{"report_id":"704b5bb3-44c8-4b58-ba85-dece8c7a9e2a","version":0,"status":"done","tags":[],"date":"2026-07-12T21:02:02Z","url":{"schema":"http","addr":"refund-vertex.com","fqdn":"refund-vertex.com","domain":"refund-vertex.com","tld":"com"},"ip":{"addr":"104.21.18.129","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"refund-vertex.com/","fqdn":"refund-vertex.com","domain":"refund-vertex.com","tld":"com"},"title":"Vertex-Vegal","dom":{"size":0,"mime_type":"text/plain; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","dom_hash":"domhash1f07f384c75181c66badb60ab1ec770b","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"refund-vertex.com","fqdn":"refund-vertex.com","domain":"refund-vertex.com","tld":"com"},"ip":{"addr":"104.21.18.129","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-08-16T21:02:02Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":2}},"detection":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"refund-vertex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"refund-vertex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.178.42","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-07-05T22:22:24.069932Z","alert_count":0,"request_count":7,"received_data":175186,"sent_data":4393,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"vertex-legal.org","ip":{"addr":"172.67.144.12","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-06-30","domain_rank":0,"first_seen":"2026-07-11T07:18:40.83099Z","last_seen":"2026-07-11T07:18:40.83099Z","alert_count":0,"request_count":13,"received_data":540710,"sent_data":7457,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"wordpress.zozothemes.com","ip":{"addr":"198.136.48.242","port":443,"asn":33182,"as":"DIMENOC","country":"United States","country_code":"US"},"domain_registered":"2013-12-27","domain_rank":0,"first_seen":"2022-07-29T04:35:17Z","last_seen":"2026-07-05T22:56:44.157783Z","alert_count":0,"request_count":1,"received_data":146,"sent_data":596,"comment":"","tags":null,"fingerprints":[{"name":"OpenResty:1.31.1.1","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"www.googletagmanager.com","ip":{"addr":"142.250.178.40","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2011-11-11","domain_rank":283,"first_seen":"2012-10-04T01:07:32Z","last_seen":"2026-07-05T22:30:27.189477Z","alert_count":0,"request_count":1,"received_data":434158,"sent_data":482,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-07-05T22:19:28.847206Z","alert_count":0,"request_count":16,"received_data":574769,"sent_data":9199,"comment":"","tags":null,"fingerprints":null},{"fqdn":"ipapi.co","ip":{"addr":"172.67.69.226","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2016-04-19","domain_rank":7936,"first_seen":"2017-01-31T09:07:01Z","last_seen":"2026-07-09T01:04:15.221232Z","alert_count":0,"request_count":1,"received_data":2498,"sent_data":459,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"www.google.com","ip":{"addr":"142.251.152.119","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"1997-09-15","domain_rank":22,"first_seen":"2015-05-10T13:11:19Z","last_seen":"2026-07-05T22:45:48.873657Z","alert_count":0,"request_count":1,"received_data":546,"sent_data":911,"comment":"","tags":null,"fingerprints":null},{"fqdn":"ajax.googleapis.com","ip":{"addr":"142.250.178.42","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":3691,"first_seen":"2012-05-22T10:38:03Z","last_seen":"2026-07-06T08:21:58.74978Z","alert_count":0,"request_count":1,"received_data":18342,"sent_data":486,"comment":"","tags":null,"fingerprints":null},{"fqdn":"refund-vertex.com","ip":{"addr":"104.21.18.129","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-06-30","domain_rank":0,"first_seen":"2026-07-11T07:18:40.830653Z","last_seen":"2026-07-11T07:18:40.830653Z","alert_count":202,"request_count":101,"received_data":4144809,"sent_data":53524,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"WordPress","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"imagesLoaded:5.0.0","description":"jQuery plugin for seeing if the images are loaded.","website":"https://imagesloaded.desandro.com/","common_platform_enumeration":"","icon":"","categories":["JavaScript libraries"]},{"name":"Bootstrap","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]},{"name":"jQuery Migrate:3.4.1","description":"Query Migrate is a javascript library that allows you to preserve the compatibility of your jQuery code developed for versions of jQuery older than 1.9.","website":"https://github.com/jquery/jquery-migrate","common_platform_enumeration":"","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Slider Revolution:6.7.57","description":"Slider Revolution is a flexible and highly customisable slider.","website":"https://www.sliderrevolution.com","common_platform_enumeration":"","icon":"Slider Revolution.svg","categories":["Widgets","Photo galleries"]},{"name":"Elementor:4.1.4","description":"Elementor is a website builder platform for professionals on WordPress.","website":"https://elementor.com","common_platform_enumeration":"","icon":"Elementor.svg","categories":["Page builders","WordPress plugins"]},{"name":"Infinite Scroll:5.0.0","description":"jQuery plugin for infinite scrolling.","website":"https://infinite-scroll.com/","common_platform_enumeration":"","icon":"Infinite Scroll.svg","categories":["JavaScript libraries"]},{"name":"OWL Carousel","description":"OWL Carousel is an enabled jQuery plugin that lets you create responsive carousel sliders.","website":"https://owlcarousel2.github.io/OwlCarousel2/","common_platform_enumeration":"","icon":"OWL Carousel.png","categories":["JavaScript libraries"]},{"name":"WordPress:7.0.1","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"Google Analytics","description":"Google Analytics is a free web analytics service that tracks and reports website traffic.","website":"https://google.com/analytics","common_platform_enumeration":"","icon":"Google Analytics.svg","categories":["Analytics"]},{"name":"Contact Form 7:6.1.6","description":"Contact Form 7 is an WordPress plugin which can manage multiple contact forms. The form supports Ajax-powered submitting, CAPTCHA, Akismet spam filtering.","website":"https://contactform7.com","common_platform_enumeration":"","icon":"Contact Form 7.png","categories":["WordPress plugins","Form builders"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"refund-vertex.com/wp-content/plugins/elementor-pro/assets/js/webpack-pro.runtime.min.js?ver=3.35.0","fqdn":"refund-vertex.com","domain":"refund-vertex.com","tld":"com"},"ip":{"addr":"104.21.18.129","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"8b9a270439e91d1a97947bd8620937c9","sha1":"5b3d8ae9b04f6106fac3fa6737414ae9f23b3ad6","sha256":"ca7656084f325781c0f02ad113584f5ee8b697d3aa9a2290f4282e41be7b7490","sha512":"f293c3f47c2e2717c38998d65acaed5baaef4f9962747e5096156f4e95f33278efcd2daf0195271daa22f7bfd09c5e7789a5c06d05e3699ca383b50be5b6b0ec","ssdeep":"96:BSfNg2SXdvjUq7VbocvCHHAiam4NBEPnh3CDjl2D/VTKV47YQGLo7cu8k2:sVNSXdvZVbocakNOPEDe/QOkQQbk2","tlshash":"e6d154980a589e2f26e13ad8b0976b701a3dd0723c19e991e651eddc18f8fd143da932","size":6248,"data":"","first_seen":"2026-02-02T16:50:51.717764Z","last_seen":"2026-07-18T16:55:56.934521Z","times_seen":2530,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"refund-vertex.com/wp-includes/js/wp-emoji-release.min.js?ver=7.0.1","fqdn":"refund-vertex.com","domain":"refund-vertex.com","tld":"com"},"ip":{"addr":"104.21.18.129","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"7dcb0bb1f67bc5cd9aa86bc0577108e3","sha1":"c90b1ed149a278c322a63f3a79443ccce5592382","sha256":"063840b4b3f5869e0f0d078bab8bd29cfb3a59ee85e8e3edbbec35a8fe846fd3","sha512":"d09c60fc702e1d3fb839685770b2626a64cbc6373ac4bf3a63c3536caef34f4f6caf76adfbd5c2d15bed6e1396ed4f3ca80f6673e3421b2ae2f9e7aa5ccf16f2","ssdeep":"384:WzevzApRZTbbUL3px/bEg1XgA5OOkpJTX:Wsk9bUL3px/YqXgAP+hX","tlshash":"79a2949ba33a4e8f343e3bd78d968f4dc9da555321c0e079dbefb6c169a00568274c90","size":22752,"data":"","first_seen":"2026-06-05T05:27:24.795617Z","last_seen":"2026-07-19T00:19:49.887252Z","times_seen":9917,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"refund-vertex.com/wp-content/plugins/classic-elementor-addons-pro/assets/js/theia-sticky-sidebar.min.js?ver=1.0","fqdn":"refund-vertex.com","domain":"refund-vertex.com","tld":"com"},"ip":{"addr":"104.21.18.129","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"69a423fcaf8f22778a2e059b2c554a17","sha1":"18f416a138fc5bcf4786585cb55a8d46af9976a6","sha256":"d88b2f05bcd6de59fcdc958ab1c6f63d0225f275d24ce003381c09deb3a4bf1e","sha512":"854d07a28f2fb39dcf38390120c0fe40c3964254c5749728a5d65fa8b9ac88be64467de73e8bf242da15feb2cb0dc611e841085b639baa8eedff436f8f95e4d1","ssdeep":"96:8CErPpnMTDqfVNsArPF1DYvDRGuPHB+qCuS5+6Q:FEz96DqfVOXEuPHB+qC9s","tlshash":"c3b1525e2f607535e097f8cf90cfa028906e4da75bca9079870c81d81d6575891f2fcd","size":5429,"data":"","first_seen":"2023-03-07T01:14:52Z","last_seen":"2026-07-18T14:29:10.467542Z","times_seen":1934,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"refund-vertex.com/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.4.1","fqdn":"refund-vertex.com","domain":"refund-vertex.com","tld":"com"},"ip":{"addr":"104.21.18.129","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"9ffeb32e2d9efbf8f70caabded242267","sha1":"3ad0c10e501ac2a9bfa18f9cd7e700219b378738","sha256":"5274f11e6fb32ae0cf2dfb9f8043272865c397a7c4223b4cfa7d50ea52fbde89","sha512":"8d6be545508a1c38278b8ad780c3758ae48a25e4e12eee443375aa56031d9b356f8c90f22d4f251140fa3f65603af40523165e33cae2e2d62fc78ec106e3d731","ssdeep":"192:5rprDN+sag6ifKIUpQI99P1tLm9kdgyq1+J3aCJQ+h4MPLORq:5rprxaefKI0LP19m4q1WW+h4Mjp","tlshash":"9952c8adb56679724eb721b8f03bd24f71b205de560d8940d19cc4f6282dc6e812bf78","size":13577,"data":"","first_seen":"2023-05-09T19:21:05Z","last_seen":"2026-07-19T00:19:27.253869Z","times_seen":897426,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"refund-vertex.com/igual-js-js-extra","fqdn":"refund-vertex.com","domain":"refund-vertex.com","tld":"com"},"ip":{"addr":"104.21.18.129","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"d40aa11fcac615a266e07bf839a4b265","sha1":"da2a771c57a807dd89f789fea5cb378f4b1c67c5","sha256":"9ce1e7fd5f6f8e3c876d6ddb9ac6a6595dbdeff531c2baa56a492faa3f198d9e","sha512":"592051031787b19d32f5233249f55e30e28661543312267dd5c4a1c59b459da6bdca94163d9e02ab31e11864037da83a74e32cb57cafa60806b43886d5f86126","ssdeep":"","tlshash":"46f05482c2955cbe0b60aefa9440562738b42010c3415c5eb5494cdf08e6881f30911e","size":597,"data":"","first_seen":"2026-07-12T21:02:12.995125Z","last_seen":"2026-07-12T21:02:12.995125Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"refund-vertex.com/wp-content/plugins/cool-formkit-for-elementor-forms/assets/js/date-format.js?ver=1.4.3","fqdn":"refund-vertex.com","domain":"refund-vertex.com","tld":"com"},"ip":{"addr":"104.21.18.129","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"b73fb6c5d190a6cb147b40177a1bc8ee","sha1":"62a43022a75940987b9c09069119e585bfe5b7c6","sha256":"29c2b344c55384bd2736d0b7bcfe2ca7e563db9a0eb9b7750e34176a9fe1d214","sha512":"ecdc19cba5c07bad688ae84ae93874f47698cb8c1aae629685dbb3b438379944dc87f1e4da921f5d925150a0603a2c022ad95352357778e714d83efcc6e234e1","ssdeep":"","tlshash":"dc317908e49b8c15c93745284be7201cdb54e23b15c452c7fa5d67211fb3e18aaa9f8e","size":1602,"data":"","first_seen":"2025-10-08T03:30:06.577762Z","last_seen":"2026-07-12T21:02:12.70697Z","times_seen":48,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"refund-vertex.com/wp-content/plugins/classic-elementor-addons-pro/assets/js/isotope.pkgd.min.js?ver=3.0.6","fqdn":"refund-vertex.com","domain":"refund-vertex.com","tld":"com"},"ip":{"addr":"104.21.18.129","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"2afcff647ed260006faa71c8e779e8d4","sha1":"c4e5994f24ee8c8d2cf2d6602f0b56b9096a2e98","sha256":"081ae9baaacc857c1c2cb51de6dbd0e1eb811c2761ef01a50df373f2f6eefe22","sha512":"66ad813b1ca1be74455eed3e584ea88e964b394da3767a9baccd61995746cf27826b50e03375f943803f22cf710352246d478377bef9e5d34d23f3f349fd8f7b","ssdeep":"768:LAyxsGKyc1gfflZVP4eAnmc6FumKSshD6cD6GLQfq9SvDz2A1Fxt:rxVKDSfJP4Nnmc6FuCshD6cD6xS9ODzV","tlshash":"f3f2d84f73403925468bf166926f160fb137a56c6a4790acba6ad8db1c79c0d6033fbc","size":35445,"data":"","first_seen":"2023-03-07T01:03:01Z","last_seen":"2026-07-18T23:44:45.810206Z","times_seen":24972,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"refund-vertex.com/wp-content/plugins/elementor-pro/assets/js/form.71055747203b48a65a24.bundle.min.js","fqdn":"refund-vertex.com","domain":"refund-vertex.com","tld":"com"},"ip":{"addr":"104.21.18.129","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"f34693abea63981804c7308aca0a19e7","sha1":"1517a864d0b20644f305b2e17a55f9984529eaeb","sha256":"f92275f397684aeea39268449db55050a97ea82a1fdd7722da3107f37583b242","sha512":"b972690a4196faec42bec64e42f250f8fa857f2cde652bdc36aa69fb5a08736eaf780c33a02ee680403b51c343ef3d0d25b498fbc46dfa61882e55205a9ec528","ssdeep":"384:yPfucUQ8HOfXXtaij86dYmpbaX0QY+iECkGWWhdNMCHr5w//sjKHqXt5fsbu8sUU:yPfucUQ8HOfXXtaij86dYmJaX0b+iECl","tlshash":"009282a13161688b4a9e24bab893019cb70325bcb686704eb5fc08ef9774dc1733537b","size":19776,"data":"","first_seen":"2026-02-02T22:12:39.90288Z","last_seen":"2026-07-18T10:33:01.608862Z","times_seen":563,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"refund-vertex.com/wp-content/plugins/classic-elementor-addons-pro/assets/js/cea-row-sticky.js?ver=1.0","fqdn":"refund-vertex.com","domain":"refund-vertex.com","tld":"com"},"ip":{"addr":"104.21.18.129","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"0ddc04eb637bcdd3ec6a9c4bea740640","sha1":"c1f0d560f9937c3b3d07b8c281f15385f4f180e4","sha256":"c4a5ac92050dd8c484c548a06a0d17c25e290d990eb2d8a129dd319422ac755d","sha512":"d442bdf5e654f326c43006b4e6246530b7621d5205b01511c84dc6f20bdadac8c42d70ccff9152f8645c55d15c4d46ade241d5d02de7e26cb3553cab6e937989","ssdeep":"192:Ganu/laNS01AHVFg14DSg4jnzaccJ8dPnwV8GcsTqamCg:3Y0JESggn2biEBcsTqrt","tlshash":"b582d00b5ae2313058a7b39e47dfe0689239952b25cade143f4d87c81f41639d5e2fd8","size":19184,"data":"","first_seen":"2025-09-28T23:25:19.169089Z","last_seen":"2026-07-12T21:02:12.704948Z","times_seen":17,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"refund-vertex.com/wp-content/plugins/classic-elementor-addons-pro/assets/js/split-type.min.js?ver=0.3.4","fqdn":"refund-vertex.com","domain":"refund-vertex.com","tld":"com"},"ip":{"addr":"104.21.18.129","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"93ce8d084f20e581f001b63dbbfe50fc","sha1":"04b8a2b2997999389ab72ffa8b121ee6ef20db24","sha256":"deeb8303ba3d919cbaeeb3c4d768684ce9b5e89ff6e8013f7238b8f4026f8089","sha512":"ab1b4d949006d81b8c3feb92c71e37b9674d8d81da83919fad54556e1262a65b397f0cc4bb7e4c2df4b413c67da5fdd9cc93bc6d41791a3d364fd52f482e9631","ssdeep":"192:XZ4ZgkQoOfxUCpCOCpgYsv65SRxcqL1a1gkXQsksbEy/iFXGvy5P6rhZNaSQvukD:XCZlCVCLsC5+Va1cmU2vyR68S3gR3/ZX","tlshash":"3632e94cb2a7b5a196561028817f530ff235702aa55bc450e177fcf56c34caf62a3e39","size":11803,"data":"","first_seen":"2025-07-03T11:01:10.69158Z","last_seen":"2026-07-16T12:55:24.863886Z","times_seen":106,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"refund-vertex.com/wp-content/plugins/classic-elementor-addons-pro/assets/js/jquery.magnific.popup.min.js?ver=1.2.0","fqdn":"refund-vertex.com","domain":"refund-vertex.com","tld":"com"},"ip":{"addr":"104.21.18.129","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"17f82cf70098a848404ca2a6287c7d80","sha1":"af0189f5158028251935acf0edc30ac1a9e4a3d3","sha256":"4792fad7d450a4d419f1effc816b20d6ad5b89535f0b4f6da97f9aea8c3ed035","sha512":"885ebda23860874edabbc70dc3886f5ae128dfa0fb77da8bfbbda296ccdc0ff6dc1d2beb5447372a75b7b00580ac58868f0ecac5b89c3bb924cc1ab06d5e3e5b","ssdeep":"384:aK+Ypwhc1sBEVEtk94tBnKIO46FbUkOK/NF0Sv/lZzZyQtdhTZF5ZFB:aEl73MoUkOKv0GMAdXF59","tlshash":"5f922ca4f161b27397e361b8188f382c367a9922cd078412b65498d4adf8fd89137f7d","size":20864,"data":"","first_seen":"2026-07-11T07:18:49.177908Z","last_seen":"2026-07-12T21:02:12.989562Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"refund-vertex.com/wp-content/plugins/elementor-pro/assets/js/elements-handlers.min.js?ver=3.35.0","fqdn":"refund-vertex.com","domain":"refund-vertex.com","tld":"com"},"ip":{"addr":"104.21.18.129","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"9a9484188d721f46d3be4c5e001a5943","sha1":"87b82f8ea87446c9a07c78fddead48067df3c12c","sha256":"16aa18d7666aa3c4c9f6271cb5db46d14da0c644b8dec8c7f8fbe303f040b531","sha512":"8d2184fa6f621be7852e5dea28a5e64a9566a98f77ca9fff43829feada4606b2ea09ffdbb0d340ce4112e9bd5dead4e56fd4c302840aa77655b95d331d24fc96","ssdeep":"768:U/Xt95D1+WE9A5yLce/J9d0dbdTdGdadWdDdILdUd1dvd6dfdMdxdndTdiePm7Lc:ytDD1+WE9A5yLcWJ9mBtIoERuWfRMBKB","tlshash":"7513955171aaca6941cf84abf463164fb7225c9cf413f0e67afc8d82b564e87a390731","size":44258,"data":"","first_seen":"2026-02-02T16:50:51.732287Z","last_seen":"2026-07-18T16:55:57.006642Z","times_seen":2535,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"refund-vertex.com/wp-content/plugins/revslider/public/js/libs/tptools.js?ver=6.7.57","fqdn":"refund-vertex.com","domain":"refund-vertex.com","tld":"com"},"ip":{"addr":"104.21.18.129","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"7a48c52c849d19588b172c03df75b236","sha1":"94907ae9c88535577f44cd1cd50f7f229b7828f3","sha256":"16780269e362021d705b44bc75b8f5bb3e44619427c64a972a8ac7f1fe3bb1fc","sha512":"39df5b5c6994a6200b86e27eff016311f521e5024a9e2c0a55d398fb807cc3b9ab051d62ae5e9fe3b53c8c8565998fc925d745e465aad73b709596d4c0ba9939","ssdeep":"3072:IWa1SNwMXbvGpL2SEMg34v4VTE+0Asn7m2JKDYe4inrxPaRgVj7Djev5YjjTHo:dNwMXbvGpO9VYLm2edBntXVTjsabI","tlshash":"4f144ad87151b432029263a6503f0b0bf23b9dd5744b44a8f328d8d9bd789a990bff79","size":208838,"data":"","first_seen":"2026-02-11T00:53:21.318921Z","last_seen":"2026-07-19T00:13:19.709285Z","times_seen":2466,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"refund-vertex.com/wp-content/themes/igual/assets/js/theme.js?ver=3.0.0","fqdn":"refund-vertex.com","domain":"refund-vertex.com","tld":"com"},"ip":{"addr":"104.21.18.129","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"0ed7e81242944925722866f61b9c66ea","sha1":"35285b815505e5860ee3ae7316f91fba7a1c6c3f","sha256":"7fa4b1cbc5873ff17d25d3475e8a1f5d737eac68b5851ac4bc8ee81934abb392","sha512":"6a09ad28755b33c8a0f0bfea78785e99aba240ca7fa40eb345b8ae7610706707f30f63888dadd275a0dcf3345a9f8dff63c30c714925c0438b3dbbae399de295","ssdeep":"384:gSUUFcT0wIf1IxF7xzoWBCtGJSo4u7oTU7wlaCH:gSUUFeIf1IxF7xzXBdk4SUcECH","tlshash":"15a293d4f76d21b5d07f32648a2e9084707ea433ba828c16bc3dc0583fd596d62e6f69","size":23223,"data":"","first_seen":"2026-07-11T07:18:49.213701Z","last_seen":"2026-07-12T21:02:12.898593Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"refund-vertex.com/wp-content/plugins/classic-elementor-addons-pro/assets/js/infinite-scroll.pkgd.min.js?ver=5.0.0","fqdn":"refund-vertex.com","domain":"refund-vertex.com","tld":"com"},"ip":{"addr":"104.21.18.129","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"624fadd4e13a43c1fc46d7dde8dd4766","sha1":"8bca855759eea78c779c193988b06ab0e487300c","sha256":"b4e09a21cb669386bf45f6aae8defe61f042b3d37e499d345355c5c0e9d9cd19","sha512":"0589e816c1d6ac3c20902ed54f73ac8b1e5bb67062bb25662e0dc477c3f7992044f63a43fd55153e5ef5d2c277fd7c63102f6d7eec888081e42204d050a8d32c","ssdeep":"384:urGYraJQsrNixdhre9aqMfKxRqGzRyD07rLRd23OZV8rx5rGrXUpa60rXU64xWE5:xxixA7fxRqGz4EN/8rx5rqyxWsp3XQYJ","tlshash":"59a2e79eb352753253eea0b5e92b060e727354aa2201009cf4a8ecfe9c74d5e6177f74","size":22450,"data":"","first_seen":"2025-06-17T10:05:55.802216Z","last_seen":"2026-07-18T15:23:04.694711Z","times_seen":1204,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"refund-vertex.com/wp-content/plugins/cool-formkit-for-elementor-forms/assets/js/utils.js","fqdn":"refund-vertex.com","domain":"refund-vertex.com","tld":"com"},"ip":{"addr":"104.21.18.129","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"934f89aba9aa0ccf43dae15006d649c5","sha1":"18224ebaa4b64d39dcc81dce23afed6c03c9b11d","sha256":"4ba6c116e534fe82fdf42f2b254013066a2220484b9d0514b20e64460ec8ae87","sha512":"fb81f6b8a12b52f82c27b8e09f6d50e0a660a16cc6f6338b368f5c59da15280ede49a25ac44282ac05963f30aec58179c3b7a5f59c8035c6e5c367517ac06b7f","ssdeep":"3072:o/kW0jmajOJ3PxPvJ3VxP+CQCdMNs+M9MNV8R5zo9fUfSWzzXL0z3MQPgwEt7rVj:o/kWsm+4qs+M9MNVsdiy","tlshash":"c844f1ebd67c9737a1d97b35968eb3cd1a8cbca3c848527826c3b54f52788e0716c205","size":260307,"data":"","first_seen":"2024-09-19T21:38:54.697472Z","last_seen":"2026-07-12T21:02:12.736856Z","times_seen":25,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"refund-vertex.com/wp-content/plugins/classic-elementor-addons-pro/assets/js/custom.js?ver=1.0","fqdn":"refund-vertex.com","domain":"refund-vertex.com","tld":"com"},"ip":{"addr":"104.21.18.129","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"94032083bec8d4236fb8e63e96768cbf","sha1":"099741cf6e685f9b91ce90422c13ddc16b186549","sha256":"d0d4d021fbc23bab6569b60ec8f0930040a8eeffd1c89ad2bf9fdb5b388eca11","sha512":"ec5cae26a0bc648d926686714f2aeaa298eb2be6d3f5225534cbbec7245950e71eccd469952a978e93d17e337816e86f748026cd557ed68480eb49c9aa06d0b4","ssdeep":"96:/3G9XT9j0S1Qy5UM+6kmtz5UWO+rDHqMY0WJlYxWW+6mJklciMUYcEM8k6UQXYNb:fGjjd2yQ6kmtVUWf5WLYxWt6qkhDYZkZ","tlshash":"aac1fdd5f34e2856607b31664d6f3189b65c9433ca419deb3cba8438b8f3e6c2625e18","size":5831,"data":"","first_seen":"2025-09-28T23:25:19.09669Z","last_seen":"2026-07-12T21:02:12.938349Z","times_seen":17,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"refund-vertex.com/wp-includes/js/dist/i18n.min.js?ver=781d11515ad3d91786ec","fqdn":"refund-vertex.com","domain":"refund-vertex.com","tld":"com"},"ip":{"addr":"104.21.18.129","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"12ebec1b36678eb1da4412af6c65751a","sha1":"4cb5d87353d9a06fde067063787a4beed692ba77","sha256":"558ae0ec83cc88de0929fde86b87c231246aafa9c961ebffb3257b05f62ca5cf","sha512":"a1bbd93277a59086bf27da7dcc60434b717ac521bce0618aef7c914789497a22cf56441a7f300f1bb7a6de56ca624226883d048f6eadbcc049dc717338189bb6","ssdeep":"96:IE7/RPgrMs4WLJOmlWS33c0xyE2B1596NiH826V0NG7CXMGOyd/sEomkKvYCGaMe:3hgws4WTBYNB1C9aNwAMPyd0R3SGaMSL","tlshash":"fdc1a7c975daf056235910a594afb005e134be2870debc00aae0c4957eb44cdb2b7fba","size":5732,"data":"","first_seen":"2026-07-02T22:01:42.315643Z","last_seen":"2026-07-19T00:19:49.910001Z","times_seen":5544,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"refund-vertex.com/contact-form-7-js-before","fqdn":"refund-vertex.com","domain":"refund-vertex.com","tld":"com"},"ip":{"addr":"104.21.18.129","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"b8a1b9d4b35a314f0dcca8b5bdaa7609","sha1":"e91490cd080a74c1877632399f5cadd26bdccf9c","sha256":"5857801efa4fd9e763d184f4b2e5c206c481b521062426a4f16ac334e8033f47","sha512":"8c8dde7d1ad8c705c04aba45cf345bfcc46ca50c03c93a4e12c83a626cebd7baf4da367f542c6682e7ff746eed3ed95074af58ac493fff41be1d9b137535b6c6","ssdeep":"","tlshash":"c22180d5d6d91c4924eac175017c1310f114a417c71f9f46f24d014c5ff44f97904285","size":1124,"data":"","first_seen":"2026-07-11T07:18:49.226108Z","last_seen":"2026-07-12T21:02:12.996616Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"refund-vertex.com/","fqdn":"refund-vertex.com","domain":"refund-vertex.com","tld":"com"},"ip":{"addr":"104.21.18.129","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"f93620de57f78e556b06a8f052e99853","sha1":"4bd6235d43e16defc4752819c23a67dd1350fd6e","sha256":"b1dcd7cbe6ccfac7a51faf03880efa19efd54c29a2f8b1ab08deee04703721e9","sha512":"299da61b953f4a07113320224ef65adf9c2ba8404885c78a1f56154d3872ac1918150bd5382729eecd86d13de2caf46246da072868be9f0ead14a47975c17825","ssdeep":"","tlshash":"d9f0548202955cbe0b60aeea904056273874201083411c5eb5494cdf08e6881f30911e","size":482,"data":"","first_seen":"2026-07-12T21:02:12.99767Z","last_seen":"2026-07-12T21:02:12.99767Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"refund-vertex.com/","fqdn":"refund-vertex.com","domain":"refund-vertex.com","tld":"com"},"ip":{"addr":"104.21.18.129","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"59616c0b24304f08b99cbf8daec1f39c","sha1":"39e699883a010f5afdaa215241cbe1d3a531a03c","sha256":"25a3ac3d2183773c8b1693cb522135280392654648dcbf5a754bc5b8ad836075","sha512":"189746788228381297442cf0cff8772bcc643655d042be8e93d3e497fd444e8187c277a117f3b7bcf9e3fbdf9f284c89af5b994926ca9d78637915e63554c3a6","ssdeep":"","tlshash":"bbf0d8c62f1c46278872a460a7e886d9f92cd3702658a89a7cbde92c189481c8131e64","size":622,"data":"","first_seen":"2026-06-16T14:39:32.36304Z","last_seen":"2026-07-15T13:18:28.441929Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"refund-vertex.com/","fqdn":"refund-vertex.com","domain":"refund-vertex.com","tld":"com"},"ip":{"addr":"104.21.18.129","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"9d22a414a32d09f8b903f90c66aaf403","sha1":"9d01c3497e6e5aebb66feb9f04151996f9e54ea8","sha256":"c6bd4fbeaf2234c3f0263b49fd5dc2eb521dcadc2c1dde682954ab576da3fc76","sha512":"0b736149bafe68cd3a4ae966f51b900f5025a389867e348c886a365b97cb9fb02c87eaf8965789e92d1f36bdb0611448f3b5f8dfe5819bb242aae9a9d9fcced6","ssdeep":"","tlshash":"48c02b89320a0cb246ef2740cb3fb604b406725498e05d32081a23044d10f13d744850","size":151,"data":"","first_seen":"2026-07-11T07:18:49.231158Z","last_seen":"2026-07-12T21:02:12.999262Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"refund-vertex.com/","fqdn":"refund-vertex.com","domain":"refund-vertex.com","tld":"com"},"ip":{"addr":"104.21.18.129","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"a7e7c66ebb604919681adaf4265fd116","sha1":"865d26de291feed2cbc94e715f2506340943d2b3","sha256":"e100eca5580b83522a9623e6a1dac15c74bef2b991bae3587be3f3a8f708d577","sha512":"31e58cb445a2cb5f0b6f4e4bc1fd343e6693b638e0dc61cb93d008baf09bba303ce5df600aa6dd1dc79ed2bc48173635e528f09ec14e51d8e7c73dca76f16711","ssdeep":"192:wwdVlPJ+ef5oI3s2c4JUVkJ199w/CUJ8iE3zab4mPi4PvIT9RKLsgTLEk:wwd0oCP2c4JxJaaTiE3r8i+IKsFk","tlshash":"1f52ebf52170643a82ed146eb0965b34766128cde183c650a2fcc9fcb958cd6a0d6ffd","size":13215,"data":"","first_seen":"2026-07-12T21:02:13.000156Z","last_seen":"2026-07-12T21:02:13.000156Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"refund-vertex.com/","fqdn":"refund-vertex.com","domain":"refund-vertex.com","tld":"com"},"ip":{"addr":"104.21.18.129","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"c23b64a4789ef00b9263dd514196aeaa","sha1":"69c39b782aace0829e8b796061c4dced3d39dd5e","sha256":"c94c138828a91d33d09e9d73b4f85ce9e65575a763fc164e7f702e96449d0a2e","sha512":"d77e9d40f254f171a54d8a18d8ea8ad1ad5b8472f9d512183c7dc9dc03dcd88874007425d789a05582f7087bcdd1a2728974ca15bc83214f963dc6b9ff79a33e","ssdeep":"","tlshash":"5e01fe2e6fc12e5c36fd3c63d39edf20949b1837a64a04f5e604c2dc18c280b7a182d9","size":679,"data":"","first_seen":"2026-07-11T07:18:49.239423Z","last_seen":"2026-07-12T21:02:13.000985Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"refund-vertex.com/","fqdn":"refund-vertex.com","domain":"refund-vertex.com","tld":"com"},"ip":{"addr":"104.21.18.129","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"cb723d749493893fef00de4a102d5b14","sha1":"83e4d476c5ce53d9fd2a5f07a72db8395c5be20e","sha256":"5025f2112d7c4786e6cdd0d8becf512b1a989a81c5f37fa072c3ca944ca9211e","sha512":"bac6e6754071aa4499cda15909e69619377a5f862a69a99ad4b5577143b8bcadac6ddafbd243f0754f6602063c5bc3c629027c5f767c90d71861b7952764d479","ssdeep":"","tlshash":"c411ccf3b7dd907fba9e6d66593402cd5a1d90735c110a5bfeac3575cc8442534b1d40","size":913,"data":"","first_seen":"2024-04-17T16:07:41Z","last_seen":"2026-07-19T00:16:39.650178Z","times_seen":30147,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"refund-vertex.com/","fqdn":"refund-vertex.com","domain":"refund-vertex.com","tld":"com"},"ip":{"addr":"104.21.18.129","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"cd6bedc7a1b4a132f0c2b7b3c81ba85d","sha1":"e51de5f206267a4a83de432a304c27a54dd3b4f7","sha256":"18441dcbb8f4d8aff304e8da39a02e0e2f6c34a7f2a02b271cc3b8d043be5ab2","sha512":"04d6676d604999cee11f14c92a5fe298760d88e42ae6c3ecc36487a39e81fecb1883361a771e25791f78e78fe1ad44f80bd6b7a131f15879ba0d3fa89af9cdbf","ssdeep":"","tlshash":"3be02614109f12323baa21caf05d2a03f08288fbe92c99029edd5c8443f05aa172d362","size":332,"data":"","first_seen":"2026-07-11T07:18:49.241086Z","last_seen":"2026-07-12T21:02:13.002323Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"refund-vertex.com/","fqdn":"refund-vertex.com","domain":"refund-vertex.com","tld":"com"},"ip":{"addr":"104.21.18.129","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"383525d2feb448332d381b33f029b83c","sha1":"6751bab6e2ca3ecf156cdb3a84a5d242fa563bf7","sha256":"880e054a92fe1585315c18c47c9dbe5902edc441ddb74a01da6c936bf00f6bb4","sha512":"f75054199e907dbd2d87ea9e5d156871a4bf07e755b8f61608506ba804bb22135505a57415fef0efd8c131d982dfe5d7138449ccf147f2842e7dab53ebca9ef6","ssdeep":"","tlshash":"08b02bd606dc0ea7a3c00cd40c08123703a5b130f60cd4834641140000309c3fd04103","size":124,"data":"","first_seen":"2026-07-11T07:18:49.242053Z","last_seen":"2026-07-12T21:02:13.003279Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"refund-vertex.com/","fqdn":"refund-vertex.com","domain":"refund-vertex.com","tld":"com"},"ip":{"addr":"104.21.18.129","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"e7c749255f0c7603b90f6196e3087ad6","sha1":"87ca6ed12bb4d899eb515fcbf1b06cd77bfecf35","sha256":"6c91320d2a35084146720e73b9eb506f8f042d304770136f76fdb279d3e82c90","sha512":"17c60dcf3f92c9719372b169ccdad70f329b88e816784043bc83bab6fae403aecab83deda08b8a8c2727ad201d11b2641646e45548d69e9accdadeb0566a3038","ssdeep":"","tlshash":"02b0128b74a73d50828fc7b44d23ba014510208782afc50875e59d3096718c0b4c352f","size":97,"data":"","first_seen":"2025-12-03T09:23:15.289558Z","last_seen":"2026-07-19T00:16:39.652028Z","times_seen":29104,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"refund-vertex.com/","fqdn":"refund-vertex.com","domain":"refund-vertex.com","tld":"com"},"ip":{"addr":"104.21.18.129","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"e3389e261596ccc97a92f6f4ac89aef6","sha1":"a03ab7cc2672705253adac2a32add54339bd8e29","sha256":"3312351be9406b39fd87cf84fb4063594ac7bf539ad196a7389cdcce743e7866","sha512":"ca0bb1d7d78050afe8bcff7d639ed261d9fe4b0c2db81e0091f0f1155fa6191a78f9b893a2b65255aad4f39ab740b241654a9dd170f824adc61589bbe5809bd2","ssdeep":"","tlshash":"a311cee19cb5562c4881b0caea75be8c309cfc50e21bdf27bd1e018bd61076c9ad230d","size":1030,"data":"","first_seen":"2026-07-09T14:02:09.431331Z","last_seen":"2026-07-18T13:36:26.495742Z","times_seen":10,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"refund-vertex.com/","fqdn":"refund-vertex.com","domain":"refund-vertex.com","tld":"com"},"ip":{"addr":"104.21.18.129","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"48f46a5387fc17422718edba4217a745","sha1":"b5a60c4e879c4a55ddd3549223693a18bfe8d67b","sha256":"d8ae70db9513806ccfb0506a7be533e115dc14bb3d254c00af8bdd9d47c54c68","sha512":"63ec8b91e4d8bc8ca4489866296f8d17607b3bbd4a6d714c815ef71551431ac1fd91f90911e0684b2c7335477f332f0199a9b479538fd9c15ec655e9230c5de7","ssdeep":"","tlshash":"b7c080d595d91c4924eac155017c1310b114a413c71f5f46f24d014c5fb44f97904285","size":174,"data":"","first_seen":"2026-07-11T07:18:49.244297Z","last_seen":"2026-07-12T21:02:13.005395Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"refund-vertex.com/","fqdn":"refund-vertex.com","domain":"refund-vertex.com","tld":"com"},"ip":{"addr":"104.21.18.129","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"1ef3a8b73ce9b3e122d2a55b96325a2c","sha1":"fc849523c4a35001419478f67f6fc86a0a8b2333","sha256":"0391d108b4dcfa5287b7a1a15ab1dc3a3f8d03326a113a9bcf83e869568cc095","sha512":"ade2a443ef520670237fcc8bb8ddb72991fb3c7db59ca647fb2816f882fa49b7ea18dc8a64e92fbc7ae3ec1811e216344c9ac4ec96c10138977fcab48832d353","ssdeep":"","tlshash":"cfc08cd1468d0f9291d00ed04468a6b210663822d808cc8442d698580438dc2b5d070a","size":145,"data":"","first_seen":"2026-07-12T21:02:13.006346Z","last_seen":"2026-07-12T21:02:13.006346Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"refund-vertex.com/","fqdn":"refund-vertex.com","domain":"refund-vertex.com","tld":"com"},"ip":{"addr":"104.21.18.129","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"39eb822693aad0f30f82d87f3540a00d","sha1":"b3f9ee1c69d796b86dda5a6fe1d1342e277a96bf","sha256":"a32e9ccec0536e40c55ee57f332829351cd635125ac26f242f0ca58853409f05","sha512":"c6e023a5e03d8bff3723b84659841ba2bf313630a1059c04b4d07638e38633b9b43cc00cf876883bdc28add409a28217c40cad930a370866ba077064bc37e94f","ssdeep":"96:C5qP8M4KRLOi5LoxANZ695AlyjcdzX+cEJwJQfIS2qrRHuFyn+8C:YqP8aRl/76M08zqrRHza","tlshash":"47a12ee1e09a077e14c57692eb32bf0e38ac5962d000fbbbdc7c15d7d034625a611b13","size":4637,"data":"","first_seen":"2026-07-12T21:02:13.007253Z","last_seen":"2026-07-12T21:02:13.007253Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"refund-vertex.com/","fqdn":"refund-vertex.com","domain":"refund-vertex.com","tld":"com"},"ip":{"addr":"104.21.18.129","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"08be7643ef9ee15b68fd871fcbaa818f","sha1":"6f873418fb7073ab4ebff25c1799337f4e4d63da","sha256":"6743d28d2bb1df13984b588dc6254707207bbebed229f12ab71039f7e9544698","sha512":"ad87110cb3a1ad752d7c410c774fadf259934b5c5b2f9842c28d924776eaeb7cd69231f7a8d4401a2c0a5a878cb8c71882f14a40751af7eec1cdbb04ea425f3b","ssdeep":"","tlshash":"b801286ee36a42353bf24f1e29bc6186dbca49f096c82b1f507115350763b94b283781","size":726,"data":"","first_seen":"2026-07-11T07:18:49.247675Z","last_seen":"2026-07-12T21:02:13.016321Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"refund-vertex.com/","fqdn":"refund-vertex.com","domain":"refund-vertex.com","tld":"com"},"ip":{"addr":"104.21.18.129","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"36d41379874cbb3b6cb2bd94785d8431","sha1":"a1bf4a1b40af3200f387d86154a1da318a085a5b","sha256":"d6b15d4b6e2226944bcde354aa5dd18fe004df286d0d1a8623abe44aa7f931dd","sha512":"61c210d200ab6b778f92a1f8e95b8c094323a87252cfe89d18c51a2e4e81baf65d31349ca1bfe96872a16153caa7a97d551bca8123edf50d230152cdd87913e5","ssdeep":"","tlshash":"fd21dd962b231e2493aea7e931ca3e6f84c4033256d8b64e129ae47440f7dddf0453a3","size":1346,"data":"","first_seen":"2026-07-12T21:02:13.017629Z","last_seen":"2026-07-12T21:02:13.017629Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"refund-vertex.com/","fqdn":"refund-vertex.com","domain":"refund-vertex.com","tld":"com"},"ip":{"addr":"104.21.18.129","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"a62924f976988ef9d7b706e87425b485","sha1":"dcee25676fc344971400e020519b4f925124cc66","sha256":"a2946e0158918c8f95603645d3e29d0bbbe819f9b469300a7415a7769b58d535","sha512":"4ab12f8176502493d289c9f1838e3144d647872f791e3ba51374b4c1271225c81233a7445178865e6bf5dd3ea942bb252688f14b9b81482d4471d7b263927a5a","ssdeep":"768:OQH8DkbJ6dXdmdid7dXdmdidePR67ixSXdH4XdHKfXdH4XdHKWAYYYcSqF2XdH4M:OU8DkTPR67iG7WAYYYbE2YYYM8GcFjcn","tlshash":"e103423265160eb263a387c19bdb36504cfc7116bee82645e7e88d186fc5b9a230d739","size":39440,"data":"","first_seen":"2026-07-11T07:18:49.249816Z","last_seen":"2026-07-12T21:02:13.018472Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"refund-vertex.com/wp-content/plugins/classic-elementor-addons-pro/assets/js/cea-custom-front.js?ver=1.0","fqdn":"refund-vertex.com","domain":"refund-vertex.com","tld":"com"},"ip":{"addr":"104.21.18.129","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"98264a79cb9da9eae2f6399c8036565c","sha1":"f2d1449794d9719ba2a8d9fb896ed69eab1eaf5e","sha256":"bc642ee01cb659e7e5edeed55fee0066886ebb1f5ed0caaa88658634f99ce744","sha512":"76b7f268bad39c52a56eaf10f3ed241e1af173529b18b4a1425e880906514c56e54702b6eed8beb9951a8acc8a39ceb4d1c9b408c559b01c912369e29080f18b","ssdeep":"3072:BRMrXLJtWqO6rCyZBD1ictCGbBGFl5dAD:B6r46TuazbBGFlc","tlshash":"4f14d7a5b30f201b86bb336b457f5108ea7cc433b50681e9b9ad80782ff19545369fad","size":208382,"data":"","first_seen":"2026-07-11T07:18:49.161824Z","last_seen":"2026-07-12T21:02:12.742051Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"refund-vertex.com/wp-content/plugins/classic-elementor-addons-pro//assets/js/gsap/gsap.min.js?ver=3.13.0","fqdn":"refund-vertex.com","domain":"refund-vertex.com","tld":"com"},"ip":{"addr":"104.21.18.129","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"aeffb176c9e17426cc3b8f2fe63bb309","sha1":"2154eafca92a261b5aa5d0d8b28ab805e6904093","sha256":"bc3e10fcc127119c779389326a80890a8eb4c2ae07b476dd06b9c958bb219295","sha512":"d6eb299b5f8f1e4f893c64e0275b69896cdb91fc176c64b1f1fe1f68a1863435ffeaf4900f7a4dfeb1b74c6d33b89bd70675e85600cce646473e866cfde06563","ssdeep":"1536:nha1HvGRpXaDTX+Iq2CpsvO3dyL4NZEkcIRy5ybQ:o1Heaujpc5EKjI+y8","tlshash":"4563e8d93292f427039751a1447f094bb337e998640f0918f269e4ce7e3c99d42bbe7a","size":72444,"data":"","first_seen":"2025-09-07T20:10:34.034545Z","last_seen":"2026-07-12T21:02:12.978837Z","times_seen":55,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"refund-vertex.com/elementor-frontend-js-before","fqdn":"refund-vertex.com","domain":"refund-vertex.com","tld":"com"},"ip":{"addr":"104.21.18.129","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"6f3f155c90a4c2ae96af490c05cc2e07","sha1":"c6ddfe5b383d20efb83d7d014f8b5a91233c6a3d","sha256":"80cb5cbb4f849625abb32302faa1b7bbe31751854433cefda1de3b4e179158fb","sha512":"6c942ea40f35cc9e5dbaec7fb8d7f9c9f7beab21bc915690cc41bdd0425471eba082449f3e4328c50ba887663fbf819b3927e8f0bf263d35b45a239ff137e6f8","ssdeep":"96:y5qP8M4KRLOi5LoxANZ695AlyjcdzX+cEJwJQfIS2qrRHuFyn+8s:IqP8aRl/76M08zqrRHzk","tlshash":"9fc11de1e09a067e14c576b2eb36bf0e38ac5962d000fbbbdc7c1597d034625a611b13","size":5608,"data":"","first_seen":"2026-07-12T21:02:13.019528Z","last_seen":"2026-07-12T21:02:13.019528Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ajax.googleapis.com/ajax/libs/webfont/1.5.3/webfont.js","fqdn":"ajax.googleapis.com","domain":"ajax.