{"report_id":"6fb37ba3-fb7d-45a5-8b9f-5a6aa8c19ac0","version":0,"status":"done","tags":[],"date":"2026-07-18T16:09:29Z","url":{"schema":"http","addr":"globalmelange.co","fqdn":"globalmelange.co","domain":"globalmelange.co","tld":"co"},"ip":{"addr":"172.67.151.235","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"globalmelange.co/","fqdn":"globalmelange.co","domain":"globalmelange.co","tld":"co"},"title":"Fb88 GlobalMelange - Sân chơi casino trực tiếp cùng dealer chuyên nghiệp","dom":{"size":39,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with no line terminators","md5":"086707e4369f60afedcafb16050a7618","sha1":"8216b0cc6876cbd44f01c158e7dff3833ceccd41","sha256":"a7fe83ec64bb23eb28090598db3d166ed98e52e39d1afbbfd74c579553f93e4e","sha512":"aade21843813e2cab329b99185c6f61db7907a556ea974e0315dcf3ad967cab20fee66d4f10db0d0ec43a71e086ce6d700d5524103deaefa3ce5f6be74ba5737","ssdeep":"","tlshash":"6a9000fee0a2000efc303bc00cc2238a0c28c3a830028e002ac038b8c80822bcc032c8","dom_hash":"domhash1f07f384c75181c66badb60ab1ec770b","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"globalmelange.co","fqdn":"globalmelange.co","domain":"globalmelange.co","tld":"co"},"ip":{"addr":"172.67.151.235","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-08-22T16:09:29Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":4}},"detection":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"cdn.globalmelange.co","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"cdn.globalmelange.co","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"globalmelange.co","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"globalmelange.co","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null},"summary":[{"fqdn":"globalmelange.co","ip":{"addr":"172.67.151.235","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2026-02-12T22:03:49.095622Z","last_seen":"2026-02-12T22:03:49.095622Z","alert_count":2,"request_count":1,"received_data":29310,"sent_data":485,"comment":"","tags":null,"fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"cdn.globalmelange.co","ip":{"addr":"104.21.12.81","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":28,"request_count":14,"received_data":315033,"sent_data":7297,"comment":"","tags":null,"fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"cdn.globalmelange.co/lazyload.js","fqdn":"cdn.globalmelange.co","domain":"globalmelange.co","tld":"co"},"ip":{"addr":"104.21.12.81","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"c7cb755981a008cb5cfc22a2523b4074","sha1":"e20993ca62c97b46ba2008f159f448d16c11559c","sha256":"c1554bd944feb6c574c3468af946bcdc98aaf19c019fc23f24434dd0e243613d","sha512":"adf64ab94704b1455ddd1ff091b878df70ff8733865a5ce602baa3fabb60615b2e93aa595813d80376022b865f07f98601bb32d26ae0e982723dbcb156d3388a","ssdeep":"","tlshash":"2e2112fa2b14af3454d693eb536eb3407a3513e6f14f4800503dc8845934ce7567adc9","size":1441,"data":"","first_seen":"2026-07-18T16:09:35.816983Z","last_seen":"2026-07-18T16:12:49.42753Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.globalmelange.co/main.js","fqdn":"cdn.globalmelange.co","domain":"globalmelange.co","tld":"co"},"ip":{"addr":"104.21.12.81","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"686d54b233c8543690891af551917164","sha1":"ade102880bc4f516e9662dcc2fb7313be62790d4","sha256":"3a27daf5fb49548a044105c5db0be4247ab89dc9cd1db1646b84e776ee1f800a","sha512":"407cca6bb192f534508ebc1e164a3e8505f98ba88b9c16370db204738ce52d54ff0d748c8fefaa40179270bd2b765ac486bfd9f4ecc8df645a97751b0cbd61c1","ssdeep":"384:yiv2DHuyKEs3Tg9ifjQoWHsTkqgP+xSMoSON9IybTk2lyHL1TOuMqsID:ILuyKEs3UeQ9qgP+49SOrvkHLR7Mqf","tlshash":"e062f8a977943a7106f611a222afbb06f331034a594dc46194b7e8443d3dcd39237fea","size":15151,"data":"","first_seen":"2026-07-18T16:09:35.811992Z","last_seen":"2026-07-18T16:12:49.430528Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"cdn.globalmelange.co/Y29udGVudC9mYjg4L2dsb2JhbG1lbGFuZ2Vjby8xNTgzNzQwNTQxX2ltYWdlMS53ZWJw.webp?t=20260716072625","fqdn":"cdn.globalmelange.co","domain":"globalmelange.co","tld":"co"},"ip":{"addr":"104.21.12.81","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://globalmelange.co/","date":"2026-07-18T16:08:54.193Z","timestamp":1784390934193,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"globalmelange.co","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 16 Jul 2026 04:06:55 GMT","end":"Wed, 14 Oct 2026 05:05:26 GMT"},"fingerprint":{"sha1":"EE:74:46:45:4B:7F:06:9C:B8:EB:6F:7A:87:94:BB:4B:CF:39:5A:9B","sha256":"68:2F:33:2F:F5:6E:AA:CD:93:57:0C:4A:98:C7:15:A4:7F:5A:9E:08:84:C0:B6:3B:7A:62:51:57:42:A3:3C:3D"}}},"request":{"raw":"GET /Y29udGVudC9mYjg4L2dsb2JhbG1lbGFuZ2Vjby8xNTgzNzQwNTQxX2ltYWdlMS53ZWJw.webp?t=20260716072625 HTTP/1.1\r\nHost: cdn.globalmelange.