5","fqdn":"bizdavar.com","domain":"bizdavar.com","tld":"com"},"ip":{"addr":"104.21.20.118","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://bizdavar.com/","date":"2025-12-24T02:51:40.597Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"bizdavar.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 30 Oct 2025 20:00:29 GMT","end":"Wed, 28 Jan 2026 20:57:57 GMT"},"fingerprint":{"sha1":"5D:CD:8B:95:13:4B:07:86:69:DB:63:BB:CB:C1:77:82:AC:0D:A7:26","sha256":"9E:35:D3:AC:31:17:9B:4D:33:29:6C:FD:AA:22:4F:CD:B5:4E:69:36:49:D7:30:36:9E:13:20:86:77:04:F3:0B"}}},"request":{"raw":"GET /wp-content/plugins/elementor/assets/js/frontend.min.js?ver=3.32.5 HTTP/1.1\r\nHost: bizdavar.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://bizdavar.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Wed, 24 Dec 2025 02:51:40 GMT\r\nserver: cloudflare\r\nlast-modified: Thu, 06 Nov 2025 16:18:10 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\nvary: accept-encoding\r\ncontent-encoding: br\r\ncontent-type: text/javascript\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3OXNGFb7dsh2bhPlUiAZ6kJbuO7r8%2B%2Fvzu3e2X75nd7j1%2FbzwKrW7FtAgdlo99l3oa2WXm0Pa3E3jmADX%2F%2FT58rx6kpVq352%2B0jY7g%3D%3D\"}]}\r\ncf-ray: 9b2ccc5a7b742efa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":32362,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (32322)","md5":"c0092f4ab132f0e6a7af09817638e421","sha1":"bc811db8bec0a3d08ac57ddf71e07ce8fe882587","sha256":"f2c7fb7be0ca17cd31dfc249f866c7b14b073768d61508882e4eb917607aedc4","sha512":"ad1dbeeb5741eac1f8af6745f166f702d52b315574b6b7137e3fd2059d6585f20355579f8566093b2fd0064afa7f48d294ec1d21b6467acb369cde93e635f96a","ssdeep":"768:Dj1cI21yHLRd1M4ZBOh0hbuNFXCz1k8MtJR8RjDKv//Dpl1XkLVgbpM+MpKEnzBv:VcaRd1MMBOhSmF7tJR8RjD8/mLVliEnN","tlshash":"63e209523296d4a2069f48a3f4331119f3769dd9b80af095b2bcdce6a471f877362b34","first_seen":"2025-10-21T14:39:27.087456Z","last_seen":"2026-08-11T09:37:39.157928Z","times_seen":14186,"resource_available":true,"data":null}},"time_used":214,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":162,"receive":52,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-12-24","alert":"Sinkholed","trigger":"bizdavar.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-12-24","alert":"Sinkholed","trigger":"bizdavar.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}