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.42","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"b1214132e520a7e9bd89af99237c5f24","sha1":"45b3a11f70e46248a30471795ab43861e98b48e7","sha256":"36ef095d011c4ced97b0acef551ca36d76b95299518595dc1acab792a2344601","sha512":"a4a1b77cef6938660f94217ef56f5b72c07cd5176c95b78a3c65e52d8764fc957572cf546423f1df30b4403569fae7d7f83b0a4d006ef1c3a85c5680c36a0861","ssdeep":"384:41ETmxlLRSaNeiFG6TsBMGrM2NdWLW+iwduEtiUBXMt2cP5AuKl:4GTmxSaNeqTs+Gkz+EtilPJKl","tlshash":"9272e9487a51a179825384f3163f050e977fa96eb41888ecb584d6e19cb4938037ffbc","size":17380,"data":"","first_seen":"2023-03-07T01:03:03Z","last_seen":"2026-07-18T21:10:33.508119Z","times_seen":3264,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"refund-vertex.com/igual-megamenu-js-extra","fqdn":"refund-vertex.com","domain":"refund-vertex.com","tld":"com"},"ip":{"addr":"104.21.18.129","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"afce4bc10853274a9452292f07c9b206","sha1":"613ecd1991b5bbe9f513de15e95bf2d75ac4b3f8","sha256":"185e9cf3c6abc5da447ddf65af8da6b90cce7155d981af05cbc11a9b612ec337","sha512":"98d81efa642f402fe7b88b99219233b4d6664a330860689eacc56f5849bf74a11c6d32c310cb9e49a7898033027e6fdb0df8b37e5b2652fa617dd1ca7865d30b","ssdeep":"","tlshash":"bf118cd1c68d0f9291d04ef04868a6b310a63822d848cc8442da98580478dc2b5d070a","size":1106,"data":"","first_seen":"2026-07-12T21:02:13.020489Z","last_seen":"2026-07-12T21:02:13.020489Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"refund-vertex.com/wp-content/plugins/elementor-pro/assets/js/frontend.min.js?ver=3.35.0","fqdn":"refund-vertex.com","domain":"refund-vertex.com","tld":"com"},"ip":{"addr":"104.21.18.129","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"fc97b5610be4284f233a25a6ca87c77e","sha1":"c27dc8325c38493aac36775fdc03c8097f74c650","sha256":"bb7880a86907cdd3807816fa9fb35273592799faf5995c10424f617de3af50dd","sha512":"b54189cb021a862fcdc57af81410cbaaf2fd22238b0c44ff7e3a1029bc490537ba93bca689f24cf094a7a15c408f1866c306f6fc890aff7a417d7bfc93f59ed6","ssdeep":"384:IGy+EVxFm6cKJskdHd7glQtHuGJswg/i+TSQDTWmMo7YtDT5HJiIqkoh+vFWN7Kh:IR+EVxFm6cKikdHd7glQtHuGJswg/DT6","tlshash":"6bb2d9023163ac3a50cf815be067420e7b374995b40570ed7abc6cdba5b8d9a33ea335","size":24047,"data":"","first_seen":"2026-02-02T16:50:51.794182Z","last_seen":"2026-07-18T16:55:56.849738Z","times_seen":2543,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"refund-vertex.com/wp-content/plugins/revslider/public/js/sr7.js?ver=6.7.57","fqdn":"refund-vertex.com","domain":"refund-vertex.com","tld":"com"},"ip":{"addr":"104.21.18.129","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"4430dd7303c407ea0063e4d4cc61758c","sha1":"46a19dede02a65153bb5f190fdddd7e339c05a72","sha256":"604a8cda49d901a42530611cbf636bd3a9dcf8197aba67d2077833174756c857","sha512":"cd224373c4e3f8172cda2a50fe1096d0ed21aa50c61580a9f49753c87129f964225cb7e72cbb62b539b3161ce5f174a6df9f415362ced2f0944e173f1779fb03","ssdeep":"6144:/BIOEDVgToJUwcr6cvrF9Bg9RQKRisG3r:/BIOED6oJUwcrFFIPQ9sG3r","tlshash":"16746caeb635243745d502e6b01a4e34b2a4a5d95111c02cb6fcd8fa3d48e9d31faff8","size":342496,"data":"","first_seen":"2026-05-20T02:41:19.063088Z","last_seen":"2026-07-19T00:13:19.686212Z","times_seen":701,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"refund-vertex.com/wp-content/plugins/cool-formkit-for-elementor-forms/assets/js/intlTelInput.js?ver=1.4.3","fqdn":"refund-vertex.com","domain":"refund-vertex.com","tld":"com"},"ip":{"addr":"104.21.18.129","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"cca460dca81b770f8a2d58ca30dbd0db","sha1":"df09ef5adf01fd3ba09bf8f3ee0ae510a044f95e","sha256":"e513d164e0ce3f8da8b7ba765d4b058cc1eba920010e8226041e0f9422cb77ec","sha512":"a66bc3a7e549cae4c4e177f7ef14d8382f900fcd5add058edd14d7d85c97586dea26db7f2e8a110431793011f5fb7ba462ae9d34147a6f329524397218585c12","ssdeep":"768:w6556XvBYf0iBUqV2cOByosmZSOOnDNcXK4GDUSuUHKoKCOmjyB7Ge4R96m/lRun:w655EZieHcLcSNcXFGDUSTD9CEfU","tlshash":"3173403bd3084e2a8476937aef998042fa15431f5545491b3d7c8bcc1fb7463aaa1fac","size":74407,"data":"","first_seen":"2025-10-18T02:52:31.555056Z","last_seen":"2026-07-12T21:02:12.758302Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"refund-vertex.com/wp-content/plugins/cool-formkit-for-elementor-forms/assets/js/ccfef-translations.min.js?ver=1.4.3","fqdn":"refund-vertex.com","domain":"refund-vertex.com","tld":"com"},"ip":{"addr":"104.21.18.129","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"6b81863b5905a509d64e054d8725f21f","sha1":"50387aa3aad9b5851819e15c5110ac091fb5e65b","sha256":"f70d6b9878e58cdb9541ba44b41fa85dedcaa616b622fc0256f72d14b3ee8c1a","sha512":"538c54beb78d0902ce8d0577e0ffc4a95ccfadcbf719c3714cc457424505d40d70faf7ce581295e3f32a82e9e3c4291cbafebea084d09c5737cc115c543d5e1a","ssdeep":"1536:HvCMbKB/Is2NosfdNGAggJ0WrKaBJ10PeCkY9ZrvWTDuDFLuVrqLOJu9p5Eh:PCMWsCgXrKO0Pe3oZ7WnRRJu9LEh","tlshash":"0004e61d8ff6d52d3475edaaf44c7a31f0292db59196dbc20c2b874966c0630a22de7c","size":187183,"data":"","first_seen":"2025-09-24T20:13:45.670476Z","last_seen":"2026-07-12T21:02:12.767931Z","times_seen":10,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"refund-vertex.com/wp-content/plugins/elementor/assets/js/section-frontend-handlers.d85ab872da118940910d.bundle.min.js","fqdn":"refund-vertex.com","domain":"refund-vertex.com","tld":"com"},"ip":{"addr":"104.21.18.129","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"9dd361b7473936c5c8f5bf661c323973","sha1":"5c8f2bcac20956a31c9cff999d50b99f9ee8f9fd","sha256":"55922883b583583787dd3e36a6ee97b5bedc12eec38a24b6bd271d53b8ebf1c2","sha512":"4181a000ecc679d08f6cad5ddac0283744c6dcb07822a19d2552105e4a9191f1baa4a1590975a71325c56714a37084f8122afe463170ce54b5a56d1a1c7780c4","ssdeep":"","tlshash":"a4f05c7a70d278ff200b44520a97105de6a81cf5012961417fbd44382a75ea4a23139f","size":449,"data":"","first_seen":"2025-06-30T23:09:48.860419Z","last_seen":"2026-07-18T23:55:55.978516Z","times_seen":89486,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"refund-vertex.com/wp-content/plugins/contact-form-7/includes/swv/js/index.js?ver=6.1.6","fqdn":"refund-vertex.com","domain":"refund-vertex.com","tld":"com"},"ip":{"addr":"104.21.18.129","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"96e7dc3f0e8559e4a3f3ca40b17ab9c3","sha1":"d363d0291e92c233e828023583dcf6685f2da5a2","sha256":"29fdd17a7002a2e1bbd9b33adafc53457c64006b5aca8f6e4dbf907de35433ca","sha512":"851dcea59510a12dd72c8391a9ea6ffa96bcbe0f009037d7a0b6e27bae63a494709b6eee912b5ed8d25605fbb767a885f543915996f8a8aff34395992e3332dc","ssdeep":"384:wwuf8OQL0sARrAZcNWLq/+Ffm/hibLexa2VautyX2fsL3ZHO1O9H:wwuf8OQL0sAZAGNWmGcibLexa2Vau0XD","tlshash":"d34235e16197e0f0c7c338a48816c051f2bf866cb9898054fb5dcdd22d5de07626b77a","size":12512,"data":"","first_seen":"2025-03-11T19:47:45.42406Z","last_seen":"2026-07-19T00:19:49.952143Z","times_seen":217394,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"refund-vertex.com/wp-content/plugins/contact-form-7/includes/js/index.js?ver=6.1.6","fqdn":"refund-vertex.com","domain":"refund-vertex.com","tld":"com"},"ip":{"addr":"104.21.18.129","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"2912c657d0592cc532dff73d0d2ce7bb","sha1":"70a679e2769825236f83bcc56965a9d0bd86c4e9","sha256":"ddcce687729cb358abf9d0d8e1217a097859be2b0d18c23d7c851b38c87bc9c0","sha512":"9646384e65d09bf00cb20365f43e06dd41e7428e3fc6cc2737f4e69b50f006ebb25bd24a566fcd9faec2f0dcb24404e25d57ba7b8c6aba61797a29c515ad5144","ssdeep":"384:IsIRHeFJ1yQ7QdfnJgeYh7MXlsNqrBp1pgQpwOjNtqohIQ/5Z:IsIR+L1yQ7QdpYh7M1iqrBp1pgQpwOjn","tlshash":"0a52d7a1472955321eb506e391e513c1769075aef44b8aa1a898dc2e18bdcc328f3ff7","size":13452,"data":"","first_seen":"2024-11-04T17:50:00.022634Z","last_seen":"2026-07-19T00:16:28.100651Z","times_seen":225041,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"refund-vertex.com/ccfef-country-code-script-js-extra","fqdn":"refund-vertex.com","domain":"refund-vertex.com","tld":"com"},"ip":{"addr":"104.21.18.129","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"552fea1d510c465d2def6928ae6b34dd","sha1":"2b6fd459fbd4a17d7dad72338ded1bf02894c44c","sha256":"6e7943f497ce1adf216e252405c60bff822ee3d966e505e3192d6f22d84d21ab","sha512":"8b23dc02afb7af5dbee69eb56cb42470a16b7fcbae9d44a5e45d8d750a9b88269b9e1102b6ac83783ae5c5e0b77cecf46fd8225c49ca39dd1ee9c18bf4b24c29","ssdeep":"","tlshash":"a531286ee36a42357bf24f3e29bc6186dbca49f0d6c82b1f5071553507a3b94b283781","size":1712,"data":"","first_seen":"2026-07-11T07:18:49.25223Z","last_seen":"2026-07-12T21:02:13.021313Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"refund-vertex.com/wp-content/plugins/cool-formkit-for-elementor-forms/assets/addons/js/coolform-date-format.js?ver=1.4.3","fqdn":"refund-vertex.com","domain":"refund-vertex.com","tld":"com"},"ip":{"addr":"104.21.18.129","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"1585dea9a11c5718c9efdf8d2bc37d95","sha1":"73a96a9be9cf654608e40d4ef2e4acddfe1e04c6","sha256":"baf48e884211f112dec5a486ef98194be6d496f121a7741f04bfcf3da0b4116d","sha512":"2c5ca5d2a706878d411f6fbc3335aec15ba2e96f7b023f2d49a161cc770eef2f62c3e64eb62465a039886c06f52cbc0459435462d6e761323a019efe4760891f","ssdeep":"","tlshash":"a4317808e89b8c15c93755284be7201cdb54e23b15c452c7beac57211fb3e28aa69f8e","size":1709,"data":"","first_seen":"2025-10-08T03:30:06.411381Z","last_seen":"2026-07-12T21:02:12.903011Z","times_seen":47,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"refund-vertex.com/wp-content/plugins/classic-elementor-addons-pro/assets/js/jquery.appear.min.js?ver=1.0","fqdn":"refund-vertex.com","domain":"refund-vertex.com","tld":"com"},"ip":{"addr":"104.21.18.129","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"c476b80eca02b0b39992dc0029389bc6","sha1":"7fdbf6d4435b9321d47b59fb6721571cef08f375","sha256":"e7d4c211bc17ebe2fc7f9f8ea3bf926a192b649db5d476827ac44925e41ec558","sha512":"896c3993e076856f8da25fed5bb697e042beaa91cbec48ab85e81145b5007b22313215510661ef60f59873f6a4b0625d2a0e4952efab75ca69b467393d480bb1","ssdeep":"","tlshash":"5b21df6a38ca3e5546fb702f761f72412221c43b1682a082d4fadd3c3ee2d80b813e14","size":1371,"data":"","first_seen":"2025-08-21T01:00:13.72815Z","last_seen":"2026-07-12T21:02:12.703589Z","times_seen":15,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"refund-vertex.com/wp-content/plugins/classic-elementor-addons-pro/assets/js/owl.carousel.min.js?ver=2.3.4","fqdn":"refund-vertex.com","domain":"refund-vertex.com","tld":"com"},"ip":{"addr":"104.21.18.129","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"f416f9031fef25ae25ba9756e3eb6978","sha1":"e2a600e433df72b4cfde93d7880e3114917a3cbe","sha256":"a53c43f834b32309b084ea9314df8307e9c78cee2202c6e07f216ae4ae5b704d","sha512":"6cfb3b01eea956f84e4a221cc940a547bfead8e02c462a2fc38bc0917fb325bc374a101e7aa7b3ab9d11208708511abb39adb4ad6da7daaf9fc9704d714f65af","ssdeep":"768:UCI7dmuMFAAJG4dlQKNORpnXGAtep2lcwJeL+wr2RSGc7UuHjRUQuFBt33:PITMFC4dbMVRSGcgRDV","tlshash":"e7137346b3202d2a869b61a0663f160bb23a241ce414547d7d79e6de6d7dc8c213ffbc","size":44342,"data":"","first_seen":"2023-03-07T01:02:37Z","last_seen":"2026-07-19T00:21:07.13503Z","times_seen":64620,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"refund-vertex.com/wp-content/plugins/elementor/assets/js/shared-frontend-handlers.03caa53373b56d3bab67.bundle.min.js","fqdn":"refund-vertex.com","domain":"refund-vertex.com","tld":"com"},"ip":{"addr":"104.21.18.129","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"a4df0433011e4a5ca770a6b46d01ab7d","sha1":"ced6acab63205209ef5db818700ba7e7f9277044","sha256":"77c0a6d635dad44b53a9eb9f0f367a1bd3bf3620c0e41d3a4c15d1313f2553f0","sha512":"d9059dc3da43bd052276c6544b81db20e438378541274eb2da852b7c535bc1738eac7c902a4c7c0913f1cef7f76a51bfd0d55e23dd659b4ed6c858141b0e1272","ssdeep":"192:IwfFpzqxODCWV5lxZmdXLf+UvDZ5CMtakRhPZT8cMkCw+v10QITpRHvcwxDnPoG0:rHzqxOPV5lxodXLfpvD/NtakRhPZT8cw","tlshash":"3802310a74c1982db58b58ba3532432866a8014de1018f6db1bf79fbc5a5d82277b7f1","size":8481,"data":"","first_seen":"2025-10-21T21:24:49.172997Z","last_seen":"2026-07-19T00:19:55.593417Z","times_seen":142223,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"refund-vertex.com/wp-content/plugins/elementor/assets/js/text-editor.45609661e409413f1cef.bundle.min.js","fqdn":"refund-vertex.com","domain":"refund-vertex.com","tld":"com"},"ip":{"addr":"104.21.18.129","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"b272ececde530e5621637a7e529abc8b","sha1":"a3fedafc836049d71aa3b1d9ddc1debcd6f73dd2","sha256":"4543f55b0b8bc8fe912da8ddd1da7b07d0e8d3e77a824295a6bccd90d4f8aa13","sha512":"d2efaf6be07605e855c348a6fd5aad58520f20912188578a3711de8840a9cd29e41860b49b36d3d7a72082077c9dcdfe8571e0279985a771cac102a520f7b020","ssdeep":"","tlshash":"f62112b371a2dded48df148a34522d16f2574d5db8caa01ef5aa08df24b2e843362634","size":1348,"data":"","first_seen":"2025-10-22T21:27:55.827503Z","last_seen":"2026-07-19T00:13:06.87813Z","times_seen":121116,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"refund-vertex.com/wp-content/plugins/igual-addon/admin/extension/mega-menu/js/megamenu-post.js?ver=1.0","fqdn":"refund-vertex.com","domain":"refund-vertex.com","tld":"com"},"ip":{"addr":"104.21.18.129","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"820a71b923b8826907001dbcd81e0a25","sha1":"92556b381f2111872ab70fb581eda1a7cd76f948","sha256":"e70978aa920cf6023101cdac0dd356260c908698bbd2b7de566d4b106ca58e13","sha512":"d74aa0cb863eda5107af6569ffc231d910540e96796efd0f3fe880de8e5de04fa52f6f56b4f4f35973471e78351a11ca73aa258962a34aa9bab72a2b3a7ef41c","ssdeep":"","tlshash":"a6411158bd1c11e0ea7f236c953b8446fba4e337a245cd4575fdd0a44fb4414a142eee","size":2085,"data":"","first_seen":"2026-07-11T07:18:49.091266Z","last_seen":"2026-07-12T21:02:12.732353Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"refund-vertex.com/cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js","fqdn":"refund-vertex.com","domain":"refund-vertex.com","tld":"com"},"ip":{"addr":"104.21.18.129","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"9e8f56e8e1806253ba01a95cfc3d392c","sha1":"a8af90d7482e1e99d03de6bf88fed2315c5dd728","sha256":"2595496fe48df6fcf9b1bc57c29a744c121eb4dd11566466bc13d2e52e6bbcc8","sha512":"63f0f6f94fbabadc3f774ccaa6a401696e8a7651a074bc077d214f91da080b36714fd799eb40fed64154972008e34fc733d6ee314ac675727b37b58ffbebebee","ssdeep":"","tlshash":"6021d5743a18107e226a0133e56f66cee1f23715fd17e440408ad89566e4fe5063fed9","size":1239,"data":"","first_seen":"2023-03-07T01:02:00Z","last_seen":"2026-07-19T00:20:11.645681Z","times_seen":400224,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"refund-vertex.com/wp-i18n-js-after","fqdn":"refund-vertex.com","domain":"refund-vertex.com","tld":"com"},"ip":{"addr":"104.21.18.129","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"c588d25e2a7ec0f46d39a48bafb77cb4","sha1":"7aef4f9516c8ee84ca99b82f5cf2840ae6210503","sha256":"74a4e85a6755a6500ef92df0753c38888c62cdd143df80e66aa997556eadf4c7","sha512":"ddf507f7396509e8495b4fc5febbcbfc2f856a508f085a737a6700856ccd054a2308609dac0688767280d369c4a0810cd7ac165f356b2d160258114160ab705c","ssdeep":"","tlshash":"361112cbf4ab3d50828fc7b48d23be0145502487c2afd50875e59d3496718c0b4c362f","size":1034,"data":"","first_seen":"2025-12-09T18:00:52.266001Z","last_seen":"2026-07-16T07:34:02.932397Z","times_seen":95,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"refund-vertex.com/contact-form-7-js-translations","fqdn":"refund-vertex.com","domain":"refund-vertex.com","tld":"com"},"ip":{"addr":"104.21.18.129","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"112023fc4337deab1475af55e95fbbbc","sha1":"478e94625ab632f6b8439c0c5e29fae835620687","sha256":"4b93286ef34ca9f83a8739bb737e4b91b61737fa8c21bfdc0980ceeda767b423","sha512":"3546d70b86d62a44e37e96518770d09792b0d05000cca20d44fbb6548579bd2e842e30fcce98165544a143b01f24d9bc4da6beec19fe83b1275096a1851e1a5f","ssdeep":"","tlshash":"4d41afd1dcb5562c4881b0f5e6757e8c309cfc50e15adf26ad1e0147d61076c9ad2309","size":1972,"data":"","first_seen":"2026-07-11T07:18:49.22422Z","last_seen":"2026-07-12T21:02:13.022735Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"refund-vertex.com/wp-content/plugins/cool-formkit-for-elementor-forms/assets/js/country-code-script.js?ver=1.4.3","fqdn":"refund-vertex.com","domain":"refund-vertex.com","tld":"com"},"ip":{"addr":"104.21.18.129","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"7b34ee4ee2d12a11e605a194f0254922","sha1":"597ac312d6baf3ae127d7f142ff8912d3dbcd648","sha256":"13bbaea80f13572792c7bb05cdba850cc9a4ebdd3e0671b639748798a9f848ee","sha512":"519727be0f81563186ce09425eb36680bc93cc2ba3d20abdb55422340a19eb606a3d4a1b8a822d13efba8b3a23c386d10e814abf15863a0fcded41daa4fca765","ssdeep":"768:VsENWT9CGS+L33c43gdLShB1xxpVWV+R+mU5I1G7lo3izxKGkc4aD0cU:VsEUT9A0P3gNShBTH3MxKGd41cU","tlshash":"baf2854de2590369e877937dbe9bc11de72a126b6c9142443ddc43402f708e1aba2ff9","size":36147,"data":"","first_seen":"2025-10-18T02:52:31.464327Z","last_seen":"2026-07-12T21:02:12.973298Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"refund-vertex.com/wp-content/plugins/elementor/assets/js/webpack.runtime.min.js?ver=4.1.4","fqdn":"refund-vertex.com","domain":"refund-vertex.com","tld":"com"},"ip":{"addr":"104.21.18.129","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"0d490d1bad7e9038b5741f77a7bcee6c","sha1":"64f3096d6f0121949d2b88ef19d4b9adcf38fd89","sha256":"8dd3674bae946e2e04bc962443f0994d736a761bb28e816c20aee6391ef242ed","sha512":"9860efe572a0bda18b274965bc81ae0f513a1c826eeaf9b67cc7b6cec2b78164a67ee15f586e63905cf6b8cc520b00039ff7e9e1460b32dd0977dc4a85cd24b2","ssdeep":"96:+nsL0Z9Z4JfrjqyWiNDy9XOWZp5Rm4leN8EVrzLyVx2UlKBKGarNcl8/2:WsLGyrjiiNWZ5RmHFJW6x7G/2","tlshash":"1cc161941a54fd2b21e139d8e01ba775253ec0373c1af981fa32eced54e4ed087aa531","size":5819,"data":"","first_seen":"2026-05-12T16:52:28.591446Z","last_seen":"2026-07-19T00:13:06.918462Z","times_seen":16167,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"refund-vertex.com/wp-includes/js/jquery/ui/core.min.js?ver=1.13.3","fqdn":"refund-vertex.com","domain":"refund-vertex.com","tld":"com"},"ip":{"addr":"104.21.18.129","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"da215ae12b95b3aeeb2047667016c7f8","sha1":"480a7087aa74b5b47c47f05a11670e823a3ae4c0","sha256":"699210a5ed06e497b4730ec83bb65ac4c2269ae4a0ee8af3f24aae7ee5b66b76","sha512":"d256ddc828c06f7b84f7df706a4481928a186ea6d3e1358254a1ec02f403d72d2f3aecd682a93aad61b8f236f17dbcf7e6ca100f78c30a348682bf8ee125d8ff","ssdeep":"384:G/rsrDr8LVyraS3dtrqorqr8hrpCip8fuxNhlGX0CiS9rH/OrLrErJ29FkFvd:iS33ZdvK47kv","tlshash":"06a2d94eb246380586f7a2a5402f521fb132e25cb105c8ddf468d8da3c7eea95173f79","size":21464,"data":"","first_seen":"2025-04-15T23:53:17.313193Z","last_seen":"2026-07-19T00:16:39.645103Z","times_seen":328018,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"refund-vertex.com/wp-content/plugins/classic-elementor-addons-pro/assets/js/tilt.jquery.js?ver=1.2.1","fqdn":"refund-vertex.com","domain":"refund-vertex.com","tld":"com"},"ip":{"addr":"104.21.18.129","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"26dc1034e9612a88d30f914bb840db79","sha1":"669afb292b2f712ca67dd87e9acb8c5664f16254","sha256":"aa381ef1a5f4404608efb47d3d8b4ceb2d4773e0e99ca1e0e60f31dc7fd9cdea","sha512":"fcb913e1a0eb42c364ba927f7b0a91f15c669ed22a147deee1dba90114a5d0e7d68758189ad2f0b51b47a6387b8dfde2c5b753e6a45e56870e531352014a5acb","ssdeep":"192:QnXzpEnDPEAkCerpc8HnlI7a7Ymu+z3+42Xo1g62AWJtbiFXtKWmZ3HEWx6w:QX4DsAA/H8mziXCg62AWHbmY","tlshash":"c5420e4939f6201a58ab632edbcf5144b279c00b4406e5683c9c4be89fd26a807b5ffd","size":12472,"data":"","first_seen":"2025-01-02T18:25:48.078361Z","last_seen":"2026-07-12T21:02:12.715737Z","times_seen":16,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"refund-vertex.com/wp-includes/js/jquery/jquery.min.js?ver=3.7.1","fqdn":"refund-vertex.com","domain":"refund-vertex.com","tld":"com"},"ip":{"addr":"104.21.18.129","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"826eb77e86b02ab7724fe3d0141ff87c","sha1":"79cd3587d565afe290076a8d36c31c305a573d18","sha256":"cb6f2d32c49d1c2b25e9ffc9aaafa3f83075346c01bcd4ae6eb187392a4292cf","sha512":"fc79fdb76763025dc39fac045a215ff155ef2f492a0e9640079d6f089fa6218af2b3ab7c6eaf636827dee9294e6939a95ab24554e870c976679c25567ad6374c","ssdeep":"1536:0RUX9uDgwxcy2KVBNwchN6SLaHEk2BSrBESp+a/IEk4aAocVi8SMBQ47GKO:sHNwcv9VBQpLl88SMBQ47GKO","tlshash":"7483f8df77ca702247ab30b9006f550bf276199d684d4400f159d8e9bcb8a4a827bf7e","size":87553,"data":"","first_seen":"2023-11-03T09:26:43Z","last_seen":"2026-07-19T00:19:55.543474Z","times_seen":977971,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"refund-vertex.com/wp-content/plugins/elementor/assets/js/frontend-modules.min.js?ver=4.1.4","fqdn":"refund-vertex.com","domain":"refund-vertex.com","tld":"com"},"ip":{"addr":"104.21.18.129","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"a3543601e9c09c9b8554ec6f6c8a2174","sha1":"8b05f21356996037f9d17fd012f43393238ac53c","sha256":"c66f47147d5fe3cceeaa47a93ff7440a328f859b049deec2f9d8f414e9137474","sha512":"3b5d80182a9b187171ceb59b4d384ad6b5e59dc0f5890cbdc0fb01109423a3ed847cfa88d67a0db8c84ed163985fb035b069f0530cf9b7a579c4ed47e67f56e9","ssdeep":"1536:yCyQ5RSSYeAjA6c9CST+I83Fy0K4cR8+yhiA2pXSz2faNQAzeLHeBHmjkVziNT:s+uhIAu","tlshash":"7633d9853652f4b70beb45da902f440af25718a8a40df4d5bfe9dce194b0d8e133ab78","size":50602,"data":"","first_seen":"2026-03-23T23:03:30.149895Z","last_seen":"2026-07-19T00:13:06.861672Z","times_seen":50420,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"refund-vertex.com/elementor-pro-frontend-js-before","fqdn":"refund-vertex.com","domain":"refund-vertex.com","tld":"com"},"ip":{"addr":"104.21.18.129","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"f3e283afd140e0e268c3a5fd3cd00011","sha1":"a7d120b46690118166c31836668f4188419f7d65","sha256":"d7300069ff50762788700d75148d73bf08b6d6c301df7489361500bbaea31ea3","sha512":"2a28860961dec407edac620ba9ece8b4c76604ba7e001832d69a1fd933ce29311ce0c95e9871e3214043e9bff8ac2133330a9ec9cbca2b2fd4954256cb11b693","ssdeep":"","tlshash":"2f419c96db231e2493aea7f921ca3e6f84c40332d6d4b64d129ad47440f7dddf0452a3","size":2338,"data":"","first_seen":"2026-07-12T21:02:13.026857Z","last_seen":"2026-07-12T21:02:13.026857Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=AW-18287380654","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.178.40","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"656510dbde41e7491b882c6a63d6c483","sha1":"5a88be2d1184afb5217132b2c7691a40380f0c77","sha256":"6f569891838a959479fb747316157389723d02d69fa5d1e9457fca74b639a65e","sha512":"e0cc205b1682a6f25579476b9bc53c66c158e46ac0bd7cdd44e43a421022a577ea02f51eb0ebc7f896476af27df19c670c327fe3f413c0d14f62045aaf800eed","ssdeep":"6144:iVlKo0JTeozbF3V512qp6q0lci0SJGWox3lym7DPLoKyS:iVlOXFp2IFDjoKyS","tlshash":"c59409cdb3d6746253a2f478903f018ba57a29e2b44cc899f185ccd42e7469a8277f7c","size":433554,"data":"","first_seen":"2026-07-12T21:02:12.863129Z","last_seen":"2026-07-12T21:02:12.863129Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"refund-vertex.com/cea-custom-front-js-extra","fqdn":"refund-vertex.com","domain":"refund-vertex.com","tld":"com"},"ip":{"addr":"104.21.18.129","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"638a60ba12aa372a48da084545be9d25","sha1":"bb8c91e5ae3f7378b511d38114cf4eaf8c4ede67","sha256":"5c5f597d098549f5db28190ba0b9916599b0bdb6ed78f806476eedadc9603b26","sha512":"2c1bd1322642cbc89d7e4d8c17e76cd1779258aaa45a01442299436e49a61cf3680e1b4501aaedd7ba24eb2017bfb8fa82dc283f0bc506aa1f9a844d10187dfa","ssdeep":"","tlshash":"79112bd6c6dc0ea7e3c04cf40c0c123703e5b130f60cd4834645540000709c3fd04103","size":1053,"data":"","first_seen":"2026-07-11T07:18:49.251123Z","last_seen":"2026-07-12T21:02:13.027849Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"refund-vertex.com/wp-includes/js/wp-emoji-loader.min.js","fqdn":"refund-vertex.com","domain":"refund-vertex.com","tld":"com"},"ip":{"addr":"104.21.18.129","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"03d4b3e375d627b2b6918a7e8f36ffed","sha1":"5bfd02472f6dfdc833194a8c8d2cbd50d22b7585","sha256":"b909e5f51c984c309a52e0e8a2dbcc638247751bf1305bf8d6621d730d8524a0","sha512":"7ee52d708afe0d58dd30bd733e2e7d4e7a6e1a851b21004f617d6dcc4bc7a5a4e863f41c4e649fc23d9048b9e2c9796011fea55bdc1b10dad28dae3194e172f6","ssdeep":"","tlshash":"f081759ae77638dbb2f900f2697a0d47eb614435d6c8d438c9aea31418b5893c274a46","size":3969,"data":"","first_seen":"2026-07-11T07:18:49.223043Z","last_seen":"2026-07-12T21:02:13.029091Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"refund-vertex.com/wp-content/plugins/elementor-pro/assets/js/popup.f7b15b2ca565b152bf98.bundle.min.js","fqdn":"refund-vertex.com","domain":"refund-vertex.com","tld":"com"},"ip":{"addr":"104.21.18.129","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"a4252b34b60668051c92cc8e14d1445c","sha1":"6dc469badc2bf2e7c41cef323a0e9bcbe49043a9","sha256":"15e25d8c70881e7b465776ce75b468d12948cfd61c4acf8545bca47271c15261","sha512":"0c9700bb77b1038f74ca9d9148068049095d6bfb6c8ff61973b58f0479e3ab48d321a4b771d0b7aaa00de75fbf1fdd0d86a3d96e785617767c506f75d30e90e6","ssdeep":"","tlshash":"9901d0a030a2b8b605af408b74c7056c65512df2740a78a2b9cb84d16eb4f953352775","size":752,"data":"","first_seen":"2026-02-02T22:12:39.946913Z","last_seen":"2026-07-18T10:33:01.704784Z","times_seen":565,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"refund-vertex.com/wp-content/plugins/elementor/assets/js/frontend.min.js?ver=4.1.4","fqdn":"refund-vertex.com","domain":"refund-vertex.com","tld":"com"},"ip":{"addr":"104.21.18.129","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"1c6aa09d0faf7577c8ae64d43b8241ad","sha1":"9d31e838cc042539556ca9223a635349f6e4af35","sha256":"1842d6e4d3c7399fdb01ab4b0a7dd5c1d9c096110de0532181ed581f14e9e813","sha512":"d754acb067d44f5fd9648cc63b6da0e95166a48d50a25dcfb378a6a5cd8c94334413c4466e598d01830a1cab6b183cf4812ac68500ac8e6d64ceabe45f5c46f3","ssdeep":"768:D1c+6idHZRdzM4ZBOBTmduNFXaz1EfcJR8RjDKv//Dk3iHVgbpMYMLKEnzBc5Gkl:ZcURdzMMBOB0mFrcJR8RjD8/xHVlqEni","tlshash":"0de208523296e866069f48a3f0231119f3775dd9b80af0d5b2bcdce5a471e877362b34","size":32098,"data":"","first_seen":"2026-05-18T18:48:00.243251Z","last_seen":"2026-07-19T00:13:06.909254Z","times_seen":16140,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"refund-vertex.com/wp-content/plugins/classic-elementor-addons-pro/assets/js/packery-mode.pkgd.min.js?ver=2.0.1","fqdn":"refund-vertex.com","domain":"refund-vertex.com","tld":"com"},"ip":{"addr":"104.21.18.129","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"e9bd1c18a37d7c5afb45eb0cca322030","sha1":"47e3f94785737e9522397277fd104e95d46a9fc6","sha256":"c8c7b8f528da9d523bd93fe5602dc5c1ae417da58daee3b07fa56a1daa88e8b6","sha512":"2bad45a870520d8db857e9cffdc8cd4e83725263ade055d4359b31922b038d5961a9cb5bb7f2368f1fedb7d6982b6317465409dc47c23d2f30fe9915bbac4bd3","ssdeep":"384:Krj9EY3gBBOrC+rI7mOhvTF1wrxBd6MZnI:tuWBlb7myaBK","tlshash":"b552b68e7140354982a7f66a913f010f323b941d6746846c797ae8eb6e39c0d3537fb9","size":13630,"data":"","first_seen":"2023-03-07T15:21:03Z","last_seen":"2026-07-17T03:06:58.546459Z","times_seen":517,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"refund-vertex.com/wp-includes/js/dist/hooks.min.js?ver=7496969728ca0f95732d","fqdn":"refund-vertex.com","domain":"refund-vertex.com","tld":"com"},"ip":{"addr":"104.21.18.129","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"55c5129ccd0fa8f383d9de82a91c5877","sha1":"596918015fa62e4f18533b69b0e6822ebee3cb2d","sha256":"cce388fed1a82ebd20ce7d9601e4b6c83a425ea201c333d71b1183ee887cc090","sha512":"956ab39b4bc0577f0ac50a842bc7f71ac1d5b6f7148f9ba9bdb2a84001b96362f077d417144dce171464de8aac71ffd6e639e35ca12da4de2d12fddd660e64a3","ssdeep":"96:lu/16WIHBLusBcADGDd/R5h2RTLlD3jMXY2yGy94E34sTY2Cif:lGIhNBcAD0NRv8XlD3wXY2yH+EoaY2f","tlshash":"5ca151c43542b930e2b77027f0ab58d46175abe1a82d8446d59cd8f12da39cee0e7b3d","size":5050,"data":"","first_seen":"2026-07-02T22:01:42.321596Z","last_seen":"2026-07-19T00:19:49.889395Z","times_seen":5666,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"refund-vertex.com/wp-includes/js/imagesloaded.min.js?ver=5.0.0","fqdn":"refund-vertex.com","domain":"refund-vertex.com","tld":"com"},"ip":{"addr":"104.21.18.129","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"6823120876c9afc8929418c9a6f8e343","sha1":"90b0adb37d70ffec5f9189c36bb0027c310c9502","sha256":"b65b3de1bc923b9355248a0d941a0eaee15dfb9a6b8eadb51323a8df6189dcd1","sha512":"63d84226815c831245754adb30040ee72dcf218d01f991a5619675374bbe3b706e3721d32f5120d9d27e500813e8214244992b3875b3a7e7e4bc7ded5201183a","ssdeep":"96:PwSrH5hrG6Qpw1rIN2Bkqsu6B89w1y+7Y3qv5StcXyuC0r4oYeTnf49uVhWWTfju:PwSrq6Qpw1rI2k1u6i9woa3hSSCP9+XC","tlshash":"00b1318db7737563125aa0f2b31b430ab3b6509ea128419d765cecf39cb490a1973fb0","size":5520,"data":"","first_seen":"2023-11-08T01:34:44Z","last_seen":"2026-07-19T00:13:06.905219Z","times_seen":197524,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":[{"level":"log","text":"JQMIGRATE: Migrate is installed, version 3.4.1","filename":"https://refund-vertex.com/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.4.1","line_number":2,"column_number":981}]},"http":[{"url":{"schema":"https","addr":"refund-vertex.com/wp-content/plugins/classic-elementor-addons-pro/assets/js/packery-mode.pkgd.min.js?ver=2.0.1","fqdn":"refund-vertex.com","domain":"refund-vertex.com","tld":"com"},"ip":{"addr":"104.21.18.129","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://refund-vertex.com/","date":"2026-07-12T21:01:25.452Z","timestamp":1783890085452,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"refund-vertex.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 02 Jul 2026 10:20:14 GMT","end":"Wed, 30 Sep 2026 11:18:49 GMT"},"fingerprint":{"sha1":"32:ED:60:EF:39:C7:37:B9:BB:20:CC:D9:A8:6F:D0:BF:55:E9:09:CA","sha256":"C9:C2:B4:C7:E6:CA:CC:33:A4:FF:64:2A:D2:E4:C0:97:E1:F2:EB:D6:D7:1C:F4:66:6B:5E:AB:51:40:FE:D1:6B"}}},"request":{"raw":"GET /wp-content/plugins/classic-elementor-addons-pro/assets/js/packery-mode.pkgd.min.js?ver=2.0.1 HTTP/1.1\r\nHost: refund-vertex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://refund-vertex.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sun, 12 Jul 2026 21:01:31 GMT\r\nserver: cloudflare\r\nlast-modified: Wed, 01 Jul 2026 09:47:51 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncontent-encoding: zstd\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=MdonIY0nYHf1MsEBCfz1al3Q9Ip8ToIkojiRGbx78z5s3Lh7FEIUP1I%2FqVkI16vgm7WyT9ztc2XCRq7PKjev2RSeEIDU3M%2FdPE3wRsp0%2FzN4GSGcV9pU6xXJw81xZRzb4FyZVQ%3D%3D\"}]}\r\ncontent-type: text/javascript\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\ncf-ray: a1a2fbaa1a63712d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":13630,"size_decoded":5165,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (13554), with CRLF line terminators","md5":"e9bd1c18a37d7c5afb45eb0cca322030","sha1":"47e3f94785737e9522397277fd104e95d46a9fc6","sha256":"c8c7b8f528da9d523bd93fe5602dc5c1ae417da58daee3b07fa56a1daa88e8b6","sha512":"2bad45a870520d8db857e9cffdc8cd4e83725263ade055d4359b31922b038d5961a9cb5bb7f2368f1fedb7d6982b6317465409dc47c23d2f30fe9915bbac4bd3","ssdeep":"384:Krj9EY3gBBOrC+rI7mOhvTF1wrxBd6MZnI:tuWBlb7myaBK","tlshash":"b552b68e7140354982a7f66a913f010f323b941d6746846c797ae8eb6e39c0d3537fb9","first_seen":"2023-03-07T15:21:03Z","last_seen":"2026-07-17T03:06:58.546459Z","times_seen":517,"resource_available":true,"data":null}},"time_used":6376,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6349,"receive":27,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"refund-vertex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"refund-vertex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/roboto/v51/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://refund-vertex.com/","date":"2026-07-12T21:01:30.643Z","timestamp":1783890090643,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 22 Jun 2026 08:37:23 GMT","end":"Mon, 14 Sep 2026 08:37:22 GMT"},"fingerprint":{"sha1":"CD:5B:53:23:61:72:75:37:AD:E9:F1:74:B2:D2:EE:09:81:05:55:E1","sha256":"9F:07:21:2D:14:EB:C5:C0:D4:2B:42:E4:55:80:7A:BB:AF:47:A8:BC:0C:5E:05:F3:2A:2B:1F:2A:78:4D:FF:D7"}}},"request":{"raw":"GET /s/roboto/v51/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://refund-vertex.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 43136\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 09 Jul 2026 10:17:38 GMT\r\nexpires: Fri, 09 Jul 2027 10:17:38 GMT\r\ncache-control: public, max-age=31536000\r\nage: 297832\r\nlast-modified: Wed, 18 Feb 2026 19:51:37 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":43136,"size_decoded":43949,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 43136, version 1.0","md5":"665db5e157d2138835c4037c971ff3a4","sha1":"41ca6b7e4818eb81531d8006ff7ddd971c640879","sha256":"1404ca348bd75ef836f4dd8b6f2cc719458642d1237c368296b2fc652dca47dc","sha512":"6c999466673c9873b1b112d6ab95c7cecb99467ea156e3e046b54c5f3d109c3845b05cbb2a0245d178430c7b2ceacd5110f7d8faf7e041100f44852b0c29fe9a","ssdeep":"768:tMTmVhyXCrekkraPAjrWMMWD3UJmw0FRwoglekm+hQ7//geceSF/mEQBPMAmDu5:cmHkCrHvPAjrWMMI3UJswogl4j7/hSlW","tlshash":"f9130231eb70ee59962c903454e7fda9433b1457d731aca80e99a1ce6f8103454facec","first_seen":"2026-02-19T22:27:43.350598Z","last_seen":"2026-07-19T00:18:53.6277Z","times_seen":233944,"resource_available":false,"data":null}},"time_used":33,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":16,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/manrope/v20/xn7gYHE41ni1AdIRggexSg.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://refund-vertex.com/","date":"2026-07-12T21:01:30.652Z","timestamp":1783890090652,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 22 Jun 2026 08:37:23 GMT","end":"Mon, 14 Sep 2026 08:37:22 GMT"},"fingerprint":{"sha1":"CD:5B:53:23:61:72:75:37:AD:E9:F1:74:B2:D2:EE:09:81:05:55:E1","sha256":"9F:07:21:2D:14:EB:C5:C0:D4:2B:42:E4:55:80:7A:BB:AF:47:A8:BC:0C:5E:05:F3:2A:2B:1F:2A:78:4D:FF:D7"}}},"request":{"raw":"GET /s/manrope/v20/xn7gYHE41ni1AdIRggexSg.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://refund-vertex.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 24836\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sun, 12 Jul 2026 10:13:52 GMT\r\nexpires: Mon, 12 Jul 2027 10:13:52 GMT\r\ncache-control: public, max-age=31536000\r\nage: 38858\r\nlast-modified: Thu, 04 Sep 2025 17:08:28 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":24836,"size_decoded":25648,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 24836, version 1.0","md5":"938c6e8019b69313372c47dbb7a7c930","sha1":"b42951014c5eca12749d87a4706caf22dc4fe081","sha256":"a30ddcd349703aff7464c34bef3fffdff405ee50c113440d7c8693c02d210972","sha512":"5537c005cd8f321f26fe67f6292b3ec14e88ff4b2365311628dbbe4753e01e568f6881b9f2e7d71e8e6b2c261ed25f372829dd28f89f865ce574b4e1fec29614","ssdeep":"768:3KQaj5c95F1QmIwa55Go1COpZLpkkM46CU+YIC:ahj5cXow65xCM5pkkM468YB","tlshash":"a2b2f105ee49b3d4b276f1fcfa802884179282f27dabda8f3f2015981dd8e5b8d45320","first_seen":"2025-06-02T20:09:41.98255Z","last_seen":"2026-07-19T00:17:19.364535Z","times_seen":33430,"resource_available":false,"data":null}},"time_used":32,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":30,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"refund-vertex.com/wp-content/plugins/classic-elementor-addons-pro/assets/css/owl.carousel.min.css?ver=2.3.4","fqdn":"refund-vertex.com","domain":"refund-vertex.com","tld":"com"},"ip":{"addr":"104.21.18.129","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://refund-vertex.com/","date":"2026-07-12T21:01:25.096Z","timestamp":1783890085096,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"refund-vertex.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 02 Jul 2026 10:20:14 GMT","end":"Wed, 30 Sep 2026 11:18:49 GMT"},"fingerprint":{"sha1":"32:ED:60:EF:39:C7:37:B9:BB:20:CC:D9:A8:6F:D0:BF:55:E9:09:CA","sha256":"C9:C2:B4:C7:E6:CA:CC:33:A4:FF:64:2A:D2:E4:C0:97:E1:F2:EB:D6:D7:1C:F4:66:6B:5E:AB:51:40:FE:D1:6B"}}},"request":{"raw":"GET /wp-content/plugins/classic-elementor-addons-pro/assets/css/owl.carousel.min.css?ver=2.3.4 HTTP/1.1\r\nHost: refund-vertex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://refund-vertex.