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://globalmelange.co/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPriority: i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sat, 18 Jul 2026 16:08:55 GMT\r\ncontent-type: image/webp\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, HEAD\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=31536000, immutable, stale-while-revalidate=86400, stale-if-error=259200\r\netag: \"dae44b961c35662f90a9b1fdcff84700b4079165cf3070e49ffa8dfb1d228d68\"\r\nlast-modified: Thu, 16 Jul 2026 07:31:14 GMT\r\nvary: Accept-Encoding\r\nx-cache-status: HIT\r\nserver: cloudflare\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=OfIZgf5r5V7AC556UZzKzywnIbDqTft0ki3MXDN1tV%2BrHLxIBQYXcLX%2BFtFSdSVm4hxdlcZODMWVRroYRj6Pa9UGffvlm1KOwCAb7WhW%2B%2FXZajhvm2o5qbgeDY0aMA5mvH0cJaHjsA%3D%3D\"}]}\r\ncf-ray: a1d2bf6b3f0d5688-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":250456,"size_decoded":251516,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 800x533, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"dee90824722a61436c703608dc58c006","sha1":"0e6e1c00e1729816b90e4aa627c638d3d15ce770","sha256":"dae44b961c35662f90a9b1fdcff84700b4079165cf3070e49ffa8dfb1d228d68","sha512":"8c7bd8fb4e8e71c643cc110ab700ebde28cd9dde4e8febd452cfbc73b95feef781ebaaa65e0506222e3e54a62b9327968db58d907d1eea82182b1b7354c86f3b","ssdeep":"3072:amwgQKnrELUQUO1aTM0KhbZvv/3Zz68huh51uDt/0iPJgYuYY0JmEyEZWa/b+/PS:aSxiUI150yRz68uh5oDyuJvOsDsxSM+R","tlshash":"f634136fc715ca9da216bc4e4d00bf4bfd09c174513889b2add3866e53fdcb422d898a","first_seen":"2026-07-18T16:09:35.791655Z","last_seen":"2026-07-18T16:12:49.433097Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1139,"timings":{"blocked":76,"dns":0,"connect":1,"send":0,"wait":1051,"receive":0,"ssl":10},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"cdn.globalmelange.co","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"cdn.globalmelange.co","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.globalmelange.co/bG9nby9mYjg4LndlYnA.webp","fqdn":"cdn.globalmelange.co","domain":"globalmelange.co","tld":"co"},"ip":{"addr":"104.21.12.81","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://globalmelange.co/","date":"2026-07-18T16:08:55.179Z","timestamp":1784390935179,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"globalmelange.co","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 16 Jul 2026 04:06:55 GMT","end":"Wed, 14 Oct 2026 05:05:26 GMT"},"fingerprint":{"sha1":"EE:74:46:45:4B:7F:06:9C:B8:EB:6F:7A:87:94:BB:4B:CF:39:5A:9B","sha256":"68:2F:33:2F:F5:6E:AA:CD:93:57:0C:4A:98:C7:15:A4:7F:5A:9E:08:84:C0:B6:3B:7A:62:51:57:42:A3:3C:3D"}}},"request":{"raw":"GET /bG9nby9mYjg4LndlYnA.webp HTTP/1.1\r\nHost: cdn.globalmelange.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://globalmelange.co/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 18 Jul 2026 16:08:55 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, HEAD\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=31536000, immutable, stale-while-revalidate=86400, stale-if-error=259200\r\netag: \"1e00103a8b5c7c37b835a2d3a0579e80052ba2ad1989603cc9a602278174ee5a\"\r\nlast-modified: Tue, 04 Nov 2025 14:00:09 GMT\r\nvary: Accept-Encoding\r\nx-cache-status: HIT\r\nserver: cloudflare\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=VQ12z8av1H5a9yVbyRtRBWSwKelglHXdZP2SI4yTRSwNmYsSgWsr%2FwvFaEd0pa2ZgsgcWpEY0OdudEGoHTpiV1BAijxLoYTRs22pULjswei4VBgAkbmaBi4bB3GQZdDm81JfGB%2FLMw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a1d2bf70dc65b4ff-OSL\r\ncontent-length: 1082\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1082,"size_decoded":2204,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 100x50, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"536875dca83a5ded59d4b28ef9b572a1","sha1":"bb90bfa14836a0a48c6716ea5d0ecebe6f415846","sha256":"1e00103a8b5c7c37b835a2d3a0579e80052ba2ad1989603cc9a602278174ee5a","sha512":"693d890a57e3fc7e4872d7dcf2cc7ac55f6912339d8ebb19e0619c7ba748f9f155deee1562dbf9faaa92bc0884d0db2afa68eb9012d837ae51337fb1b25c1ea3","ssdeep":"","tlshash":"fd11b60ad4bffe43c64acd6a3ab2b43a17509295545c0759207084e17002a2c3e8d158","first_seen":"2026-07-18T16:09:35.795549Z","last_seen":"2026-07-18T16:12:49.446745Z","times_seen":2,"resource_available":false,"data":null}},"time_used":776,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":776,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"cdn.globalmelange.co","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"cdn.globalmelange.co","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.globalmelange.co/bG9nby8xMmJldC53ZWJw.webp","fqdn":"cdn.globalmelange.co","domain":"globalmelange.co","tld":"co"},"ip":{"addr":"104.21.12.81","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://globalmelange.co/","date":"2026-07-18T16:08:55.182Z","timestamp":1784390935182,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"globalmelange.co","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 16 Jul 2026 04:06:55 GMT","end":"Wed, 14 Oct 2026 05:05:26 GMT"},"fingerprint":{"sha1":"EE:74:46:45:4B:7F:06:9C:B8:EB:6F:7A:87:94:BB:4B:CF:39:5A:9B","sha256":"68:2F:33:2F:F5:6E:AA:CD:93:57:0C:4A:98:C7:15:A4:7F:5A:9E:08:84:C0:B6:3B:7A:62:51:57:42:A3:3C:3D"}}},"request":{"raw":"GET /bG9nby8xMmJldC53ZWJw.webp HTTP/1.1\r\nHost: cdn.globalmelange.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://globalmelange.co/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 18 Jul 2026 16:08:55 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, HEAD\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=31536000, immutable, stale-while-revalidate=86400, stale-if-error=259200\r\netag: \"48d1b493982bddb60e0b6bde66c141a3ec854bb5612993fbc37918d7d2475ae8\"\r\nlast-modified: Tue, 04 Nov 2025 14:00:10 GMT\r\nvary: Accept-Encoding\r\nx-cache-status: HIT\r\nserver: cloudflare\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=i%2B5HIkfSE8wK5XUxWEt5lMmUJRK3N1pCjGvV%2FI%2FZ6VcFhzgSNZr6FWSzYO5BXBhfJ%2F5BS31%2FQAp5NMTZXN5agMOmaXOQWdESM8hUgk%2Fp5dL8nxYWM7utpM%2FIR1XBRq0uEc2kBVRhJA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a1d2bf70dc66b4ff-OSL\r\ncontent-length: 