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sun, 12 Jul 2026 21:01:25 GMT\r\nserver: cloudflare\r\nlast-modified: Wed, 01 Jul 2026 09:47:51 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\ncontent-encoding: zstd\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=VotZb6dBJB9igJ1XS6pea%2F6xw4PbPw9XeRuK%2FLxxMtZ9uJKmrvifX1W3zyVBWiGCuejqcMLfheVnOF11SrDBrWF%2BM9bElCGI4b29WHL5tcbUP85ZH3jQR0z5%2Fhp41pQN%2FITlZg%3D%3D\"}]}\r\ncontent-type: text/css\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\ncf-ray: a1a2fba7da0a712d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3351,"size_decoded":1782,"mime_type":"text/css","magic":"ASCII text, with very long lines (3184)","md5":"b2752a850d44f50036628eeaef3bfcfa","sha1":"fba46353cf90450ef3d362a123f1e7af3e8c561e","sha256":"521410e1fc44780061e09adc980275fb5ea277fd5d9e538454214ec4379ff4bc","sha512":"b52dd2e6a1b40658674113b2257bcd8de10ce14a4c5c7ad07d31a66d0d602a67a50b195210151ac614418ff1054f3a5b3f84554aba448a46e6749a1b0af844de","ssdeep":"","tlshash":"9161bbe5314a225f480f83121dd81e86393dcc52d8660a5a92bbd71447dae6d213ffcf","first_seen":"2023-04-05T13:49:19Z","last_seen":"2026-07-19T00:19:57.917424Z","times_seen":42002,"resource_available":false,"data":null}},"time_used":117,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":117,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"refund-vertex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"refund-vertex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"refund-vertex.com/wp-includes/js/imagesloaded.min.js?ver=5.0.0","fqdn":"refund-vertex.com","domain":"refund-vertex.com","tld":"com"},"ip":{"addr":"104.21.18.129","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://refund-vertex.com/","date":"2026-07-12T21:01:25.447Z","timestamp":1783890085447,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"refund-vertex.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 02 Jul 2026 10:20:14 GMT","end":"Wed, 30 Sep 2026 11:18:49 GMT"},"fingerprint":{"sha1":"32:ED:60:EF:39:C7:37:B9:BB:20:CC:D9:A8:6F:D0:BF:55:E9:09:CA","sha256":"C9:C2:B4:C7:E6:CA:CC:33:A4:FF:64:2A:D2:E4:C0:97:E1:F2:EB:D6:D7:1C:F4:66:6B:5E:AB:51:40:FE:D1:6B"}}},"request":{"raw":"GET /wp-includes/js/imagesloaded.min.js?ver=5.0.0 HTTP/1.1\r\nHost: refund-vertex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://refund-vertex.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sun, 12 Jul 2026 21:01:25 GMT\r\nserver: cloudflare\r\nlast-modified: Fri, 11 Aug 2023 18:18:26 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncontent-encoding: zstd\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=V7vj%2BoVK7PTSMQUSyzfeZXIgIWK0%2BGJTK4ClbOAQFrHwmNVA6up0np3Ot8xqKhN5O7WOYKSdJBBbIurq3hPxWLFeTMC5jWdOLezGm%2BPPXEGOqHHU7jCGpOP3Ja2u31weVOq7lA%3D%3D\"}]}\r\ncontent-type: text/javascript\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\ncf-ray: a1a2fbaa0a60712d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5520,"size_decoded":2574,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (4358)","md5":"6823120876c9afc8929418c9a6f8e343","sha1":"90b0adb37d70ffec5f9189c36bb0027c310c9502","sha256":"b65b3de1bc923b9355248a0d941a0eaee15dfb9a6b8eadb51323a8df6189dcd1","sha512":"63d84226815c831245754adb30040ee72dcf218d01f991a5619675374bbe3b706e3721d32f5120d9d27e500813e8214244992b3875b3a7e7e4bc7ded5201183a","ssdeep":"96:PwSrH5hrG6Qpw1rIN2Bkqsu6B89w1y+7Y3qv5StcXyuC0r4oYeTnf49uVhWWTfju:PwSrq6Qpw1rI2k1u6i9woa3hSSCP9+XC","tlshash":"00b1318db7737563125aa0f2b31b430ab3b6509ea128419d765cecf39cb490a1973fb0","first_seen":"2023-11-08T01:34:44Z","last_seen":"2026-07-19T00:13:06.905219Z","times_seen":197524,"resource_available":true,"data":null}},"time_used":38,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":38,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"refund-vertex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"refund-vertex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"refund-vertex.com/wp-content/themes/igual/style.css?ver=3.0.0","fqdn":"refund-vertex.com","domain":"refund-vertex.com","tld":"com"},"ip":{"addr":"104.21.18.129","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://refund-vertex.com/","date":"2026-07-12T21:01:25.117Z","timestamp":1783890085117,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"refund-vertex.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 02 Jul 2026 10:20:14 GMT","end":"Wed, 30 Sep 2026 11:18:49 GMT"},"fingerprint":{"sha1":"32:ED:60:EF:39:C7:37:B9:BB:20:CC:D9:A8:6F:D0:BF:55:E9:09:CA","sha256":"C9:C2:B4:C7:E6:CA:CC:33:A4:FF:64:2A:D2:E4:C0:97:E1:F2:EB:D6:D7:1C:F4:66:6B:5E:AB:51:40:FE:D1:6B"}}},"request":{"raw":"GET /wp-content/themes/igual/style.css?ver=3.0.0 HTTP/1.1\r\nHost: refund-vertex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://refund-vertex.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sun, 12 Jul 2026 21:01:27 GMT\r\nserver: cloudflare\r\nlast-modified: Wed, 01 Jul 2026 12:02:17 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\ncontent-encoding: zstd\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=k8qwRcx5EnyJTsZ9lZFlbzdHQRqsdKRF2bsIHnWbxsPYZZQ%2BGPD7Wj7XZy7blM1UCAtYXmbFz8HjckdhJJyvbZp4hf7ykhLKAz3Hml8hgd8Z5dk7dpUilPS6B%2Fp8y6bQ2ey%2Brg%3D%3D\"}]}\r\ncontent-type: text/css\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\ncf-ray: a1a2fba7fa14712d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":256172,"size_decoded":48920,"mime_type":"text/css","magic":"ASCII text, with very long lines (5395), with CRLF line terminators","md5":"0a87f005dfe4e7385f99bdadece3835c","sha1":"ddee756c38d6ad51a41f312fa85b38705ed0cef2","sha256":"a4117cf2fb8a92ce2c1b10810393a0e0c1aaa831036cdf01815608484bd53ed6","sha512":"2ddf3ece9cbdf612f9ec77fda9eec367896d43e1f8a63d16fcd36051bde94eea324192e86b059fbedc68f4cb1bc14c883706724d80b75fae260ca19b1cfea384","ssdeep":"1536:TuAptkkdMUhelyagbIK0QHzcW5vt/JZ6d90OT8QxxUHepUwkTd8q3BULuWjAWVTb:tpI0fkHPq3KLLNjE3ftat","tlshash":"7344d65cde1925546237d779abfa5781ff2400a3df0204a8fad8a2058fb695c427bf8c","first_seen":"2026-07-11T07:18:49.154836Z","last_seen":"2026-07-12T21:02:12.694589Z","times_seen":2,"resource_available":false,"data":null}},"time_used":2077,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1956,"receive":121,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"refund-vertex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"refund-vertex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css?family=Roboto:100,100italic,200,200italic,300,300italic,400,400italic,500,500italic,600,600italic,700,700italic,800,800italic,900,900italic\u0026display=swap\u0026subset=cyrillic","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.42","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://refund-vertex.com/","date":"2026-07-12T21:01:25.374Z","timestamp":1783890085374,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 22 Jun 2026 08:37:24 GMT","end":"Mon, 14 Sep 2026 08:37:23 GMT"},"fingerprint":{"sha1":"85:D0:EC:C2:01:33:25:23:96:FB:2B:54:90:54:84:07:0A:49:1F:03","sha256":"9D:7C:1C:9C:6A:25:1E:17:E0:DC:FD:42:95:CA:47:3D:C1:9C:20:FB:22:47:02:E3:27:EC:7C:62:03:30:83:BA"}}},"request":{"raw":"GET /css?family=Roboto:100,100italic,200,200italic,300,300italic,400,400italic,500,500italic,600,600italic,700,700italic,800,800italic,900,900italic\u0026display=swap\u0026subset=cyrillic HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://refund-vertex.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Sun, 12 Jul 2026 21:01:25 GMT\r\ndate: Sun, 12 Jul 2026 21:01:25 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":100764,"size_decoded":3497,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (1572)","md5":"9e6b9ba92c3c07c25c3a64a82c98afc3","sha1":"3ddff674c5f9cd149de491cf5df81c1074eaf397","sha256":"3d675aa2a0daa5e5b0080f14f3335f2d7a15275badcc418deba1e740a5ea55ab","sha512":"097289d7ac1a663cb14fa54e87356c82d88f82ae9574fa4cdd23333e1a98d3e9241d11fbb3d3cf34b52bfa7aac3d625d2bccefeb40fae26970f0e20d0b4751ab","ssdeep":"768:yDdD9DADNDgBDUKD7DnDdAgTQgUUhaWWHncXgLUahdPuOJ+gaULUIIV1ClghUULD:GZQDSVUvWtALyl83uRf","tlshash":"e2a30e91041b5440ab834ce223cebf35fe1f92507141d0b9abfc9b6baddbca6526835c","first_seen":"2026-02-19T22:36:20.76028Z","last_seen":"2026-07-19T00:09:24.042072Z","times_seen":15796,"resource_available":false,"data":null}},"time_used":98,"timings":{"blocked":-1,"dns":0,"connect":14,"send":0,"wait":37,"receive":0,"ssl":46},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"refund-vertex.com/wp-content/plugins/revslider/public/css/fonts/revicons/css/revicons.css","fqdn":"refund-vertex.com","domain":"refund-vertex.com","tld":"com"},"ip":{"addr":"104.21.18.129","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://refund-vertex.com/","date":"2026-07-12T21:01:25.401Z","timestamp":1783890085401,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"refund-vertex.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 02 Jul 2026 10:20:14 GMT","end":"Wed, 30 Sep 2026 11:18:49 GMT"},"fingerprint":{"sha1":"32:ED:60:EF:39:C7:37:B9:BB:20:CC:D9:A8:6F:D0:BF:55:E9:09:CA","sha256":"C9:C2:B4:C7:E6:CA:CC:33:A4:FF:64:2A:D2:E4:C0:97:E1:F2:EB:D6:D7:1C:F4:66:6B:5E:AB:51:40:FE:D1:6B"}}},"request":{"raw":"GET /wp-content/plugins/revslider/public/css/fonts/revicons/css/revicons.css HTTP/1.1\r\nHost: refund-vertex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://refund-vertex.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sun, 12 Jul 2026 21:01:30 GMT\r\nserver: cloudflare\r\nlast-modified: Wed, 01 Jul 2026 09:48:22 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\ncontent-encoding: zstd\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=E2APJetVAywZoOfybRNaW4EuIObZ5QjW1MmhQalWpBrnQbHd6yqriETNbHEgsWvvVy8AISJ2vItuQ1JdUl9nse%2BCSP59AoPjt34TaNjThk%2FZt3VfrO1VGO9RLlH0zSvW%2FGrxuA%3D%3D\"}]}\r\ncontent-type: text/css\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\ncf-ray: a1a2fba9ca46712d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4451,"size_decoded":1954,"mime_type":"text/css","magic":"Unicode text, UTF-8 text","md5":"2773714e140d55b95d4b331b2815f314","sha1":"a4228a60da37a6ac0bc4420515edfc9de3219648","sha256":"b0cf2f1ac53149382ff9f88b8b47bbeb264578b9e8395bc172137d75fe754492","sha512":"b89b7da9fde554934146caa36b53b9c6fc2bedad9f305e1ae8e2e5ad44a48059a6fd36e2528d11337c8b22acd25f0dabd8b1c24ec1ccbf482360f9f1ac83fc24","ssdeep":"96:L/utOrOIWx5Wxm/96OOpsOClADToI+zdG25k0srAbc4e0:L/uRGEAbClADsnJW9rPk","tlshash":"d1913cf2859a04e12ba7d6813bcfb66033d8f1259e81cc91d1027d6ceaea56043de3dd","first_seen":"2024-07-10T10:05:28Z","last_seen":"2026-07-18T23:50:43.669651Z","times_seen":4631,"resource_available":false,"data":null}},"time_used":4941,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":4941,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"refund-vertex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"refund-vertex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"refund-vertex.com/wp-content/plugins/elementor-pro/assets/js/elements-handlers.min.js?ver=3.35.0","fqdn":"refund-vertex.com","domain":"refund-vertex.com","tld":"com"},"ip":{"addr":"104.21.18.129","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://refund-vertex.com/","date":"2026-07-12T21:01:25.460Z","timestamp":1783890085460,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"refund-vertex.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 02 Jul 2026 10:20:14 GMT","end":"Wed, 30 Sep 2026 11:18:49 GMT"},"fingerprint":{"sha1":"32:ED:60:EF:39:C7:37:B9:BB:20:CC:D9:A8:6F:D0:BF:55:E9:09:CA","sha256":"C9:C2:B4:C7:E6:CA:CC:33:A4:FF:64:2A:D2:E4:C0:97:E1:F2:EB:D6:D7:1C:F4:66:6B:5E:AB:51:40:FE:D1:6B"}}},"request":{"raw":"GET /wp-content/plugins/elementor-pro/assets/js/elements-handlers.min.js?ver=3.35.0 HTTP/1.1\r\nHost: refund-vertex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://refund-vertex.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sun, 12 Jul 2026 21:01:31 GMT\r\nserver: cloudflare\r\nlast-modified: Wed, 01 Jul 2026 06:49:12 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncontent-encoding: zstd\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=V1SCSZGmRBVKrNISmKd%2FJJ9ruC9oJ6F1TmIk4jZ7KK1otRYe8je%2BwmF8sgmyGRX%2B%2BHMcx0PKkK7HNoMx4QYVLrpgdvJeuVMlnVOfotKgvrgXJg1h0S7FIHLgeCsSEJyY904rpQ%3D%3D\"}]}\r\ncontent-type: text/javascript\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\ncf-ray: a1a2fbaa2a6a712d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":44258,"size_decoded":12324,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (44214)","md5":"9a9484188d721f46d3be4c5e001a5943","sha1":"87b82f8ea87446c9a07c78fddead48067df3c12c","sha256":"16aa18d7666aa3c4c9f6271cb5db46d14da0c644b8dec8c7f8fbe303f040b531","sha512":"8d2184fa6f621be7852e5dea28a5e64a9566a98f77ca9fff43829feada4606b2ea09ffdbb0d340ce4112e9bd5dead4e56fd4c302840aa77655b95d331d24fc96","ssdeep":"768:U/Xt95D1+WE9A5yLce/J9d0dbdTdGdadWdDdILdUd1dvd6dfdMdxdndTdiePm7Lc:ytDD1+WE9A5yLcWJ9mBtIoERuWfRMBKB","tlshash":"7513955171aaca6941cf84abf463164fb7225c9cf413f0e67afc8d82b564e87a390731","first_seen":"2026-02-02T16:50:51.732287Z","last_seen":"2026-07-18T16:55:57.006642Z","times_seen":2535,"resource_available":true,"data":null}},"time_used":6411,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6353,"receive":58,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"refund-vertex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"refund-vertex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/dmsans/v17/rP2Wp2ywxg089UriCZaSExd86J3t9jz86MvyyKy58UfkvU0oaw.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://refund-vertex.com/","date":"2026-07-12T21:01:30.475Z","timestamp":1783890090475,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 22 Jun 2026 08:37:23 GMT","end":"Mon, 14 Sep 2026 08:37:22 GMT"},"fingerprint":{"sha1":"CD:5B:53:23:61:72:75:37:AD:E9:F1:74:B2:D2:EE:09:81:05:55:E1","sha256":"9F:07:21:2D:14:EB:C5:C0:D4:2B:42:E4:55:80:7A:BB:AF:47:A8:BC:0C:5E:05:F3:2A:2B:1F:2A:78:4D:FF:D7"}}},"request":{"raw":"GET /s/dmsans/v17/rP2Wp2ywxg089UriCZaSExd86J3t9jz86MvyyKy58UfkvU0oaw.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://refund-vertex.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 39712\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 06 Jul 2026 13:46:34 GMT\r\nexpires: Tue, 06 Jul 2027 13:46:34 GMT\r\ncache-control: public, max-age=31536000\r\nage: 544496\r\nlast-modified: Wed, 10 Sep 2025 16:31:35 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":39712,"size_decoded":40525,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 39712, version 1.0","md5":"d981d4cbcf42c4a39cb417e9673b683b","sha1":"5f8b496f77d410d16bdebb9c274cfb899d22f4a1","sha256":"f1a235db5bcb8730707844188d35201ecdf63e56c5dcce97bab24a9c7066091d","sha512":"9aac6a14434a483a6475d50246930e24ddd57d4c0760e47dd0b38106fba02555059ee7bf87fd53b16006e7939ac1e3b2685b6baca448717ea626c4d1f7438ed3","ssdeep":"768:IVdy5zzQjGgkbcR6OT6wHbYkYw15zdDJVn2d4F882A6rcck:P5oKbcR626wLn54288v","tlshash":"e603f11855db2b11cc8beb703a3a603e4823a55a0900dae8ed7f7d76d9d5e32c45f983","first_seen":"2025-09-14T19:53:40.224227Z","last_seen":"2026-07-18T21:40:31.498487Z","times_seen":3115,"resource_available":false,"data":null}},"time_used":71,"timings":{"blocked":19,"dns":0,"connect":0,"send":0,"wait":31,"receive":21,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css?family=DM+Sans:400,700%7CMarcellus:,400\u0026amp;subset=","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.42","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://refund-vertex.com/","date":"2026-07-12T21:01:32.052Z","timestamp":1783890092052,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 22 Jun 2026 08:37:24 GMT","end":"Mon, 14 Sep 2026 08:37:23 GMT"},"fingerprint":{"sha1":"85:D0:EC:C2:01:33:25:23:96:FB:2B:54:90:54:84:07:0A:49:1F:03","sha256":"9D:7C:1C:9C:6A:25:1E:17:E0:DC:FD:42:95:CA:47:3D:C1:9C:20:FB:22:47:02:E3:27:EC:7C:62:03:30:83:BA"}}},"request":{"raw":"GET /css?family=DM+Sans:400,700%7CMarcellus:,400\u0026amp;subset= HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://refund-vertex.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Sun, 12 Jul 2026 21:01:32 GMT\r\ndate: Sun, 12 Jul 2026 21:01:32 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2493,"size_decoded":1134,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"61c712d34d9ec66cd5c221f4175bf744","sha1":"f65879915ec6cd40539ebfe35b0d8af75ab43a5d","sha256":"87187b686e9d9207a064c81ca411ab36e78477ed3c7acb2f55d737689ab87c78","sha512":"59d08c8849bc0144a6f58ea51839f96103b2101124d7e1ba368e8ec84f47c442157529b131780db3fd55f2fceb855dd0c15663ec1c083eb3b1aca58ae1e4bcd8","ssdeep":"","tlshash":"2d51a981082ba450ab9319c521cd7d32ef1fa1546444a875affe2898fc6ac7e5372b4d","first_seen":"2025-10-07T15:59:13.308033Z","last_seen":"2026-07-15T13:18:28.333824Z","times_seen":26,"resource_available":false,"data":null}},"time_used":34,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":34,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"refund-vertex.com/wp-content/plugins/revslider/public/css/sr7.nav.css","fqdn":"refund-vertex.com","domain":"refund-vertex.com","tld":"com"},"ip":{"addr":"104.21.18.129","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://refund-vertex.com/","date":"2026-07-12T21:01:32.066Z","timestamp":1783890092066,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"refund-vertex.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 02 Jul 2026 10:20:14 GMT","end":"Wed, 30 Sep 2026 11:18:49 GMT"},"fingerprint":{"sha1":"32:ED:60:EF:39:C7:37:B9:BB:20:CC:D9:A8:6F:D0:BF:55:E9:09:CA","sha256":"C9:C2:B4:C7:E6:CA:CC:33:A4:FF:64:2A:D2:E4:C0:97:E1:F2:EB:D6:D7:1C:F4:66:6B:5E:AB:51:40:FE:D1:6B"}}},"request":{"raw":"GET /wp-content/plugins/revslider/public/css/sr7.nav.css HTTP/1.1\r\nHost: refund-vertex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://refund-vertex.com/\r\nCookie: _gcl_au=1.1.983493188.1783890092\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sun, 12 Jul 2026 21:01:32 GMT\r\nserver: cloudflare\r\nlast-modified: Wed, 01 Jul 2026 09:48:22 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\ncontent-encoding: zstd\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=aqhd0zOGj3SWQyaG2zdFAwKQOGEUDOSbbclKbSxFVIgaj080vSbM7lXXhU9RZJIGX%2FsybEr5%2BuzzPMeriI0AUEdwGjVn0h7pvl%2BiOLn3eNM9sEZr2nv87PxnvRmDSFR%2Fv%2F8Shg%3D%3D\"}]}\r\ncontent-type: text/css\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\ncf-ray: a1a2fbd36c7b712d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2340,"size_decoded":1410,"mime_type":"text/css","magic":"ASCII text, with very long lines (2340), with no line terminators","md5":"d5a2ef0830dabca870a42f8d3c930d0a","sha1":"5093e9f99653fc556a146742dd97d9a9518a3ab4","sha256":"22cdf34177147f02d10acac750b7e2eb47938309be4a8db498d6c77ed7b1709e","sha512":"85e8bef50650a3c1ed9234d7b205407cdedfe27878b56834e897807d5248e105408199ec9d17f7ae3b6cf604279bd90a19aff63b7538a19bb998dd3fd6903e5b","ssdeep":"","tlshash":"3c4110722551a159d127f3006cc043dfa8bc5009e723079dde6eb5b0cadf4c729eaba0","first_seen":"2024-07-10T10:05:28Z","last_seen":"2026-07-18T21:32:35.551859Z","times_seen":4457,"resource_available":false,"data":null}},"time_used":103,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":103,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"refund-vertex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"refund-vertex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"refund-vertex.com/wp-content/plugins/elementor/assets/js/section-frontend-handlers.d85ab872da118940910d.bundle.min.js","fqdn":"refund-vertex.com","domain":"refund-vertex.com","tld":"com"},"ip":{"addr":"104.21.18.129","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://refund-vertex.com/","date":"2026-07-12T21:01:32.170Z","timestamp":1783890092170,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"refund-vertex.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 02 Jul 2026 10:20:14 GMT","end":"Wed, 30 Sep 2026 11:18:49 GMT"},"fingerprint":{"sha1":"32:ED:60:EF:39:C7:37:B9:BB:20:CC:D9:A8:6F:D0:BF:55:E9:09:CA","sha256":"C9:C2:B4:C7:E6:CA:CC:33:A4:FF:64:2A:D2:E4:C0:97:E1:F2:EB:D6:D7:1C:F4:66:6B:5E:AB:51:40:FE:D1:6B"}}},"request":{"raw":"GET /wp-content/plugins/elementor/assets/js/section-frontend-handlers.d85ab872da118940910d.bundle.min.js HTTP/1.1\r\nHost: refund-vertex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://refund-vertex.com/\r\nCookie: _gcl_au=1.1.983493188.1783890092\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sun, 12 Jul 2026 21:01:32 GMT\r\nserver: cloudflare\r\nlast-modified: Tue, 30 Jun 2026 16:15:02 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncontent-encoding: zstd\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=pUuR7%2F67z%2BVZ4SEWC7k4RNg704pdaOEi9x%2BzkhvSd1PcgoiqeJG4qfvZsUe2Y0lS0BJo8I%2FdZb5OFReK0c68nn8HxsOmUNYyypYv%2FSu0aHLwwsREMKc6MTrkxyk0APKP0ykbUw%3D%3D\"}]}\r\ncontent-type: text/javascript\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\ncf-ray: a1a2fbd41c89712d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":449,"size_decoded":930,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (449), with no line terminators","md5":"9dd361b7473936c5c8f5bf661c323973","sha1":"5c8f2bcac20956a31c9cff999d50b99f9ee8f9fd","sha256":"55922883b583583787dd3e36a6ee97b5bedc12eec38a24b6bd271d53b8ebf1c2","sha512":"4181a000ecc679d08f6cad5ddac0283744c6dcb07822a19d2552105e4a9191f1baa4a1590975a71325c56714a37084f8122afe463170ce54b5a56d1a1c7780c4","ssdeep":"","tlshash":"a4f05c7a70d278ff200b44520a97105de6a81cf5012961417fbd44382a75ea4a23139f","first_seen":"2025-06-30T23:09:48.860419Z","last_seen":"2026-07-18T23:55:55.978516Z","times_seen":89486,"resource_available":true,"data":null}},"time_used":144,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":144,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"refund-vertex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"refund-vertex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"refund-vertex.com/wp-content/plugins/elementor/assets/css/widget-social-icons.min.css?ver=4.1.4","fqdn":"refund-vertex.com","domain":"refund-vertex.com","tld":"com"},"ip":{"addr":"104.21.18.129","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://refund-vertex.com/","date":"2026-07-12T21:01:25.140Z","timestamp":1783890085140,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"refund-vertex.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 02 Jul 2026 10:20:14 GMT","end":"Wed, 30 Sep 2026 11:18:49 GMT"},"fingerprint":{"sha1":"32:ED:60:EF:39:C7:37:B9:BB:20:CC:D9:A8:6F:D0:BF:55:E9:09:CA","sha256":"C9:C2:B4:C7:E6:CA:CC:33:A4:FF:64:2A:D2:E4:C0:97:E1:F2:EB:D6:D7:1C:F4:66:6B:5E:AB:51:40:FE:D1:6B"}}},"request":{"raw":"GET /wp-content/plugins/elementor/assets/css/widget-social-icons.min.css?ver=4.1.4 HTTP/1.1\r\nHost: refund-vertex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://refund-vertex.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sun, 12 Jul 2026 21:01:29 GMT\r\nserver: cloudflare\r\nlast-modified: Tue, 30 Jun 2026 16:15:02 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\ncontent-encoding: zstd\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=0k6XtYcZoF2PGWolkbCUJIfd2Vjh%2BpFdSifCZE6btTi%2F7kC%2BZ8T6bzoc1fI1EwpUlsNEU1zObz%2B%2FBiL0Zr5JZZFbxbt1MiYc2i5ep4ptVxOFVUs%2F9WoqCAibyegodQX6XMk3cw%3D%3D\"}]}\r\ncontent-type: text/css\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\ncf-ray: a1a2fba82a20712d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5110,"size_decoded":1823,"mime_type":"text/css","magic":"ASCII text, with very long lines (5110), with no line terminators","md5":"d026a17938c5380cc610572fdda43f40","sha1":"2b5df61e56b7fe1dfb88f1707d4b017909b02a75","sha256":"91079644ee1e76145b30c207470b56866770b0564f0fbf1373ab8b11d94f8c9f","sha512":"00dd387f3726c15e71f2f7379c4fd3bdef41c2d81d73f22f3212991b4d18d4b663ae89906722fd9e188606c1061f3f8b5472deee2cd514680e64a29f8193cd66","ssdeep":"48:FDoWozmcbWsiYPt3U/vjfQIeyiZ8Fu2ifnFNZP1NsXUyG9eoL:5oz/WkBUHjfQL7aFu2if3Jf9HL","tlshash":"e5b17651be4f9586321f002a0993f309d05a12c5dc8c6f78f856b16e59b6fe43a73eb2","first_seen":"2025-02-28T14:24:31.329664Z","last_seen":"2026-07-19T00:13:06.859674Z","times_seen":73339,"resource_available":true,"data":null}},"time_used":4168,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":4168,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"refund-vertex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"refund-vertex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"refund-vertex.com/wp-content/plugins/elementor/assets/css/conditionals/apple-webkit.min.css?ver=4.1.4","fqdn":"refund-vertex.com","domain":"refund-vertex.com","tld":"com"},"ip":{"addr":"104.21.18.129","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://refund-vertex.com/","date":"2026-07-12T21:01:25.142Z","timestamp":1783890085142,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"refund-vertex.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 02 Jul 2026 10:20:14 GMT","end":"Wed, 30 Sep 2026 11:18:49 GMT"},"fingerprint":{"sha1":"32:ED:60:EF:39:C7:37:B9:BB:20:CC:D9:A8:6F:D0:BF:55:E9:09:CA","sha256":"C9:C2:B4:C7:E6:CA:CC:33:A4:FF:64:2A:D2:E4:C0:97:E1:F2:EB:D6:D7:1C:F4:66:6B:5E:AB:51:40:FE:D1:6B"}}},"request":{"raw":"GET /wp-content/plugins/elementor/assets/css/conditionals/apple-webkit.min.css?ver=4.1.4 HTTP/1.1\r\nHost: refund-vertex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://refund-vertex.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sun, 12 Jul 2026 21:01:29 GMT\r\nserver: cloudflare\r\nlast-modified: Tue, 30 Jun 2026 16:15:02 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\ncontent-encoding: zstd\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=keho98oD%2B0Y8FgZd0wEfCnVfBdsHT0Wu7iCdQ2TV27h1%2B90J9em576y5zY7uXWYhJcl1uac0gXVDLEj%2BPE2c4O1geMKwL0S06E1TXxFulFULspFOO7MGnXKp7oIe7tQcdet5OQ%3D%3D\"}]}\r\ncontent-type: text/css\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\ncf-ray: a1a2fba82a21712d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6713,"size_decoded":1252,"mime_type":"text/css","magic":"ASCII text, with very long lines (6713), with no line terminators","md5":"f94a49c4961bc08d71abedf98d482d79","sha1":"1f71eca41def14e975ce1ba14313f635323a8d01","sha256":"cf502b45ef8bcae37a65822f78546f6cc7db74faf8f48850bf8a860262817fe6","sha512":"709ba29bb0c9d3e4ff5d505c9d40e51cc2aa069dec27809b17ea754d60f5aa30f7888d0a5aa7c96effaeb98b4bda0ecb0136f685532d073051c14691b2ab31a4","ssdeep":"192:lozzzlztzDTIeIUI8IxdEzWEznI1zkDmdz0zaz6zgsIXIBIhI6dJzLJzQIuz91rn:KnhBhXIwYY2+OhSnqmwsIBOt","tlshash":"e1d1a6757f0b6a358d6b2c5b1357a06f668080e9a182a342c04318035cfbfde7bb857d","first_seen":"2025-12-04T23:21:35.478119Z","last_seen":"2026-07-19T00:13:06.861158Z","times_seen":46877,"resource_available":false,"data":null}},"time_used":4164,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":4164,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"refund-vertex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"refund-vertex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"refund-vertex.com/wp-content/plugins/revslider/public/js/sr7.js?ver=6.7.57","fqdn":"refund-vertex.com","domain":"refund-vertex.com","tld":"com"},"ip":{"addr":"104.21.18.129","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://refund-vertex.com/","date":"2026-07-12T21:01:25.389Z","timestamp":1783890085389,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"refund-vertex.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 02 Jul 2026 10:20:14 GMT","end":"Wed, 30 Sep 2026 11:18:49 GMT"},"fingerprint":{"sha1":"32:ED:60:EF:39:C7:37:B9:BB:20:CC:D9:A8:6F:D0:BF:55:E9:09:CA","sha256":"C9:C2:B4:C7:E6:CA:CC:33:A4:FF:64:2A:D2:E4:C0:97:E1:F2:EB:D6:D7:1C:F4:66:6B:5E:AB:51:40:FE:D1:6B"}}},"request":{"raw":"GET /wp-content/plugins/revslider/public/js/sr7.js?ver=6.7.57 HTTP/1.1\r\nHost: refund-vertex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://refund-vertex.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sun, 12 Jul 2026 21:01:29 GMT\r\nserver: cloudflare\r\nlast-modified: Wed, 01 Jul 2026 09:48:22 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncontent-encoding: zstd\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=hHIpsfyq4lZhxCzIBLZvkGM3u8k%2BxmigKambcedZJcAYFXszaEkZDK2Xd%2BvfUnaW8uPAFz0cvfe1kM6%2FVYEkp%2F0mPwrsBftn%2BBTvGbyHCkXqz%2BqRZXQmev0r52Q1dlaj6sv4Hw%3D%3D\"}]}\r\ncontent-type: text/javascript\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\ncf-ray: a1a2fba9aa42712d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":343034,"size_decoded":101353,"mime_type":"text/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (63436)","md5":"4430dd7303c407ea0063e4d4cc61758c","sha1":"46a19dede02a65153bb5f190fdddd7e339c05a72","sha256":"604a8cda49d901a42530611cbf636bd3a9dcf8197aba67d2077833174756c857","sha512":"cd224373c4e3f8172cda2a50fe1096d0ed21aa50c61580a9f49753c87129f964225cb7e72cbb62b539b3161ce5f174a6df9f415362ced2f0944e173f1779fb03","ssdeep":"6144:/BIOEDVgToJUwcr6cvrF9Bg9RQKRisG3r:/BIOED6oJUwcrFFIPQ9sG3r","tlshash":"16746caeb635243745d502e6b01a4e34b2a4a5d95111c02cb6fcd8fa3d48e9d31faff8","first_seen":"2026-05-20T02:41:19.063088Z","last_seen":"2026-07-19T00:13:19.686212Z","times_seen":701,"resource_available":true,"data":null}},"time_used":4674,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":4563,"receive":111,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"refund-vertex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"refund-vertex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"refund-vertex.com/wp-content/plugins/classic-elementor-addons-pro/assets/js/jquery.appear.min.js?ver=1.0","fqdn":"refund-vertex.com","domain":"refund-vertex.com","tld":"com"},"ip":{"addr":"104.21.18.129","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://refund-vertex.com/","date":"2026-07-12T21:01:25.442Z","timestamp":1783890085442,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"refund-vertex.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 02 Jul 2026 10:20:14 GMT","end":"Wed, 30 Sep 2026 11:18:49 GMT"},"fingerprint":{"sha1":"32:ED:60:EF:39:C7:37:B9:BB:20:CC:D9:A8:6F:D0:BF:55:E9:09:CA","sha256":"C9:C2:B4:C7:E6:CA:CC:33:A4:FF:64:2A:D2:E4:C0:97:E1:F2:EB:D6:D7:1C:F4:66:6B:5E:AB:51:40:FE:D1:6B"}}},"request":{"raw":"GET /wp-content/plugins/classic-elementor-addons-pro/assets/js/jquery.appear.min.js?ver=1.0 HTTP/1.1\r\nHost: refund-vertex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://refund-vertex.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sun, 12 Jul 2026 21:01:30 GMT\r\nserver: cloudflare\r\nlast-modified: Wed, 01 Jul 2026 09:47:51 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncontent-encoding: zstd\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=hU3zM6WI0f9xH705vhF2MuyJduDUOqMDRgisdEzCF10xKZfVwYCn3AYTBAzqtIb%2F9zY38NeGTTs7l8gl4L525K2CU3fB%2FcnzdpGnC6xqqaCpaGBG2FK7dm%2FUtPOdUGRQMfpYDw%3D%3D\"}]}\r\ncontent-type: text/javascript\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\ncf-ray: a1a2fbaa0a5c712d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1371,"size_decoded":1351,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (1285)","md5":"c476b80eca02b0b39992dc0029389bc6","sha1":"7fdbf6d4435b9321d47b59fb6721571cef08f375","sha256":"e7d4c211bc17ebe2fc7f9f8ea3bf926a192b649db5d476827ac44925e41ec558","sha512":"896c3993e076856f8da25fed5bb697e042beaa91cbec48ab85e81145b5007b22313215510661ef60f59873f6a4b0625d2a0e4952efab75ca69b467393d480bb1","ssdeep":"","tlshash":"5b21df6a38ca3e5546fb702f761f72412221c43b1682a082d4fadd3c3ee2d80b813e14","first_seen":"2025-08-21T01:00:13.72815Z","last_seen":"2026-07-12T21:02:12.703589Z","times_seen":15,"resource_available":true,"data":null}},"time_used":5103,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5103,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"refund-vertex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"refund-vertex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"refund-vertex.com/cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js","fqdn":"refund-vertex.com","domain":"refund-vertex.com","tld":"com"},"ip":{"addr":"104.21.18.129","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://refund-vertex.com/","date":"2026-07-12T21:01:25.399Z","timestamp":1783890085399,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"refund-vertex.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 02 Jul 2026 10:20:14 GMT","end":"Wed, 30 Sep 2026 11:18:49 GMT"},"fingerprint":{"sha1":"32:ED:60:EF:39:C7:37:B9:BB:20:CC:D9:A8:6F:D0:BF:55:E9:09:CA","sha256":"C9:C2:B4:C7:E6:CA:CC:33:A4:FF:64:2A:D2:E4:C0:97:E1:F2:EB:D6:D7:1C:F4:66:6B:5E:AB:51:40:FE:D1:6B"}}},"request":{"raw":"GET /cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js HTTP/1.1\r\nHost: refund-vertex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://refund-vertex.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: application/javascript\r\nexpires: Tue, 14 Jul 2026 21:01:25 GMT\r\ncache-control: public\r\nvary: accept-encoding\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=JOF3MnbqgIAlNlgwqwdRIxC4NuR5SDgyehExf4yLZ314pjhAGNSTBA1DplH7uPTArTnoymweM7XATJNkQK%2FmAW79Sdp9ZNfo8Odb3l%2FF%2FgB4dbzr84jRm%2B9cvoBjvjze2Njhpg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: zstd\r\ndate: Sun, 12 Jul 2026 21:01:25 GMT\r\nserver: cloudflare\r\ncf-ray: a1a2fba9ba45712d-OSL\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1239,"size_decoded":1298,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (1238)","md5":"9e8f56e8e1806253ba01a95cfc3d392c","sha1":"a8af90d7482e1e99d03de6bf88fed2315c5dd728","sha256":"2595496fe48df6fcf9b1bc57c29a744c121eb4dd11566466bc13d2e52e6bbcc8","sha512":"63f0f6f94fbabadc3f774ccaa6a401696e8a7651a074bc077d214f91da080b36714fd799eb40fed64154972008e34fc733d6ee314ac675727b37b58ffbebebee","ssdeep":"","tlshash":"6021d5743a18107e226a0133e56f66cee1f23715fd17e440408ad89566e4fe5063fed9","first_seen":"2023-03-07T01:02:00Z","last_seen":"2026-07-19T00:20:11.645681Z","times_seen":400224,"resource_available":true,"data":null}},"time_used":3,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":3,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"refund-vertex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"refund-vertex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"refund-vertex.com/wp-content/plugins/classic-elementor-addons-pro/assets/js/cea-row-sticky.js?ver=1.0","fqdn":"refund-vertex.com","domain":"refund-vertex.com","tld":"com"},"ip":{"addr":"104.21.18.129","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://refund-vertex.com/","date":"2026-07-12T21:01:25.411Z","timestamp":1783890085411,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"refund-vertex.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 02 Jul 2026 10:20:14 GMT","end":"Wed, 30 Sep 2026 11:18:49 GMT"},"fingerprint":{"sha1":"32:ED:60:EF:39:C7:37:B9:BB:20:CC:D9:A8:6F:D0:BF:55:E9:09:CA","sha256":"C9:C2:B4:C7:E6:CA:CC:33:A4:FF:64:2A:D2:E4:C0:97:E1:F2:EB:D6:D7:1C:F4:66:6B:5E:AB:51:40:FE:D1:6B"}}},"request":{"raw":"GET /wp-content/plugins/classic-elementor-addons-pro/assets/js/cea-row-sticky.js?ver=1.0 HTTP/1.1\r\nHost: refund-vertex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://refund-vertex.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sun, 12 Jul 2026 21:01:25 GMT\r\nserver: cloudflare\r\nlast-modified: Wed, 01 Jul 2026 09:47:51 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncontent-encoding: zstd\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=BCVQ9sd5GHbI%2B8hMp9JbIE3aGQ2OrRGmMK16G99gWUIMyGoFHezBTUl8%2FJlxz17ciNxUu1HtU0zzlM%2FllROkdc0iDWRYuXdepIAWWQALrFj607e8777FE%2BVxut0yXVykzG0tpw%3D%3D\"}]}\r\ncontent-type: text/javascript\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\ncf-ray: a1a2fba9da4b712d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":19184,"size_decoded":4800,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text","md5":"0ddc04eb637bcdd3ec6a9c4bea740640","sha1":"c1f0d560f9937c3b3d07b8c281f15385f4f180e4","sha256":"c4a5ac92050dd8c484c548a06a0d17c25e290d990eb2d8a129dd319422ac755d","sha512":"d442bdf5e654f326c43006b4e6246530b7621d5205b01511c84dc6f20bdadac8c42d70ccff9152f8645c55d15c4d46ade241d5d02de7e26cb3553cab6e937989","ssdeep":"192:Ganu/laNS01AHVFg14DSg4jnzaccJ8dPnwV8GcsTqamCg:3Y0JESggn2biEBcsTqrt","tlshash":"b582d00b5ae2313058a7b39e47dfe0689239952b25cade143f4d87c81f41639d5e2fd8","first_seen":"2025-09-28T23:25:19.169089Z","last_seen":"2026-07-12T21:02:12.704948Z","times_seen":17,"resource_available":true,"data":null}},"time_used":44,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":44,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"refund-vertex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"refund-vertex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"refund-vertex.com/wp-includes/js/dist/i18n.min.js?ver=781d11515ad3d91786ec","fqdn":"refund-vertex.com","domain":"refund-vertex.com","tld":"com"},"ip":{"addr":"104.21.18.129","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://refund-vertex.com/","date":"2026-07-12T21:01:25.420Z","timestamp":1783890085420,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"refund-vertex.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 02 Jul 2026 10:20:14 GMT","end":"Wed, 30 Sep 2026 11:18:49 GMT"},"fingerprint":{"sha1":"32:ED:60:EF:39:C7:37:B9:BB:20:CC:D9:A8:6F:D0:BF:55:E9:09:CA","sha256":"C9:C2:B4:C7:E6:CA:CC:33:A4:FF:64:2A:D2:E4:C0:97:E1:F2:EB:D6:D7:1C:F4:66:6B:5E:AB:51:40:FE:D1:6B"}}},"request":{"raw":"GET /wp-includes/js/dist/i18n.min.js?ver=781d11515ad3d91786ec HTTP/1.1\r\nHost: refund-vertex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://refund-vertex.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sun, 12 Jul 2026 21:01:30 GMT\r\nserver: cloudflare\r\nlast-modified: Fri, 10 Jul 2026 04:11:54 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncontent-encoding: zstd\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=bh68y1fatHnGbBtDO2OkZ6d19FwqApWOYUcvaq8Beu6Th5vWSYgUbeAv5kjOLjq6k2T7gHyMUAJCef6UiQQ9v5K5N3Y%2FN5GvwXv%2BVX%2BRcaAovYsqzPsb1niLtNKlypmJxBKAxA%3D%3D\"}]}\r\ncontent-type: text/javascript\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\ncf-ray: a1a2fba9fa51712d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5732,"size_decoded":3215,"mime_type":"text/javascript","magic":"data","md5":"12ebec1b36678eb1da4412af6c65751a","sha1":"4cb5d87353d9a06fde067063787a4beed692ba77","sha256":"558ae0ec83cc88de0929fde86b87c231246aafa9c961ebffb3257b05f62ca5cf","sha512":"a1bbd93277a59086bf27da7dcc60434b717ac521bce0618aef7c914789497a22cf56441a7f300f1bb7a6de56ca624226883d048f6eadbcc049dc717338189bb6","ssdeep":"96:IE7/RPgrMs4WLJOmlWS33c0xyE2B1596NiH826V0NG7CXMGOyd/sEomkKvYCGaMe:3hgws4WTBYNB1C9aNwAMPyd0R3SGaMSL","tlshash":"fdc1a7c975daf056235910a594afb005e134be2870debc00aae0c4957eb44cdb2b7fba","first_seen":"2026-07-02T22:01:42.315643Z","last_seen":"2026-07-19T00:19:49.910001Z","times_seen":5544,"resource_available":true,"data":null}},"time_used":4997,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":4997,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"refund-vertex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"refund-vertex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"refund-vertex.com/wp-content/plugins/cool-formkit-for-elementor-forms/assets/js/date-format.js?ver=1.4.3","fqdn":"refund-vertex.com","domain":"refund-vertex.com","tld":"com"},"ip":{"addr":"104.21.18.129","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://refund-vertex.com/","date":"2026-07-12T21:01:25.427Z","timestamp":1783890085427,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"refund-vertex.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 02 Jul 2026 10:20:14 GMT","end":"Wed, 30 Sep 2026 11:18:49 GMT"},"fingerprint":{"sha1":"32:ED:60:EF:39:C7:37:B9:BB:20:CC:D9:A8:6F:D0:BF:55:E9:09:CA","sha256":"C9:C2:B4:C7:E6:CA:CC:33:A4:FF:64:2A:D2:E4:C0:97:E1:F2:EB:D6:D7:1C:F4:66:6B:5E:AB:51:40:FE:D1:6B"}}},"request":{"raw":"GET /wp-content/plugins/cool-formkit-for-elementor-forms/assets/js/date-format.js?ver=1.4.3 HTTP/1.1\r\nHost: refund-vertex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://refund-vertex.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sun, 12 Jul 2026 21:01:30 GMT\r\nserver: cloudflare\r\nlast-modified: Thu, 02 Jul 2026 06:40:31 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncontent-encoding: zstd\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=b14AI1vmhZN%2Fx3fmE1YznMessNYq%2BquJPbxs5jOf%2FeAHNYkyUVgsSnbmdLEZwI8fkcSTm8yEtmljG3hc59HWwyjQGisHJG5%2FjiaC8ZebZew2pI2NCYtFgQJNA7sMAnZUY3s9hQ%3D%3D\"}]}\r\ncontent-type: text/javascript\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\ncf-ray: a1a2fba9fa52712d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1602,"size_decoded":1313,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with CRLF line terminators","md5":"b73fb6c5d190a6cb147b40177a1bc8ee","sha1":"62a43022a75940987b9c09069119e585bfe5b7c6","sha256":"29c2b344c55384bd2736d0b7bcfe2ca7e563db9a0eb9b7750e34176a9fe1d214","sha512":"ecdc19cba5c07bad688ae84ae93874f47698cb8c1aae629685dbb3b438379944dc87f1e4da921f5d925150a0603a2c022ad95352357778e714d83efcc6e234e1","ssdeep":"","tlshash":"dc317908e49b8c15c93745284be7201cdb54e23b15c452c7fa5d67211fb3e18aaa9f8e","first_seen":"2025-10-08T03:30:06.577762Z","last_seen":"2026-07-12T21:02:12.70697Z","times_seen":48,"resource_available":true,"data":null}},"time_used":4990,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":4990,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"refund-vertex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"refund-vertex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"refund-vertex.com/wp-content/plugins/elementor/assets/css/widget-heading.min.css?ver=4.1.4","fqdn":"refund-vertex.com","domain":"refund-vertex.com","tld":"com"},"ip":{"addr":"104.21.18.129","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://refund-vertex.com/","date":"2026-07-12T21:01:25.132Z","timestamp":1783890085132,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"refund-vertex.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 02 Jul 2026 10:20:14 GMT","end":"Wed, 30 Sep 2026 11:18:49 GMT"},"fingerprint":{"sha1":"32:ED:60:EF:39:C7:37:B9:BB:20:CC:D9:A8:6F:D0:BF:55:E9:09:CA","sha256":"C9:C2:B4:C7:E6:CA:CC:33:A4:FF:64:2A:D2:E4:C0:97:E1:F2:EB:D6:D7:1C:F4:66:6B:5E:AB:51:40:FE:D1:6B"}}},"request":{"raw":"GET /wp-content/plugins/elementor/assets/css/widget-heading.min.css?ver=4.1.4 HTTP/1.1\r\nHost: refund-vertex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://refund-vertex.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sun, 12 Jul 2026 21:01:28 GMT\r\nserver: cloudflare\r\nlast-modified: Tue, 30 Jun 2026 16:15:02 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\ncontent-encoding: zstd\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=kEA6fc5CRIfqdMKKnXge9e0IST0vXWMufb3qnYJQx2ftNpOx%2B9Vkd5LFpwiQeqZiDnCN1qAgTXuM3foIR0DuKBAxGUhpSlDYeMVAFcH2qDgYSgeP83UFfvtBHMmbSVneGWZOhg%3D%3D\"}]}\r\ncontent-type: text/css\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\ncf-ray: a1a2fba81a1b712d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":560,"size_decoded":807,"mime_type":"text/css","magic":"ASCII text, with very long lines (560), with no line terminators","md5":"c3be9e612baf8fc4af612de8af4c0864","sha1":"f6b1366e30a459deefca035c5563f1c929c8ed10","sha256":"f68e889145cb0e47b7b190b2fdf087a9213a264ad33951512880c9f8bb6d0cd8","sha512":"aee455fe10d8126deb4d1015b6b4450ace4851e5b32890505af619f7863469c56b788b5d822849986759aa85efde260da77ed12bbb236ce2bf6629bf6759f4ca","ssdeep":"","tlshash":"f2f0c0237e4b94aa383f1d571083337c74944ec893a0a8d8e9fa91435cf4cb27330622","first_seen":"2023-10-14T23:00:09Z","last_seen":"2026-07-19T00:13:06.866686Z","times_seen":115273,"resource_available":false,"data":null}},"time_used":2968,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2968,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"refund-vertex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"refund-vertex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Roboto:wght@400;500\u0026family=Marcellus:wght@400\u0026family=DM+Sans:wght@700\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.42","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://refund-vertex.com/","date":"2026-07-12T21:01:25.404Z","timestamp":1783890085404,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 22 Jun 2026 08:37:24 GMT","end":"Mon, 14 Sep 2026 08:37:23 GMT"},"fingerprint":{"sha1":"85:D0:EC:C2:01:33:25:23:96:FB:2B:54:90:54:84:07:0A:49:1F:03","sha256":"9D:7C:1C:9C:6A:25:1E:17:E0:DC:FD:42:95:CA:47:3D:C1:9C:20:FB:22:47:02:E3:27:EC:7C:62:03:30:83:BA"}}},"request":{"raw":"GET /css2?family=Roboto:wght@400;500\u0026family=Marcellus:wght@400\u0026family=DM+Sans:wght@700\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://refund-vertex.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Sun, 12 Jul 2026 21:01:25 GMT\r\ndate: Sun, 12 Jul 2026 21:01:25 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":12926,"size_decoded":2444,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (1572)","md5":"4798648e19bfbfee7881c7b65a7dc10a","sha1":"5185832d88b3e3cfa9ccd0a34735e5edb4cb0bd6","sha256":"30d88c89450ea3d270fd21d172e3c127a2d2455ee398885a280b5667e7523707","sha512":"0bd1222b10be2e0a2cd21a78c44b0570a202920ed779caffa6fadc72cad3524aa972ab5877d6e084988d029b098a9cbc469e3b018f8af9cae1c0b8ce71f92d69","ssdeep":"384:g9fM919W969yh9/qY4X9N9t9i9fD9O9d9B9ya9/qY4Q9G9m9q:gyjooYhREHPM5svvYaR7AI8","tlshash":"37421ca1041744009b834cd223cebf35fe1f92117142d0b9abfd9b6baddbca6526935d","first_seen":"2026-07-11T07:18:49.086224Z","last_seen":"2026-07-12T21:02:12.708645Z","times_seen":2,"resource_available":false,"data":null}},"time_used":107,"timings":{"blocked":-1,"dns":0,"connect":26,"send":0,"wait":51,"receive":0,"ssl":29},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vertex-legal.org/wp-content/uploads/2023/03/company_ceo.png","fqdn":"vertex-legal.org","domain":"vertex-legal.org","tld":"org"},"ip":{"addr":"172.67.144.12","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://refund-vertex.com/","date":"2026-07-12T21:01:34.335Z","timestamp":1783890094335,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vertex-legal.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 30 Jun 2026 13:44:58 GMT","end":"Mon, 28 Sep 2026 14:43:29 GMT"},"fingerprint":{"sha1":"4A:1A:1E:6F:F9:02:AD:DF:24:95:C3:D8:C0:17:35:DE:BC:CC:5C:B8","sha256":"52:9D:7E:11:74:8D:04:4F:63:5C:A2:08:18:17:46:61:5A:70:6D:A9:F2:00:79:CC:A8:3B:F5:4C:BA:EE:A0:63"}}},"request":{"raw":"GET /wp-content/uploads/2023/03/company_ceo.png HTTP/1.1\r\nHost: vertex-legal.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://refund-vertex.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://refund-vertex.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sun, 12 Jul 2026 21:01:34 GMT\r\nserver: cloudflare\r\nlast-modified: Wed, 01 Jul 2026 12:09:12 GMT\r\naccept-ranges: bytes\r\npriority: u=5,i\r\nserver-timing: cfExtPri\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=bRhGmlrSpxJEIxshZ4jMMgJWMhaG5fekOpeTXXIBjFtynRF4y%2BKijhJhXOJO%2BCAMBENhXDFxScSBfH8Sdv0TT06xbTUU1KAur5xxZ8gERFCf8XY32tMB9HP6zvOaTFUcfuax\"}]}\r\ncontent-type: image/png\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1a2fbe19dac23eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 111581\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7947,"size_decoded":8610,"mime_type":"image/png","magic":"PNG image data, 440 x 707, 8-bit colormap, non-interlaced","md5":"9f084e2401d42b99cccb9c078297755f","sha1":"6821e16a08536d902478b55d44a6f711bc9554fa","sha256":"aae97ff00886066e95ca03f4c4ddda4326f95556ee99a636c0b85e12adaaae0f","sha512":"0b6bd65e392822e0f5a0bf187a540eac9613e562ed01818eda6b753d3a485c68766a3cdc6aed7dc2e95d5b622749e5c4646f4959fd91a4cec1dd79484bfa4e30","ssdeep":"192:/041jk7gY7sy7OkPmF1Kuz1k/6zt6QI3NWtbd976y:/TA7HsL1dxk/6x6QI3NIJ","tlshash":"99f1be473e14d3e31b656c44280534a0a0f62c9ca6c27e4bb3f3b19a44fd2d796906e9","first_seen":"2026-07-11T07:18:49.090201Z","last_seen":"2026-07-12T21:02:12.710944Z","times_seen":2,"resource_available":false,"data":null}},"time_used":136,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":114,"receive":22,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"refund-vertex.com/wp-content/plugins/cool-formkit-for-elementor-forms/assets/flags/no.svg","fqdn":"refund-vertex.com","domain":"refund-vertex.com","tld":"com"},"ip":{"addr":"104.21.18.129","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://refund-vertex.com/","date":"2026-07-12T21:01:35.724Z","timestamp":1783890095724,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"refund-vertex.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 02 Jul 2026 10:20:14 GMT","end":"Wed, 30 Sep 2026 11:18:49 GMT"},"fingerprint":{"sha1":"32:ED:60:EF:39:C7:37:B9:BB:20:CC:D9:A8:6F:D0:BF:55:E9:09:CA","sha256":"C9:C2:B4:C7:E6:CA:CC:33:A4:FF:64:2A:D2:E4:C0:97:E1:F2:EB:D6:D7:1C:F4:66:6B:5E:AB:51:40:FE:D1:6B"}}},"request":{"raw":"GET /wp-content/plugins/cool-formkit-for-elementor-forms/assets/flags/no.svg HTTP/1.1\r\nHost: refund-vertex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://refund-vertex.com/\r\nCookie: _gcl_au=1.1.983493188.1783890092\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sun, 12 Jul 2026 21:01:35 GMT\r\nserver: cloudflare\r\nlast-modified: Thu, 02 Jul 2026 06:40:31 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i\r\ncontent-encoding: zstd\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=bisA69KgDmOCKWNy9rAuVJb7M5MdaajaoRX52Y6Mr2DCpgzpIKNRfi4IchLhCRSdOF%2B3vT%2FcCt5zHfW4KU6KZc1iX0KxKatLL1C9%2B1wVMBugNiDX8ky3t8TLcefqglYJvTIfhg%3D%3D\"}]}\r\ncontent-type: image/svg+xml\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\ncf-ray: a1a2fbea4d9c712d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":325,"size_decoded":841,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"9fdefcb10c801fb03318fafc3c2fbdbe","sha1":"284f3581cf2c5ec6de754b80ff07606c61517879","sha256":"842512a50a37e4c35d225719678fbfae31828cc58225b9a7e41e2398fec20447","sha512":"94ece0b4192821f4c8e7122c53bd9258012163960c219f2e0ec9c4002683fe2e24eb192629fa5a2f0c1f01deb9eb6c36f8088cdc62de2e4ffe3385a749e976ea","ssdeep":"","tlshash":"9de0cdec516db8004b3483103f2d3de388a5b0c9e09506fbfc50212b209f6968dc3d51","first_seen":"2023-07-22T08:22:41Z","last_seen":"2026-07-18T23:06:38.318912Z","times_seen":435,"resource_available":false,"data":null}},"time_used":41,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":41,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"refund-vertex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"refund-vertex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"refund-vertex.com/wp-content/plugins/elementor/assets/js/frontend-modules.min.js?ver=4.1.4","fqdn":"refund-vertex.com","domain":"refund-vertex.com","tld":"com"},"ip":{"addr":"104.21.18.129","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://refund-vertex.com/","date":"2026-07-12T21:01:25.435Z","timestamp":1783890085435,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"refund-vertex.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 02 Jul 2026 10:20:14 GMT","end":"Wed, 30 Sep 2026 11:18:49 GMT"},"fingerprint":{"sha1":"32:ED:60:EF:39:C7:37:B9:BB:20:CC:D9:A8:6F:D0:BF:55:E9:09:CA","sha256":"C9:C2:B4:C7:E6:CA:CC:33:A4:FF:64:2A:D2:E4:C0:97:E1:F2:EB:D6:D7:1C:F4:66:6B:5E:AB:51:40:FE:D1:6B"}}},"request":{"raw":"GET /wp-content/plugins/elementor/assets/js/frontend-modules.min.js?ver=4.1.4 HTTP/1.1\r\nHost: refund-vertex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://refund-vertex.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sun, 12 Jul 2026 21:01:30 GMT\r\nserver: cloudflare\r\nlast-modified: Tue, 30 Jun 2026 16:15:02 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncontent-encoding: zstd\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=bQ%2Fsdkvwv0ptyGDsLa2VexifV9tHqYUv2P3D%2BRPPAw5dgFLBzyf7LZcq8Sr7eQsYupiY11%2BDANSL7OQm4RhLmG74xK32GDcyOdlHVfkfCqYBYEtfueBcHKoNdGlbkjcHGMXE8Q%3D%3D\"}]}\r\ncontent-type: text/javascript\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\ncf-ray: a1a2fba9fa58712d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":50602,"size_decoded":18048,"mime_type":"text/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (50601), with no line terminators","md5":"a3543601e9c09c9b8554ec6f6c8a2174","sha1":"8b05f21356996037f9d17fd012f43393238ac53c","sha256":"c66f47147d5fe3cceeaa47a93ff7440a328f859b049deec2f9d8f414e9137474","sha512":"3b5d80182a9b187171ceb59b4d384ad6b5e59dc0f5890cbdc0fb01109423a3ed847cfa88d67a0db8c84ed163985fb035b069f0530cf9b7a579c4ed47e67f56e9","ssdeep":"1536:yCyQ5RSSYeAjA6c9CST+I83Fy0K4cR8+yhiA2pXSz2faNQAzeLHeBHmjkVziNT:s+uhIAu","tlshash":"7633d9853652f4b70beb45da902f440af25718a8a40df4d5bfe9dce194b0d8e133ab78","first_seen":"2026-03-23T23:03:30.149895Z","last_seen":"2026-07-19T00:13:06.861672Z","times_seen":50420,"resource_available":true,"data":null}},"time_used":5029,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":4987,"receive":42,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"refund-vertex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"refund-vertex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"refund-vertex.com/wp-content/plugins/classic-elementor-addons-pro/assets/js/tilt.jquery.js?ver=1.2.1","fqdn":"refund-vertex.com","domain":"refund-vertex.com","tld":"com"},"ip":{"addr":"104.21.18.129","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://refund-vertex.com/","date":"2026-07-12T21:01:25.440Z","timestamp":1783890085440,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"refund-vertex.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 02 Jul 2026 10:20:14 GMT","end":"Wed, 30 Sep 2026 11:18:49 GMT"},"fingerprint":{"sha1":"32:ED:60:EF:39:C7:37:B9:BB:20:CC:D9:A8:6F:D0:BF:55:E9:09:CA","sha256":"C9:C2:B4:C7:E6:CA:CC:33:A4:FF:64:2A:D2:E4:C0:97:E1:F2:EB:D6:D7:1C:F4:66:6B:5E:AB:51:40:FE:D1:6B"}}},"request":{"raw":"GET /wp-content/plugins/classic-elementor-addons-pro/assets/js/tilt.jquery.js?ver=1.2.1 HTTP/1.1\r\nHost: refund-vertex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://refund-vertex.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sun, 12 Jul 2026 21:01:30 GMT\r\nserver: cloudflare\r\nlast-modified: Wed, 01 Jul 2026 09:47:51 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncontent-encoding: zstd\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=aW1PweWycX8xptSKaydhS5oov0qb5caKTwA8JtHhyTlwMJvbwbmfsSR2v%2BJPBt40etT%2FquMwOBnEavBQGazjG7%2FFShAKDF%2BwsMJo0YgHlb39j4LN6klQV0SFe3hH7NAvXEEe0w%3D%3D\"}]}\r\ncontent-type: text/javascript\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\ncf-ray: a1a2fbaa0a5b712d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":12472,"size_decoded":4115,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (354)","md5":"26dc1034e9612a88d30f914bb840db79","sha1":"669afb292b2f712ca67dd87e9acb8c5664f16254","sha256":"aa381ef1a5f4404608efb47d3d8b4ceb2d4773e0e99ca1e0e60f31dc7fd9cdea","sha512":"fcb913e1a0eb42c364ba927f7b0a91f15c669ed22a147deee1dba90114a5d0e7d68758189ad2f0b51b47a6387b8dfde2c5b753e6a45e56870e531352014a5acb","ssdeep":"192:QnXzpEnDPEAkCerpc8HnlI7a7Ymu+z3+42Xo1g62AWJtbiFXtKWmZ3HEWx6w:QX4DsAA/H8mziXCg62AWHbmY","tlshash":"c5420e4939f6201a58ab632edbcf5144b279c00b4406e5683c9c4be89fd26a807b5ffd","first_seen":"2025-01-02T18:25:48.078361Z","last_seen":"2026-07-12T21:02:12.715737Z","times_seen":16,"resource_available":true,"data":null}},"time_used":5147,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5117,"receive":30,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"refund-vertex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"refund-vertex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"refund-vertex.com/wp-content/uploads/2019/04/team-3-1.jpg","fqdn":"refund-vertex.com","domain":"refund-vertex.com","tld":"com"},"ip":{"addr":"104.21.18.129","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://refund-vertex.com/","date":"2026-07-12T21:01:25.503Z","timestamp":1783890085503,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"refund-vertex.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 02 Jul 2026 10:20:14 GMT","end":"Wed, 30 Sep 2026 11:18:49 GMT"},"fingerprint":{"sha1":"32:ED:60:EF:39:C7:37:B9:BB:20:CC:D9:A8:6F:D0:BF:55:E9:09:CA","sha256":"C9:C2:B4:C7:E6:CA:CC:33:A4:FF:64:2A:D2:E4:C0:97:E1:F2:EB:D6:D7:1C:F4:66:6B:5E:AB:51:40:FE:D1:6B"}}},"request":{"raw":"GET /wp-content/uploads/2019/04/team-3-1.jpg HTTP/1.1\r\nHost: refund-vertex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://refund-vertex.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sun, 12 Jul 2026 21:01:31 GMT\r\nserver: cloudflare\r\nlast-modified: Wed, 01 Jul 2026 12:10:09 GMT\r\naccept-ranges: bytes\r\npriority: u=5,i\r\nserver-timing: cfExtPri\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=PeXJKUiwNooRHuLMGmAOuC%2FmRSaT6a7yFL%2Bvj8u7aixLDQzHJHOzwgL6hf2QxPjZUVjj8EJbhCUYb7Y3YNkaipR%2BNI3ddTY77%2B9qdA3%2FXC2%2BrbFPBMpjCgrpVF5iubYyOjvT7w%3D%3D\"}]}\r\ncontent-type: image/jpeg\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1a2fbaa6a74712d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 42416\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":42416,"size_decoded":43095,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1000x1000, components 3","md5":"97ffc9d3660f04c7b7e84d379cfa0382","sha1":"cbfbe48b0ca2aba158bea9fac2fd1a759f32e032","sha256":"88f4600fb11d8a27163582af9d6db4c2166e908f0f484b52db165f7c3c95f3e9","sha512":"5e225152d22df7b976f0b5eb9051534d5903065a328c7faa5f07479930de9f5e19e3eca917742bc9307f499a923ba3a2b0fbb9f73f547231f0ad6a17bb283750","ssdeep":"768:mvJkjSuwPcuBoUXgISo7Leh3QGfqhokE7qb0IprTxY6/ikwX:kkXwkuBXhLehAGQ0IpHqhP","tlshash":"d713d02bc7848413d2ef437259ef57303717a570a0ba1b136bf608253d5b7166e9fa81","first_seen":"2026-07-11T07:18:49.199894Z","last_seen":"2026-07-12T21:02:12.716548Z","times_seen":2,"resource_available":false,"data":null}},"time_used":6379,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6328,"receive":51,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"refund-vertex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"refund-vertex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/dmsans/v17/rP2Yp2ywxg089UriI5-g4vlH9VoD8Cmcqbu0-K6z8GXhnU0.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://refund-vertex.com/","date":"2026-07-12T21:01:30.471Z","timestamp":1783890090471,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 22 Jun 2026 08:37:23 GMT","end":"Mon, 14 Sep 2026 08:37:22 GMT"},"fingerprint":{"sha1":"CD:5B:53:23:61:72:75:37:AD:E9:F1:74:B2:D2:EE:09:81:05:55:E1","sha256":"9F:07:21:2D:14:EB:C5:C0:D4:2B:42:E4:55:80:7A:BB:AF:47:A8:BC:0C:5E:05:F3:2A:2B:1F:2A:78:4D:FF:D7"}}},"request":{"raw":"GET /s/dmsans/v17/rP2Yp2ywxg089UriI5-g4vlH9VoD8Cmcqbu0-K6z8GXhnU0.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://refund-vertex.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 36932\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 09 Jul 2026 04:44:35 GMT\r\nexpires: Fri, 09 Jul 2027 04:44:35 GMT\r\ncache-control: public, max-age=31536000\r\nage: 317815\r\nlast-modified: Wed, 10 Sep 2025 16:31:03 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":36932,"size_decoded":37745,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 36932, version 1.0","md5":"7c87a648293fbb5b2924aafaa59e8aea","sha1":"c57593e0adc4cf99dd9e67cb782242220a061a9d","sha256":"9fea608a947e67020c33cad9a6fe3d60c54119dfb8cff87768a8117a15ed7543","sha512":"764ced325a768dca84e1fb0cc458818239ce379dbcbdb324ee8849bbe15f54e3f0254ae6e52ee5a92741840637b4f9885d246a0978af23176b3acfe5b9cec23f","ssdeep":"768:mMQPOAQQKW6GccoXQ+OGpHNzXgtDM0SVu7P3nqtPl9Bf2csDpHUjbYE8j2:mMQz4W5og+tpH6tDJku73EPlPOcs5U/l","tlshash":"c0f2f23e7ea5691487c2b0be506b00935344c9bd37c18121bbb953f44ea67addc5d63c","first_seen":"2025-09-11T17:08:25.889763Z","last_seen":"2026-07-19T00:19:55.55867Z","times_seen":30334,"resource_available":false,"data":null}},"time_used":87,"timings":{"blocked":-1,"dns":0,"connect":33,"send":0,"wait":19,"receive":35,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"refund-vertex.com/wp-content/uploads/2023/02/slide-leaf-img-1.png","fqdn":"refund-vertex.com","domain":"refund-vertex.com","tld":"com"},"ip":{"addr":"104.21.18.129","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://refund-vertex.com/","date":"2026-07-12T21:01:30.503Z","timestamp":1783890090503,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"refund-vertex.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 02 Jul 2026 10:20:14 GMT","end":"Wed, 30 Sep 2026 11:18:49 GMT"},"fingerprint":{"sha1":"32:ED:60:EF:39:C7:37:B9:BB:20:CC:D9:A8:6F:D0:BF:55:E9:09:CA","sha256":"C9:C2:B4:C7:E6:CA:CC:33:A4:FF:64:2A:D2:E4:C0:97:E1:F2:EB:D6:D7:1C:F4:66:6B:5E:AB:51:40:FE:D1:6B"}}},"request":{"raw":"GET /wp-content/uploads/2023/02/slide-leaf-img-1.png HTTP/1.1\r\nHost: refund-vertex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://refund-vertex.com/wp-content/uploads/elementor/css/post-36316.css?ver=1783699951\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sun, 12 Jul 2026 21:01:30 GMT\r\nserver: cloudflare\r\nlast-modified: Wed, 01 Jul 2026 12:07:35 GMT\r\naccept-ranges: bytes\r\npriority: u=4,i\r\nserver-timing: cfExtPri\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=JsnMGcmcWSkSOtKPDPjms%2FWfL5JcsdAMvqt%2F4QGHMpXrVVqCzRHH8NgfnqTxRu8o3UwWKBeHEQpiQ%2BuDiJZjN%2B7ShW2TqoTXNz4Wi7%2BTkHoxkYCiDn10fNXkKdL1XxCAPox0Vg%3D%3D\"}]}\r\ncontent-type: image/png\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1a2fbc9abee712d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 10035\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10035,"size_decoded":10711,"mime_type":"image/png","magic":"PNG image data, 192 x 291, 8-bit/color RGBA, non-interlaced","md5":"b431547fb23f63006be458b13bc1843f","sha1":"8864b3a0e1fc28705b38459c1a501256a0da35b1","sha256":"4064e46afa8daf97a34fa05e8d85e0611ce35dd366eb6315aa6f7b06835deeff","sha512":"753eef2416958fb41022c7f9dd06c29d6f55262b70f3dc9be0526ae77d81c9b32c0e466b03afbfc18e1cc9052bdaba54fe68e83026b7863ba466963f37e4926f","ssdeep":"192:HhyOuULvQDPlBlIoYL+LpKtI8diq30pSkNTwzrfcN8/cH2:HcOuUUD9sJiLCPdi0zTSA","tlshash":"0322be09912360e3e4fc4c8432d1d4324283d30aca56e519ee2da999a579bfba7150c6","first_seen":"2025-07-07T18:12:14.016476Z","last_seen":"2026-07-12T21:02:12.719002Z","times_seen":5,"resource_available":false,"data":null}},"time_used":42,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":42,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"refund-vertex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"refund-vertex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"refund-vertex.com/wp-content/plugins/revslider/public/css/sr7.css?ver=6.7.57","fqdn":"refund-vertex.com","domain":"refund-vertex.com","tld":"com"},"ip":{"addr":"104.21.18.129","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://refund-vertex.com/","date":"2026-07-12T21:01:25.115Z","timestamp":1783890085115,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"refund-vertex.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 02 Jul 2026 10:20:14 GMT","end":"Wed, 30 Sep 2026 11:18:49 GMT"},"fingerprint":{"sha1":"32:ED:60:EF:39:C7:37:B9:BB:20:CC:D9:A8:6F:D0:BF:55:E9:09:CA","sha256":"C9:C2:B4:C7:E6:CA:CC:33:A4:FF:64:2A:D2:E4:C0:97:E1:F2:EB:D6:D7:1C:F4:66:6B:5E:AB:51:40:FE:D1:6B"}}},"request":{"raw":"GET /wp-content/plugins/revslider/public/css/sr7.css?ver=6.7.57 HTTP/1.1\r\nHost: refund-vertex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://refund-vertex.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sun, 12 Jul 2026 21:01:26 GMT\r\nserver: cloudflare\r\nlast-modified: Wed, 01 Jul 2026 09:48:22 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\ncontent-encoding: zstd\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Ak38%2FAN9yre0Z1YkKsxGBT2KAGXZA17ZoJdiXGmcgdn1OFmt6aSQRSUbUUSYZ8hTGmdYs2kvfjCawLkp5aqCSKysN69u2H6aMX%2B8lBH521CUJFxzQ1csrKtoVFgZFhiOIyBx%2FA%3D%3D\"}]}\r\ncontent-type: text/css\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\ncf-ray: a1a2fba7fa13712d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4367,"size_decoded":2318,"mime_type":"text/css","magic":"ASCII text, with very long lines (3920)","md5":"00647ee642b0cb54c4e1409d61770891","sha1":"eb8226e397c431f98b2cbe9f3ee2e5189396cce2","sha256":"5bca839f5ee90c2a77e95d73bbae019bdf1ca08cbb71f7b2edff227d4f6ee0b9","sha512":"aff125ee77fb157c0f9c5cabf80e8c67639b1eaf5a9406f84335ed4372589dea245cce10bd0691b3c8ccb285f91f13f76fbc66e9734c9b921f579a8482dfa2d2","ssdeep":"96:90aAsiIhyA7Fe90cy6jHV3peBCYI+Hko/RiJt:9PAdY51cp32AJt","tlshash":"1691863616a06074842bb2056ce0776db76dc49aebb31b8df68ff22c43ce406245c6c9","first_seen":"2025-07-09T09:44:49.359569Z","last_seen":"2026-07-19T00:13:19.714453Z","times_seen":7789,"resource_available":false,"data":null}},"time_used":939,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":939,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"refund-vertex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"refund-vertex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css?family=Marcellus:100,100italic,200,200italic,300,300italic,400,400italic,500,500italic,600,600italic,700,700italic,800,800italic,900,900italic\u0026display=swap\u0026subset=cyrillic","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.42","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://refund-vertex.com/","date":"2026-07-12T21:01:25.379Z","timestamp":1783890085379,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 22 Jun 2026 08:37:24 GMT","end":"Mon, 14 Sep 2026 08:37:23 GMT"},"fingerprint":{"sha1":"85:D0:EC:C2:01:33:25:23:96:FB:2B:54:90:54:84:07:0A:49:1F:03","sha256":"9D:7C:1C:9C:6A:25:1E:17:E0:DC:FD:42:95:CA:47:3D:C1:9C:20:FB:22:47:02:E3:27:EC:7C:62:03:30:83:BA"}}},"request":{"raw":"GET /css?family=Marcellus:100,100italic,200,200italic,300,300italic,400,400italic,500,500italic,600,600italic,700,700italic,800,800italic,900,900italic\u0026display=swap\u0026subset=cyrillic HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://refund-vertex.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Sun, 12 Jul 2026 21:01:25 GMT\r\ndate: Sun, 12 Jul 2026 21:01:25 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":851,"size_decoded":1070,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"61418fc1a3079809158f34187751caae","sha1":"993e902904b451f05b00452a3ea1243243ab8e87","sha256":"9a4fec59f09812e8a7ffd1516e7758036bca4ad74be88f32e689461244d77df4","sha512":"779bf2236e108f3cdcc9e35d1b18a666799f17847a3a8905396b4fb0807d1356bd2d154555fe3071d88d12bea080ebebe1634f4dbfaf754f3df7685d47b8e0b5","ssdeep":"","tlshash":"ce011282081b9450ff571dc052ce3d32ee1ea1952444d539affd28c4bc6ad1a536671d","first_seen":"2025-09-21T02:56:04.081811Z","last_seen":"2026-07-18T23:04:09.56208Z","times_seen":1012,"resource_available":false,"data":null}},"time_used":108,"timings":{"blocked":-1,"dns":0,"connect":15,"send":0,"wait":49,"receive":0,"ssl":42},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"refund-vertex.com/wp-content/uploads/2019/04/team-7-1.jpg","fqdn":"refund-vertex.com","domain":"refund-vertex.com","tld":"com"},"ip":{"addr":"104.21.18.129","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://refund-vertex.com/","date":"2026-07-12T21:01:25.505Z","timestamp":1783890085505,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"refund-vertex.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 02 Jul 2026 10:20:14 GMT","end":"Wed, 30 Sep 2026 11:18:49 GMT"},"fingerprint":{"sha1":"32:ED:60:EF:39:C7:37:B9:BB:20:CC:D9:A8:6F:D0:BF:55:E9:09:CA","sha256":"C9:C2:B4:C7:E6:CA:CC:33:A4:FF:64:2A:D2:E4:C0:97:E1:F2:EB:D6:D7:1C:F4:66:6B:5E:AB:51:40:FE:D1:6B"}}},"request":{"raw":"GET /wp-content/uploads/2019/04/team-7-1.jpg HTTP/1.1\r\nHost: refund-vertex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://refund-vertex.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sun, 12 Jul 2026 21:01:31 GMT\r\nserver: cloudflare\r\nlast-modified: Wed, 01 Jul 2026 12:10:09 GMT\r\naccept-ranges: bytes\r\npriority: u=5,i\r\nserver-timing: cfExtPri\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=bk0qnAvQuXlVRagWJ83DPVviolA6jQQRvpXYKz0MmQFJABfRlOuaKz8DrUXUAGP8iDz170SUSIxL7FT18dS9IqIwiu3%2FXqTBMcGKzzHs8NFL7TuPF2ImWEXAvR1O1CGWHwF7EA%3D%3D\"}]}\r\ncontent-type: image/jpeg\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1a2fbaa6a75712d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 62237\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":62237,"size_decoded":62906,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1000x1000, components 3","md5":"f1d1f2a37c56d410cc7bae1445beaf6b","sha1":"694f37ae5086577ff52a9b802b885527e949b049","sha256":"4ae2d596ff6e424810bf72e7d3ee99b7b1f5a2b58d78b6a76116d573e9f61e4e","sha512":"1ce66583b0c8a1fa3884a0f6242292d71addfaba32921ee9983d6ea9ccd9d08ac3a79b02531238b19cfdf6ad20245620c8d04af8ef74664b42d969f79bf54840","ssdeep":"1536:ZY4i77d9CXu9G7KHZeEc5QzVC0Ghr6DgY46bT:ZGvvCXX7MZUQzVCv6DJ","tlshash":"54530257e76b6f84de7852f0819bbfbe5b1784b21d0453430846aa75e127fbb3c86202","first_seen":"2026-07-11T07:18:49.150047Z","last_seen":"2026-07-12T21:02:12.720981Z","times_seen":2,"resource_available":false,"data":null}},"time_used":6393,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6334,"receive":59,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"refund-vertex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"refund-vertex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"refund-vertex.com/wp-content/plugins/revslider/public/css/sr7.btns.css","fqdn":"refund-vertex.com","domain":"refund-vertex.com","tld":"com"},"ip":{"addr":"104.21.18.129","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://refund-vertex.com/","date":"2026-07-12T21:01:32.071Z","timestamp":1783890092071,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"refund-vertex.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 02 Jul 2026 10:20:14 GMT","end":"Wed, 30 Sep 2026 11:18:49 GMT"},"fingerprint":{"sha1":"32:ED:60:EF:39:C7:37:B9:BB:20:CC:D9:A8:6F:D0:BF:55:E9:09:CA","sha256":"C9:C2:B4:C7:E6:CA:CC:33:A4:FF:64:2A:D2:E4:C0:97:E1:F2:EB:D6:D7:1C:F4:66:6B:5E:AB:51:40:FE:D1:6B"}}},"request":{"raw":"GET /wp-content/plugins/revslider/public/css/sr7.btns.css HTTP/1.1\r\nHost: refund-vertex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://refund-vertex.com/\r\nCookie: _gcl_au=1.1.983493188.1783890092\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sun, 12 Jul 2026 21:01:32 GMT\r\nserver: cloudflare\r\nlast-modified: Wed, 01 Jul 2026 09:48:22 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\ncontent-encoding: zstd\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ydrdWwyYGs5GZTg2F9y9FCv7EoGwTuJneW6lfnNYopBKbATx9r7bepzWKWf5JrPF8cRyZQdaRFR6FggG7jN0k0M%2B7sFVQM838KrGKYtSwqmg50S%2BTRcTj6GYE3oCFvjSss7tiw%3D%3D\"}]}\r\ncontent-type: text/css\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\ncf-ray: a1a2fbd37c7d712d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2747,"size_decoded":1634,"mime_type":"text/css","magic":"ASCII text, with very long lines (2747), with no line terminators","md5":"4033ec237ccf90a7d72edd12c4ee12a6","sha1":"3d03828ddb1dcf80d238f29eb0b336b7c1e1924d","sha256":"7aef67f2444e57cc80d3d4c17a52477f5d9010626c56e1e128dd76aaf70123ed","sha512":"e34e800bc4fb1362d83fbaced36b4ab5b837dd045195bdf77f8067a76ce0cd667dcb000f4d1a5cde15b0b8bde662cf0fd6e5eaa0d61a7a5c6fdc018d3c423057","ssdeep":"","tlshash":"135124d4f7046258277fbb2075e057ca162f41c39f12bd8ca9c7b9a587249e435513b2","first_seen":"2025-01-03T12:26:36.460192Z","last_seen":"2026-07-18T23:50:43.551434Z","times_seen":2631,"resource_available":false,"data":null}},"time_used":38,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":38,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"refund-vertex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"refund-vertex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"vertex-legal.org/wp-content/uploads/2023/02/slider1.jpg","fqdn":"vertex-legal.org","domain":"vertex-legal.org","tld":"org"},"ip":{"addr":"172.67.144.12","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://refund-vertex.com/","date":"2026-07-12T21:01:32.261Z","timestamp":1783890092261,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vertex-legal.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 30 Jun 2026 13:44:58 GMT","end":"Mon, 28 Sep 2026 14:43:29 GMT"},"fingerprint":{"sha1":"4A:1A:1E:6F:F9:02:AD:DF:24:95:C3:D8:C0:17:35:DE:BC:CC:5C:B8","sha256":"52:9D:7E:11:74:8D:04:4F:63:5C:A2:08:18:17:46:61:5A:70:6D:A9:F2:00:79:CC:A8:3B:F5:4C:BA:EE:A0:63"}}},"request":{"raw":"GET /wp-content/uploads/2023/02/slider1.jpg HTTP/1.1\r\nHost: vertex-legal.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://refund-vertex.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://refund-vertex.