1002\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":1002,"size_decoded":2134,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 123x50, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"64d67c47da9964ec4da3574cea30000d","sha1":"4c7e7c3c8b297d95fa1ab8f59ec9356ce6c77609","sha256":"48d1b493982bddb60e0b6bde66c141a3ec854bb5612993fbc37918d7d2475ae8","sha512":"f0a8d56c70b443b6bd6da947a4ecd39dfb174d65f789980fa34bfe2c39e8fe14bc626e0b91764e019b46b7d535b57edbc22ce429576461fb8b29c32941d85be8","ssdeep":"","tlshash":"da11a8a909a80b6be659a328017591862a13f9f01cdca14739af94aa391303ca0736f1","first_seen":"2026-07-18T16:09:35.798114Z","last_seen":"2026-07-18T16:12:49.435164Z","times_seen":2,"resource_available":false,"data":null}},"time_used":811,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":811,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"cdn.globalmelange.co","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"cdn.globalmelange.co","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.globalmelange.co/bG9nby92OWJldC53ZWJw.webp","fqdn":"cdn.globalmelange.co","domain":"globalmelange.co","tld":"co"},"ip":{"addr":"104.21.12.81","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://globalmelange.co/","date":"2026-07-18T16:08:55.187Z","timestamp":1784390935187,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"globalmelange.co","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 16 Jul 2026 04:06:55 GMT","end":"Wed, 14 Oct 2026 05:05:26 GMT"},"fingerprint":{"sha1":"EE:74:46:45:4B:7F:06:9C:B8:EB:6F:7A:87:94:BB:4B:CF:39:5A:9B","sha256":"68:2F:33:2F:F5:6E:AA:CD:93:57:0C:4A:98:C7:15:A4:7F:5A:9E:08:84:C0:B6:3B:7A:62:51:57:42:A3:3C:3D"}}},"request":{"raw":"GET /bG9nby92OWJldC53ZWJw.webp HTTP/1.1\r\nHost: cdn.globalmelange.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://globalmelange.co/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 18 Jul 2026 16:08:55 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, HEAD\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=31536000, immutable, stale-while-revalidate=86400, stale-if-error=259200\r\netag: \"1a3473b22a1ff67ba8485dc83e96ae118283340f680858ab42959e00149033c2\"\r\nlast-modified: Tue, 04 Nov 2025 14:00:10 GMT\r\nvary: Accept-Encoding\r\nx-cache-status: HIT\r\nserver: cloudflare\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=gyyOdf9rSAqw0WBsquCn5GgintuJP23B5TWhZJkOI2ENobpwRPwebX7heo0SK%2FT9H8e3xdyQT0JlAScQKmFSIzcVmWUzDPfd8ZLsQx6WEBMngyNAmyeTUWRPmm5mVusAjKAe25LR1Q%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a1d2bf70ec68b4ff-OSL\r\ncontent-length: 1256\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":1256,"size_decoded":2376,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 117x50, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"3e9e60953202279e8f90640697b43487","sha1":"d9f09f58f17dc6e044233b95fb57f1b87c7fb6a6","sha256":"1a3473b22a1ff67ba8485dc83e96ae118283340f680858ab42959e00149033c2","sha512":"6b82e9f9e446d71a4c70f735d6c2f64fe9dda23153528a4fa111832123a1bcec92ad18745553b9031a45e5e287406579496e7b7b228edbf194dfd212bc0bb4d8","ssdeep":"","tlshash":"1121ea1dc2177b7116b58988e730bb3302bca235264de5244fe3f114a494ee51439f69","first_seen":"2026-07-18T16:09:35.800694Z","last_seen":"2026-07-18T16:12:49.43769Z","times_seen":2,"resource_available":false,"data":null}},"time_used":769,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":769,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"cdn.globalmelange.co","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"cdn.globalmelange.co","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.globalmelange.co/main.css","fqdn":"cdn.globalmelange.co","domain":"globalmelange.co","tld":"co"},"ip":{"addr":"104.21.12.81","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://globalmelange.co/","date":"2026-07-18T16:08:54.178Z","timestamp":1784390934178,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"globalmelange.co","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 16 Jul 2026 04:06:55 GMT","end":"Wed, 14 Oct 2026 05:05:26 GMT"},"fingerprint":{"sha1":"EE:74:46:45:4B:7F:06:9C:B8:EB:6F:7A:87:94:BB:4B:CF:39:5A:9B","sha256":"68:2F:33:2F:F5:6E:AA:CD:93:57:0C:4A:98:C7:15:A4:7F:5A:9E:08:84:C0:B6:3B:7A:62:51:57:42:A3:3C:3D"}}},"request":{"raw":"GET /main.css HTTP/1.1\r\nHost: cdn.globalmelange.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://globalmelange.co/\r\nOrigin: https://globalmelange.co\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=0\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 18 Jul 2026 16:08:55 GMT\r\ncontent-type: text/css; charset=utf-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, HEAD\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=31536000, immutable, stale-while-revalidate=86400, stale-if-error=259200\r\netag: \"9909f009f3798b9bc6aa316f71e160d39f27cf390843b7b887e3decfc01aaf72\"\r\nlast-modified: Tue, 23 Jun 2026 12:35:40 GMT\r\nvary: Accept-Encoding\r\nx-cache-status: HIT\r\ncontent-encoding: br\r\nserver: cloudflare\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\npriority: u=0,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=HHDMZlZnEu%2BJi1pkwpUqMiFkziFzUunKUvsa8QbC2VPEiT243jWu8X7jAPpwrITIz6hAceJzsx%2FPuWoncakpmKY8zPuqCjWiMaLDQxmYtoiYeXURciwINyKz31LdLGsDnpDsLbifWw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1d2bf6afc14b4ff-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":14014,"size_decoded":4982,"mime_type":"text/css; charset=utf-8","magic":"Unicode text, UTF-8 text, with