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sun, 12 Jul 2026 21:01:32 GMT\r\nserver: cloudflare\r\nlast-modified: Wed, 01 Jul 2026 12:08:55 GMT\r\naccept-ranges: bytes\r\npriority: u=5,i\r\nserver-timing: cfExtPri\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=UHHeahTs2Nql6wXGWZs7lQWFLYODhUBYzfHR%2FPd2jxnOde3gs8qMshNhkHVbm2D4vRhiTAeEfTLA7iktm1pYebkLUCEJMCfjNfNqGw4%2F3jnt8vguhv%2B0m8H4%2BIISIMTxJPBQ\"}]}\r\ncontent-type: image/jpeg\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1a2fbd4baa123eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 84393\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7947,"size_decoded":8614,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 1920x1200, components 3","md5":"a8fedab0c5a84479bea32cd2e946d943","sha1":"ebfe85d19feadcb2b8643b54db244d6aac59518c","sha256":"0c70fe9813131c0fca5d0b684ef73ca7bda72cee94421a811ebec25736ac85de","sha512":"6d975e2ce622d82b195a63599d68bad45e2fca5093d8cca88744ee075f58af66235054198140d035333095a14745c01ed412ba5f8bb770bf4590eb6220228edc","ssdeep":"96:B2UbJ6nV1kwq5rxwSUaZ5rXzci7jW3SVoZC9wkp+3gBm5t6IPjQNte:rona5rabaPDwYWiVoxYSt6Je","tlshash":"b4f10833ef26e7c3d5dc9b3095f72b2e3b2204b047936917a7f905229ab23907d46592","first_seen":"2026-07-11T07:18:49.181252Z","last_seen":"2026-07-12T21:02:12.723378Z","times_seen":2,"resource_available":false,"data":null}},"time_used":134,"timings":{"blocked":0,"dns":0,"connect":13,"send":0,"wait":112,"receive":9,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"refund-vertex.com/wp-content/plugins/elementor/assets/lib/font-awesome/css/font-awesome.min.css?ver=4.7.0","fqdn":"refund-vertex.com","domain":"refund-vertex.com","tld":"com"},"ip":{"addr":"104.21.18.129","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://refund-vertex.com/","date":"2026-07-12T21:01:25.112Z","timestamp":1783890085112,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"refund-vertex.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 02 Jul 2026 10:20:14 GMT","end":"Wed, 30 Sep 2026 11:18:49 GMT"},"fingerprint":{"sha1":"32:ED:60:EF:39:C7:37:B9:BB:20:CC:D9:A8:6F:D0:BF:55:E9:09:CA","sha256":"C9:C2:B4:C7:E6:CA:CC:33:A4:FF:64:2A:D2:E4:C0:97:E1:F2:EB:D6:D7:1C:F4:66:6B:5E:AB:51:40:FE:D1:6B"}}},"request":{"raw":"GET /wp-content/plugins/elementor/assets/lib/font-awesome/css/font-awesome.min.css?ver=4.7.0 HTTP/1.1\r\nHost: refund-vertex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://refund-vertex.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sun, 12 Jul 2026 21:01:25 GMT\r\nserver: cloudflare\r\nlast-modified: Tue, 30 Jun 2026 16:15:02 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\ncontent-encoding: zstd\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=C%2FuYZSrso3pZaFoLaSVMUgjhldUve6dj%2BJAQVlzYVEvN8gulAg5e9vcZASOENPIOawJmLjqGuroJK%2B8xz%2B3mTw9IYrrLWSXq60l4Y3RRQrr7gV72O2kEgPg8Ab6u7I4npZpFQA%3D%3D\"}]}\r\ncontent-type: text/css\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\ncf-ray: a1a2fba7fa12712d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":30999,"size_decoded":7993,"mime_type":"text/css","magic":"ASCII text, with very long lines (30837)","md5":"008e0bb5ebfa7bc298a042f95944df25","sha1":"93897ebc560b38a1d2bff43c22dd6a3b7ee90c0c","sha256":"c4047043368afb4baf1aed25d358a5c2a333842a3b436b58491ab36aeee65b9d","sha512":"3f43f1a813b8188e7f8d296999491f99aff9010060f3e26b20ec32502fa76926361eda0644cdd20995661119206376c74516ea2a63ec4087fe88443aa3304022","ssdeep":"384:wHu5yWeTUKW+KlkJ5de2UYDyVfwYUas2l8yQ/8dwmaU8E:wwlr+Klk3Yi+fwYUf2l8yQ/e9v3","tlshash":"b2d241e8e54c01d66731c48bff81b36862b6fb3dd5854da9f01f290c29d226522c5fba","first_seen":"2023-04-05T04:30:10Z","last_seen":"2026-07-19T00:16:12.496907Z","times_seen":41362,"resource_available":false,"data":null}},"time_used":135,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":110,"receive":25,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"refund-vertex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"refund-vertex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css?family=Roboto+Slab:100,100italic,200,200italic,300,300italic,400,400italic,500,500italic,600,600italic,700,700italic,800,800italic,900,900italic\u0026display=swap\u0026subset=cyrillic","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.42","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://refund-vertex.com/","date":"2026-07-12T21:01:25.377Z","timestamp":1783890085377,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 22 Jun 2026 08:37:24 GMT","end":"Mon, 14 Sep 2026 08:37:23 GMT"},"fingerprint":{"sha1":"85:D0:EC:C2:01:33:25:23:96:FB:2B:54:90:54:84:07:0A:49:1F:03","sha256":"9D:7C:1C:9C:6A:25:1E:17:E0:DC:FD:42:95:CA:47:3D:C1:9C:20:FB:22:47:02:E3:27:EC:7C:62:03:30:83:BA"}}},"request":{"raw":"GET /css?family=Roboto+Slab:100,100italic,200,200italic,300,300italic,400,400italic,500,500italic,600,600italic,700,700italic,800,800italic,900,900italic\u0026display=swap\u0026subset=cyrillic HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://refund-vertex.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Sun, 12 Jul 2026 21:01:25 GMT\r\ndate: Sun, 12 Jul 2026 21:01:25 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":22365,"size_decoded":1602,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"63c1df95a2b11b7542db5b48c56125f1","sha1":"b4116959b5ecbc00779addd320d98d8863692210","sha256":"7ead28f8032c788137532c3a88e9a7bda1411143e54ed4c066271c29f90340b7","sha512":"a5e42a035be607f6a98d7f73a26c37ad2e03a81dd0b54f2cc7bc5dc94a41b3b80af855ce9604e2b2283a7936df9008f068a8285c4cd8e4e960ab411c9c687d4f","ssdeep":"384:bvWLvKvXvUwvzv+vLWaZOUPSVsWJqtUghWVWInkUBALWWXYjUyvsHWm1iUz+54WD:bv0vKvXv3vzv+vLrZOuSVsMqtNhWV1nR","tlshash":"66a2bdd6486ba405ab870cc163dfbfa2ad9e5151a081c4becbfd2cb86cd6d32136075d","first_seen":"2025-09-17T18:46:03.2743Z","last_seen":"2026-07-19T00:09:24.036411Z","times_seen":20003,"resource_available":false,"data":null}},"time_used":108,"timings":{"blocked":-1,"dns":0,"connect":15,"send":0,"wait":48,"receive":0,"ssl":43},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css?family=DM+Sans:100,100italic,200,200italic,300,300italic,400,400italic,500,500italic,600,600italic,700,700italic,800,800italic,900,900italic\u0026display=swap\u0026subset=cyrillic","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.42","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://refund-vertex.com/","date":"2026-07-12T21:01:25.380Z","timestamp":1783890085380,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 22 Jun 2026 08:37:24 GMT","end":"Mon, 14 Sep 2026 08:37:23 GMT"},"fingerprint":{"sha1":"85:D0:EC:C2:01:33:25:23:96:FB:2B:54:90:54:84:07:0A:49:1F:03","sha256":"9D:7C:1C:9C:6A:25:1E:17:E0:DC:FD:42:95:CA:47:3D:C1:9C:20:FB:22:47:02:E3:27:EC:7C:62:03:30:83:BA"}}},"request":{"raw":"GET /css?family=DM+Sans:100,100italic,200,200italic,300,300italic,400,400italic,500,500italic,600,600italic,700,700italic,800,800italic,900,900italic\u0026display=swap\u0026subset=cyrillic HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://refund-vertex.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Sun, 12 Jul 2026 21:01:25 GMT\r\ndate: Sun, 12 Jul 2026 21:01:25 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":16011,"size_decoded":1369,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"b04faee409fd041155c812e09ce605a1","sha1":"a22e984531db308203778012be91dc46f0b71290","sha256":"f9baa8a687c60ed56f99deb613244739ae50f55d523a2ee32da69212eaade02b","sha512":"98a52da0282a48d8df0ea88719b2f3bf4f6c3804119e506b35e77467162d244d3cc09928a444938c854d8def9a244da4cc7acbc5b28adaf9ea3f12bfced0c0a7","ssdeep":"192:M3pQV3pkAQVAknQVnkOQVOkNQVNkEQVEkrQVrkCQVCkxQVxhpwYp+KwR+5wi+Ewd:M3i3SDTQkxtOmP3849RK7vMkGkis+cy3","tlshash":"4572df81042ba154eb972dc426de7d32ef1fa1906454a874affe1888fc9ac2e5371b4c","first_seen":"2025-09-12T09:49:51.439096Z","last_seen":"2026-07-18T18:01:14.136032Z","times_seen":2132,"resource_available":false,"data":null}},"time_used":109,"timings":{"blocked":-1,"dns":0,"connect":15,"send":0,"wait":52,"receive":0,"ssl":41},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"refund-vertex.com/wp-content/uploads/2023/01/team-4.jpg","fqdn":"refund-vertex.com","domain":"refund-vertex.com","tld":"com"},"ip":{"addr":"104.21.18.129","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://refund-vertex.com/","date":"2026-07-12T21:01:25.499Z","timestamp":1783890085499,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"refund-vertex.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 02 Jul 2026 10:20:14 GMT","end":"Wed, 30 Sep 2026 11:18:49 GMT"},"fingerprint":{"sha1":"32:ED:60:EF:39:C7:37:B9:BB:20:CC:D9:A8:6F:D0:BF:55:E9:09:CA","sha256":"C9:C2:B4:C7:E6:CA:CC:33:A4:FF:64:2A:D2:E4:C0:97:E1:F2:EB:D6:D7:1C:F4:66:6B:5E:AB:51:40:FE:D1:6B"}}},"request":{"raw":"GET /wp-content/uploads/2023/01/team-4.jpg HTTP/1.1\r\nHost: refund-vertex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://refund-vertex.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sun, 12 Jul 2026 21:01:31 GMT\r\nserver: cloudflare\r\nlast-modified: Wed, 01 Jul 2026 12:10:11 GMT\r\naccept-ranges: bytes\r\npriority: u=5,i\r\nserver-timing: cfExtPri\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=L04sYPUBRDKeqMiMtQBI%2Ff39jDyHBitlBbFoW1biA17MPdhMFImjaSZaSAHTg3fvThhwwQtlr2ENR6NlzfMzeaO25aS6oFsxmgD4JPbg7iXi7bAo6pystWAmbwDCAdZGGyhVcQ%3D%3D\"}]}\r\ncontent-type: image/jpeg\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1a2fbaa5a72712d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 43012\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":43012,"size_decoded":43681,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1000x1000, components 3","md5":"8203364ac891fdb700549cfe154f2dbc","sha1":"9437a9dbc0fbf7c02168b864d70c32fb21e988e4","sha256":"8ca6bd182d5f3057737b04480dc78c32e5c5ed040e074a759f49fbf8852ad224","sha512":"a4e22301ca3226e95f1ceb807f5e2d6bfa1ef956bd3d080c0b0e2979d2a85e3e130d07744c4f86b00ae99e5d19b37e16dc51f7c1a9ecda45c5d76c80d2e5da3c","ssdeep":"768:fItW1YYRQWq6IS0lBXucFba5Plhs8MO2M0LF7at2YwDH3U9qi/ZmS:Ac1YYSf60/SPrMOwLF+pWE9qi/ZmS","tlshash":"2913e1738a08c679f959fab681f33321aa3272f2513b712815b901b1c9b574d1db4be2","first_seen":"2026-07-11T07:18:49.088705Z","last_seen":"2026-07-12T21:02:12.727157Z","times_seen":2,"resource_available":false,"data":null}},"time_used":6375,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6323,"receive":52,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"refund-vertex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"refund-vertex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/dmsans/v17/rP2Yp2ywxg089UriI5-g4vlH9VoD8Cmcqbu0-K6z8GXhnU0.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://refund-vertex.com/","date":"2026-07-12T21:01:30.478Z","timestamp":1783890090478,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 22 Jun 2026 08:37:23 GMT","end":"Mon, 14 Sep 2026 08:37:22 GMT"},"fingerprint":{"sha1":"CD:5B:53:23:61:72:75:37:AD:E9:F1:74:B2:D2:EE:09:81:05:55:E1","sha256":"9F:07:21:2D:14:EB:C5:C0:D4:2B:42:E4:55:80:7A:BB:AF:47:A8:BC:0C:5E:05:F3:2A:2B:1F:2A:78:4D:FF:D7"}}},"request":{"raw":"GET /s/dmsans/v17/rP2Yp2ywxg089UriI5-g4vlH9VoD8Cmcqbu0-K6z8GXhnU0.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://refund-vertex.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 36932\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 09 Jul 2026 04:44:35 GMT\r\nexpires: Fri, 09 Jul 2027 04:44:35 GMT\r\ncache-control: public, max-age=31536000\r\nage: 317815\r\nlast-modified: Wed, 10 Sep 2025 16:31:03 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":36932,"size_decoded":37745,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 36932, version 1.0","md5":"7c87a648293fbb5b2924aafaa59e8aea","sha1":"c57593e0adc4cf99dd9e67cb782242220a061a9d","sha256":"9fea608a947e67020c33cad9a6fe3d60c54119dfb8cff87768a8117a15ed7543","sha512":"764ced325a768dca84e1fb0cc458818239ce379dbcbdb324ee8849bbe15f54e3f0254ae6e52ee5a92741840637b4f9885d246a0978af23176b3acfe5b9cec23f","ssdeep":"768:mMQPOAQQKW6GccoXQ+OGpHNzXgtDM0SVu7P3nqtPl9Bf2csDpHUjbYE8j2:mMQz4W5og+tpH6tDJku73EPlPOcs5U/l","tlshash":"c0f2f23e7ea5691487c2b0be506b00935344c9bd37c18121bbb953f44ea67addc5d63c","first_seen":"2025-09-11T17:08:25.889763Z","last_seen":"2026-07-19T00:19:55.55867Z","times_seen":30334,"resource_available":false,"data":null}},"time_used":73,"timings":{"blocked":19,"dns":0,"connect":0,"send":0,"wait":23,"receive":31,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/dmsans/v17/rP2Wp2ywxg089UriCZaSExd86J3t9jz86MvyyKy58UfkvU0oaw.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://refund-vertex.com/","date":"2026-07-12T21:01:30.645Z","timestamp":1783890090645,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 22 Jun 2026 08:37:23 GMT","end":"Mon, 14 Sep 2026 08:37:22 GMT"},"fingerprint":{"sha1":"CD:5B:53:23:61:72:75:37:AD:E9:F1:74:B2:D2:EE:09:81:05:55:E1","sha256":"9F:07:21:2D:14:EB:C5:C0:D4:2B:42:E4:55:80:7A:BB:AF:47:A8:BC:0C:5E:05:F3:2A:2B:1F:2A:78:4D:FF:D7"}}},"request":{"raw":"GET /s/dmsans/v17/rP2Wp2ywxg089UriCZaSExd86J3t9jz86MvyyKy58UfkvU0oaw.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://refund-vertex.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 39712\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 06 Jul 2026 13:46:34 GMT\r\nexpires: Tue, 06 Jul 2027 13:46:34 GMT\r\ncache-control: public, max-age=31536000\r\nage: 544496\r\nlast-modified: Wed, 10 Sep 2025 16:31:35 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":39712,"size_decoded":40525,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 39712, version 1.0","md5":"d981d4cbcf42c4a39cb417e9673b683b","sha1":"5f8b496f77d410d16bdebb9c274cfb899d22f4a1","sha256":"f1a235db5bcb8730707844188d35201ecdf63e56c5dcce97bab24a9c7066091d","sha512":"9aac6a14434a483a6475d50246930e24ddd57d4c0760e47dd0b38106fba02555059ee7bf87fd53b16006e7939ac1e3b2685b6baca448717ea626c4d1f7438ed3","ssdeep":"768:IVdy5zzQjGgkbcR6OT6wHbYkYw15zdDJVn2d4F882A6rcck:P5oKbcR626wLn54288v","tlshash":"e603f11855db2b11cc8beb703a3a603e4823a55a0900dae8ed7f7d76d9d5e32c45f983","first_seen":"2025-09-14T19:53:40.224227Z","last_seen":"2026-07-18T21:40:31.498487Z","times_seen":3115,"resource_available":false,"data":null}},"time_used":48,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":29,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/dmsans/v17/rP2Yp2ywxg089UriI5-g4vlH9VoD8Cmcqbu0-K6z8GXhnU0.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://refund-vertex.com/","date":"2026-07-12T21:01:32.124Z","timestamp":1783890092124,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 22 Jun 2026 08:37:23 GMT","end":"Mon, 14 Sep 2026 08:37:22 GMT"},"fingerprint":{"sha1":"CD:5B:53:23:61:72:75:37:AD:E9:F1:74:B2:D2:EE:09:81:05:55:E1","sha256":"9F:07:21:2D:14:EB:C5:C0:D4:2B:42:E4:55:80:7A:BB:AF:47:A8:BC:0C:5E:05:F3:2A:2B:1F:2A:78:4D:FF:D7"}}},"request":{"raw":"GET /s/dmsans/v17/rP2Yp2ywxg089UriI5-g4vlH9VoD8Cmcqbu0-K6z8GXhnU0.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://refund-vertex.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 36932\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 09 Jul 2026 04:44:35 GMT\r\nexpires: Fri, 09 Jul 2027 04:44:35 GMT\r\ncache-control: public, max-age=31536000\r\nage: 317817\r\nlast-modified: Wed, 10 Sep 2025 16:31:03 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":36932,"size_decoded":37745,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 36932, version 1.0","md5":"7c87a648293fbb5b2924aafaa59e8aea","sha1":"c57593e0adc4cf99dd9e67cb782242220a061a9d","sha256":"9fea608a947e67020c33cad9a6fe3d60c54119dfb8cff87768a8117a15ed7543","sha512":"764ced325a768dca84e1fb0cc458818239ce379dbcbdb324ee8849bbe15f54e3f0254ae6e52ee5a92741840637b4f9885d246a0978af23176b3acfe5b9cec23f","ssdeep":"768:mMQPOAQQKW6GccoXQ+OGpHNzXgtDM0SVu7P3nqtPl9Bf2csDpHUjbYE8j2:mMQz4W5og+tpH6tDJku73EPlPOcs5U/l","tlshash":"c0f2f23e7ea5691487c2b0be506b00935344c9bd37c18121bbb953f44ea67addc5d63c","first_seen":"2025-09-11T17:08:25.889763Z","last_seen":"2026-07-19T00:19:55.55867Z","times_seen":30334,"resource_available":false,"data":null}},"time_used":18,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vertex-legal.org/wp-content/uploads/2023/02/png-attoryu1.png","fqdn":"vertex-legal.org","domain":"vertex-legal.org","tld":"org"},"ip":{"addr":"172.67.144.12","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://refund-vertex.com/","date":"2026-07-12T21:01:32.297Z","timestamp":1783890092297,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vertex-legal.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 30 Jun 2026 13:44:58 GMT","end":"Mon, 28 Sep 2026 14:43:29 GMT"},"fingerprint":{"sha1":"4A:1A:1E:6F:F9:02:AD:DF:24:95:C3:D8:C0:17:35:DE:BC:CC:5C:B8","sha256":"52:9D:7E:11:74:8D:04:4F:63:5C:A2:08:18:17:46:61:5A:70:6D:A9:F2:00:79:CC:A8:3B:F5:4C:BA:EE:A0:63"}}},"request":{"raw":"GET /wp-content/uploads/2023/02/png-attoryu1.png HTTP/1.1\r\nHost: vertex-legal.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://refund-vertex.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sun, 12 Jul 2026 21:01:32 GMT\r\nserver: cloudflare\r\nlast-modified: Wed, 01 Jul 2026 12:08:58 GMT\r\naccept-ranges: bytes\r\npriority: u=4,i\r\nserver-timing: cfExtPri\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=EKWQYZwKQN4a26Z1QqzmoqBgNKuIQv8miC8Rwxa%2BFVp%2FVTe6fN1%2BHDhz1Us1Rb%2FzRvK802C88RyEyOPyKQE9pCSDDyp%2FVlX8PN0TONx4pQPVukuEmt6q5iWrvV0J4z01XEre\"}]}\r\ncontent-type: image/png\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1a2fbd4de49b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 98939\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":98939,"size_decoded":99607,"mime_type":"image/png","magic":"PNG image data, 320 x 811, 8-bit/color RGBA, non-interlaced","md5":"c4324761d4d4fa5612a78c0d6102dcdd","sha1":"8e9e65ae1b80f5a680ea3d67a44fc9b8dfc27b5f","sha256":"abeccefc7c07b9a782a4b8abbcef9971cf232459ef8828f9d090f97e85354eae","sha512":"906bf7f662ee5cea3dca4fcfa14095ce1515c0e33aeb41e2b3c7934f60afa264a58bbb88b5b2d280b27ab601f2049e4aa62c6eff5eae4f427df77bbf67de66da","ssdeep":"1536:51WP6Z6zuZulbZK6V03trszow9U7JjHUa6xqUGhWX+asW7oMJH2RxfTvf67sB:adssK6iuowmljUa6xPX+K7oNxfLf67sB","tlshash":"63a31202906fe26e59c18013e2b40cdc8f4e84bace64a5fb568ca75e5cf833d72499e5","first_seen":"2026-01-12T06:43:32.953743Z","last_seen":"2026-07-12T21:02:12.728647Z","times_seen":3,"resource_available":false,"data":null}},"time_used":475,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":394,"receive":81,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"refund-vertex.com/wp-content/plugins/elementor/assets/css/frontend.min.css?ver=4.1.4","fqdn":"refund-vertex.com","domain":"refund-vertex.com","tld":"com"},"ip":{"addr":"104.21.18.129","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://refund-vertex.com/","date":"2026-07-12T21:01:25.119Z","timestamp":1783890085119,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"refund-vertex.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 02 Jul 2026 10:20:14 GMT","end":"Wed, 30 Sep 2026 11:18:49 GMT"},"fingerprint":{"sha1":"32:ED:60:EF:39:C7:37:B9:BB:20:CC:D9:A8:6F:D0:BF:55:E9:09:CA","sha256":"C9:C2:B4:C7:E6:CA:CC:33:A4:FF:64:2A:D2:E4:C0:97:E1:F2:EB:D6:D7:1C:F4:66:6B:5E:AB:51:40:FE:D1:6B"}}},"request":{"raw":"GET /wp-content/plugins/elementor/assets/css/frontend.min.css?ver=4.1.4 HTTP/1.1\r\nHost: refund-vertex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://refund-vertex.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sun, 12 Jul 2026 21:01:25 GMT\r\nserver: cloudflare\r\nlast-modified: Tue, 30 Jun 2026 16:15:02 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\ncontent-encoding: zstd\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=kFSwXxMMKj9K6PHhYPAY1u01KxmbK%2Fej2uzZ2bwgPFUmwrU5%2BBbdNIaheCv4q2NN0AG7cU99z1uMtVBqmq9CSF2LjkSLLOgbQ3qx9A5nGYmZanvOT9AWOV1z5NYyHzRoH1CJXw%3D%3D\"}]}\r\ncontent-type: text/css\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\ncf-ray: a1a2fba7fa15712d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":54666,"size_decoded":8707,"mime_type":"text/css","magic":"ASCII text, with very long lines (54666), with no line terminators","md5":"4fb5f7fc5e41f736ec0527b162519d52","sha1":"33697641c940c68153509fa7c9d7d0c3c760ce2d","sha256":"0a5d398672e25dc7f020f69df92a985481b248a60e301fee232d0c8afd648dc5","sha512":"5da1e9708bfdbd38beb7cee98d806ebc84b4d8337ce638a363d28461ebd9fda5189618bfa62167a5261ec2e98b02cb88ee4ff7bd5ecdd2d2facd480965e0c7a6","ssdeep":"384:Ws4J/8DEksCoI+SBQYO22/RmRs5Cz9TQXPTkvmGkvmCFldtraiIks05ArOk:dFLh5mP3RbrlDdps05Xk","tlshash":"17330da23d13b269226f442b82c7364c526499c1ee0375d9f944c523dafece63b36c5b","first_seen":"2026-01-29T13:38:24.653388Z","last_seen":"2026-07-19T00:13:06.870019Z","times_seen":64437,"resource_available":false,"data":null}},"time_used":445,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":392,"receive":53,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"refund-vertex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"refund-vertex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"refund-vertex.com/wp-content/plugins/elementor/assets/lib/animations/styles/e-animation-shrink.min.css?ver=4.1.4","fqdn":"refund-vertex.com","domain":"refund-vertex.com","tld":"com"},"ip":{"addr":"104.21.18.129","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://refund-vertex.com/","date":"2026-07-12T21:01:25.133Z","timestamp":1783890085133,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"refund-vertex.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 02 Jul 2026 10:20:14 GMT","end":"Wed, 30 Sep 2026 11:18:49 GMT"},"fingerprint":{"sha1":"32:ED:60:EF:39:C7:37:B9:BB:20:CC:D9:A8:6F:D0:BF:55:E9:09:CA","sha256":"C9:C2:B4:C7:E6:CA:CC:33:A4:FF:64:2A:D2:E4:C0:97:E1:F2:EB:D6:D7:1C:F4:66:6B:5E:AB:51:40:FE:D1:6B"}}},"request":{"raw":"GET /wp-content/plugins/elementor/assets/lib/animations/styles/e-animation-shrink.min.css?ver=4.1.4 HTTP/1.1\r\nHost: refund-vertex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://refund-vertex.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sun, 12 Jul 2026 21:01:29 GMT\r\nserver: cloudflare\r\nlast-modified: Tue, 30 Jun 2026 16:15:02 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\ncontent-encoding: zstd\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=UD6KaB9WkPgfy5Yi2iP0NjleXxKgis8wijZSNcWtxlPnh3bEmGtFgmWE4khE3d2%2BbGJKrUlP%2BO2TWadkS%2BTYZuT6%2BxECRGnLkQsTgZ3RJf309NSkl%2BTV%2Fc0mlEh1sbhngLaouA%3D%3D\"}]}\r\ncontent-type: text/css\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\ncf-ray: a1a2fba81a1c712d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":205,"size_decoded":769,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"2b125597284341695f4c836055e2e842","sha1":"d24239ce3368865de4cec69f92452f02efddf77e","sha256":"20fda6d38f6419cc5cebc66862a0dec0c7caa34a332d500e1d2d63518ee936cd","sha512":"a0c279069a68c442c3da7dcc03edbb1bdb6e38071f2e69bfc22fbd184ded468cd8c0ec69e5de4ca1d3d056c56112de18feccb46e71bff8c654b374f5f4c5e313","ssdeep":"","tlshash":"a4d012e3ff03508805a7022342ca4e59d97c9ed227302c7eb2b4521f062184bb393eb3","first_seen":"2024-09-11T15:48:06Z","last_seen":"2026-07-18T23:30:31.117603Z","times_seen":12598,"resource_available":false,"data":null}},"time_used":4136,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":4136,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"refund-vertex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"refund-vertex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"refund-vertex.com/wp-content/plugins/contact-form-7/includes/swv/js/index.js?ver=6.1.6","fqdn":"refund-vertex.com","domain":"refund-vertex.com","tld":"com"},"ip":{"addr":"104.21.18.129","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://refund-vertex.com/","date":"2026-07-12T21:01:25.423Z","timestamp":1783890085423,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"refund-vertex.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 02 Jul 2026 10:20:14 GMT","end":"Wed, 30 Sep 2026 11:18:49 GMT"},"fingerprint":{"sha1":"32:ED:60:EF:39:C7:37:B9:BB:20:CC:D9:A8:6F:D0:BF:55:E9:09:CA","sha256":"C9:C2:B4:C7:E6:CA:CC:33:A4:FF:64:2A:D2:E4:C0:97:E1:F2:EB:D6:D7:1C:F4:66:6B:5E:AB:51:40:FE:D1:6B"}}},"request":{"raw":"GET /wp-content/plugins/contact-form-7/includes/swv/js/index.js?ver=6.1.6 HTTP/1.1\r\nHost: refund-vertex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://refund-vertex.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sun, 12 Jul 2026 21:01:30 GMT\r\nserver: cloudflare\r\nlast-modified: Wed, 01 Jul 2026 09:48:57 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncontent-encoding: zstd\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=RYnNK1zzGT%2Fx3jYxyuWnWoxmQDL%2BU4zyfdIfG77xiLjRaRcX7vHScPZC96Fu1GzLx%2BO1HGTB72aRAMcdAxBOu2bYB2IHFvi%2FvX7GydSSXjNSeqKTwg3BzOM4QFxHp3%2BNvHznQg%3D%3D\"}]}\r\ncontent-type: text/javascript\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\ncf-ray: a1a2fba9fa50712d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":12512,"size_decoded":4419,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (12512), with no line terminators","md5":"96e7dc3f0e8559e4a3f3ca40b17ab9c3","sha1":"d363d0291e92c233e828023583dcf6685f2da5a2","sha256":"29fdd17a7002a2e1bbd9b33adafc53457c64006b5aca8f6e4dbf907de35433ca","sha512":"851dcea59510a12dd72c8391a9ea6ffa96bcbe0f009037d7a0b6e27bae63a494709b6eee912b5ed8d25605fbb767a885f543915996f8a8aff34395992e3332dc","ssdeep":"384:wwuf8OQL0sARrAZcNWLq/+Ffm/hibLexa2VautyX2fsL3ZHO1O9H:wwuf8OQL0sAZAGNWmGcibLexa2Vau0XD","tlshash":"d34235e16197e0f0c7c338a48816c051f2bf866cb9898054fb5dcdd22d5de07626b77a","first_seen":"2025-03-11T19:47:45.42406Z","last_seen":"2026-07-19T00:19:49.952143Z","times_seen":217394,"resource_available":true,"data":null}},"time_used":5011,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":4991,"receive":20,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"refund-vertex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"refund-vertex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"refund-vertex.com/wp-content/plugins/igual-addon/admin/extension/mega-menu/js/megamenu-post.js?ver=1.0","fqdn":"refund-vertex.com","domain":"refund-vertex.com","tld":"com"},"ip":{"addr":"104.21.18.129","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://refund-vertex.com/","date":"2026-07-12T21:01:25.428Z","timestamp":1783890085428,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"refund-vertex.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 02 Jul 2026 10:20:14 GMT","end":"Wed, 30 Sep 2026 11:18:49 GMT"},"fingerprint":{"sha1":"32:ED:60:EF:39:C7:37:B9:BB:20:CC:D9:A8:6F:D0:BF:55:E9:09:CA","sha256":"C9:C2:B4:C7:E6:CA:CC:33:A4:FF:64:2A:D2:E4:C0:97:E1:F2:EB:D6:D7:1C:F4:66:6B:5E:AB:51:40:FE:D1:6B"}}},"request":{"raw":"GET /wp-content/plugins/igual-addon/admin/extension/mega-menu/js/megamenu-post.js?ver=1.0 HTTP/1.1\r\nHost: refund-vertex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://refund-vertex.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sun, 12 Jul 2026 21:01:30 GMT\r\nserver: cloudflare\r\nlast-modified: Wed, 01 Jul 2026 09:47:24 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncontent-encoding: zstd\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=yXKsmP1eQ9pmj8iIfe9AiRaRLkJNLD7f2kFWb37GEuxuFIloyr70DftVPZ0IAXR2qTKZ6%2B%2FGBRaPm7KDJG5Tz0EkZLo0sfrvdqvwHUhZ53ltWNCfBCp73w%2BVjlcLSwG4xDEMCg%3D%3D\"}]}\r\ncontent-type: text/javascript\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\ncf-ray: a1a2fba9fa54712d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2085,"size_decoded":1336,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with CRLF line terminators","md5":"820a71b923b8826907001dbcd81e0a25","sha1":"92556b381f2111872ab70fb581eda1a7cd76f948","sha256":"e70978aa920cf6023101cdac0dd356260c908698bbd2b7de566d4b106ca58e13","sha512":"d74aa0cb863eda5107af6569ffc231d910540e96796efd0f3fe880de8e5de04fa52f6f56b4f4f35973471e78351a11ca73aa258962a34aa9bab72a2b3a7ef41c","ssdeep":"","tlshash":"a6411158bd1c11e0ea7f236c953b8446fba4e337a245cd4575fdd0a44fb4414a142eee","first_seen":"2026-07-11T07:18:49.091266Z","last_seen":"2026-07-12T21:02:12.732353Z","times_seen":2,"resource_available":true,"data":null}},"time_used":4997,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":4997,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"refund-vertex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"refund-vertex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"refund-vertex.com/wp-content/uploads/2023/02/law-abt-img-1.png","fqdn":"refund-vertex.com","domain":"refund-vertex.com","tld":"com"},"ip":{"addr":"104.21.18.129","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://refund-vertex.com/","date":"2026-07-12T21:01:30.496Z","timestamp":1783890090496,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"refund-vertex.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 02 Jul 2026 10:20:14 GMT","end":"Wed, 30 Sep 2026 11:18:49 GMT"},"fingerprint":{"sha1":"32:ED:60:EF:39:C7:37:B9:BB:20:CC:D9:A8:6F:D0:BF:55:E9:09:CA","sha256":"C9:C2:B4:C7:E6:CA:CC:33:A4:FF:64:2A:D2:E4:C0:97:E1:F2:EB:D6:D7:1C:F4:66:6B:5E:AB:51:40:FE:D1:6B"}}},"request":{"raw":"GET /wp-content/uploads/2023/02/law-abt-img-1.png HTTP/1.1\r\nHost: refund-vertex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://refund-vertex.com/wp-content/uploads/elementor/css/post-36316.css?ver=1783699951\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sun, 12 Jul 2026 21:01:31 GMT\r\nserver: cloudflare\r\nlast-modified: Wed, 01 Jul 2026 12:07:41 GMT\r\naccept-ranges: bytes\r\npriority: u=4,i\r\nserver-timing: cfExtPri\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=pjlCPKvdPtQvM7JKoubcHYsXrF1363YiEhgJ7j9kYCi4%2B2Nn5KYu%2FiKGaDP97wYR9lp0hkLvg9eTvCtSe4fiMlmHB%2ByH%2B%2FpQCZlfKTOdKBi0ivdCTjM%2FtJYP9dg3hVlUH2yHhA%3D%3D\"}]}\r\ncontent-type: image/png\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1a2fbc99beb712d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 76734\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":76734,"size_decoded":77412,"mime_type":"image/png","magic":"PNG image data, 333 x 845, 8-bit/color RGBA, non-interlaced","md5":"2b79210b75ac7f8bba2a59d28b380876","sha1":"ae3012e70d84928a57b7963f6320b1f9f1d6f1de","sha256":"b9ef361443d76994250f40d5d2cd311afc5e87096b8ad16e131492053a26323f","sha512":"923b7926833f1dc3dbba9e18f7ae760c16fc9c7a9df3fe615031ff4a58047c8d8bef5a4d22083dacb5c9572ee57aece4db920092729381638839fcf207153871","ssdeep":"1536:2iKV3s16tiWUMj+5gzNxeM1T4o9NPRMRs5J6AXkyHQlT+QMTk:rKV3RYxtqNxrHR2sTkbd+/k","tlshash":"dd7312b0f844b344ed06c8d7e6a467f037ee6580f21a9409da42ea05a46fbe5cf8c5c6","first_seen":"2025-11-15T16:08:15.724108Z","last_seen":"2026-07-12T21:02:12.734404Z","times_seen":6,"resource_available":false,"data":null}},"time_used":1394,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1340,"receive":54,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"refund-vertex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"refund-vertex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wordpress.zozothemes.com/igual/wp-content/uploads/sites/6/2023/07/overlay-g-1.png","fqdn":"wordpress.zozothemes.com","domain":"zozothemes.com","tld":"com"},"ip":{"addr":"198.136.48.242","port":443,"asn":33182,"as":"DIMENOC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://refund-vertex.com/","date":"2026-07-12T21:01:30.511Z","timestamp":1783890090511,"http_version":"HTTP/2","security_state":"","security_info":null,"request":{"raw":"GET /igual/wp-content/uploads/sites/6/2023/07/overlay-g-1.png HTTP/1.1\r\nHost: wordpress.zozothemes.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://refund-vertex.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 415 \r\nserver: openresty/1.31.1.1\r\ndate: Sun, 12 Jul 2026 21:01:31 GMT\r\ncontent-type: text/html\r\ncontent-length: 185\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"415","status_text":"","fingerprints":[{"name":"OpenResty:1.31.1.1","description":"OpenResty is a web platform based on nginx which can run Lua scripts using its LuaJIT engine.","website":"https://openresty.org","common_platform_enumeration":"","icon":"OpenResty.svg","categories":["Web servers"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-19T00:20:37.747196Z","times_seen":17351892,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"refund-vertex.com/wp-content/plugins/cool-formkit-for-elementor-forms/assets/js/utils.js","fqdn":"refund-vertex.com","domain":"refund-vertex.com","tld":"com"},"ip":{"addr":"104.21.18.129","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://refund-vertex.com/","date":"2026-07-12T21:01:33.233Z","timestamp":1783890093233,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"refund-vertex.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 02 Jul 2026 10:20:14 GMT","end":"Wed, 30 Sep 2026 11:18:49 GMT"},"fingerprint":{"sha1":"32:ED:60:EF:39:C7:37:B9:BB:20:CC:D9:A8:6F:D0:BF:55:E9:09:CA","sha256":"C9:C2:B4:C7:E6:CA:CC:33:A4:FF:64:2A:D2:E4:C0:97:E1:F2:EB:D6:D7:1C:F4:66:6B:5E:AB:51:40:FE:D1:6B"}}},"request":{"raw":"GET /wp-content/plugins/cool-formkit-for-elementor-forms/assets/js/utils.js HTTP/1.1\r\nHost: refund-vertex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://refund-vertex.com/wp-content/plugins/cool-formkit-for-elementor-forms/assets/js/intlTelInput.js?ver=1.4.3\r\nCookie: _gcl_au=1.1.983493188.1783890092\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sun, 12 Jul 2026 21:01:33 GMT\r\nserver: cloudflare\r\nlast-modified: Thu, 02 Jul 2026 06:40:31 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncontent-encoding: zstd\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2BxXU%2B4wRgizghBGzNjYjVBE4b3%2BytKzgXGKVQrfNNfPdSJ9JZfrhY2VH9BwxxiWOoYOqv7vRlWu%2FYxR8HLn%2FIcoZSWvArr3W0zjQ3ue21lmtZGP4xvCgNvyfZ%2FpV4uwTyU2HUw%3D%3D\"}]}\r\ncontent-type: text/javascript\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\ncf-ray: a1a2fbdabccd712d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":260307,"size_decoded":66466,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (1903), with CRLF line terminators","md5":"934f89aba9aa0ccf43dae15006d649c5","sha1":"18224ebaa4b64d39dcc81dce23afed6c03c9b11d","sha256":"4ba6c116e534fe82fdf42f2b254013066a2220484b9d0514b20e64460ec8ae87","sha512":"fb81f6b8a12b52f82c27b8e09f6d50e0a660a16cc6f6338b368f5c59da15280ede49a25ac44282ac05963f30aec58179c3b7a5f59c8035c6e5c367517ac06b7f","ssdeep":"3072:o/kW0jmajOJ3PxPvJ3VxP+CQCdMNs+M9MNV8R5zo9fUfSWzzXL0z3MQPgwEt7rVj:o/kWsm+4qs+M9MNVsdiy","tlshash":"c844f1ebd67c9737a1d97b35968eb3cd1a8cbca3c848527826c3b54f52788e0716c205","first_seen":"2024-09-19T21:38:54.697472Z","last_seen":"2026-07-12T21:02:12.736856Z","times_seen":25,"resource_available":true,"data":null}},"time_used":165,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":43,"receive":122,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"refund-vertex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"refund-vertex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"vertex-legal.org/wp-content/uploads/2023/03/company_ceo.png","fqdn":"vertex-legal.org","domain":"vertex-legal.org","tld":"org"},"ip":{"addr":"172.67.144.12","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://refund-vertex.com/","date":"2026-07-12T21:01:34.354Z","timestamp":1783890094354,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vertex-legal.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 30 Jun 2026 13:44:58 GMT","end":"Mon, 28 Sep 2026 14:43:29 GMT"},"fingerprint":{"sha1":"4A:1A:1E:6F:F9:02:AD:DF:24:95:C3:D8:C0:17:35:DE:BC:CC:5C:B8","sha256":"52:9D:7E:11:74:8D:04:4F:63:5C:A2:08:18:17:46:61:5A:70:6D:A9:F2:00:79:CC:A8:3B:F5:4C:BA:EE:A0:63"}}},"request":{"raw":"GET /wp-content/uploads/2023/03/company_ceo.png HTTP/1.1\r\nHost: vertex-legal.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://refund-vertex.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sun, 12 Jul 2026 21:01:34 GMT\r\nserver: cloudflare\r\nlast-modified: Wed, 01 Jul 2026 12:09:12 GMT\r\naccept-ranges: bytes\r\npriority: u=4,i\r\nserver-timing: cfExtPri\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=u9SAsZW6oECftNbjuZdN0JnPc2zzy%2F6J8j8d3xfYm%2FexXLrE60Qg2BlwhGgwx1jYXeLH11eLFKK7FHiR5FGpCXYV%2FBqOp4h%2FKD9aMPdT4lZxIb3sOWwLK9Ma084imtnjZ5oW\"}]}\r\ncontent-type: image/png\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1a2fbe1b8d3b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 111581\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":111581,"size_decoded":112248,"mime_type":"image/png","magic":"PNG image data, 440 x 707, 8-bit colormap, non-interlaced","md5":"34d4c51527a9dc5c7f82c49466f456aa","sha1":"823ff30bfd30ae6323065187da71f62042c27224","sha256":"5b7c246a55e0a704024bb6d456202f26594dc3763c321c9017c5246274e1055e","sha512":"cc9ed88ce358476463ea4dc6b89b61e2d40c8a2d4b3f5c1817b949153c6ff7f312cf5d9b68456e62f2781755d92a5f9f5b2554ae10d0a472b0b95025927661f3","ssdeep":"3072:ld9IgPfaB3w/6cUaRWgZ/ST31nVlzFoAuA9gDIIWmYb7lRlDsi:DSgPiB3w2uVWHlBjujMF7lj","tlshash":"bab3124c8fe1640565b14a4c37f7b6305e3ba81a288afdaf35f312b8c498cb75541aa6","first_seen":"2025-10-28T05:24:53.93608Z","last_seen":"2026-07-12T21:02:12.737497Z","times_seen":3,"resource_available":false,"data":null}},"time_used":196,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":106,"receive":90,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"refund-vertex.com/wp-content/plugins/classic-elementor-addons-pro/assets/css/bootstrap-icons.css?ver=1.13.1","fqdn":"refund-vertex.com","domain":"refund-vertex.com","tld":"com"},"ip":{"addr":"104.21.18.129","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://refund-vertex.com/","date":"2026-07-12T21:01:25.102Z","timestamp":1783890085102,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"refund-vertex.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 02 Jul 2026 10:20:14 GMT","end":"Wed, 30 Sep 2026 11:18:49 GMT"},"fingerprint":{"sha1":"32:ED:60:EF:39:C7:37:B9:BB:20:CC:D9:A8:6F:D0:BF:55:E9:09:CA","sha256":"C9:C2:B4:C7:E6:CA:CC:33:A4:FF:64:2A:D2:E4:C0:97:E1:F2:EB:D6:D7:1C:F4:66:6B:5E:AB:51:40:FE:D1:6B"}}},"request":{"raw":"GET /wp-content/plugins/classic-elementor-addons-pro/assets/css/bootstrap-icons.css?ver=1.13.1 HTTP/1.1\r\nHost: refund-vertex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://refund-vertex.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sun, 12 Jul 2026 21:01:25 GMT\r\nserver: cloudflare\r\nlast-modified: Wed, 01 Jul 2026 09:47:51 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\ncontent-encoding: zstd\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=96NYn%2FMY1NPrt1TW6UQqE3eS1kHykHCIMSk17y5XVjBzQMbX4qPWyiGRFwHxaoVq7D3nMPmhgfDqFw%2BAVX85O0WLWTlT8fo8WbL1OqZjNuVrRzuRKfoJuiWHQVlC5kunak9oUA%3D%3D\"}]}\r\ncontent-type: text/css\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\ncf-ray: a1a2fba7ea0e712d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":99558,"size_decoded":16089,"mime_type":"text/css","magic":"ASCII text","md5":"4cbc33bc5e019cc90bd368019d7701d8","sha1":"aebcf93e6c705da5bea5c744bdfabde27d160563","sha256":"a7688d3654e828d176844bb2d705182c2cebf1e61a72c7406283bfa0398f47ff","sha512":"bb740d489f0d6ee10755e3c33e95a02316c3714018357032bf2544d4850dfe63db1bb006dce0106900a31c95eafd66082c42b185f607b85811bbdc6ede33fd32","ssdeep":"768:Rqnm8OAL1Mzocm4KyH2CJwZwmij34k4RDlWIbWPVUMZ:gOocm4FJwZ5ijINRDlIiw","tlshash":"9ea3efba914f05f9d341e4d92743674693aaba3cd1813c7ad342399ee3c1a188ad73dc","first_seen":"2025-10-27T18:24:16.162541Z","last_seen":"2026-07-15T05:05:21.107989Z","times_seen":9,"resource_available":false,"data":null}},"time_used":202,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":112,"receive":90,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"refund-vertex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"refund-vertex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"refund-vertex.com/wp-content/plugins/elementor/assets/css/widget-image.min.css?ver=4.1.4","fqdn":"refund-vertex.com","domain":"refund-vertex.com","tld":"com"},"ip":{"addr":"104.21.18.129","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://refund-vertex.com/","date":"2026-07-12T21:01:25.129Z","timestamp":1783890085129,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"refund-vertex.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 02 Jul 2026 10:20:14 GMT","end":"Wed, 30 Sep 2026 11:18:49 GMT"},"fingerprint":{"sha1":"32:ED:60:EF:39:C7:37:B9:BB:20:CC:D9:A8:6F:D0:BF:55:E9:09:CA","sha256":"C9:C2:B4:C7:E6:CA:CC:33:A4:FF:64:2A:D2:E4:C0:97:E1:F2:EB:D6:D7:1C:F4:66:6B:5E:AB:51:40:FE:D1:6B"}}},"request":{"raw":"GET /wp-content/plugins/elementor/assets/css/widget-image.min.css?ver=4.1.4 HTTP/1.1\r\nHost: refund-vertex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://refund-vertex.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sun, 12 Jul 2026 21:01:28 GMT\r\nserver: cloudflare\r\nlast-modified: Tue, 30 Jun 2026 16:15:02 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\ncontent-encoding: zstd\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=InEjE5S3u6jYt3HG4gwR5JUculEGCcDa%2BFs72Jipl6lLUXjkrwYEo7AlfsnO0H8DW76d5tQTfB3lT8hh0HetSMOJJRyRlKtvTQfvf3oZ3tvjjctaFI5DPpo%2F3c0up7ETbTV9dw%3D%3D\"}]}\r\ncontent-type: text/css\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\ncf-ray: a1a2fba80a19712d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":214,"size_decoded":775,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"12045858d487a8ae56337b554a5ee03c","sha1":"f002d465c77cc210b1a049da21d2d8dfb4bba080","sha256":"fb8690e594b2f9b841585895d811e8cb839667a1a63963d1a1cdea11e2aa2abb","sha512":"2d50371adad63f2b9b384b10b87546b85344fe46560b65f9321100515c257e6a147e1353946f8ef5c4300827a41ce6641c3cedc82c9f63847874c3aae39485ac","ssdeep":"","tlshash":"b2d0c901792783c6302f896926ab669e39d01dddf246db90aca166165abecc82772160","first_seen":"2025-01-03T10:53:39.937643Z","last_seen":"2026-07-19T00:13:06.886841Z","times_seen":111717,"resource_available":false,"data":null}},"time_used":2970,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2970,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"refund-vertex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"refund-vertex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/roboto/v51/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://refund-vertex.com/","date":"2026-07-12T21:01:30.647Z","timestamp":1783890090647,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 22 Jun 2026 08:37:23 GMT","end":"Mon, 14 Sep 2026 08:37:22 GMT"},"fingerprint":{"sha1":"CD:5B:53:23:61:72:75:37:AD:E9:F1:74:B2:D2:EE:09:81:05:55:E1","sha256":"9F:07:21:2D:14:EB:C5:C0:D4:2B:42:E4:55:80:7A:BB:AF:47:A8:BC:0C:5E:05:F3:2A:2B:1F:2A:78:4D:FF:D7"}}},"request":{"raw":"GET /s/roboto/v51/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://refund-vertex.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 43136\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 09 Jul 2026 10:17:38 GMT\r\nexpires: Fri, 09 Jul 2027 10:17:38 GMT\r\ncache-control: public, max-age=31536000\r\nage: 297832\r\nlast-modified: Wed, 18 Feb 2026 19:51:37 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":43136,"size_decoded":43949,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 43136, version 1.0","md5":"665db5e157d2138835c4037c971ff3a4","sha1":"41ca6b7e4818eb81531d8006ff7ddd971c640879","sha256":"1404ca348bd75ef836f4dd8b6f2cc719458642d1237c368296b2fc652dca47dc","sha512":"6c999466673c9873b1b112d6ab95c7cecb99467ea156e3e046b54c5f3d109c3845b05cbb2a0245d178430c7b2ceacd5110f7d8faf7e041100f44852b0c29fe9a","ssdeep":"768:tMTmVhyXCrekkraPAjrWMMWD3UJmw0FRwoglekm+hQ7//geceSF/mEQBPMAmDu5:cmHkCrHvPAjrWMMI3UJswogl4j7/hSlW","tlshash":"f9130231eb70ee59962c903454e7fda9433b1457d731aca80e99a1ce6f8103454facec","first_seen":"2026-02-19T22:27:43.350598Z","last_seen":"2026-07-19T00:18:53.6277Z","times_seen":233944,"resource_available":false,"data":null}},"time_used":49,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":29,"receive":20,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"refund-vertex.com/wp-content/plugins/revslider/public/css/fonts/revicons/fonts/revicons.woff?5510888","fqdn":"refund-vertex.com","domain":"refund-vertex.com","tld":"com"},"ip":{"addr":"104.21.18.129","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://refund-vertex.com/","date":"2026-07-12T21:01:32.237Z","timestamp":1783890092237,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"refund-vertex.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 02 Jul 2026 10:20:14 GMT","end":"Wed, 30 Sep 2026 11:18:49 GMT"},"fingerprint":{"sha1":"32:ED:60:EF:39:C7:37:B9:BB:20:CC:D9:A8:6F:D0:BF:55:E9:09:CA","sha256":"C9:C2:B4:C7:E6:CA:CC:33:A4:FF:64:2A:D2:E4:C0:97:E1:F2:EB:D6:D7:1C:F4:66:6B:5E:AB:51:40:FE:D1:6B"}}},"request":{"raw":"GET /wp-content/plugins/revslider/public/css/fonts/revicons/fonts/revicons.woff?5510888 HTTP/1.1\r\nHost: refund-vertex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://refund-vertex.com/wp-content/plugins/revslider/public/css/fonts/revicons/css/revicons.css\r\nCookie: _gcl_au=1.1.983493188.1783890092\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sun, 12 Jul 2026 21:01:32 GMT\r\nserver: cloudflare\r\nlast-modified: Wed, 01 Jul 2026 09:48:22 GMT\r\naccept-ranges: bytes\r\npriority: u=3,i=?0\r\nserver-timing: cfExtPri\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=sHCZ9osnd0hu3fw4T4tpsIdPwmlY1SZZdbp7O2hWWnF5tIAa0VzVTIfqmNskFp9amGVNFW8Zut8QsVlERscFtIJMqF7oDJeWVvZO846TQX3NNawMfaoNURtT59hpr1v4yPM6ng%3D%3D\"}]}\r\ncontent-type: font/woff\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1a2fbd47c93712d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 7536\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7536,"size_decoded":8204,"mime_type":"font/woff","magic":"Web Open Font Format, TrueType, length 7536, version 1.0","md5":"04eb8fc57f27498e5ae37523e3bfb2c7","sha1":"d942ae11706c3f7e511e3c49b0e4574d7ad199c4","sha256":"f7b9c3065e55fa3b9e320093612e7b30dcb14355a44ec461247b495a3e729686","sha512":"fa6508c8a1a822794036174b0b9dbc6e91b5afc1fd340381b868ede6d928dd0f3e66b5a91308d2c0c4c4c64b27dab7761a904c0b6e6b3c0e3e736e5d6342f365","ssdeep":"192:340F/mM4Oa0wA2jPOf2X62xqpjjjaT64iSNizw:34sxBwCujqpj/aT6nSYzw","tlshash":"20f18e14fec0f56dfd8f52702780e6f6b2646de260560dc52d48e65c14e291ae27d47c","first_seen":"2023-04-05T13:50:09Z","last_seen":"2026-07-18T23:49:35.271569Z","times_seen":31529,"resource_available":false,"data":null}},"time_used":117,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":117,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"refund-vertex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"refund-vertex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"refund-vertex.com/wp-content/plugins/cool-formkit-for-elementor-forms/assets/css/country-code-style.min.css?ver=1.4.3","fqdn":"refund-vertex.com","domain":"refund-vertex.com","tld":"com"},"ip":{"addr":"104.21.18.129","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://refund-vertex.com/","date":"2026-07-12T21:01:25.407Z","timestamp":1783890085407,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"refund-vertex.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 02 Jul 2026 10:20:14 GMT","end":"Wed, 30 Sep 2026 11:18:49 GMT"},"fingerprint":{"sha1":"32:ED:60:EF:39:C7:37:B9:BB:20:CC:D9:A8:6F:D0:BF:55:E9:09:CA","sha256":"C9:C2:B4:C7:E6:CA:CC:33:A4:FF:64:2A:D2:E4:C0:97:E1:F2:EB:D6:D7:1C:F4:66:6B:5E:AB:51:40:FE:D1:6B"}}},"request":{"raw":"GET /wp-content/plugins/cool-formkit-for-elementor-forms/assets/css/country-code-style.min.css?ver=1.4.3 HTTP/1.1\r\nHost: refund-vertex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://refund-vertex.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sun, 12 Jul 2026 21:01:30 GMT\r\nserver: cloudflare\r\nlast-modified: Thu, 02 Jul 2026 06:40:31 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\ncontent-encoding: zstd\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=lkY8voSJVdQPbAEHWEV9jxsri85F5ILm1woWDY%2Bb%2BZShDw8Qh1BD9dne7jX%2FVMAhSGyApAQ9pZOLRCGABjON047qr6bBy%2BHk5g1xrJmJnJlcEjxadk5HpHg0W%2BrEgAZO2jj8fw%3D%3D\"}]}\r\ncontent-type: text/css\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\ncf-ray: a1a2fba9ca49712d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1326,"size_decoded":1134,"mime_type":"text/css","magic":"ASCII text, with very long lines (1326), with no line terminators","md5":"d8697726d93cb2463a60f2ae5c403bea","sha1":"14b3b5846b187c07c865bb9d5ed5a0811b1e3a49","sha256":"ef97294af0f42b465a5cc334c008d862a691ef7258fbead74876e1fbac3e2d15","sha512":"25f72a98cdad20f60e7c9fc5356b0023d0aa57ccde7e8828fdb9a4ee4318e655aea5706e141be35d712c8c97001e5d8dca08ab30df8cb5f4590aeb0cd8982597","ssdeep":"","tlshash":"47215a13ab976125b4bfd1beb01a657daf0bccd2fd940f79b834f79081d60d622a2405","first_seen":"2025-09-24T20:13:45.713135Z","last_seen":"2026-07-12T21:02:12.740288Z","times_seen":11,"resource_available":false,"data":null}},"time_used":4997,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":4997,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"refund-vertex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"refund-vertex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"refund-vertex.com/wp-content/plugins/classic-elementor-addons-pro/assets/js/cea-custom-front.js?ver=1.0","fqdn":"refund-vertex.com","domain":"refund-vertex.com","tld":"com"},"ip":{"addr":"104.21.18.129","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://refund-vertex.com/","date":"2026-07-12T21:01:25.414Z","timestamp":1783890085414,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"refund-vertex.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 02 Jul 2026 10:20:14 GMT","end":"Wed, 30 Sep 2026 11:18:49 GMT"},"fingerprint":{"sha1":"32:ED:60:EF:39:C7:37:B9:BB:20:CC:D9:A8:6F:D0:BF:55:E9:09:CA","sha256":"C9:C2:B4:C7:E6:CA:CC:33:A4:FF:64:2A:D2:E4:C0:97:E1:F2:EB:D6:D7:1C:F4:66:6B:5E:AB:51:40:FE:D1:6B"}}},"request":{"raw":"GET /wp-content/plugins/classic-elementor-addons-pro/assets/js/cea-custom-front.js?ver=1.0 HTTP/1.1\r\nHost: refund-vertex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://refund-vertex.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sun, 12 Jul 2026 21:01:30 GMT\r\nserver: cloudflare\r\nlast-modified: Wed, 01 Jul 2026 09:47:51 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncontent-encoding: zstd\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=aygwl5Fzg7ZbLvqNS1WeE4cv3fQX44fgNAHcAH%2B9N5kHxlF0FHKjQYt54XHn9jVyRNAWzFRmlkHWxkDDgl6sWoQtxKhLXGqKrAXDVE8FNuCsAEjOpnZi09diFqO0RCkXd93%2FvA%3D%3D\"}]}\r\ncontent-type: text/javascript\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\ncf-ray: a1a2fba9da4e712d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":208382,"size_decoded":49428,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with CRLF line terminators","md5":"98264a79cb9da9eae2f6399c8036565c","sha1":"f2d1449794d9719ba2a8d9fb896ed69eab1eaf5e","sha256":"bc642ee01cb659e7e5edeed55fee0066886ebb1f5ed0caaa88658634f99ce744","sha512":"76b7f268bad39c52a56eaf10f3ed241e1af173529b18b4a1425e880906514c56e54702b6eed8beb9951a8acc8a39ceb4d1c9b408c559b01c912369e29080f18b","ssdeep":"3072:BRMrXLJtWqO6rCyZBD1ictCGbBGFl5dAD:B6r46TuazbBGFlc","tlshash":"4f14d7a5b30f201b86bb336b457f5108ea7cc433b50681e9b9ad80782ff19545369fad","first_seen":"2026-07-11T07:18:49.161824Z","last_seen":"2026-07-12T21:02:12.742051Z","times_seen":2,"resource_available":true,"data":null}},"time_used":5094,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5003,"receive":91,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"refund-vertex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"refund-vertex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"refund-vertex.com/wp-content/plugins/elementor/assets/js/frontend.min.js?ver=4.1.4","fqdn":"refund-vertex.com","domain":"refund-vertex.com","tld":"com"},"ip":{"addr":"104.21.18.129","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://refund-vertex.com/","date":"2026-07-12T21:01:25.439Z","timestamp":1783890085439,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"refund-vertex.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 02 Jul 2026 10:20:14 GMT","end":"Wed, 30 Sep 2026 11:18:49 GMT"},"fingerprint":{"sha1":"32:ED:60:EF:39:C7:37:B9:BB:20:CC:D9:A8:6F:D0:BF:55:E9:09:CA","sha256":"C9:C2:B4:C7:E6:CA:CC:33:A4:FF:64:2A:D2:E4:C0:97:E1:F2:EB:D6:D7:1C:F4:66:6B:5E:AB:51:40:FE:D1:6B"}}},"request":{"raw":"GET /wp-content/plugins/elementor/assets/js/frontend.min.js?ver=4.1.4 HTTP/1.1\r\nHost: refund-vertex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://refund-vertex.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sun, 12 Jul 2026 21:01:31 GMT\r\nserver: cloudflare\r\nlast-modified: Tue, 30 Jun 2026 16:15:02 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncontent-encoding: zstd\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=E0%2F7wjogIREm2BSbIuf306w3RcGofNidoymNODZ5eL5SCBB7qksWetAFIcfmBzmrfUI7U9Q0TbTj720Xv0n8YN7qN85eevTgbkiN%2Fp%2FqbWwBO%2FCRgEsPt36smVuygA%2BHYO67JQ%3D%3D\"}]}\r\ncontent-type: text/javascript\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\ncf-ray: a1a2fba9fa5a712d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":32098,"size_decoded":11963,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (32098), with no line terminators","md5":"1c6aa09d0faf7577c8ae64d43b8241ad","sha1":"9d31e838cc042539556ca9223a635349f6e4af35","sha256":"1842d6e4d3c7399fdb01ab4b0a7dd5c1d9c096110de0532181ed581f14e9e813","sha512":"d754acb067d44f5fd9648cc63b6da0e95166a48d50a25dcfb378a6a5cd8c94334413c4466e598d01830a1cab6b183cf4812ac68500ac8e6d64ceabe45f5c46f3","ssdeep":"768:D1c+6idHZRdzM4ZBOBTmduNFXaz1EfcJR8RjDKv//Dk3iHVgbpMYMLKEnzBc5Gkl:ZcURdzMMBOB0mFrcJR8RjD8/xHVlqEni","tlshash":"0de208523296e866069f48a3f0231119f3775dd9b80af0d5b2bcdce5a471e877362b34","first_seen":"2026-05-18T18:48:00.243251Z","last_seen":"2026-07-19T00:13:06.909254Z","times_seen":16140,"resource_available":true,"data":null}},"time_used":6364,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6337,"receive":27,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"refund-vertex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"refund-vertex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"refund-vertex.com/wp-content/uploads/2019/04/team-1.jpg","fqdn":"refund-vertex.com","domain":"refund-vertex.com","tld":"com"},"ip":{"addr":"104.21.18.129","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://refund-vertex.com/","date":"2026-07-12T21:01:25.508Z","timestamp":1783890085508,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"refund-vertex.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 02 Jul 2026 10:20:14 GMT","end":"Wed, 30 Sep 2026 11:18:49 GMT"},"fingerprint":{"sha1":"32:ED:60:EF:39:C7:37:B9:BB:20:CC:D9:A8:6F:D0:BF:55:E9:09:CA","sha256":"C9:C2:B4:C7:E6:CA:CC:33:A4:FF:64:2A:D2:E4:C0:97:E1:F2:EB:D6:D7:1C:F4:66:6B:5E:AB:51:40:FE:D1:6B"}}},"request":{"raw":"GET /wp-content/uploads/2019/04/team-1.jpg HTTP/1.1\r\nHost: refund-vertex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://refund-vertex.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sun, 12 Jul 2026 21:01:31 GMT\r\nserver: cloudflare\r\nlast-modified: Wed, 01 Jul 2026 12:08:30 GMT\r\naccept-ranges: bytes\r\npriority: u=5,i\r\nserver-timing: cfExtPri\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=pDpbDhslmII89pfUs5fsge5BOsW0xnyZa1n6qJH9XBK9jw5iPYah5ZlTLuOfAAmUz3H9e1dL7iYqD9ahDIwvh%2Bz9O9xq2M%2FAy57fkIQq1ItKoncWLHLQZUGCSyOFyZVtdQGOUQ%3D%3D\"}]}\r\ncontent-type: image/jpeg\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1a2fbaa6a77712d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 70297\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":70297,"size_decoded":70968,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1000x1000, components 3","md5":"ca42d285361b2d02b9ce874b08610490","sha1":"2cd151a53e11a6e6fc7b6643af559947f05bb131","sha256":"2ba1ead6b42a8a11ff753c50671e86ab01e841ac4615b86b1ca577f854eb31e2","sha512":"3e3402571dae7d5fc2c971d2856099ec0ff254b145eeebcd380f7ca6869fcf53f99c893786b27f2e7dff22d7d6a091b11f11222012e5f551f3ccd66298ff82f6","ssdeep":"1536:tliKfVcbcQbEsKX1pmFtZD/bUgI68aTfGy6fdBNnEfCO6FlPQR:LiScbcQosK3mrl/I68iGyADNnPa","tlshash":"5e63021f3061da22ff09023712ac0f9969c6be2d2d7db25a4cb0790f9627761d047829","first_seen":"2026-07-11T07:18:49.190959Z","last_seen":"2026-07-12T21:02:12.745783Z","times_seen":2,"resource_available":false,"data":null}},"time_used":6373,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6318,"receive":55,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"refund-vertex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"refund-vertex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"vertex-legal.org/wp-content/uploads/2023/02/png-attoryu1.png","fqdn":"vertex-legal.org","domain":"vertex-legal.org","tld":"org"},"ip":{"addr":"172.67.144.12","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://refund-vertex.com/","date":"2026-07-12T21:01:32.284Z","timestamp":1783890092284,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vertex-legal.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 30 Jun 2026 13:44:58 GMT","end":"Mon, 28 Sep 2026 14:43:29 GMT"},"fingerprint":{"sha1":"4A:1A:1E:6F:F9:02:AD:DF:24:95:C3:D8:C0:17:35:DE:BC:CC:5C:B8","sha256":"52:9D:7E:11:74:8D:04:4F:63:5C:A2:08:18:17:46:61:5A:70:6D:A9:F2:00:79:CC:A8:3B:F5:4C:BA:EE:A0:63"}}},"request":{"raw":"GET /wp-content/uploads/2023/02/png-attoryu1.png HTTP/1.1\r\nHost: vertex-legal.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://refund-vertex.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://refund-vertex.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sun, 12 Jul 2026 21:01:32 GMT\r\nserver: cloudflare\r\nlast-modified: Wed, 01 Jul 2026 12:08:58 GMT\r\naccept-ranges: bytes\r\npriority: u=5,i\r\nserver-timing: cfExtPri\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=t%2Fw48hf0FnE20XjsJffD5TYNh9cp9Fqx01gQH3elhZlry%2FFn59c8KbajSS7pX3dt3k41kbCmKT1HifDozqeoKUDotj0OXAKVwZNzbFjV9HexRZC9XO3huaeTh9aR4HdEYEDx\"}]}\r\ncontent-type: image/png\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1a2fbd4caa623eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 98939\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7948,"size_decoded":8610,"mime_type":"image/png","magic":"PNG image data, 320 x 811, 8-bit/color RGBA, non-interlaced","md5":"73d7a3bf6c183add70e0e5d902f8005f","sha1":"45cc433ee7f11823a70b07f11a4d33bc8c5ba61c","sha256":"8d333c91ee794a2d230a446ffd37bf0a28c26de8415c98392aaf58d10187f01c","sha512":"0cf8d772d3bcd2b7aac94113ca2714859025d10c56c94b8e433ce8fb8053cb4ecff3a8d1ba94b5aca353a4b82762b6f5c9f9d6f78f156dd9e2f39dc1ec892f58","ssdeep":"192:ztEeNaSjxpXUIUbT9gNmTlvspGwNymqqQa0zjY5:zt7fpXUIo95ay1TPjY5","tlshash":"63f19f3bf17da588e9d5e48978d20e1983021044fc6ccb68f9adc0ce5c755f8992e6cd","first_seen":"2026-07-11T07:18:49.151714Z","last_seen":"2026-07-12T21:02:12.747213Z","times_seen":2,"resource_available":false,"data":null}},"time_used":118,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":104,"receive":14,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vertex-legal.org/wp-content/uploads/2023/02/glitter-img.png","fqdn":"vertex-legal.org","domain":"vertex-legal.org","tld":"org"},"ip":{"addr":"172.67.144.12","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://refund-vertex.com/","date":"2026-07-12T21:01:32.292Z","timestamp":1783890092292,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vertex-legal.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 30 Jun 2026 13:44:58 GMT","end":"Mon, 28 Sep 2026 14:43:29 GMT"},"fingerprint":{"sha1":"4A:1A:1E:6F:F9:02:AD:DF:24:95:C3:D8:C0:17:35:DE:BC:CC:5C:B8","sha256":"52:9D:7E:11:74:8D:04:4F:63:5C:A2:08:18:17:46:61:5A:70:6D:A9:F2:00:79:CC:A8:3B:F5:4C:BA:EE:A0:63"}}},"request":{"raw":"GET /wp-content/uploads/2023/02/glitter-img.png HTTP/1.1\r\nHost: vertex-legal.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://refund-vertex.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sun, 12 Jul 2026 21:01:32 GMT\r\nserver: cloudflare\r\nlast-modified: Wed, 01 Jul 2026 12:08:56 GMT\r\naccept-ranges: bytes\r\npriority: u=4,i\r\nserver-timing: cfExtPri\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=MCpoIuNvqt%2FWTzvXHhQurFS6NeafFODZf6%2BAFRmhdsX8r4IQYWIKMrd6fNQcDL6SbyfQyG7B5kyzRgpB6zEQTKHfaD7YoP1fSV9KbAfEVDi9yf67xIDlRD0C%2Fm%2BJwPsKJEE3\"}]}\r\ncontent-type: image/png\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1a2fbd4de47b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 2512\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2512,"size_decoded":3177,"mime_type":"image/png","magic":"PNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced","md5":"97398b6ae14915d268f6372de5e36a81","sha1":"b8bc72bdd3f194e0d0b4601ee3bc8c02f07e6f3a","sha256":"59a280ac5378eaed7344f883b1d3aaddaf234feaccb4fd446bad1fcd80c7208f","sha512":"f5c3269b35ca8e16fa8f52c938b05cc2cde39ab444057cc674b77b0962e8966e9290ff886564ce3e8b18d2dca19c85306303da0a8c9a3397ab33b079bfcc0ebd","ssdeep":"","tlshash":"a5512c9ed5f0a95786e1d41178dae40fa42240c4abd5f1a6778bcc860f61ff0048e8e7","first_seen":"2026-01-12T06:43:32.927734Z","last_seen":"2026-07-12T21:02:12.749435Z","times_seen":3,"resource_available":false,"data":null}},"time_used":522,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":522,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"refund-vertex.com/wp-content/plugins/classic-elementor-addons-pro/assets/fonts/bootstrap-icons.woff2?e34853135f9e39acf64315236852cd5a","fqdn":"refund-vertex.com","domain":"refund-vertex.com","tld":"com"},"ip":{"addr":"104.21.18.129","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://refund-vertex.com/","date":"2026-07-12T21:01:30.473Z","timestamp":1783890090473,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"refund-vertex.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 02 Jul 2026 10:20:14 GMT","end":"Wed, 30 Sep 2026 11:18:49 GMT"},"fingerprint":{"sha1":"32:ED:60:EF:39:C7:37:B9:BB:20:CC:D9:A8:6F:D0:BF:55:E9:09:CA","sha256":"C9:C2:B4:C7:E6:CA:CC:33:A4:FF:64:2A:D2:E4:C0:97:E1:F2:EB:D6:D7:1C:F4:66:6B:5E:AB:51:40:FE:D1:6B"}}},"request":{"raw":"GET /wp-content/plugins/classic-elementor-addons-pro/assets/fonts/bootstrap-icons.woff2?e34853135f9e39acf64315236852cd5a HTTP/1.1\r\nHost: refund-vertex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://refund-vertex.com/wp-content/plugins/classic-elementor-addons-pro/assets/css/bootstrap-icons.css?ver=1.13.1\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sun, 12 Jul 2026 21:01:30 GMT\r\nserver: cloudflare\r\nlast-modified: Wed, 01 Jul 2026 09:47:51 GMT\r\naccept-ranges: bytes\r\npriority: u=3,i=?0\r\nserver-timing: cfExtPri\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=HgtEs2%2FD3mash%2FmewjWwrH28HPBcdKDhKpZrUFOLuUbJSzHP8hTUZfHUZ%2BZgqyivU30n0FcgawRFLHvMiT0bddFttmNsMyRRrM3xbaSOWRlHTdDIZrrNlgzC5O47cfFGDORU5Q%3D%3D\"}]}\r\ncontent-type: font/woff2\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1a2fbc97be9712d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 134044\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":134044,"size_decoded":134721,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 134044, version 1.0","md5":"84a4d15b9e4459b6229a7f1dccc6609c","sha1":"b441fcff939e24fa0906a37b7788788b9fddbb68","sha256":"6c75710364a1ca5604267716f6d28997b26319fdb078cf11e0b42ab66ff2ea61","sha512":"d767814d144b311254de5d248d4a1cd2777209016687c11b3a7791642d90ff267c11d0001fb30435e3767959a2a00d4076e1bc6fad3c7a58cfdb00e5c77c44ce","ssdeep":"3072:tDHos22Zs2P3qithtQxgI+oZzvHB2haro8yYMBX:FHo8s2P3qi1Q+K1hLrxmX","tlshash":"19d3127e338ead54c8b4d32963588c7522ef82c2962bb2235f71523386f94fce485517","first_seen":"2025-05-15T10:27:38.85456Z","last_seen":"2026-07-18T19:46:41.552734Z","times_seen":5401,"resource_available":false,"data":null}},"time_used":122,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":41,"receive":81,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"refund-vertex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"refund-vertex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/manrope/v20/xn7gYHE41ni1AdIRggexSg.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://refund-vertex.com/","date":"2026-07-12T21:01:30.656Z","timestamp":1783890090656,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 22 Jun 2026 08:37:23 GMT","end":"Mon, 14 Sep 2026 08:37:22 GMT"},"fingerprint":{"sha1":"CD:5B:53:23:61:72:75:37:AD:E9:F1:74:B2:D2:EE:09:81:05:55:E1","sha256":"9F:07:21:2D:14:EB:C5:C0:D4:2B:42:E4:55:80:7A:BB:AF:47:A8:BC:0C:5E:05:F3:2A:2B:1F:2A:78:4D:FF:D7"}}},"request":{"raw":"GET /s/manrope/v20/xn7gYHE41ni1AdIRggexSg.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://refund-vertex.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 24836\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sun, 12 Jul 2026 10:13:52 GMT\r\nexpires: Mon, 12 Jul 2027 10:13:52 GMT\r\ncache-control: public, max-age=31536000\r\nage: 38858\r\nlast-modified: Thu, 04 Sep 2025 17:08:28 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":24836,"size_decoded":25648,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 24836, version 1.0","md5":"938c6e8019b69313372c47dbb7a7c930","sha1":"b42951014c5eca12749d87a4706caf22dc4fe081","sha256":"a30ddcd349703aff7464c34bef3fffdff405ee50c113440d7c8693c02d210972","sha512":"5537c005cd8f321f26fe67f6292b3ec14e88ff4b2365311628dbbe4753e01e568f6881b9f2e7d71e8e6b2c261ed25f372829dd28f89f865ce574b4e1fec29614","ssdeep":"768:3KQaj5c95F1QmIwa55Go1COpZLpkkM46CU+YIC:ahj5cXow65xCM5pkkM468YB","tlshash":"a2b2f105ee49b3d4b276f1fcfa802884179282f27dabda8f3f2015981dd8e5b8d45320","first_seen":"2025-06-02T20:09:41.98255Z","last_seen":"2026-07-19T00:17:19.364535Z","times_seen":33430,"resource_available":false,"data":null}},"time_used":37,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":37,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"refund-vertex.com/wp-content/plugins/revslider/public/css/sr7.lp.css","fqdn":"refund-vertex.com","domain":"refund-vertex.com","tld":"com"},"ip":{"addr":"104.21.18.129","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://refund-vertex.com/","date":"2026-07-12T21:01:31.985Z","timestamp":1783890091985,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"refund-vertex.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 02 Jul 2026 10:20:14 GMT","end":"Wed, 30 Sep 2026 11:18:49 GMT"},"fingerprint":{"sha1":"32:ED:60:EF:39:C7:37:B9:BB:20:CC:D9:A8:6F:D0:BF:55:E9:09:CA","sha256":"C9:C2:B4:C7:E6:CA:CC:33:A4:FF:64:2A:D2:E4:C0:97:E1:F2:EB:D6:D7:1C:F4:66:6B:5E:AB:51:40:FE:D1:6B"}}},"request":{"raw":"GET /wp-content/plugins/revslider/public/css/sr7.lp.css HTTP/1.1\r\nHost: refund-vertex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://refund-vertex.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sun, 12 Jul 2026 21:01:32 GMT\r\nserver: cloudflare\r\nlast-modified: Wed, 01 Jul 2026 09:48:22 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\ncontent-encoding: zstd\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9KgbBlThTcZvX8tIqqSYRYyo2pOC%2BZkGZ6oijQmzr4MWMQl0vpODQEAXk%2F7azeH7tMTujbDdV6uJ8WfDOAX6%2BPWwRzX8HJXiZ3iEZeLm5nHCEENPaNsgx4CrH%2FAhOnwPz%2FZLJA%3D%3D\"}]}\r\ncontent-type: text/css\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\ncf-ray: a1a2fbd2ec72712d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4237,"size_decoded":1963,"mime_type":"text/css","magic":"ASCII text, with very long lines (4237), with no line terminators","md5":"93300b52a93a89d99843fcd511bf87a1","sha1":"a60fd6b5780fb4511ca69dab7471808bfe0d1801","sha256":"170208b0f6618b784e86dc7612c54930318188d38633a393404f5589b7f5f53f","sha512":"0810a69527163895f56b1bbe882ceb1c163159352e16885a940e5aa3457ef88b90464a8222dca7bf1fa5939803ac52138c4db8f5df1a9fa22c8b68757cb6fe5f","ssdeep":"96:WjTrmjxDjr/A47x4S65KY/ElyL2pJdSPTQ7:WjTrm1AIOSMKY/ElyL2pJdSP8","tlshash":"62917534916820b44513f2067bc09bee313f5584abf3070deb5bb698458f9ce2299eac","first_seen":"2024-06-17T00:33:38Z","last_seen":"2026-07-18T23:50:43.550813Z","times_seen":7100,"resource_available":false,"data":null}},"time_used":40,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":40,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"refund-vertex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"refund-vertex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"refund-vertex.com/wp-content/plugins/revslider/public/css/sr7.media.css","fqdn":"refund-vertex.com","domain":"refund-vertex.com","tld":"com"},"ip":{"addr":"104.21.18.129","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://refund-vertex.com/","date":"2026-07-12T21:01:32.069Z","timestamp":1783890092069,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"refund-vertex.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 02 Jul 2026 10:20:14 GMT","end":"Wed, 30 Sep 2026 11:18:49 GMT"},"fingerprint":{"sha1":"32:ED:60:EF:39:C7:37:B9:BB:20:CC:D9:A8:6F:D0:BF:55:E9:09:CA","sha256":"C9:C2:B4:C7:E6:CA:CC:33:A4:FF:64:2A:D2:E4:C0:97:E1:F2:EB:D6:D7:1C:F4:66:6B:5E:AB:51:40:FE:D1:6B"}}},"request":{"raw":"GET /wp-content/plugins/revslider/public/css/sr7.media.css HTTP/1.1\r\nHost: refund-vertex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://refund-vertex.com/\r\nCookie: _gcl_au=1.1.983493188.1783890092\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sun, 12 Jul 2026 21:01:32 GMT\r\nserver: cloudflare\r\nlast-modified: Wed, 01 Jul 2026 09:48:22 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\ncontent-encoding: zstd\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Td9%2BsSoENgytKB5NhpGEIhuQRNTuGdOq%2F3IFf%2BwFP5a7iMO9TH5meBzFKsWxVwirUtzs6teZeEh96bOPIUxgqykci5B%2Bc2%2BIAubHJl02%2BYC7FRqmPNnYbItmowHbx0lJ3DHSWQ%3D%3D\"}]}\r\ncontent-type: text/css\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\ncf-ray: a1a2fbd37c7c712d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1811,"size_decoded":1343,"mime_type":"text/css","magic":"ASCII text, with very long lines (1811), with no line terminators","md5":"6b5e107cf9b9a2dd46543636d75aca5e","sha1":"d07000848ad01c298a4ffa4b6a3d4d25213f6183","sha256":"95f85566f1a367477de1b548a395aa8c5d267e29faaf86925bbe3779b67a57d4","sha512":"223f9bffb1fa7c190d95911f19e5e1db89041a86ff3c4b980d5f37e452f97d03eca15a1260ec15f04eedc0cd7b09e3724b8aae253701589ab8528e56c600068f","ssdeep":"","tlshash":"40311011599910740117f30e68e1b34ea03fcdc1af23371eed5bb628cb8ba842895b9e","first_seen":"2025-03-20T06:26:28.633504Z","last_seen":"2026-07-18T23:50:43.513706Z","times_seen":4819,"resource_available":false,"data":null}},"time_used":39,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":39,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"refund-vertex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"refund-vertex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"refund-vertex.com/wp-json/sliderrevolution/sliders/2?srengine=7\u0026slideid=4","fqdn":"refund-vertex.com","domain":"refund-vertex.com","tld":"com"},"ip":{"addr":"104.21.18.129","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://refund-vertex.com/","date":"2026-07-12T21:01:33.376Z","timestamp":1783890093376,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"refund-vertex.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 02 Jul 2026 10:20:14 GMT","end":"Wed, 30 Sep 2026 11:18:49 GMT"},"fingerprint":{"sha1":"32:ED:60:EF:39:C7:37:B9:BB:20:CC:D9:A8:6F:D0:BF:55:E9:09:CA","sha256":"C9:C2:B4:C7:E6:CA:CC:33:A4:FF:64:2A:D2:E4:C0:97:E1:F2:EB:D6:D7:1C:F4:66:6B:5E:AB:51:40:FE:D1:6B"}}},"request":{"raw":"GET /wp-json/sliderrevolution/sliders/2?srengine=7\u0026slideid=4 HTTP/1.1\r\nHost: refund-vertex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/x-www-form-urlencoded; charset=UTF-8\r\nX-Requested-With: XMLHttpRequest\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://refund-vertex.com/\r\nCookie: _gcl_au=1.1.983493188.1783890092\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sun, 12 Jul 2026 21:01:34 GMT\r\nserver: cloudflare\r\nx-robots-tag: noindex\r\nlink: \u003chttps://refund-vertex.com/wp-json/\u003e; rel=\"https://api.w.org/\"\r\nx-content-type-options: nosniff\r\naccess-control-expose-headers: X-WP-Total, X-WP-TotalPages, Link\r\naccess-control-allow-headers: Authorization, X-WP-Nonce, Content-Disposition, Content-MD5, Content-Type\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=GtOGd85u6I2Ae3dAnz%2BGGu48NQOUm64LSJ18Nkgorqy7CyJcUdh0gfbStcCTwZpyD7M7wwa%2FygQRJ0wH%2FNe3E%2BI01GW0ipq2WtI9EqQjkGZpO6PtPMd0RBV6saVARTXWINzVcA%3D%3D\"}]}\r\npriority: u=3,i=?0\r\ncontent-type: application/json; charset=UTF-8\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: zstd\r\ncf-ray: a1a2fbdb9cf0712d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"WordPress","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":22750,"size_decoded":4621,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"f3e37f465bff61f5ab90945df94086ca","sha1":"54d7dadbc142acdd3a8201b28fce08792b4b90b1","sha256":"2fce9b0ae59fa496ece6abc63c7cf617aff38fb7410432df40c7aad1c3099ea3","sha512":"274916bc0904401545acaef0e9e9289221b8cd7b07d6f9fa3f16c3f1449493cdde765f18d08c9625dff4e65f230811c51bdf563eb9b39192a75ef6fdf00d5a75","ssdeep":"384:ADtDRXdHwRXdHDebtDRXdHwRXdHDePd3zYYYE7Vl/Svu6tDRXdHwRXdHEdzdDtDg:AXXdH4XdHKfXdH4XdHK1jYYY4/SGGXdS","tlshash":"87a20332556b4ee2a3e393c1dbdb35414ce8a15a7eec2246d3a48d5c6fc5b4a230d339","first_seen":"2026-07-11T07:18:49.183253Z","last_seen":"2026-07-12T21:02:12.752604Z","times_seen":2,"resource_available":false,"data":null}},"time_used":814,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":785,"receive":29,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"refund-vertex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"refund-vertex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"refund-vertex.com/wp-content/plugins/elementor/assets/css/widget-star-rating.min.css?ver=4.1.4","fqdn":"refund-vertex.com","domain":"refund-vertex.com","tld":"com"},"ip":{"addr":"104.21.18.129","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://refund-vertex.com/","date":"2026-07-12T21:01:25.131Z","timestamp":1783890085131,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"refund-vertex.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 02 Jul 2026 10:20:14 GMT","end":"Wed, 30 Sep 2026 11:18:49 GMT"},"fingerprint":{"sha1":"32:ED:60:EF:39:C7:37:B9:BB:20:CC:D9:A8:6F:D0:BF:55:E9:09:CA","sha256":"C9:C2:B4:C7:E6:CA:CC:33:A4:FF:64:2A:D2:E4:C0:97:E1:F2:EB:D6:D7:1C:F4:66:6B:5E:AB:51:40:FE:D1:6B"}}},"request":{"raw":"GET /wp-content/plugins/elementor/assets/css/widget-star-rating.min.css?ver=4.1.4 HTTP/1.1\r\nHost: refund-vertex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://refund-vertex.