very long lines (14004)","md5":"f72623484e76e18a8ccc191b164ec1fd","sha1":"4322dd4e7b2364dbd33d2771ae1a3089225a8f3e","sha256":"9909f009f3798b9bc6aa316f71e160d39f27cf390843b7b887e3decfc01aaf72","sha512":"21ca042a48c6e4da14a642693afe3b9f4ca9b44c0e16a78b1ae81076fcc76332babf729bef8c4ca46354121206784d0194e4ac9e50c0ef7a45239a03bd8ebde9","ssdeep":"192:nN6/7lev17On7+JVx0V9aeffztAShRSYzpxcj1GLlQyrIg7:I/7li1cUUhRvpxcEGU","tlshash":"7c521d715a10713df52be0366fc51fac6038a821de275ae8f661f26cc9ca2f505f2a58","first_seen":"2026-07-18T16:09:35.803058Z","last_seen":"2026-07-18T16:12:49.425073Z","times_seen":2,"resource_available":false,"data":null}},"time_used":917,"timings":{"blocked":-1,"dns":40,"connect":16,"send":0,"wait":861,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"cdn.globalmelange.co","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"cdn.globalmelange.co","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.globalmelange.co/bG9nby93ODgud2VicA.webp","fqdn":"cdn.globalmelange.co","domain":"globalmelange.co","tld":"co"},"ip":{"addr":"104.21.12.81","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://globalmelange.co/","date":"2026-07-18T16:08:55.196Z","timestamp":1784390935196,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"globalmelange.co","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 16 Jul 2026 04:06:55 GMT","end":"Wed, 14 Oct 2026 05:05:26 GMT"},"fingerprint":{"sha1":"EE:74:46:45:4B:7F:06:9C:B8:EB:6F:7A:87:94:BB:4B:CF:39:5A:9B","sha256":"68:2F:33:2F:F5:6E:AA:CD:93:57:0C:4A:98:C7:15:A4:7F:5A:9E:08:84:C0:B6:3B:7A:62:51:57:42:A3:3C:3D"}}},"request":{"raw":"GET /bG9nby93ODgud2VicA.webp HTTP/1.1\r\nHost: cdn.globalmelange.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://globalmelange.co/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 18 Jul 2026 16:08:56 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, HEAD\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=31536000, immutable, stale-while-revalidate=86400, stale-if-error=259200\r\netag: \"d42362bb9074d5f1f4658fc95aad8091c5a29162bcce7f2f98e58f3181d5d7b4\"\r\nlast-modified: Tue, 04 Nov 2025 14:00:08 GMT\r\nvary: Accept-Encoding\r\nx-cache-status: HIT\r\nserver: cloudflare\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=lBWIU58E3s7%2F2t1Sd3xUV0xM86EOJ8nFbUTJdxrFHYx8FXkYlUrnt0CgMgDY8yuPPxPak1yf3uZdNaXkA7Mp4FtLFi4JKH7iHPwS7AY1hwZu5eaBc9IMa8k9td%2Fo4m%2BRhaq%2Frgr89g%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i\r\ncf-ray: a1d2bf70fc6db4ff-OSL\r\ncontent-length: 1038\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1038,"size_decoded":2164,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 100x50, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"4acb4703c3d3fc9aed82d5ae46cd9c44","sha1":"44149691ecb024eff6ad14db8ebfb389002551df","sha256":"d42362bb9074d5f1f4658fc95aad8091c5a29162bcce7f2f98e58f3181d5d7b4","sha512":"da8a8661e1b3480c17774ec3739dbbaec12880c60f57a39e2afa300efa6a53915a2042a86e3af7cb04aaf970229f6940081f097f134357e0ead73d9f390557ff","ssdeep":"","tlshash":"1a11d58e717fe3c4b7025880f4240ae83183a15bc0c80b828f1ba0b9a532de88bb5cc4","first_seen":"2026-07-18T16:09:35.805744Z","last_seen":"2026-07-18T16:12:49.460392Z","times_seen":2,"resource_available":false,"data":null}},"time_used":860,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":860,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"cdn.globalmelange.co","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"cdn.globalmelange.co","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.globalmelange.co/ZmF2aWNvbi9mYjg4LzhjZjZkZGM4ZDkvMTkyLndlYnA.webp","fqdn":"cdn.globalmelange.co","domain":"globalmelange.co","tld":"co"},"ip":{"addr":"104.21.12.81","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://globalmelange.co/","date":"2026-07-18T16:08:56.062Z","timestamp":1784390936062,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"globalmelange.co","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 16 Jul 2026 04:06:55 GMT","end":"Wed, 14 Oct 2026 05:05:26 GMT"},"fingerprint":{"sha1":"EE:74:46:45:4B:7F:06:9C:B8:EB:6F:7A:87:94:BB:4B:CF:39:5A:9B","sha256":"68:2F:33:2F:F5:6E:AA:CD:93:57:0C:4A:98:C7:15:A4:7F:5A:9E:08:84:C0:B6:3B:7A:62:51:57:42:A3:3C:3D"}}},"request":{"raw":"GET /ZmF2aWNvbi9mYjg4LzhjZjZkZGM4ZDkvMTkyLndlYnA.webp HTTP/1.1\r\nHost: cdn.globalmelange.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://globalmelange.co/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 18 Jul 2026 16:08:56 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, HEAD\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=31536000, immutable, stale-while-revalidate=86400, stale-if-error=259200\r\netag: \"5b2733530ce30bbc1436be5c9325fc6ceffdfa79bb3e1d19400c16a58f85f189\"\r\nlast-modified: Thu, 16 Apr 2026 13:41:38 GMT\r\nvary: Accept-Encoding\r\nx-cache-status: HIT\r\nserver: cloudflare\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=kFlcRYX9s8L2QIjrtoBzisAEKEt328U7JpoLmsSJifhq3qFhH0IceskjfDwh3uZ%2BW0XkoK2pOsl4IgLfzbipDfJIi0%2BYhk%2B6cBMzcH5BahPbzINav3QkJFUTogYcaMUouBPeQLyOzA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=6,i=?0\r\ncf-ray: a1d2bf766c9bb4ff-OSL\r\ncontent-length: 