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sun, 12 Jul 2026 21:01:28 GMT\r\nserver: cloudflare\r\nlast-modified: Tue, 30 Jun 2026 16:15:02 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\ncontent-encoding: zstd\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=arWKOpDPd5%2BlpHHERPBRxZ4hsilJzGHvGQkc6VHQw8t3b6nlTt65I5XFjkz425XCzWiEzpIMRY5YHyr7mRJlD1r2MSwdtkD7TrEpsdJMSSJ7zzQTOmNbPjxrrje0I%2Fcq4TANJA%3D%3D\"}]}\r\ncontent-type: text/css\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\ncf-ray: a1a2fba81a1a712d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4802,"size_decoded":1353,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (4800), with no line terminators","md5":"6c8f3c1758fad5598da50cfb7d390372","sha1":"3aad0bee30987583ecd61e82e51a2331433f1539","sha256":"172ea2f3be4da1aa53dda3d8d93a16bf93cf2743d92bdb8cc2c8f0fcfa6f8cec","sha512":"85abc505fb05f4620191aa61797c4246ea9675e383bb4324976c972cbfcb0e9d95ab721b7d1b0c44a480cbbda0805250e61674dad8bd05329258fa39f2e59736","ssdeep":"96:O9VJOICQewKIFj1QtLgZOym57m4m2mKj72YrYad:O9NRtZOr5Ctn2L","tlshash":"06a18fa27d6b654d0e9f946a1827338cc6ba94d4c9c720add6cf214b0abfdc52390d5c","first_seen":"2025-11-03T01:57:16.427301Z","last_seen":"2026-07-18T21:05:50.918615Z","times_seen":2297,"resource_available":false,"data":null}},"time_used":2973,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2973,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"refund-vertex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"refund-vertex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"refund-vertex.com/wp-includes/js/jquery/jquery.min.js?ver=3.7.1","fqdn":"refund-vertex.com","domain":"refund-vertex.com","tld":"com"},"ip":{"addr":"104.21.18.129","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://refund-vertex.com/","date":"2026-07-12T21:01:25.384Z","timestamp":1783890085384,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"refund-vertex.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 02 Jul 2026 10:20:14 GMT","end":"Wed, 30 Sep 2026 11:18:49 GMT"},"fingerprint":{"sha1":"32:ED:60:EF:39:C7:37:B9:BB:20:CC:D9:A8:6F:D0:BF:55:E9:09:CA","sha256":"C9:C2:B4:C7:E6:CA:CC:33:A4:FF:64:2A:D2:E4:C0:97:E1:F2:EB:D6:D7:1C:F4:66:6B:5E:AB:51:40:FE:D1:6B"}}},"request":{"raw":"GET /wp-includes/js/jquery/jquery.min.js?ver=3.7.1 HTTP/1.1\r\nHost: refund-vertex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://refund-vertex.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sun, 12 Jul 2026 21:01:30 GMT\r\nserver: cloudflare\r\nlast-modified: Mon, 28 Aug 2023 17:14:23 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\ncontent-encoding: zstd\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=PI26zto4vWznpwXHHKVwgfI%2Bgr5q%2FQGu7Nj9lN7VUVUr6PBKtdR8GSTkyMy3hXmMM9HAE%2Fw871vJrT4%2BdbHGSpoFuFIodPe8FuZ5pX4fhtHdXQ181pIh0adcPU2cAlFI1LB6%2FA%3D%3D\"}]}\r\ncontent-type: text/javascript\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\ncf-ray: a1a2fba9aa3f712d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":87553,"size_decoded":33521,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (65447)","md5":"826eb77e86b02ab7724fe3d0141ff87c","sha1":"79cd3587d565afe290076a8d36c31c305a573d18","sha256":"cb6f2d32c49d1c2b25e9ffc9aaafa3f83075346c01bcd4ae6eb187392a4292cf","sha512":"fc79fdb76763025dc39fac045a215ff155ef2f492a0e9640079d6f089fa6218af2b3ab7c6eaf636827dee9294e6939a95ab24554e870c976679c25567ad6374c","ssdeep":"1536:0RUX9uDgwxcy2KVBNwchN6SLaHEk2BSrBESp+a/IEk4aAocVi8SMBQ47GKO:sHNwcv9VBQpLl88SMBQ47GKO","tlshash":"7483f8df77ca702247ab30b9006f550bf276199d684d4400f159d8e9bcb8a4a827bf7e","first_seen":"2023-11-03T09:26:43Z","last_seen":"2026-07-19T00:19:55.543474Z","times_seen":977971,"resource_available":true,"data":null}},"time_used":4950,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":4897,"receive":53,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"refund-vertex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"refund-vertex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"refund-vertex.com/wp-content/plugins/cool-formkit-for-elementor-forms/assets/js/intlTelInput.js?ver=1.4.3","fqdn":"refund-vertex.com","domain":"refund-vertex.com","tld":"com"},"ip":{"addr":"104.21.18.129","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://refund-vertex.com/","date":"2026-07-12T21:01:25.453Z","timestamp":1783890085453,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"refund-vertex.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 02 Jul 2026 10:20:14 GMT","end":"Wed, 30 Sep 2026 11:18:49 GMT"},"fingerprint":{"sha1":"32:ED:60:EF:39:C7:37:B9:BB:20:CC:D9:A8:6F:D0:BF:55:E9:09:CA","sha256":"C9:C2:B4:C7:E6:CA:CC:33:A4:FF:64:2A:D2:E4:C0:97:E1:F2:EB:D6:D7:1C:F4:66:6B:5E:AB:51:40:FE:D1:6B"}}},"request":{"raw":"GET /wp-content/plugins/cool-formkit-for-elementor-forms/assets/js/intlTelInput.js?ver=1.4.3 HTTP/1.1\r\nHost: refund-vertex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://refund-vertex.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sun, 12 Jul 2026 21:01:30 GMT\r\nserver: cloudflare\r\nlast-modified: Thu, 02 Jul 2026 06:40:31 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncontent-encoding: zstd\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=e3hOpsJGSZq6AZ3ryub4XwXOFcAF7fMqCK0F7uMa7TXHzuDl2uxCfZxkZ0Oc5RjVl5byeyBbTXRl9nyerS0QZq80E7addODQLh1BwsRjmmNWrBFdtvejeQw1dodiJPt20M%2BzDw%3D%3D\"}]}\r\ncontent-type: text/javascript\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\ncf-ray: a1a2fbaa1a64712d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":74407,"size_decoded":19328,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (391), with CRLF line terminators","md5":"cca460dca81b770f8a2d58ca30dbd0db","sha1":"df09ef5adf01fd3ba09bf8f3ee0ae510a044f95e","sha256":"e513d164e0ce3f8da8b7ba765d4b058cc1eba920010e8226041e0f9422cb77ec","sha512":"a66bc3a7e549cae4c4e177f7ef14d8382f900fcd5add058edd14d7d85c97586dea26db7f2e8a110431793011f5fb7ba462ae9d34147a6f329524397218585c12","ssdeep":"768:w6556XvBYf0iBUqV2cOByosmZSOOnDNcXK4GDUSuUHKoKCOmjyB7Ge4R96m/lRun:w655EZieHcLcSNcXFGDUSTD9CEfU","tlshash":"3173403bd3084e2a8476937aef998042fa15431f5545491b3d7c8bcc1fb7463aaa1fac","first_seen":"2025-10-18T02:52:31.555056Z","last_seen":"2026-07-12T21:02:12.758302Z","times_seen":8,"resource_available":true,"data":null}},"time_used":5184,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5129,"receive":55,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"refund-vertex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"refund-vertex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/roboto/v51/KFO5CnqEu92Fr1Mu53ZEC9_Vu3r1gIhOszmkBnka.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://refund-vertex.com/","date":"2026-07-12T21:01:30.649Z","timestamp":1783890090649,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 22 Jun 2026 08:37:23 GMT","end":"Mon, 14 Sep 2026 08:37:22 GMT"},"fingerprint":{"sha1":"CD:5B:53:23:61:72:75:37:AD:E9:F1:74:B2:D2:EE:09:81:05:55:E1","sha256":"9F:07:21:2D:14:EB:C5:C0:D4:2B:42:E4:55:80:7A:BB:AF:47:A8:BC:0C:5E:05:F3:2A:2B:1F:2A:78:4D:FF:D7"}}},"request":{"raw":"GET /s/roboto/v51/KFO5CnqEu92Fr1Mu53ZEC9_Vu3r1gIhOszmkBnka.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://refund-vertex.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 47208\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 09 Jul 2026 02:12:37 GMT\r\nexpires: Fri, 09 Jul 2027 02:12:37 GMT\r\ncache-control: public, max-age=31536000\r\nage: 326933\r\nlast-modified: Wed, 18 Feb 2026 19:52:51 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":47208,"size_decoded":48021,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 47208, version 1.0","md5":"2465bec3a1d5ad40ceb1828a07763d2f","sha1":"656fca193330ac8ec592a0942f4e7d718fa69cbf","sha256":"14f23757c6b41b4b6c0b967ca3fa74ff47a868728158373461c4e6e4b6368f19","sha512":"171195e97870d0794a5762cb3324c2994542a534f4e8ec490400f5667527c48c0c2814071fe9449f4d78169b2d35228466cfadea81229f6ebddf791dd3fb2099","ssdeep":"768:/FAcvRO+HWzD3hVYA6By+jNbKulKiuJ+YAnmWjKiXN0EoGlknbxWuFYCrJRSx89Z:33sD38k+jYulvuUHnmTq0bGlyFWuFYiV","tlshash":"6123f16ca80df34596fae4f76b11fcebf248bc9177c5ee10278c864d8575aa5cc28241","first_seen":"2026-02-19T22:36:20.820122Z","last_seen":"2026-07-18T23:37:43.652222Z","times_seen":17787,"resource_available":false,"data":null}},"time_used":47,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":30,"receive":17,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/dmsans/v17/rP2Wp2ywxg089UriCZaSExd86J3t9jz86MvyyKy58UfkvU0oaw.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://refund-vertex.com/","date":"2026-07-12T21:01:32.294Z","timestamp":1783890092294,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 22 Jun 2026 08:37:23 GMT","end":"Mon, 14 Sep 2026 08:37:22 GMT"},"fingerprint":{"sha1":"CD:5B:53:23:61:72:75:37:AD:E9:F1:74:B2:D2:EE:09:81:05:55:E1","sha256":"9F:07:21:2D:14:EB:C5:C0:D4:2B:42:E4:55:80:7A:BB:AF:47:A8:BC:0C:5E:05:F3:2A:2B:1F:2A:78:4D:FF:D7"}}},"request":{"raw":"GET /s/dmsans/v17/rP2Wp2ywxg089UriCZaSExd86J3t9jz86MvyyKy58UfkvU0oaw.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://refund-vertex.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 39712\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 06 Jul 2026 13:46:34 GMT\r\nexpires: Tue, 06 Jul 2027 13:46:34 GMT\r\ncache-control: public, max-age=31536000\r\nage: 544498\r\nlast-modified: Wed, 10 Sep 2025 16:31:35 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":39712,"size_decoded":40525,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 39712, version 1.0","md5":"d981d4cbcf42c4a39cb417e9673b683b","sha1":"5f8b496f77d410d16bdebb9c274cfb899d22f4a1","sha256":"f1a235db5bcb8730707844188d35201ecdf63e56c5dcce97bab24a9c7066091d","sha512":"9aac6a14434a483a6475d50246930e24ddd57d4c0760e47dd0b38106fba02555059ee7bf87fd53b16006e7939ac1e3b2685b6baca448717ea626c4d1f7438ed3","ssdeep":"768:IVdy5zzQjGgkbcR6OT6wHbYkYw15zdDJVn2d4F882A6rcck:P5oKbcR626wLn54288v","tlshash":"e603f11855db2b11cc8beb703a3a603e4823a55a0900dae8ed7f7d76d9d5e32c45f983","first_seen":"2025-09-14T19:53:40.224227Z","last_seen":"2026-07-18T21:40:31.498487Z","times_seen":3115,"resource_available":false,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"refund-vertex.com/wp-content/plugins/elementor-pro/assets/js/form.71055747203b48a65a24.bundle.min.js","fqdn":"refund-vertex.com","domain":"refund-vertex.com","tld":"com"},"ip":{"addr":"104.21.18.129","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://refund-vertex.com/","date":"2026-07-12T21:01:32.337Z","timestamp":1783890092337,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"refund-vertex.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 02 Jul 2026 10:20:14 GMT","end":"Wed, 30 Sep 2026 11:18:49 GMT"},"fingerprint":{"sha1":"32:ED:60:EF:39:C7:37:B9:BB:20:CC:D9:A8:6F:D0:BF:55:E9:09:CA","sha256":"C9:C2:B4:C7:E6:CA:CC:33:A4:FF:64:2A:D2:E4:C0:97:E1:F2:EB:D6:D7:1C:F4:66:6B:5E:AB:51:40:FE:D1:6B"}}},"request":{"raw":"GET /wp-content/plugins/elementor-pro/assets/js/form.71055747203b48a65a24.bundle.min.js HTTP/1.1\r\nHost: refund-vertex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://refund-vertex.com/\r\nCookie: _gcl_au=1.1.983493188.1783890092\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sun, 12 Jul 2026 21:01:32 GMT\r\nserver: cloudflare\r\nlast-modified: Wed, 01 Jul 2026 06:49:12 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncontent-encoding: zstd\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=aKs6Pq%2Fp4KiQhrvGa%2B7X384Jx9%2FqLnYAiQHPMVIbs3mQVQPmwUCT8nKFbkYsteye1ee7FLNlbDR%2FHOP7IRwHqddJQfMd23zDm%2BqFyNyZIN5Rk8wepxwFLoSXZagvGnexgk2Row%3D%3D\"}]}\r\ncontent-type: text/javascript\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\ncf-ray: a1a2fbd51c9b712d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":19776,"size_decoded":6442,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (19732)","md5":"f34693abea63981804c7308aca0a19e7","sha1":"1517a864d0b20644f305b2e17a55f9984529eaeb","sha256":"f92275f397684aeea39268449db55050a97ea82a1fdd7722da3107f37583b242","sha512":"b972690a4196faec42bec64e42f250f8fa857f2cde652bdc36aa69fb5a08736eaf780c33a02ee680403b51c343ef3d0d25b498fbc46dfa61882e55205a9ec528","ssdeep":"384:yPfucUQ8HOfXXtaij86dYmpbaX0QY+iECkGWWhdNMCHr5w//sjKHqXt5fsbu8sUU:yPfucUQ8HOfXXtaij86dYmJaX0b+iECl","tlshash":"009282a13161688b4a9e24bab893019cb70325bcb686704eb5fc08ef9774dc1733537b","first_seen":"2026-02-02T22:12:39.90288Z","last_seen":"2026-07-18T10:33:01.608862Z","times_seen":563,"resource_available":true,"data":null}},"time_used":543,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":517,"receive":26,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"refund-vertex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"refund-vertex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"refund-vertex.com/wp-content/plugins/classic-elementor-addons-pro/assets/css/shortcode-styles.css?ver=1.0","fqdn":"refund-vertex.com","domain":"refund-vertex.com","tld":"com"},"ip":{"addr":"104.21.18.129","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://refund-vertex.com/","date":"2026-07-12T21:01:25.107Z","timestamp":1783890085107,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"refund-vertex.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 02 Jul 2026 10:20:14 GMT","end":"Wed, 30 Sep 2026 11:18:49 GMT"},"fingerprint":{"sha1":"32:ED:60:EF:39:C7:37:B9:BB:20:CC:D9:A8:6F:D0:BF:55:E9:09:CA","sha256":"C9:C2:B4:C7:E6:CA:CC:33:A4:FF:64:2A:D2:E4:C0:97:E1:F2:EB:D6:D7:1C:F4:66:6B:5E:AB:51:40:FE:D1:6B"}}},"request":{"raw":"GET /wp-content/plugins/classic-elementor-addons-pro/assets/css/shortcode-styles.css?ver=1.0 HTTP/1.1\r\nHost: refund-vertex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://refund-vertex.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sun, 12 Jul 2026 21:01:25 GMT\r\nserver: cloudflare\r\nlast-modified: Wed, 01 Jul 2026 09:47:51 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\ncontent-encoding: zstd\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=BPMnXSOPjKOHXI6uxHa3QLACdoBBgUd3Fcuxuy8uJN1G24N7BFz5l4irstUqfF7bXNQfZIEeZRkAbPJ%2BY2Jl%2FDyR%2BTLphmebyc5tsNg4RxoMALiZOSCf5rPTPsB5ryfG5Bvdog%3D%3D\"}]}\r\ncontent-type: text/css\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\ncf-ray: a1a2fba7ea10712d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":296,"size_decoded":809,"mime_type":"text/css","magic":"ASCII text","md5":"7bb9274713000cef4c15b7b94653a969","sha1":"3eb979807f943fa1bda5df9e484706ed707d9e87","sha256":"e1f9b0abe8d88207b70a85d34c525ea812e40ca6651a5c41b2034ca311b453c8","sha512":"5909eb78f3ff19e7143cd7dd44d181299300259a6e4d1c9f8d113f673440f380c1ce9bd6706a00530b94c39638c8b72d9595becc3d0c6596132f8623c0aa67c4","ssdeep":"","tlshash":"1de080487c50b1434595e030671ad0aefec44257539d5dd40c47d89d95b17c086dff9c","first_seen":"2025-08-02T07:18:45.744233Z","last_seen":"2026-07-12T21:02:12.761014Z","times_seen":36,"resource_available":false,"data":null}},"time_used":116,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":116,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"refund-vertex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"refund-vertex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ipapi.co/json","fqdn":"ipapi.co","domain":"ipapi.co","tld":"co"},"ip":{"addr":"172.67.69.226","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://refund-vertex.com/","date":"2026-07-12T21:01:32.329Z","timestamp":1783890092329,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_ECDSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"ipapi.co","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Jun 2026 05:11:37 GMT","end":"Sun, 13 Sep 2026 06:11:34 GMT"},"fingerprint":{"sha1":"CE:63:0D:F2:C0:D2:04:93:CA:AE:0D:AA:ED:9F:31:01:7A:BC:69:40","sha256":"0D:2E:E4:8D:BD:B6:76:95:B5:BD:B8:C5:CE:61:98:B9:6E:81:B5:4B:16:5C:C0:0C:C9:FB:54:0B:B4:A6:7C:65"}}},"request":{"raw":"GET /json HTTP/1.1\r\nHost: ipapi.co\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://refund-vertex.com/\r\nOrigin: https://refund-vertex.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 12 Jul 2026 21:01:35 GMT\r\ncontent-type: application/json\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\nallow: OPTIONS, OPTIONS, POST, GET, HEAD\r\nx-frame-options: DENY\r\nvary: Host, origin\r\naccess-control-allow-origin: https://refund-vertex.com\r\nx-content-type-options: nosniff\r\nreferrer-policy: same-origin\r\ncross-origin-opener-policy: same-origin\r\ncontent-security-policy-report-only: default-src 'self'; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://*.stripe.com https://*.paddle.com https://www.google.com https://www.gstatic.com https://maps.gstatic.com https://maps.googleapis.com https://www.google.com/recaptcha/ https://www.gstatic.com/recaptcha/; style-src 'self' 'unsafe-inline' https://*.paddle.com https://fonts.gstatic.com https://fonts.googleapis.com; img-src 'self' data: https://ipapi.co https://maps.gstatic.com https://maps.googleapis.com https://*.stripe.com; font-src 'self' data: https://fonts.gstatic.com https://fonts.googleapis.com; frame-src 'self' https://www.google.com https://*.stripe.com https://*.paddle.com https://www.google.com/recaptcha/ https://recaptcha.google.com/recaptcha/; connect-src 'self' https://ipapi.co/ https://*.paddle.com https://*.stripe.com https://maps.googleapis.com https://www.google.com/recaptcha/; object-src 'none'; frame-ancestors 'none'; base-uri 'self'; form-action 'self';\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4mOyXXXJ2hFpYLciEQEbquNpdjDDWzg9ua8f6Zqk4SFITKgkT2G7PNIALGlYQbVb6rkd6qnxbuLbjM%2FaKKau98XCdlkPt%2BbnZUrhB%2Fhbb9SjRe%2F%2BFJ607wgC\"}]}\r\ncontent-encoding: br\r\ncf-ray: a1a2fbe89f64568d-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":740,"size_decoded":2109,"mime_type":"application/json","magic":"JSON text data","md5":"56fa0cc157befab41f7ca09bcbcf6ba0","sha1":"218ffc9c9caa468ff56f9abdec6fa8b77eea1362","sha256":"56ae1d62ced9e47f11decc4556f9a81def550c64ba66d466f3e5e979b7c7f43f","sha512":"0b3072e63f5c820a9042ed809be9a4ab9d051727b474a7eaf65a3e2e4275d724dce3bc3f55b7179634fa1907bebe0f1e7b302af0ae737104e53a8517fb028323","ssdeep":"","tlshash":"3c01df68e4780f7b9cb8135870786817113462175e563a8e7bd4a74d0f8d8bf30b135e","first_seen":"2026-07-09T15:47:21.439328Z","last_seen":"2026-07-19T00:01:05.19593Z","times_seen":405,"resource_available":false,"data":null}},"time_used":3363,"timings":{"blocked":0,"dns":3,"connect":1,"send":0,"wait":234,"receive":0,"ssl":3125},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"refund-vertex.com/wp-content/plugins/cool-formkit-for-elementor-forms/assets/flags/in.svg","fqdn":"refund-vertex.com","domain":"refund-vertex.com","tld":"com"},"ip":{"addr":"104.21.18.129","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://refund-vertex.com/","date":"2026-07-12T21:01:32.341Z","timestamp":1783890092341,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"refund-vertex.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 02 Jul 2026 10:20:14 GMT","end":"Wed, 30 Sep 2026 11:18:49 GMT"},"fingerprint":{"sha1":"32:ED:60:EF:39:C7:37:B9:BB:20:CC:D9:A8:6F:D0:BF:55:E9:09:CA","sha256":"C9:C2:B4:C7:E6:CA:CC:33:A4:FF:64:2A:D2:E4:C0:97:E1:F2:EB:D6:D7:1C:F4:66:6B:5E:AB:51:40:FE:D1:6B"}}},"request":{"raw":"GET /wp-content/plugins/cool-formkit-for-elementor-forms/assets/flags/in.svg HTTP/1.1\r\nHost: refund-vertex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://refund-vertex.com/\r\nCookie: _gcl_au=1.1.983493188.1783890092\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sun, 12 Jul 2026 21:01:32 GMT\r\nserver: cloudflare\r\nlast-modified: Thu, 02 Jul 2026 06:40:31 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i\r\ncontent-encoding: zstd\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=hiNqwg%2BxE6KG2%2FVn7sERD8hVd2YlZRHS92MC8TrQi01VNoy7rQmz58KFlpOUvUCYK7ujD%2FgbjMFzD1pTu1ohiTnQg8o%2F2nx3%2F8CXoKZ5t5WXRf3jzxQHaf7OZGwA7OfW%2FLa6xg%3D%3D\"}]}\r\ncontent-type: image/svg+xml\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\ncf-ray: a1a2fbd52c9d712d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1115,"size_decoded":1058,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"87557806fedf241e133a67ee2c224311","sha1":"c43aac330c3cafa393fc7bef66a6ad6c19891f82","sha256":"9e2755b5975c3dd97950ce7e49037abaff19c0cbebafd2b639f3eea0866f28e5","sha512":"757d6b7092d624760eec1b7f8e0c5b426f980df9f302e174ed6223ee395d7c0bc1661edabbb40aafe14e4e62aa441741a0e0ab974c167f4526353031cf7c0b18","ssdeep":"","tlshash":"9e217b54a0caa82d4b35c340d7eced9cda0790c3510a06abf52e398f1b7baf245e720d","first_seen":"2026-05-05T19:20:13.297781Z","last_seen":"2026-07-12T21:02:12.764844Z","times_seen":5,"resource_available":false,"data":null}},"time_used":42,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":42,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"refund-vertex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"refund-vertex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"refund-vertex.com/wp-content/plugins/cool-formkit-for-elementor-forms/assets/js/ccfef-translations.min.js?ver=1.4.3","fqdn":"refund-vertex.com","domain":"refund-vertex.com","tld":"com"},"ip":{"addr":"104.21.18.129","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://refund-vertex.com/","date":"2026-07-12T21:01:25.455Z","timestamp":1783890085455,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"refund-vertex.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 02 Jul 2026 10:20:14 GMT","end":"Wed, 30 Sep 2026 11:18:49 GMT"},"fingerprint":{"sha1":"32:ED:60:EF:39:C7:37:B9:BB:20:CC:D9:A8:6F:D0:BF:55:E9:09:CA","sha256":"C9:C2:B4:C7:E6:CA:CC:33:A4:FF:64:2A:D2:E4:C0:97:E1:F2:EB:D6:D7:1C:F4:66:6B:5E:AB:51:40:FE:D1:6B"}}},"request":{"raw":"GET /wp-content/plugins/cool-formkit-for-elementor-forms/assets/js/ccfef-translations.min.js?ver=1.4.3 HTTP/1.1\r\nHost: refund-vertex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://refund-vertex.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sun, 12 Jul 2026 21:01:31 GMT\r\nserver: cloudflare\r\nlast-modified: Thu, 02 Jul 2026 06:40:31 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncontent-encoding: zstd\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=AZxzA4CigHdT5f%2F0yRTuXuVZTtbMeB9wJP%2BtIp8Se2uaaxiHl1UaYpXhP13f8BKZ1qKglw3L7exRjVKBbIz0bL5GTm5BgiaH6fgaAHF5YVtNhciEDeYpwpri7QiIK15h4KnM6w%3D%3D\"}]}\r\ncontent-type: text/javascript\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\ncf-ray: a1a2fbaa1a65712d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":188041,"size_decoded":57306,"mime_type":"text/javascript","magic":"Unicode text, UTF-8 text, with very long lines (51742), with no line terminators","md5":"6b81863b5905a509d64e054d8725f21f","sha1":"50387aa3aad9b5851819e15c5110ac091fb5e65b","sha256":"f70d6b9878e58cdb9541ba44b41fa85dedcaa616b622fc0256f72d14b3ee8c1a","sha512":"538c54beb78d0902ce8d0577e0ffc4a95ccfadcbf719c3714cc457424505d40d70faf7ce581295e3f32a82e9e3c4291cbafebea084d09c5737cc115c543d5e1a","ssdeep":"1536:HvCMbKB/Is2NosfdNGAggJ0WrKaBJ10PeCkY9ZrvWTDuDFLuVrqLOJu9p5Eh:PCMWsCgXrKO0Pe3oZ7WnRRJu9LEh","tlshash":"0004e61d8ff6d52d3475edaaf44c7a31f0292db59196dbc20c2b874966c0630a22de7c","first_seen":"2025-09-24T20:13:45.670476Z","last_seen":"2026-07-12T21:02:12.767931Z","times_seen":10,"resource_available":true,"data":null}},"time_used":6398,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6316,"receive":82,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"refund-vertex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"refund-vertex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"vertex-legal.org/wp-content/uploads/2023/02/sign-1.png","fqdn":"vertex-legal.org","domain":"vertex-legal.org","tld":"org"},"ip":{"addr":"172.67.144.12","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://refund-vertex.com/","date":"2026-07-12T21:01:32.281Z","timestamp":1783890092281,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vertex-legal.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 30 Jun 2026 13:44:58 GMT","end":"Mon, 28 Sep 2026 14:43:29 GMT"},"fingerprint":{"sha1":"4A:1A:1E:6F:F9:02:AD:DF:24:95:C3:D8:C0:17:35:DE:BC:CC:5C:B8","sha256":"52:9D:7E:11:74:8D:04:4F:63:5C:A2:08:18:17:46:61:5A:70:6D:A9:F2:00:79:CC:A8:3B:F5:4C:BA:EE:A0:63"}}},"request":{"raw":"GET /wp-content/uploads/2023/02/sign-1.png HTTP/1.1\r\nHost: vertex-legal.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://refund-vertex.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://refund-vertex.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sun, 12 Jul 2026 21:01:32 GMT\r\nserver: cloudflare\r\nlast-modified: Wed, 01 Jul 2026 12:08:56 GMT\r\naccept-ranges: bytes\r\npriority: u=5,i\r\nserver-timing: cfExtPri\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=WGVijL3PkiSU1HQ6xIEJtRIfTrmp7tL5MatjH2xJOkI1pNttE4yvcjQxnO0YuPsd6FgEfnlsz7eFFhW%2FEI5Wje%2FHYvj%2FzrJVWoSUxuDF2Gsd8X0Tp6eGqdpcH77udVNmggwi\"}]}\r\ncontent-type: image/png\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1a2fbd4caa423eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 4488\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4488,"size_decoded":5151,"mime_type":"image/png","magic":"PNG image data, 122 x 61, 8-bit/color RGBA, non-interlaced","md5":"c1fb0d4a48e77cef04269f27dcb8248a","sha1":"3ae3708fbf4dbfc7e02512beb1e540c69f58ecf4","sha256":"f8d6baea7a2aa16f46e9dff61795cc056fe3ba11b96eb988b2d53cdd340bb699","sha512":"f08b5ffc66a671ffe33bb72f50fba746f8101c5da22f6f2479349f8d19469866d6ce9c3275b58be79810f916dbfa6a771816b3571500d1fce8bc5df55eab2ffb","ssdeep":"96:BY2UPUoQMh9GrVouejYB98iKTJQ6HTuoeM/e2m8Fd/t:B+UoVjGBPejYBTKNQGuZ8FH","tlshash":"01917c9af89e0d4083eccd793cfa2cb258176e0c1eb1af3e5dcaca18666151b88144c3","first_seen":"2026-07-11T07:18:49.083278Z","last_seen":"2026-07-12T21:02:12.77212Z","times_seen":2,"resource_available":false,"data":null}},"time_used":105,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":104,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"refund-vertex.com/wp-content/plugins/elementor/assets/js/webpack.runtime.min.js?ver=4.1.4","fqdn":"refund-vertex.com","domain":"refund-vertex.com","tld":"com"},"ip":{"addr":"104.21.18.129","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://refund-vertex.com/","date":"2026-07-12T21:01:25.433Z","timestamp":1783890085433,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"refund-vertex.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 02 Jul 2026 10:20:14 GMT","end":"Wed, 30 Sep 2026 11:18:49 GMT"},"fingerprint":{"sha1":"32:ED:60:EF:39:C7:37:B9:BB:20:CC:D9:A8:6F:D0:BF:55:E9:09:CA","sha256":"C9:C2:B4:C7:E6:CA:CC:33:A4:FF:64:2A:D2:E4:C0:97:E1:F2:EB:D6:D7:1C:F4:66:6B:5E:AB:51:40:FE:D1:6B"}}},"request":{"raw":"GET /wp-content/plugins/elementor/assets/js/webpack.runtime.min.js?ver=4.1.4 HTTP/1.1\r\nHost: refund-vertex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://refund-vertex.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sun, 12 Jul 2026 21:01:30 GMT\r\nserver: cloudflare\r\nlast-modified: Tue, 30 Jun 2026 16:15:02 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncontent-encoding: zstd\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2BV9qYYWkFo4dYp5Gtqfl75RsgLcZOdhKcXmUaxVlluNS5i1zSrJ7n2IFdCbMeqvdelpdtoTvQ7ZR0q%2BRNwl8XIZXigrAhq6I6y3hFS%2BlagnHWFf9qUFPOgdq82yddbhGFwKyjA%3D%3D\"}]}\r\ncontent-type: text/javascript\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\ncf-ray: a1a2fba9fa55712d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5819,"size_decoded":3300,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (5819), with no line terminators","md5":"0d490d1bad7e9038b5741f77a7bcee6c","sha1":"64f3096d6f0121949d2b88ef19d4b9adcf38fd89","sha256":"8dd3674bae946e2e04bc962443f0994d736a761bb28e816c20aee6391ef242ed","sha512":"9860efe572a0bda18b274965bc81ae0f513a1c826eeaf9b67cc7b6cec2b78164a67ee15f586e63905cf6b8cc520b00039ff7e9e1460b32dd0977dc4a85cd24b2","ssdeep":"96:+nsL0Z9Z4JfrjqyWiNDy9XOWZp5Rm4leN8EVrzLyVx2UlKBKGarNcl8/2:WsLGyrjiiNWZ5RmHFJW6x7G/2","tlshash":"1cc161941a54fd2b21e139d8e01ba775253ec0373c1af981fa32eced54e4ed087aa531","first_seen":"2026-05-12T16:52:28.591446Z","last_seen":"2026-07-19T00:13:06.918462Z","times_seen":16167,"resource_available":true,"data":null}},"time_used":5092,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5092,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"refund-vertex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"refund-vertex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"refund-vertex.com/wp-content/uploads/2019/04/team-2-1.jpg","fqdn":"refund-vertex.com","domain":"refund-vertex.com","tld":"com"},"ip":{"addr":"104.21.18.129","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://refund-vertex.com/","date":"2026-07-12T21:01:25.501Z","timestamp":1783890085501,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"refund-vertex.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 02 Jul 2026 10:20:14 GMT","end":"Wed, 30 Sep 2026 11:18:49 GMT"},"fingerprint":{"sha1":"32:ED:60:EF:39:C7:37:B9:BB:20:CC:D9:A8:6F:D0:BF:55:E9:09:CA","sha256":"C9:C2:B4:C7:E6:CA:CC:33:A4:FF:64:2A:D2:E4:C0:97:E1:F2:EB:D6:D7:1C:F4:66:6B:5E:AB:51:40:FE:D1:6B"}}},"request":{"raw":"GET /wp-content/uploads/2019/04/team-2-1.jpg HTTP/1.1\r\nHost: refund-vertex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://refund-vertex.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sun, 12 Jul 2026 21:01:31 GMT\r\nserver: cloudflare\r\nlast-modified: Wed, 01 Jul 2026 12:10:10 GMT\r\naccept-ranges: bytes\r\npriority: u=5,i\r\nserver-timing: cfExtPri\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=U7X%2F3ABqTMbNhlvFnnNPUR0pQGRmi4bLjBRuGs97Yr0cdIRQnJPNd5FV3sjhtt8DTZ8goCKLsXmo%2FxNulOgZATNqxoY%2BnrdHnwnDudfDfpkYFis90Zkw97bkkc3MXi16pMcWhg%3D%3D\"}]}\r\ncontent-type: image/jpeg\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1a2fbaa6a73712d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 38717\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":38717,"size_decoded":39390,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1000x1000, components 3","md5":"ab1c533cae8f8dbff5c96ef546a505d1","sha1":"17b1224130c6bce27c394877b3927915abc0caea","sha256":"5f79d581d9330d6743440808e994834634091094f491ff5980ca0d3a520ae347","sha512":"7c26d25adc77dd06ee2842f52c1332813a3d7d61d21aba1c4941f66d2087f28b104b2d5b9b1a9cf46a31f76da56c177e2fbe3728c786df6be7645e0ffa2232b9","ssdeep":"768:X/PWlE4sIEe2IwY/y+QFQmNXmBT7nOb5xNQEzRSft3g:X2ybe2I7iQmN2VL65xG8RSq","tlshash":"dc03e03156679997e82d53324cbb9f712ad108313b6223d88a381638dcf53867ee77b0","first_seen":"2026-07-11T07:18:49.189339Z","last_seen":"2026-07-12T21:02:12.77751Z","times_seen":2,"resource_available":false,"data":null}},"time_used":6353,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6328,"receive":25,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"refund-vertex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"refund-vertex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"refund-vertex.com/wp-content/uploads/2026/07/arrow-theme.png","fqdn":"refund-vertex.com","domain":"refund-vertex.com","tld":"com"},"ip":{"addr":"104.21.18.129","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://refund-vertex.com/","date":"2026-07-12T21:01:30.508Z","timestamp":1783890090508,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"refund-vertex.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 02 Jul 2026 10:20:14 GMT","end":"Wed, 30 Sep 2026 11:18:49 GMT"},"fingerprint":{"sha1":"32:ED:60:EF:39:C7:37:B9:BB:20:CC:D9:A8:6F:D0:BF:55:E9:09:CA","sha256":"C9:C2:B4:C7:E6:CA:CC:33:A4:FF:64:2A:D2:E4:C0:97:E1:F2:EB:D6:D7:1C:F4:66:6B:5E:AB:51:40:FE:D1:6B"}}},"request":{"raw":"GET /wp-content/uploads/2026/07/arrow-theme.png HTTP/1.1\r\nHost: refund-vertex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://refund-vertex.com/wp-content/uploads/elementor/css/post-36316.css?ver=1783699951\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sun, 12 Jul 2026 21:01:30 GMT\r\nserver: cloudflare\r\nlast-modified: Wed, 01 Jul 2026 14:22:54 GMT\r\naccept-ranges: bytes\r\npriority: u=4,i\r\nserver-timing: cfExtPri\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9xChY24EWI5Xt5fcwAmc9YlcTbzBDXt73sFYqnf0PvgfO9ERPc6WPk%2Fi6f1lyS8TTbtSo2yrXAPhQJopaM7PbIxhv9t71HArEkcda%2B3Sa1a0LxCVrrcqrTYMQ4DkHEdxZ%2FsJBA%3D%3D\"}]}\r\ncontent-type: image/png\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1a2fbc9abf0712d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 7308\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7308,"size_decoded":7979,"mime_type":"image/png","magic":"PNG image data, 400 x 166, 8-bit/color RGBA, non-interlaced","md5":"cd8e7735d3546e1c2983fc67e204fd65","sha1":"c92382ae5bf7d5caa3dad285700d2e0cd7304a1b","sha256":"eaa2e9b269020303ee0944bf73762795416b8ce61c90751c4455e4b6779ce561","sha512":"0dc38b11a5b78a4ad6b0ab20e328b4d88b742be378218e018aa0393e555434d393293a1038e66b7709523d3f7d4e11d72ea69a86237fe1f7020f47c720d3285b","ssdeep":"192:wfFUUnGJCYBk2p7QqkiH4by84XdIv6kUle60pjqG:wfFhGnorYtIvtNj3","tlshash":"1ee1af24f2213600ee14758ab6f7f96606c1050009e4b7fa9b59d9df245aa7dece43d1","first_seen":"2026-02-09T22:42:47.329693Z","last_seen":"2026-07-12T21:02:12.788524Z","times_seen":3,"resource_available":false,"data":null}},"time_used":40,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":40,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"refund-vertex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"refund-vertex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"refund-vertex.com/wp-content/uploads/2026/07/vert_lg1.png","fqdn":"refund-vertex.com","domain":"refund-vertex.com","tld":"com"},"ip":{"addr":"104.21.18.129","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://refund-vertex.com/","date":"2026-07-12T21:01:25.496Z","timestamp":1783890085496,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"refund-vertex.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 02 Jul 2026 10:20:14 GMT","end":"Wed, 30 Sep 2026 11:18:49 GMT"},"fingerprint":{"sha1":"32:ED:60:EF:39:C7:37:B9:BB:20:CC:D9:A8:6F:D0:BF:55:E9:09:CA","sha256":"C9:C2:B4:C7:E6:CA:CC:33:A4:FF:64:2A:D2:E4:C0:97:E1:F2:EB:D6:D7:1C:F4:66:6B:5E:AB:51:40:FE:D1:6B"}}},"request":{"raw":"GET /wp-content/uploads/2026/07/vert_lg1.png HTTP/1.1\r\nHost: refund-vertex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://refund-vertex.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sun, 12 Jul 2026 21:01:31 GMT\r\nserver: cloudflare\r\nlast-modified: Thu, 02 Jul 2026 06:18:45 GMT\r\naccept-ranges: bytes\r\npriority: u=5,i\r\nserver-timing: cfExtPri\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=mS2OUPuLWGUBNqHhLFoioO9JjWKbY%2B3GfzzgJAbKFqGggx1PvY2CFqDNeLncr7SMdZOBixZSO7rZriVuWbFBQneW3VFF3zAF4ngZo%2F%2Fbu5JRtOCrDKAMNtw%2BUF4rNU%2B83uFGjg%3D%3D\"}]}\r\ncontent-type: image/png\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1a2fbaa5a70712d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 25252\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":25252,"size_decoded":25928,"mime_type":"image/png","magic":"PNG image data, 247 x 88, 8-bit/color RGBA, non-interlaced","md5":"2c29ca4ee4ab6fa712570f3cdda6ad78","sha1":"f9caf88414a44d21a807140819cb89d2d59d37c5","sha256":"c2146340443234215c785e1ed7f0f9be2b004a006a42c9b9f6b01d412c4c9169","sha512":"7a11310e12af100159a2ef82fcb88c95634f03afdb6b39270c05d367770594b1ef3825bfd384c5733039c2368c60749e1b4d1ba021e78364628944e8a1ab135f","ssdeep":"768:6hT8sns3ol9ILodKd5AH82Ll+2N5/633G0:6xBncodl82cOh+F","tlshash":"6fb2e1450976194b4e0eea0a14fb7308306ef1fcd5028bc837de5e8a6c9a6b394fd956","first_seen":"2026-07-11T07:18:49.198894Z","last_seen":"2026-07-12T21:02:12.8054Z","times_seen":2,"resource_available":false,"data":null}},"time_used":6351,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6323,"receive":28,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"refund-vertex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"refund-vertex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"refund-vertex.com/wp-includes/js/wp-emoji-release.min.js?ver=7.0.1","fqdn":"refund-vertex.com","domain":"refund-vertex.com","tld":"com"},"ip":{"addr":"104.21.18.129","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://refund-vertex.com/","date":"2026-07-12T21:01:32.639Z","timestamp":1783890092639,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"refund-vertex.