9008\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":9008,"size_decoded":10135,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"1cff571a857892daabc5c9dfb2415643","sha1":"e041bded516a24ef90f86b8a2b64af26d87eec08","sha256":"5b2733530ce30bbc1436be5c9325fc6ceffdfa79bb3e1d19400c16a58f85f189","sha512":"ab6fbacaf50d4f53f78b7ba2b11623b891d0836f48bbcd0871c9a8ca70f8ae06bb1d2e61687d342ea944adf440f3ea120c36b03e886d508247a068e7b1c66b97","ssdeep":"192:Tc8CZJHpx7aGTMRoKom4Aow94/XxyKjyw:TcjvHpxQodm4Aow94fx9","tlshash":"7902bf1e42cbb307ed99277c7d2f2a451a5807ec5aedb6dcfa5048252521120beb7f41","first_seen":"2026-07-18T16:09:35.808034Z","last_seen":"2026-07-18T16:12:49.462244Z","times_seen":2,"resource_available":false,"data":null}},"time_used":776,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":775,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"cdn.globalmelange.co","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"cdn.globalmelange.co","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"globalmelange.co/","fqdn":"globalmelange.co","domain":"globalmelange.co","tld":"co"},"ip":{"addr":"172.67.151.235","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-07-18T16:08:53.079Z","timestamp":1784390933079,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"globalmelange.co","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 16 Jul 2026 04:06:55 GMT","end":"Wed, 14 Oct 2026 05:05:26 GMT"},"fingerprint":{"sha1":"EE:74:46:45:4B:7F:06:9C:B8:EB:6F:7A:87:94:BB:4B:CF:39:5A:9B","sha256":"68:2F:33:2F:F5:6E:AA:CD:93:57:0C:4A:98:C7:15:A4:7F:5A:9E:08:84:C0:B6:3B:7A:62:51:57:42:A3:3C:3D"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: globalmelange.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreferrer-policy: strict-origin-when-cross-origin\r\nx-content-type-options: nosniff\r\nx-frame-options: SAMEORIGIN\r\npermissions-policy: geolocation=(), microphone=(), camera=()\r\ncache-control: public, max-age=60, must-revalidate, stale-while-revalidate=30\r\ncontent-type: text/html; charset=UTF-8\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=RCZSwnzyvxWQQx5Lxv%2BYUjkzA%2FGuQSXig%2BR1NmrlosvHuFZNSEQvieLUAkxK1J6Dx8vPRY%2FMbrMPe7qt2Wm9eqLIKxDWCG0f3v0yaFmiF2ukdp%2FOcLYsRhLi1Hm0EkMDJnwn\"}]}\r\nvary: Accept-Encoding\r\ndate: Sat, 18 Jul 2026 16:08:53 GMT\r\nserver: cloudflare\r\nplatform: hostinger\r\npanel: hpanel\r\ncontent-security-policy: upgrade-insecure-requests\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: DYNAMIC\r\npriority: u=0,i\r\ncontent-encoding: zstd\r\ncf-ray: a1d2bf644d1d76ef-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":28326,"size_decoded":9529,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (25899), with no line terminators","md5":"4627836da64a21a56fb0113b1c649b0a","sha1":"17c617182ff8c90fbefcb4335785f706fd443d84","sha256":"1b7a03fcf5fa32c7f9a71972a62cc2ed08564ad3c99b4e20d27bdac05c529c71","sha512":"4d81a5b8b230407229dbe223ce34a9565df4696dfb979babe14ffcc6b15c5efc54b238de516cb82b145b5153c3b2c4874fc1fba763284dd26ad46c351906971d","ssdeep":"768:ye3UwGGHU3V5+Hca6xmGT13FenI60L1PRqBltqfg9aHKya:h6DFEnI6oI91","tlshash":"10c2d77261e8353b891e418de1c9360c97c7f00fcb889e65a6fd25b56e52e30793239e","first_seen":"2026-07-18T16:09:35.809879Z","last_seen":"2026-07-18T16:09:35.809879Z","times_seen":1,"resource_available":true,"data":null}},"time_used":583,"timings":{"blocked":-1,"dns":71,"connect":14,"send":0,"wait":491,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"globalmelange.co","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"globalmelange.co","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.globalmelange.co/main.js","fqdn":"cdn.globalmelange.co","domain":"globalmelange.co","tld":"co"},"ip":{"addr":"104.21.12.81","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://globalmelange.co/","date":"2026-07-18T16:08:54.190Z","timestamp":1784390934190,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"globalmelange.co","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 16 Jul 2026 04:06:55 GMT","end":"Wed, 14 Oct 2026 05:05:26 GMT"},"fingerprint":{"sha1":"EE:74:46:45:4B:7F:06:9C:B8:EB:6F:7A:87:94:BB:4B:CF:39:5A:9B","sha256":"68:2F:33:2F:F5:6E:AA:CD:93:57:0C:4A:98:C7:15:A4:7F:5A:9E:08:84:C0:B6:3B:7A:62:51:57:42:A3:3C:3D"}}},"request":{"raw":"GET /main.js HTTP/1.1\r\nHost: cdn.globalmelange.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://globalmelange.co/\r\nOrigin: https://globalmelange.co\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 18 Jul 2026 16:08:55 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, HEAD\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=31536000, immutable, stale-while-revalidate=86400, stale-if-error=259200\r\netag: \"3a27daf5fb49548a044105c5db0be4247ab89dc9cd1db1646b84e776ee1f800a\"\r\nlast-modified: Wed, 31 Dec 2025 07:56:20 GMT\r\nvary: Accept-Encoding\r\nx-cache-status: HIT\r\ncontent-encoding: br\r\nserver: cloudflare\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\npriority: u=3,i=?0\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=sUW6SuFbszbLEmsMcMc%2B4bDUL6zgj9txWEXefvGejNpQQPgjpdoJS50ZPLjHVXvGCAhSw3fo4sbBUe8dV4T4bH6sQ8zl78WoSZF0Ro4ad49B7qXe4SGBTaHIxiEDzyzcfJ0K03vbsg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1d2bf6afc16b4ff-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":15151,"size_decoded":6353,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (15148), with no line terminators","md5":"686d54b233c8543690891af551917164","sha1":"ade102880bc4f516e9662dcc2fb7313be62790d4","sha256":"3a27daf5fb49548a044105c5db0be4247ab89dc9cd1db1646b84e776ee1f800a","sha512":"407cca6bb192f534508ebc1e164a3e8505f98ba88b9c16370db204738ce52d54ff0d748c8fefaa40179270bd2b765ac486bfd9f4ecc8df645a97751b0cbd61c1","ssdeep":"384:yiv2DHuyKEs3Tg9ifjQoWHsTkqgP+xSMoSON9IybTk2lyHL1TOuMqsID:ILuyKEs3UeQ9qgP+49SOrvkHLR7Mqf","tlshash":"e062f8a977943a7106f611a222afbb06f331034a594dc46194b7e8443d3dcd39237fea","first_seen":"2026-07-18T16:09:35.811992Z","last_seen":"2026-07-18T16:12:49.430528Z","times_seen":2,"resource_available":true,"data":null}},"time_used":885,"timings":{"blocked":31,"dns":0,"connect":0,"send":0,"wait":854,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"cdn.globalmelange.co","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"cdn.globalmelange.co","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.globalmelange.co/bG9nby8xODhiZXQud2VicA.webp","fqdn":"cdn.globalmelange.co","domain":"globalmelange.co","tld":"co"},"ip":{"addr":"104.21.12.81","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://globalmelange.co/","date":"2026-07-18T16:08:55.191Z","timestamp":1784390935191,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"globalmelange.co","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 16 Jul 2026 04:06:55 GMT","end":"Wed, 14 Oct 2026 05:05:26 GMT"},"fingerprint":{"sha1":"EE:74:46:45:4B:7F:06:9C:B8:EB:6F:7A:87:94:BB:4B:CF:39:5A:9B","sha256":"68:2F:33:2F:F5:6E:AA:CD:93:57:0C:4A:98:C7:15:A4:7F:5A:9E:08:84:C0:B6:3B:7A:62:51:57:42:A3:3C:3D"}}},"request":{"raw":"GET /bG9nby8xODhiZXQud2VicA.webp HTTP/1.1\r\nHost: cdn.globalmelange.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://globalmelange.co/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 18 Jul 2026 16:08:56 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, HEAD\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=31536000, immutable, stale-while-revalidate=86400, stale-if-error=259200\r\netag: \"5535bc5bf025636bd0f86d81d228f553d921fde64d32a785f79349eb4963ce19\"\r\nlast-modified: Tue, 04 Nov 2025 14:00:09 GMT\r\nvary: Accept-Encoding\r\nx-cache-status: HIT\r\nserver: cloudflare\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=b4ypGgzdgQw2TlMnHIavSokerGiOxVS%2BLMzXFgtQZUlA90PUa6ZAe5f%2FWxuDA2068RUk1WT6xNjw3fi0tnMXL8uHoac9wUg1ub6OyMV3mXI6ghmMZ%2B7N%2BS0yuFQlnF%2FQ71WF3Rqdjg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a1d2bf70ec6bb4ff-OSL\r\ncontent-length: 930\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":930,"size_decoded":2057,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 90x50, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"54e8800c12eff7cd7944e1f0e7c3625c","sha1":"0616b68e56fe718e9bb27e4f2a8f5a5b2b1c7e0e","sha256":"5535bc5bf025636bd0f86d81d228f553d921fde64d32a785f79349eb4963ce19","sha512":"716b236173d5ed1f9ab4dc2c844a32c95f2bf6147f33fb130e0d4aa582cc3fbac7eef2f63e1e4ca532874799a2af525f66b26d1a75e0ec03e4177383d7ea8825","ssdeep":"","tlshash":"0d11c8c82359a11cd8d43788cd3ae7bc4c0991ad412811633bb38d023bae9a07e8718e","first_seen":"2026-07-18T16:09:35.813894Z","last_seen":"2026-07-18T16:12:49.46454Z","times_seen":2,"resource_available":false,"data":null}},"time_used":854,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":854,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"cdn.globalmelange.co","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"cdn.globalmelange.co","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.globalmelange.co/ZmF2aWNvbi9mYjg4LzhjZjZkZGM4ZDkvMTYud2VicA.webp","fqdn":"cdn.globalmelange.co","domain":"globalmelange.co","tld":"co"},"ip":{"addr":"104.21.12.81","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://globalmelange.co/","date":"2026-07-18T16:08:56.064Z","timestamp":1784390936064,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"globalmelange.co","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 16 Jul 2026 04:06:55 GMT","end":"Wed, 14 Oct 2026 05:05:26 GMT"},"fingerprint":{"sha1":"EE:74:46:45:4B:7F:06:9C:B8:EB:6F:7A:87:94:BB:4B:CF:39:5A:9B","sha256":"68:2F:33:2F:F5:6E:AA:CD:93:57:0C:4A:98:C7:15:A4:7F:5A:9E:08:84:C0:B6:3B:7A:62:51:57:42:A3:3C:3D"}}},"request":{"raw":"GET /ZmF2aWNvbi9mYjg4LzhjZjZkZGM4ZDkvMTYud2VicA.webp HTTP/1.1\r\nHost: cdn.globalmelange.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://globalmelange.co/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 18 Jul 2026 16:08:56 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, HEAD\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=31536000, immutable, stale-while-revalidate=86400, stale-if-error=259200\r\netag: \"0c76a71fd5988b859b009e06ef8a8a1f02b09a872db9a96f1ce1f8a2400fb6bd\"\r\nlast-modified: Thu, 16 Apr 2026 13:41:38 GMT\r\nvary: Accept-Encoding\r\nx-cache-status: HIT\r\nserver: cloudflare\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=BvG%2FcaN2Fm0gZBGHwdpizAE2h3%2BqeU9zjZ%2FR90CZCmF8ykovUjXi7w%2Fh10ILw5GUKLvgVSg2Uv0AYWsTxvCpOOMgvSWtoLbu84jf0DiCPDM2Wtr6NhVisoHaAIJlbEdzA4RrYII2eg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=6,i=?0\r\ncf-ray: a1d2bf766c9cb4ff-OSL\r\ncontent-length: 502\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":502,"size_decoded":1630,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"45c87d5d2d49c5c5839f0b1f6647a718","sha1":"5bc8802c3c70deaa5f53bdca68dca7a0b909bed0","sha256":"0c76a71fd5988b859b009e06ef8a8a1f02b09a872db9a96f1ce1f8a2400fb6bd","sha512":"37cdb58035e8c0ca70d40a57416ef3ede71596a6ec5f4c4acff8b3015c8a5e3c2a22716038fe8ec7fdf18e7a6017b72e2e496b1e7e57941a4a2497a31417021d","ssdeep":"","tlshash":"03f05433838180a0d1dd14b36b28be465d1c6d46c1428f3045f3788005ca130bda3cbf","first_seen":"2026-07-18T16:09:35.815443Z","last_seen":"2026-07-18T16:12:49.454895Z","times_seen":2,"resource_available":false,"data":null}},"time_used":832,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":832,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"cdn.globalmelange.co","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"cdn.globalmelange.co","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.globalmelange.co/lazyload.js","fqdn":"cdn.globalmelange.co","domain":"globalmelange.co","tld":"co"},"ip":{"addr":"104.21.12.81","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://globalmelange.co/","date":"2026-07-18T16:08:54.188Z","timestamp":1784390934188,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"globalmelange.co","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 16 Jul 2026 04:06:55 GMT","end":"Wed, 14 Oct 2026 05:05:26 GMT"},"fingerprint":{"sha1":"EE:74:46:45:4B:7F:06:9C:B8:EB:6F:7A:87:94:BB:4B:CF:39:5A:9B","sha256":"68:2F:33:2F:F5:6E:AA:CD:93:57:0C:4A:98:C7:15:A4:7F:5A:9E:08:84:C0:B6:3B:7A:62:51:57:42:A3:3C:3D"}}},"request":{"raw":"GET /lazyload.js HTTP/1.1\r\nHost: cdn.globalmelange.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://globalmelange.co/\r\nOrigin: https://globalmelange.co\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 18 Jul 2026 16:08:55 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\nserver-timing: cfExtPri\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, HEAD\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=31536000, immutable, stale-while-revalidate=86400, stale-if-error=259200\r\netag: \"c1554bd944feb6c574c3468af946bcdc98aaf19c019fc23f24434dd0e243613d\"\r\nlast-modified: Mon, 17 Nov 2025 10:10:45 GMT\r\nvary: Accept-Encoding\r\nx-cache-status: HIT\r\ncontent-encoding: br\r\nserver: cloudflare\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=HepwmgiW4QZsKNqyYdxByj79klCfy8Fqa7A93uMM1gqcxNnVNuqTxHl%2FLfVKWwf%2BrFjXUz2IuKQCE0%2F462X4pv9mzCsA1ytwSAewrTf1xJrirzFg0iqR5eLwpiiqWeLAay1sV2N1fA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: a1d2bf6afc15b4ff-OSL\r\ncontent-length: 609\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1441,"size_decoded":1784,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (1441), with no line terminators","md5":"c7cb755981a008cb5cfc22a2523b4074","sha1":"e20993ca62c97b46ba2008f159f448d16c11559c","sha256":"c1554bd944feb6c574c3468af946bcdc98aaf19c019fc23f24434dd0e243613d","sha512":"adf64ab94704b1455ddd1ff091b878df70ff8733865a5ce602baa3fabb60615b2e93aa595813d80376022b865f07f98601bb32d26ae0e982723dbcb156d3388a","ssdeep":"","tlshash":"2e2112fa2b14af3454d693eb536eb3407a3513e6f14f4800503dc8845934ce7567adc9","first_seen":"2026-07-18T16:09:35.816983Z","last_seen":"2026-07-18T16:12:49.42753Z","times_seen":2,"resource_available":true,"data":null}},"time_used":837,"timings":{"blocked":32,"dns":0,"connect":0,"send":0,"wait":805,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"cdn.globalmelange.co","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"cdn.globalmelange.co","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.globalmelange.co/bG9nby92bjg4LndlYnA.webp","fqdn":"cdn.globalmelange.co","domain":"globalmelange.co","tld":"co"},"ip":{"addr":"104.21.12.81","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://globalmelange.co/","date":"2026-07-18T16:08:55.186Z","timestamp":1784390935186,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"globalmelange.co","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 16 Jul 2026 04:06:55 GMT","end":"Wed, 14 Oct 2026 05:05:26 GMT"},"fingerprint":{"sha1":"EE:74:46:45:4B:7F:06:9C:B8:EB:6F:7A:87:94:BB:4B:CF:39:5A:9B","sha256":"68:2F:33:2F:F5:6E:AA:CD:93:57:0C:4A:98:C7:15:A4:7F:5A:9E:08:84:C0:B6:3B:7A:62:51:57:42:A3:3C:3D"}}},"request":{"raw":"GET /bG9nby92bjg4LndlYnA.webp HTTP/1.1\r\nHost: cdn.globalmelange.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://globalmelange.co/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 18 Jul 2026 16:08:55 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, HEAD\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=31536000, immutable, stale-while-revalidate=86400, stale-if-error=259200\r\netag: \"c4ea09a41309270248cc97664bcad374d52ef4e52a70e2c72ebe65de017e10cf\"\r\nlast-modified: Tue, 04 Nov 2025 14:00:08 GMT\r\nvary: Accept-Encoding\r\nx-cache-status: HIT\r\nserver: cloudflare\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6FtMP2PEJQuFKLMpbEP3%2BW5ORyp4fEwqilo8jiw77xo0s%2Fo3%2BfnJCbigreAgi%2FFLsxcYZfZ6YBYETZpmCW7tp%2FvAdS6hcrXeGBr4dF3IZuWQlFpknyxlPjwZdvOmeGdr3Y9TTNaIpQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a1d2bf70ec67b4ff-OSL\r\ncontent-length: 1212\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1212,"size_decoded":2340,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 120x50, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"632f56042297700d524bfc594ea642ce","sha1":"17d123c0f76f7abb38ca8de25f59631a76ac67da","sha256":"c4ea09a41309270248cc97664bcad374d52ef4e52a70e2c72ebe65de017e10cf","sha512":"716b42b3c28ca55425005b26c2bd5603c50e1d8759187baecc63d8533fa0d45ed3126c3adb93f3cf9f523dde8c98287e353ee1aec19cc707620b932a79b3280c","ssdeep":"","tlshash":"31210d6d50c91be68f546c49ff2509f324d4b1347d125f40cc9bae8024295d43572aff","first_seen":"2026-07-18T16:09:35.818437Z","last_seen":"2026-07-18T16:12:49.456622Z","times_seen":2,"resource_available":false,"data":null}},"time_used":764,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":764,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"cdn.globalmelange.co","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"cdn.globalmelange.co","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.globalmelange.co/bG9nby9mdW44OC53ZWJw.webp","fqdn":"cdn.globalmelange.co","domain":"globalmelange.co","tld":"co"},"ip":{"addr":"104.21.12.81","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://globalmelange.co/","date":"2026-07-18T16:08:55.189Z","timestamp":1784390935189,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"globalmelange.co","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 16 Jul 2026 04:06:55 GMT","end":"Wed, 14 Oct 2026 05:05:26 GMT"},"fingerprint":{"sha1":"EE:74:46:45:4B:7F:06:9C:B8:EB:6F:7A:87:94:BB:4B:CF:39:5A:9B","sha256":"68:2F:33:2F:F5:6E:AA:CD:93:57:0C:4A:98:C7:15:A4:7F:5A:9E:08:84:C0:B6:3B:7A:62:51:57:42:A3:3C:3D"}}},"request":{"raw":"GET /bG9nby9mdW44OC53ZWJw.webp HTTP/1.1\r\nHost: cdn.globalmelange.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://globalmelange.co/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 18 Jul 2026 16:08:56 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, HEAD\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=31536000, immutable, stale-while-revalidate=86400, stale-if-error=259200\r\netag: \"dd0f64e72b633b05d2d01d02f08c7761e578e588309bb915ba67d0f4235ef61e\"\r\nlast-modified: Tue, 04 Nov 2025 14:00:10 GMT\r\nvary: Accept-Encoding\r\nx-cache-status: HIT\r\nserver: cloudflare\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=sNPxM9iGwDpYmj%2BbCocJGJ5PK1Y60qOXQ6ykZvGQZCVJ2gDAXi%2B5rA4m1S2%2BbrMLgJWcuuJK%2FUtZqDrhM1IK6elyJ%2F7BAXcN47hHAae%2BFAx9uckM0TTy8oOsxGXQ9N5dhLXZ5rt5vw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a1d2bf70ec69b4ff-OSL\r\ncontent-length: 1090\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1090,"size_decoded":2220,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 117x50, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"48451a0272c8256866b403422d1164d3","sha1":"f8fbce13f951c59ffd6291970c14891abac06892","sha256":"dd0f64e72b633b05d2d01d02f08c7761e578e588309bb915ba67d0f4235ef61e","sha512":"c90297633edd05284595b4917575f1d750e32dc86faf4b04a7464be1a1b34503d151f03ab2341245dc29f5d1c92899e068229df68fda93e8faceb99aeeb94f43","ssdeep":"","tlshash":"2311b63dddc21473b4a4f8e0dc8c22667a49b7e7400bca86c1433463811292a226270f","first_seen":"2026-07-18T16:09:35.819943Z","last_seen":"2026-07-18T16:12:49.439191Z","times_seen":2,"resource_available":false,"data":null}},"time_used":824,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":824,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"cdn.globalmelange.co","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"cdn.globalmelange.co","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.globalmelange.co/bG9nby9tODgud2VicA.webp","fqdn":"cdn.globalmelange.co","domain":"globalmelange.co","tld":"co"},"ip":{"addr":"104.21.12.81","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://globalmelange.co/","date":"2026-07-18T16:08:55.194Z","timestamp":1784390935194,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"globalmelange.co","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 16 Jul 2026 04:06:55 GMT","end":"Wed, 14 Oct 2026 05:05:26 GMT"},"fingerprint":{"sha1":"EE:74:46:45:4B:7F:06:9C:B8:EB:6F:7A:87:94:BB:4B:CF:39:5A:9B","sha256":"68:2F:33:2F:F5:6E:AA:CD:93:57:0C:4A:98:C7:15:A4:7F:5A:9E:08:84:C0:B6:3B:7A:62:51:57:42:A3:3C:3D"}}},"request":{"raw":"GET /bG9nby9tODgud2VicA.webp HTTP/1.1\r\nHost: cdn.globalmelange.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://globalmelange.co/\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sat, 18 Jul 2026 16:08:55 GMT\r\ncontent-type: image/webp\r\nserver-timing: cfExtPri\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, HEAD\r\ncross-origin-resource-policy: cross-origin\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=31536000, immutable, stale-while-revalidate=86400, stale-if-error=259200\r\netag: \"0acde78e4af9997dda5bb8e56da40656688a4d9a9179d8ffe31dd8b1d71d5aeb\"\r\nlast-modified: Tue, 04 Nov 2025 14:00:09 GMT\r\nvary: Accept-Encoding\r\nx-cache-status: HIT\r\nserver: cloudflare\r\nx-content-type-options: nosniff\r\nreferrer-policy: strict-origin-when-cross-origin\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7TRf9NAtCe%2FuuCEU4F702yCCm295yIGRVyQ%2FrQrlyLtAMxW5Rb5XdjH5Xf98x8vreHQe%2FUauCgE7QmPbjAoU5IxJmK7CD%2BMn52DcfM6GL9S%2B76Mc%2Fazcok2bdyAIUMT6BGLZLsf2AA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a1d2bf70fc6cb4ff-OSL\r\ncontent-length: 1102\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":1102,"size_decoded":2232,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 100x50, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"220cd71e0c59d89c7501f7bb100267f1","sha1":"6a3824d8e475adf5d8782374a9dca4dcdbd92fa8","sha256":"0acde78e4af9997dda5bb8e56da40656688a4d9a9179d8ffe31dd8b1d71d5aeb","sha512":"fae6c7c022aa5787caab7d6a5192b3db78f4ea61686c133d2de06b1a4a061ec289284d82e3c464c0b142810a432d9eb87274877ce170dfc39a4304da0b648465","ssdeep":"","tlshash":"4e112c3017cc63c3fa56bbe46ad734783587ecf4100dd920506836da157f14085bd687","first_seen":"2026-07-18T16:09:35.821318Z","last_seen":"2026-07-18T16:12:49.452885Z","times_seen":2,"resource_available":false,"data":null}},"time_used":767,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":767,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"cdn.globalmelange.co","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"cdn.globalmelange.co","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}