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 02 Jul 2026 10:20:14 GMT","end":"Wed, 30 Sep 2026 11:18:49 GMT"},"fingerprint":{"sha1":"32:ED:60:EF:39:C7:37:B9:BB:20:CC:D9:A8:6F:D0:BF:55:E9:09:CA","sha256":"C9:C2:B4:C7:E6:CA:CC:33:A4:FF:64:2A:D2:E4:C0:97:E1:F2:EB:D6:D7:1C:F4:66:6B:5E:AB:51:40:FE:D1:6B"}}},"request":{"raw":"GET /wp-includes/js/wp-emoji-release.min.js?ver=7.0.1 HTTP/1.1\r\nHost: refund-vertex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://refund-vertex.com/\r\nCookie: _gcl_au=1.1.983493188.1783890092\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sun, 12 Jul 2026 21:01:32 GMT\r\nserver: cloudflare\r\nlast-modified: Fri, 10 Jul 2026 04:11:54 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncontent-encoding: zstd\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=I4%2FZS88ZU5QzeEFUxhC%2F5nlP1454ZkCeXwWmCEyd6h1uUI1X64kUrr%2BBVCCNqeaRhwzvEe44dkEHba4syUbFJX%2BATxbu4%2BNx3rnKp5VzLep%2F4SlsKKJnZSF4ECPPshybaVd0IA%3D%3D\"}]}\r\ncontent-type: text/javascript\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\ncf-ray: a1a2fbd70cb2712d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":22752,"size_decoded":6261,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (19813)","md5":"7dcb0bb1f67bc5cd9aa86bc0577108e3","sha1":"c90b1ed149a278c322a63f3a79443ccce5592382","sha256":"063840b4b3f5869e0f0d078bab8bd29cfb3a59ee85e8e3edbbec35a8fe846fd3","sha512":"d09c60fc702e1d3fb839685770b2626a64cbc6373ac4bf3a63c3536caef34f4f6caf76adfbd5c2d15bed6e1396ed4f3ca80f6673e3421b2ae2f9e7aa5ccf16f2","ssdeep":"384:WzevzApRZTbbUL3px/bEg1XgA5OOkpJTX:Wsk9bUL3px/YqXgAP+hX","tlshash":"79a2949ba33a4e8f343e3bd78d968f4dc9da555321c0e079dbefb6c169a00568274c90","first_seen":"2026-06-05T05:27:24.795617Z","last_seen":"2026-07-19T00:19:49.887252Z","times_seen":9917,"resource_available":true,"data":null}},"time_used":40,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":40,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"refund-vertex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"refund-vertex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"refund-vertex.com/wp-content/plugins/classic-elementor-addons-pro/assets/css/style.css?ver=1.0","fqdn":"refund-vertex.com","domain":"refund-vertex.com","tld":"com"},"ip":{"addr":"104.21.18.129","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://refund-vertex.com/","date":"2026-07-12T21:01:25.104Z","timestamp":1783890085104,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"refund-vertex.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 02 Jul 2026 10:20:14 GMT","end":"Wed, 30 Sep 2026 11:18:49 GMT"},"fingerprint":{"sha1":"32:ED:60:EF:39:C7:37:B9:BB:20:CC:D9:A8:6F:D0:BF:55:E9:09:CA","sha256":"C9:C2:B4:C7:E6:CA:CC:33:A4:FF:64:2A:D2:E4:C0:97:E1:F2:EB:D6:D7:1C:F4:66:6B:5E:AB:51:40:FE:D1:6B"}}},"request":{"raw":"GET /wp-content/plugins/classic-elementor-addons-pro/assets/css/style.css?ver=1.0 HTTP/1.1\r\nHost: refund-vertex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://refund-vertex.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sun, 12 Jul 2026 21:01:25 GMT\r\nserver: cloudflare\r\nlast-modified: Wed, 01 Jul 2026 09:47:51 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\ncontent-encoding: zstd\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=U9E2S0dKYCZqcDOPpc17nSfTD2D8Y6CJ47spIyKCrEe4KOrNUSex9yKQIOUNuSkeIitcuANklBIAhK%2BPvbyGuqBsm0%2FIy8xSp07DggtV%2FCJQo3265YZ0oZUdxebhzDWdSAQRkA%3D%3D\"}]}\r\ncontent-type: text/css\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\ncf-ray: a1a2fba7ea0f712d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":229427,"size_decoded":41505,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"d854f4e77a9ea6474e916b56866a8c2a","sha1":"ccd2497d1200925487c3b04ed8944951ab464666","sha256":"70e6d6dd103e2d02d9998acb65d940d18848ed06f89d626c8ae981ec218543db","sha512":"5c0e9bebfcc09da0c6f4c69fc589399012c078e27a41f6dbbe94bc7badc1280c4eb03f6abb8abd2cd4093b18f6cc1273d024b90f829d31102d0971b9750d3085","ssdeep":"1536:yWqRvyzliJGNdo17l9H7c9X/JVlj1PUJIGIEuBRTtMsvnau2LWw0NF3bJf3kjbPM:yWWJGzo1UXfjMEFFf3kvKSs95VY93xQ","tlshash":"392483589e0511045233e73dabea5216fe7c40b3db0308adf6d9a60a8f7b95c027ef95","first_seen":"2026-07-11T07:18:49.13178Z","last_seen":"2026-07-12T21:02:12.811079Z","times_seen":2,"resource_available":false,"data":null}},"time_used":230,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":109,"receive":121,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"refund-vertex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"refund-vertex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"refund-vertex.com/wp-includes/js/jquery/ui/core.min.js?ver=1.13.3","fqdn":"refund-vertex.com","domain":"refund-vertex.com","tld":"com"},"ip":{"addr":"104.21.18.129","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://refund-vertex.com/","date":"2026-07-12T21:01:25.437Z","timestamp":1783890085437,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"refund-vertex.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 02 Jul 2026 10:20:14 GMT","end":"Wed, 30 Sep 2026 11:18:49 GMT"},"fingerprint":{"sha1":"32:ED:60:EF:39:C7:37:B9:BB:20:CC:D9:A8:6F:D0:BF:55:E9:09:CA","sha256":"C9:C2:B4:C7:E6:CA:CC:33:A4:FF:64:2A:D2:E4:C0:97:E1:F2:EB:D6:D7:1C:F4:66:6B:5E:AB:51:40:FE:D1:6B"}}},"request":{"raw":"GET /wp-includes/js/jquery/ui/core.min.js?ver=1.13.3 HTTP/1.1\r\nHost: refund-vertex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://refund-vertex.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sun, 12 Jul 2026 21:01:30 GMT\r\nserver: cloudflare\r\nlast-modified: Tue, 30 Jun 2026 15:09:11 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncontent-encoding: zstd\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=SWwTwDP6G4a7P257odx64wX87y%2Br3aGYT%2F8jtrdbesgXTL8BSSdIOSSRo3SHZtAgJLcfgHyX%2Bud%2FUznOSKk9oeMlUlCY9K0i1S2svFuqjFkEeH4KYh4V%2F4NHpFddzDDZBGyqIw%3D%3D\"}]}\r\ncontent-type: text/javascript\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\ncf-ray: a1a2fba9fa59712d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":21464,"size_decoded":8297,"mime_type":"text/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (8189)","md5":"da215ae12b95b3aeeb2047667016c7f8","sha1":"480a7087aa74b5b47c47f05a11670e823a3ae4c0","sha256":"699210a5ed06e497b4730ec83bb65ac4c2269ae4a0ee8af3f24aae7ee5b66b76","sha512":"d256ddc828c06f7b84f7df706a4481928a186ea6d3e1358254a1ec02f403d72d2f3aecd682a93aad61b8f236f17dbcf7e6ca100f78c30a348682bf8ee125d8ff","ssdeep":"384:G/rsrDr8LVyraS3dtrqorqr8hrpCip8fuxNhlGX0CiS9rH/OrLrErJ29FkFvd:iS33ZdvK47kv","tlshash":"06a2d94eb246380586f7a2a5402f521fb132e25cb105c8ddf468d8da3c7eea95173f79","first_seen":"2025-04-15T23:53:17.313193Z","last_seen":"2026-07-19T00:16:39.645103Z","times_seen":328018,"resource_available":true,"data":null}},"time_used":5017,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":4989,"receive":28,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"refund-vertex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"refund-vertex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"refund-vertex.com/wp-content/plugins/elementor/assets/js/shared-frontend-handlers.03caa53373b56d3bab67.bundle.min.js","fqdn":"refund-vertex.com","domain":"refund-vertex.com","tld":"com"},"ip":{"addr":"104.21.18.129","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://refund-vertex.com/","date":"2026-07-12T21:01:32.174Z","timestamp":1783890092174,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"refund-vertex.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 02 Jul 2026 10:20:14 GMT","end":"Wed, 30 Sep 2026 11:18:49 GMT"},"fingerprint":{"sha1":"32:ED:60:EF:39:C7:37:B9:BB:20:CC:D9:A8:6F:D0:BF:55:E9:09:CA","sha256":"C9:C2:B4:C7:E6:CA:CC:33:A4:FF:64:2A:D2:E4:C0:97:E1:F2:EB:D6:D7:1C:F4:66:6B:5E:AB:51:40:FE:D1:6B"}}},"request":{"raw":"GET /wp-content/plugins/elementor/assets/js/shared-frontend-handlers.03caa53373b56d3bab67.bundle.min.js HTTP/1.1\r\nHost: refund-vertex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://refund-vertex.com/\r\nCookie: _gcl_au=1.1.983493188.1783890092\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sun, 12 Jul 2026 21:01:32 GMT\r\nserver: cloudflare\r\nlast-modified: Tue, 30 Jun 2026 16:15:02 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncontent-encoding: zstd\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=cXd6iWSy7fRJ6PoqXAWu%2FH1nrwB7dGP1EC4zpBVf2NQjJyoufrxpWhrcqzC4pMM%2B2gjpWi%2Bbr5gA2qFQi6TrJ3NnsUDDxQi7k%2BqyIkL7MJau%2FhXDj4msNz93yR2u5%2F9uUUBG7g%3D%3D\"}]}\r\ncontent-type: text/javascript\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\ncf-ray: a1a2fbd41c8b712d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8481,"size_decoded":3488,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (8481), with no line terminators","md5":"a4df0433011e4a5ca770a6b46d01ab7d","sha1":"ced6acab63205209ef5db818700ba7e7f9277044","sha256":"77c0a6d635dad44b53a9eb9f0f367a1bd3bf3620c0e41d3a4c15d1313f2553f0","sha512":"d9059dc3da43bd052276c6544b81db20e438378541274eb2da852b7c535bc1738eac7c902a4c7c0913f1cef7f76a51bfd0d55e23dd659b4ed6c858141b0e1272","ssdeep":"192:IwfFpzqxODCWV5lxZmdXLf+UvDZ5CMtakRhPZT8cMkCw+v10QITpRHvcwxDnPoG0:rHzqxOPV5lxodXLfpvD/NtakRhPZT8cw","tlshash":"3802310a74c1982db58b58ba3532432866a8014de1018f6db1bf79fbc5a5d82277b7f1","first_seen":"2025-10-21T21:24:49.172997Z","last_seen":"2026-07-19T00:19:55.593417Z","times_seen":142223,"resource_available":true,"data":null}},"time_used":38,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":38,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"refund-vertex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"refund-vertex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"refund-vertex.com/wp-content/plugins/contact-form-7/includes/css/styles.css?ver=6.1.6","fqdn":"refund-vertex.com","domain":"refund-vertex.com","tld":"com"},"ip":{"addr":"104.21.18.129","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://refund-vertex.com/","date":"2026-07-12T21:01:25.108Z","timestamp":1783890085108,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"refund-vertex.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 02 Jul 2026 10:20:14 GMT","end":"Wed, 30 Sep 2026 11:18:49 GMT"},"fingerprint":{"sha1":"32:ED:60:EF:39:C7:37:B9:BB:20:CC:D9:A8:6F:D0:BF:55:E9:09:CA","sha256":"C9:C2:B4:C7:E6:CA:CC:33:A4:FF:64:2A:D2:E4:C0:97:E1:F2:EB:D6:D7:1C:F4:66:6B:5E:AB:51:40:FE:D1:6B"}}},"request":{"raw":"GET /wp-content/plugins/contact-form-7/includes/css/styles.css?ver=6.1.6 HTTP/1.1\r\nHost: refund-vertex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://refund-vertex.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sun, 12 Jul 2026 21:01:25 GMT\r\nserver: cloudflare\r\nlast-modified: Wed, 01 Jul 2026 09:48:57 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\ncontent-encoding: zstd\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Zaz8jDlqPgyd4B0Gi0jMjUTW0kDelsaO%2B3WPV0TTS5Xw3oB4KSV73vaLEL5XUoDWxLR%2FYu2PnFps9YhP09eoXebrx6vP%2BJDMT4UJG2Hi7E3gl03OCaXnH%2BpCimXC7L1uVpwBPQ%3D%3D\"}]}\r\ncontent-type: text/css\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\ncf-ray: a1a2fba7ea11712d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2979,"size_decoded":1766,"mime_type":"text/css","magic":"ASCII text","md5":"b2b463a5bdb73833be2a6afbc1843ddd","sha1":"ade55e90dd7694b7974edd336b555e765967e702","sha256":"a3b9f5df6bf638a4cb583480bed6e18a84ad7141cc3d75b81094f91dd7b82f32","sha512":"431fcb88c720bc2ee3cd950772bbf03194b28f5a00c602287ea4877829ed377f0742dcff523e88e07dd4a7968ea8618fae59b883617d9112d61feee5167ae191","ssdeep":"","tlshash":"aa510264660028504bff92db6eaddb047b6e7481cd1faf97b0c21a7c57782851223e5e","first_seen":"2026-05-15T04:06:26.038056Z","last_seen":"2026-07-19T00:21:53.199676Z","times_seen":15351,"resource_available":false,"data":null}},"time_used":113,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":113,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"refund-vertex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"refund-vertex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"refund-vertex.com/wp-content/plugins/classic-elementor-addons-pro/assets/js/theia-sticky-sidebar.min.js?ver=1.0","fqdn":"refund-vertex.com","domain":"refund-vertex.com","tld":"com"},"ip":{"addr":"104.21.18.129","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://refund-vertex.com/","date":"2026-07-12T21:01:25.409Z","timestamp":1783890085409,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"refund-vertex.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 02 Jul 2026 10:20:14 GMT","end":"Wed, 30 Sep 2026 11:18:49 GMT"},"fingerprint":{"sha1":"32:ED:60:EF:39:C7:37:B9:BB:20:CC:D9:A8:6F:D0:BF:55:E9:09:CA","sha256":"C9:C2:B4:C7:E6:CA:CC:33:A4:FF:64:2A:D2:E4:C0:97:E1:F2:EB:D6:D7:1C:F4:66:6B:5E:AB:51:40:FE:D1:6B"}}},"request":{"raw":"GET /wp-content/plugins/classic-elementor-addons-pro/assets/js/theia-sticky-sidebar.min.js?ver=1.0 HTTP/1.1\r\nHost: refund-vertex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://refund-vertex.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sun, 12 Jul 2026 21:01:30 GMT\r\nserver: cloudflare\r\nlast-modified: Wed, 01 Jul 2026 09:47:51 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncontent-encoding: zstd\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=T4uoO%2B3EAAtpJERzd1y7UeVAbkvZSxEYV17i4KVT5GLy0Z7IV9b4UOK5tTLWbstgIWKsoaEF4KBLyoVxcyrECjRVrO5Rz4AagY1ZZsX5yIE1tu1bEZ8xfCS9JrvaTzHyJ9wNrw%3D%3D\"}]}\r\ncontent-type: text/javascript\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\ncf-ray: a1a2fba9ca4a712d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5429,"size_decoded":2537,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (5370)","md5":"69a423fcaf8f22778a2e059b2c554a17","sha1":"18f416a138fc5bcf4786585cb55a8d46af9976a6","sha256":"d88b2f05bcd6de59fcdc958ab1c6f63d0225f275d24ce003381c09deb3a4bf1e","sha512":"854d07a28f2fb39dcf38390120c0fe40c3964254c5749728a5d65fa8b9ac88be64467de73e8bf242da15feb2cb0dc611e841085b639baa8eedff436f8f95e4d1","ssdeep":"96:8CErPpnMTDqfVNsArPF1DYvDRGuPHB+qCuS5+6Q:FEz96DqfVOXEuPHB+qC9s","tlshash":"c3b1525e2f607535e097f8cf90cfa028906e4da75bca9079870c81d81d6575891f2fcd","first_seen":"2023-03-07T01:14:52Z","last_seen":"2026-07-18T14:29:10.467542Z","times_seen":1934,"resource_available":true,"data":null}},"time_used":4992,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":4992,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"refund-vertex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"refund-vertex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"refund-vertex.com/wp-content/uploads/2026/07/cropped-cropped-512favivert-32x32.png","fqdn":"refund-vertex.com","domain":"refund-vertex.com","tld":"com"},"ip":{"addr":"104.21.18.129","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://refund-vertex.com/","date":"2026-07-12T21:01:31.963Z","timestamp":1783890091963,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"refund-vertex.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 02 Jul 2026 10:20:14 GMT","end":"Wed, 30 Sep 2026 11:18:49 GMT"},"fingerprint":{"sha1":"32:ED:60:EF:39:C7:37:B9:BB:20:CC:D9:A8:6F:D0:BF:55:E9:09:CA","sha256":"C9:C2:B4:C7:E6:CA:CC:33:A4:FF:64:2A:D2:E4:C0:97:E1:F2:EB:D6:D7:1C:F4:66:6B:5E:AB:51:40:FE:D1:6B"}}},"request":{"raw":"GET /wp-content/uploads/2026/07/cropped-cropped-512favivert-32x32.png HTTP/1.1\r\nHost: refund-vertex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://refund-vertex.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sun, 12 Jul 2026 21:01:32 GMT\r\nserver: cloudflare\r\nlast-modified: Thu, 02 Jul 2026 07:00:30 GMT\r\naccept-ranges: bytes\r\npriority: u=6,i=?0\r\nserver-timing: cfExtPri\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=h4QRFBiLYJm%2BRL2xConLFIZs62%2FbUZVl09QUsAhutxtrSGpKmyDJfk%2Fh0ufj7UoVnpLvT0W6Z3WYhuEvky1ZS1yjCqQMx%2BzZT0eN2DcYhltco7OyrZfJ10kkjKtxgDMWK%2BpZYQ%3D%3D\"}]}\r\ncontent-type: image/png\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1a2fbd2cc6d712d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 1694\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1694,"size_decoded":2372,"mime_type":"image/png","magic":"PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced","md5":"5d6420eeb0def8115e86bf44b28843b7","sha1":"89dce86a08b448b111776d825c4b9b30d11830b1","sha256":"b354c50813692f7bf3dd3ac1a23b235ca40741bf20169971946a84ce25265eb0","sha512":"ba7b1f2d90ab2900059dab7f50af98bece12435f65c2c76cb08b5b884d7c4a2c186d4b26aebc2f3bf42d3608915876ae8247c15a3c09a578dc7afb93dad863a9","ssdeep":"","tlshash":"2e311ac609513442e1c24782b0dbf623cf24d10a51c6e13e00a683979957fade6591e6","first_seen":"2026-07-11T07:18:49.204892Z","last_seen":"2026-07-12T21:02:12.820833Z","times_seen":2,"resource_available":false,"data":null}},"time_used":107,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":107,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"refund-vertex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"refund-vertex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"refund-vertex.com/wp-content/plugins/elementor/assets/lib/animations/styles/fadeInUp.min.css?ver=4.1.4","fqdn":"refund-vertex.com","domain":"refund-vertex.com","tld":"com"},"ip":{"addr":"104.21.18.129","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://refund-vertex.com/","date":"2026-07-12T21:01:25.126Z","timestamp":1783890085126,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"refund-vertex.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 02 Jul 2026 10:20:14 GMT","end":"Wed, 30 Sep 2026 11:18:49 GMT"},"fingerprint":{"sha1":"32:ED:60:EF:39:C7:37:B9:BB:20:CC:D9:A8:6F:D0:BF:55:E9:09:CA","sha256":"C9:C2:B4:C7:E6:CA:CC:33:A4:FF:64:2A:D2:E4:C0:97:E1:F2:EB:D6:D7:1C:F4:66:6B:5E:AB:51:40:FE:D1:6B"}}},"request":{"raw":"GET /wp-content/plugins/elementor/assets/lib/animations/styles/fadeInUp.min.css?ver=4.1.4 HTTP/1.1\r\nHost: refund-vertex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://refund-vertex.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sun, 12 Jul 2026 21:01:28 GMT\r\nserver: cloudflare\r\nlast-modified: Tue, 30 Jun 2026 16:15:02 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\ncontent-encoding: zstd\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=bB5lRsih%2BlqzYXRlLn9E1P1ynYaVNDAoK1%2FawWNt%2BWAa%2BkdjOfcJ0tVdFaTKdup6Ii%2BLn6GULbCKeq8D0nhp9nYmo348rG0cJv8qOa68cevcun3jPH0L2xR95Ai85rkpNcj4ZA%3D%3D\"}]}\r\ncontent-type: text/css\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\ncf-ray: a1a2fba80a17712d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":130,"size_decoded":763,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"18b6260305b3bdc5100c937971d28906","sha1":"12c44b736a53dfa11c8286fe3ef05c2f64f47a47","sha256":"7263363f11b6184fe306b05a849db2de5a674258610578e594068bec72b4f2a9","sha512":"2c1751f012fd78fdf93ee1700536c117a4d9eac6fb442f3386aea7339f72ad2fcdf4835b309eafc6214da2c584bdfb47680291e191ac4b3721b21c32e5cdd2d8","ssdeep":"","tlshash":"78c092488aa4414d029a05fabcc4a951c53acbf6e9732edf7294494b4b81aad13892e3","first_seen":"2023-10-30T21:54:19Z","last_seen":"2026-07-19T00:21:53.240559Z","times_seen":44336,"resource_available":false,"data":null}},"time_used":2980,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2980,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"refund-vertex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"refund-vertex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"refund-vertex.com/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.4.1","fqdn":"refund-vertex.com","domain":"refund-vertex.com","tld":"com"},"ip":{"addr":"104.21.18.129","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://refund-vertex.com/","date":"2026-07-12T21:01:25.385Z","timestamp":1783890085385,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"refund-vertex.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 02 Jul 2026 10:20:14 GMT","end":"Wed, 30 Sep 2026 11:18:49 GMT"},"fingerprint":{"sha1":"32:ED:60:EF:39:C7:37:B9:BB:20:CC:D9:A8:6F:D0:BF:55:E9:09:CA","sha256":"C9:C2:B4:C7:E6:CA:CC:33:A4:FF:64:2A:D2:E4:C0:97:E1:F2:EB:D6:D7:1C:F4:66:6B:5E:AB:51:40:FE:D1:6B"}}},"request":{"raw":"GET /wp-includes/js/jquery/jquery-migrate.min.js?ver=3.4.1 HTTP/1.1\r\nHost: refund-vertex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://refund-vertex.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sun, 12 Jul 2026 21:01:30 GMT\r\nserver: cloudflare\r\nlast-modified: Fri, 09 Jun 2023 05:49:24 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\ncontent-encoding: zstd\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8N2I006%2FH3mZkH0obtb0gqCEqWjDOgASUpJ88wtjw1BO%2FfkvIakypSSpFL9S1U86hgehBQQ4eWKTRClwSur0griK9emDcUZhNxfY5p82JkK3Uba%2BnGFNpwQufq6YBgQQjWHmfQ%3D%3D\"}]}\r\ncontent-type: text/javascript\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\ncf-ray: a1a2fba9aa40712d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":13577,"size_decoded":5911,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (13479)","md5":"9ffeb32e2d9efbf8f70caabded242267","sha1":"3ad0c10e501ac2a9bfa18f9cd7e700219b378738","sha256":"5274f11e6fb32ae0cf2dfb9f8043272865c397a7c4223b4cfa7d50ea52fbde89","sha512":"8d6be545508a1c38278b8ad780c3758ae48a25e4e12eee443375aa56031d9b356f8c90f22d4f251140fa3f65603af40523165e33cae2e2d62fc78ec106e3d731","ssdeep":"192:5rprDN+sag6ifKIUpQI99P1tLm9kdgyq1+J3aCJQ+h4MPLORq:5rprxaefKI0LP19m4q1WW+h4Mjp","tlshash":"9952c8adb56679724eb721b8f03bd24f71b205de560d8940d19cc4f6282dc6e812bf78","first_seen":"2023-05-09T19:21:05Z","last_seen":"2026-07-19T00:19:27.253869Z","times_seen":897426,"resource_available":true,"data":null}},"time_used":4939,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":4911,"receive":28,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"refund-vertex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"refund-vertex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=AW-18287380654","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.178.40","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://refund-vertex.com/","date":"2026-07-12T21:01:25.392Z","timestamp":1783890085392,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 22 Jun 2026 08:35:29 GMT","end":"Mon, 14 Sep 2026 08:35:28 GMT"},"fingerprint":{"sha1":"4E:CE:B0:5B:5A:94:F2:15:05:64:F7:63:8C:23:58:95:2F:72:74:7B","sha256":"16:29:FC:E9:EC:BC:FF:2E:2F:4D:FB:5F:6A:E5:8F:51:7A:25:FE:6D:73:E4:66:1E:AE:DF:5B:F6:06:F3:36:E9"}}},"request":{"raw":"GET /gtag/js?id=AW-18287380654 HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://refund-vertex.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: zstd\r\nvary: Accept-Encoding\r\ndate: Sun, 12 Jul 2026 21:01:25 GMT\r\nexpires: Sun, 12 Jul 2026 21:01:25 GMT\r\ncache-control: private, max-age=900\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\nserver: Google Tag Manager\r\ncontent-length: 150679\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":433554,"size_decoded":151283,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (5513)","md5":"656510dbde41e7491b882c6a63d6c483","sha1":"5a88be2d1184afb5217132b2c7691a40380f0c77","sha256":"6f569891838a959479fb747316157389723d02d69fa5d1e9457fca74b639a65e","sha512":"e0cc205b1682a6f25579476b9bc53c66c158e46ac0bd7cdd44e43a421022a577ea02f51eb0ebc7f896476af27df19c670c327fe3f413c0d14f62045aaf800eed","ssdeep":"6144:iVlKo0JTeozbF3V512qp6q0lci0SJGWox3lym7DPLoKyS:iVlOXFp2IFDjoKyS","tlshash":"c59409cdb3d6746253a2f478903f018ba57a29e2b44cc899f185ccd42e7469a8277f7c","first_seen":"2026-07-12T21:02:12.863129Z","last_seen":"2026-07-12T21:02:12.863129Z","times_seen":1,"resource_available":true,"data":null}},"time_used":150,"timings":{"blocked":-1,"dns":3,"connect":16,"send":0,"wait":41,"receive":56,"ssl":34},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"refund-vertex.com/wp-content/plugins/elementor/assets/js/text-editor.45609661e409413f1cef.bundle.min.js","fqdn":"refund-vertex.com","domain":"refund-vertex.com","tld":"com"},"ip":{"addr":"104.21.18.129","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://refund-vertex.com/","date":"2026-07-12T21:01:32.413Z","timestamp":1783890092413,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"refund-vertex.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 02 Jul 2026 10:20:14 GMT","end":"Wed, 30 Sep 2026 11:18:49 GMT"},"fingerprint":{"sha1":"32:ED:60:EF:39:C7:37:B9:BB:20:CC:D9:A8:6F:D0:BF:55:E9:09:CA","sha256":"C9:C2:B4:C7:E6:CA:CC:33:A4:FF:64:2A:D2:E4:C0:97:E1:F2:EB:D6:D7:1C:F4:66:6B:5E:AB:51:40:FE:D1:6B"}}},"request":{"raw":"GET /wp-content/plugins/elementor/assets/js/text-editor.45609661e409413f1cef.bundle.min.js HTTP/1.1\r\nHost: refund-vertex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://refund-vertex.com/\r\nCookie: _gcl_au=1.1.983493188.1783890092\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sun, 12 Jul 2026 21:01:32 GMT\r\nserver: cloudflare\r\nlast-modified: Tue, 30 Jun 2026 16:15:02 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncontent-encoding: zstd\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=cK4pbh6ttXyxLgT7H%2Fjp5j76a6OC77VKjHriFMJG4J5749halddkn4UBzxMKOIFQTREnpztWgU8fa9ob%2FVTxQD0ZoxiTeCN4CFznXCn2jgmSByP%2BLhuOgoq5q5duEGZkrqA48Q%3D%3D\"}]}\r\ncontent-type: text/javascript\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\ncf-ray: a1a2fbd59ca8712d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1348,"size_decoded":1329,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (1348), with no line terminators","md5":"b272ececde530e5621637a7e529abc8b","sha1":"a3fedafc836049d71aa3b1d9ddc1debcd6f73dd2","sha256":"4543f55b0b8bc8fe912da8ddd1da7b07d0e8d3e77a824295a6bccd90d4f8aa13","sha512":"d2efaf6be07605e855c348a6fd5aad58520f20912188578a3711de8840a9cd29e41860b49b36d3d7a72082077c9dcdfe8571e0279985a771cac102a520f7b020","ssdeep":"","tlshash":"f62112b371a2dded48df148a34522d16f2574d5db8caa01ef5aa08df24b2e843362634","first_seen":"2025-10-22T21:27:55.827503Z","last_seen":"2026-07-19T00:13:06.87813Z","times_seen":121116,"resource_available":true,"data":null}},"time_used":44,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":44,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"refund-vertex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"refund-vertex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"refund-vertex.com/wp-content/uploads/elementor/css/post-6.css?ver=1783699950","fqdn":"refund-vertex.com","domain":"refund-vertex.com","tld":"com"},"ip":{"addr":"104.21.18.129","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://refund-vertex.com/","date":"2026-07-12T21:01:25.124Z","timestamp":1783890085124,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"refund-vertex.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 02 Jul 2026 10:20:14 GMT","end":"Wed, 30 Sep 2026 11:18:49 GMT"},"fingerprint":{"sha1":"32:ED:60:EF:39:C7:37:B9:BB:20:CC:D9:A8:6F:D0:BF:55:E9:09:CA","sha256":"C9:C2:B4:C7:E6:CA:CC:33:A4:FF:64:2A:D2:E4:C0:97:E1:F2:EB:D6:D7:1C:F4:66:6B:5E:AB:51:40:FE:D1:6B"}}},"request":{"raw":"GET /wp-content/uploads/elementor/css/post-6.css?ver=1783699950 HTTP/1.1\r\nHost: refund-vertex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://refund-vertex.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sun, 12 Jul 2026 21:01:27 GMT\r\nserver: cloudflare\r\nlast-modified: Fri, 10 Jul 2026 16:12:30 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\ncontent-encoding: zstd\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=umS9gW9kwwVWOCZIl8H7%2F3AIwHNjgoAHEbUbMvnS3L%2FbDtdjCn0D%2B0fdnEeMR%2F5dM5%2FfaBaPJtJZLtjn2s9Ov8iQsY7jpK8dogZ8MEMpkYLrxVDo6PGiNEGJUREfl7xxZvarSA%3D%3D\"}]}\r\ncontent-type: text/css\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\ncf-ray: a1a2fba80a16712d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1229,"size_decoded":1072,"mime_type":"text/css","magic":"ASCII text, with very long lines (1229), with no line terminators","md5":"1151fae2456b75f4151d7279745d59cc","sha1":"e7c3d50ca35155da9721e3b557b778f171326361","sha256":"018d6c5c4096c28bb3f9832b4659396ce38791fb292a0b91bb5b1c33e982c86f","sha512":"56462c2df2f4f8613ceeb5511158e828085a5a70f1e6da07de0ebfa00ff1603779f765d0d6f6fa931f25109f3de708dd666f2d52fd3c6285b345b414f71deb7e","ssdeep":"","tlshash":"172136457e23d022e17b053f91c3b02c012cd46fa25f8adff41d9289f9bfa4a2228643","first_seen":"2026-07-11T07:18:49.218434Z","last_seen":"2026-07-12T21:02:12.878501Z","times_seen":2,"resource_available":false,"data":null}},"time_used":1943,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1943,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"refund-vertex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"refund-vertex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"refund-vertex.com/wp-content/plugins/elementor/assets/lib/animations/styles/zoomIn.min.css?ver=4.1.4","fqdn":"refund-vertex.com","domain":"refund-vertex.com","tld":"com"},"ip":{"addr":"104.21.18.129","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://refund-vertex.com/","date":"2026-07-12T21:01:25.135Z","timestamp":1783890085135,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"refund-vertex.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 02 Jul 2026 10:20:14 GMT","end":"Wed, 30 Sep 2026 11:18:49 GMT"},"fingerprint":{"sha1":"32:ED:60:EF:39:C7:37:B9:BB:20:CC:D9:A8:6F:D0:BF:55:E9:09:CA","sha256":"C9:C2:B4:C7:E6:CA:CC:33:A4:FF:64:2A:D2:E4:C0:97:E1:F2:EB:D6:D7:1C:F4:66:6B:5E:AB:51:40:FE:D1:6B"}}},"request":{"raw":"GET /wp-content/plugins/elementor/assets/lib/animations/styles/zoomIn.min.css?ver=4.1.4 HTTP/1.1\r\nHost: refund-vertex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://refund-vertex.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sun, 12 Jul 2026 21:01:28 GMT\r\nserver: cloudflare\r\nlast-modified: Tue, 30 Jun 2026 16:15:02 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\ncontent-encoding: zstd\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=G0N32bsJdmWVNx%2FHn7W0JedIc5xayf8XZGC2eVItG19zOfd1bGzu4IVmoZgNcykqO%2BEIy%2FKTyvxK1GpjDYawY3gooVyfbabQgXo9PDTu2ykUz9FSxnN1mg8QhX7Hpr87K%2BdOsw%3D%3D\"}]}\r\ncontent-type: text/css\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\ncf-ray: a1a2fba81a1d712d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":106,"size_decoded":754,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7339af1b7f9c226094755fe645ff381a","sha1":"47eaf7b16cc7a2b5d729cdfcc7b38042e02d43b3","sha256":"af6953d433e9b119661eac422ce9c9e09a195a0a68ad42ad392e960df31201cc","sha512":"d9f851c919e3620434835ff980060d917136526dfa8cf1efe1b8a0f7bdf41605b6b4a9fe1577cbac895eb5cd3fcbf97edaa040ea4b448537249e4417bc95c102","ssdeep":"","tlshash":"dfb012448945059d414501f365849f84446c4bce36721d972cd008584f552ed31c2103","first_seen":"2024-09-12T11:59:50Z","last_seen":"2026-07-18T23:38:30.430965Z","times_seen":12691,"resource_available":false,"data":null}},"time_used":3697,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":3697,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"refund-vertex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"refund-vertex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css?family=Manrope:100,100italic,200,200italic,300,300italic,400,400italic,500,500italic,600,600italic,700,700italic,800,800italic,900,900italic\u0026display=swap\u0026subset=cyrillic","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.42","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://refund-vertex.com/","date":"2026-07-12T21:01:25.382Z","timestamp":1783890085382,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 22 Jun 2026 08:37:24 GMT","end":"Mon, 14 Sep 2026 08:37:23 GMT"},"fingerprint":{"sha1":"85:D0:EC:C2:01:33:25:23:96:FB:2B:54:90:54:84:07:0A:49:1F:03","sha256":"9D:7C:1C:9C:6A:25:1E:17:E0:DC:FD:42:95:CA:47:3D:C1:9C:20:FB:22:47:02:E3:27:EC:7C:62:03:30:83:BA"}}},"request":{"raw":"GET /css?family=Manrope:100,100italic,200,200italic,300,300italic,400,400italic,500,500italic,600,600italic,700,700italic,800,800italic,900,900italic\u0026display=swap\u0026subset=cyrillic HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://refund-vertex.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Sun, 12 Jul 2026 21:01:25 GMT\r\ndate: Sun, 12 Jul 2026 21:01:25 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":15008,"size_decoded":1471,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"0ad4e9cc8948899d25eb47a31cace209","sha1":"c8a2ded69bfa8d2f4293fd3324009b36b4050256","sha256":"73ef72e9f525460bf321f3797f3c6d37aa65ea44ff78062c406fca0d98a55fc8","sha512":"1467da169a56c9e04d571063cfb541534f96920a0645641209b6e0dfcb36ce1313811515479a11731e59d2344622478ed1602dadf4531184524e611cddc867d7","ssdeep":"192:BJRKV3II8XDJi5V3PP8wiJDEV3WW89RJ8rV3118+4JlOV3MM8b/JGNV3TT80uJH0:bMEmkwU+ME02EQJ","tlshash":"7962a9900027e804eb470cd677ce7e39ad4e61567491c5ba5bfe1cd8adebd222320b5e","first_seen":"2025-09-05T04:53:42.941084Z","last_seen":"2026-07-18T17:50:10.806575Z","times_seen":3678,"resource_available":false,"data":null}},"time_used":107,"timings":{"blocked":-1,"dns":0,"connect":15,"send":0,"wait":51,"receive":0,"ssl":39},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"refund-vertex.com/wp-content/plugins/contact-form-7/includes/js/index.js?ver=6.1.6","fqdn":"refund-vertex.com","domain":"refund-vertex.com","tld":"com"},"ip":{"addr":"104.21.18.129","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://refund-vertex.com/","date":"2026-07-12T21:01:25.425Z","timestamp":1783890085425,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"refund-vertex.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 02 Jul 2026 10:20:14 GMT","end":"Wed, 30 Sep 2026 11:18:49 GMT"},"fingerprint":{"sha1":"32:ED:60:EF:39:C7:37:B9:BB:20:CC:D9:A8:6F:D0:BF:55:E9:09:CA","sha256":"C9:C2:B4:C7:E6:CA:CC:33:A4:FF:64:2A:D2:E4:C0:97:E1:F2:EB:D6:D7:1C:F4:66:6B:5E:AB:51:40:FE:D1:6B"}}},"request":{"raw":"GET /wp-content/plugins/contact-form-7/includes/js/index.js?ver=6.1.6 HTTP/1.1\r\nHost: refund-vertex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://refund-vertex.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sun, 12 Jul 2026 21:01:30 GMT\r\nserver: cloudflare\r\nlast-modified: Wed, 01 Jul 2026 09:48:57 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncontent-encoding: zstd\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2BYu%2BmDIfdA9IgcWOO7YE42aTrFxEqkQtBtiKGiyMBq8D3lI5RdeB4Yp2orCKZE8Xo5Pqm4FzsFBLylBNgGulIzl4m4gbXFiTR330uZZQdPdHujHFQF1zwsUzxCWJCxoxczXixA%3D%3D\"}]}\r\ncontent-type: text/javascript\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\ncf-ray: a1a2fba9fa57712d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":13452,"size_decoded":5195,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (13452), with no line terminators","md5":"2912c657d0592cc532dff73d0d2ce7bb","sha1":"70a679e2769825236f83bcc56965a9d0bd86c4e9","sha256":"ddcce687729cb358abf9d0d8e1217a097859be2b0d18c23d7c851b38c87bc9c0","sha512":"9646384e65d09bf00cb20365f43e06dd41e7428e3fc6cc2737f4e69b50f006ebb25bd24a566fcd9faec2f0dcb24404e25d57ba7b8c6aba61797a29c515ad5144","ssdeep":"384:IsIRHeFJ1yQ7QdfnJgeYh7MXlsNqrBp1pgQpwOjNtqohIQ/5Z:IsIR+L1yQ7QdpYh7M1iqrBp1pgQpwOjn","tlshash":"0a52d7a1472955321eb506e391e513c1769075aef44b8aa1a898dc2e18bdcc328f3ff7","first_seen":"2024-11-04T17:50:00.022634Z","last_seen":"2026-07-19T00:16:28.100651Z","times_seen":225041,"resource_available":true,"data":null}},"time_used":5021,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":4997,"receive":24,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"refund-vertex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"refund-vertex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"refund-vertex.com/wp-content/uploads/2026/07/cropped-cropped-512favivert-192x192.png","fqdn":"refund-vertex.com","domain":"refund-vertex.com","tld":"com"},"ip":{"addr":"104.21.18.129","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://refund-vertex.com/","date":"2026-07-12T21:01:31.961Z","timestamp":1783890091961,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"refund-vertex.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 02 Jul 2026 10:20:14 GMT","end":"Wed, 30 Sep 2026 11:18:49 GMT"},"fingerprint":{"sha1":"32:ED:60:EF:39:C7:37:B9:BB:20:CC:D9:A8:6F:D0:BF:55:E9:09:CA","sha256":"C9:C2:B4:C7:E6:CA:CC:33:A4:FF:64:2A:D2:E4:C0:97:E1:F2:EB:D6:D7:1C:F4:66:6B:5E:AB:51:40:FE:D1:6B"}}},"request":{"raw":"GET /wp-content/uploads/2026/07/cropped-cropped-512favivert-192x192.png HTTP/1.1\r\nHost: refund-vertex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://refund-vertex.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sun, 12 Jul 2026 21:01:31 GMT\r\nserver: cloudflare\r\nlast-modified: Thu, 02 Jul 2026 07:00:30 GMT\r\naccept-ranges: bytes\r\npriority: u=6,i=?0\r\nserver-timing: cfExtPri\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=PX5%2FQ09nHW6DK%2F60ovTxa42ObtQKHhUnA4N0Pje8ebJ8d0MuDVhs5uOmRU2fgWp1gWCP%2FL5L%2FFA5GA2Kd8baJbiet%2B0J0sjpZmmKxPUYrCF%2BCi%2FVEJsvpp6mnzb%2F2YHt7MtLZg%3D%3D\"}]}\r\ncontent-type: image/png\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1a2fbd2cc6c712d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 18212\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":18212,"size_decoded":18897,"mime_type":"image/png","magic":"PNG image data, 192 x 192, 8-bit/color RGBA, non-interlaced","md5":"415758335c7a8b16691c785443c755d6","sha1":"fae5d093322cada722ecd23d9d2b652e1f1230fc","sha256":"44f70c2ec8908ddda917f6154ba4543814eee053c23ad7867325829628c35cfc","sha512":"f1d0ad1a3edc2a2863f2fe5e88fb3af3afc2fec8fa2e2fc93a47a7cd25c2144b8ab605ca75db1f1f7b11549f312de9b92971fbde18d6dc00eaefcaa34efc8405","ssdeep":"384:H+OoCVNQwNWDeQa+I1j1TOCE+DdLQMyZiWDeUiViOHdiNii6klSYP:HpoCLHNWDeQVIjTOCE+DdkniWDOQj6k9","tlshash":"8782e06e4924222c22af379671ab7d718cf0826f0e933b3f1214c1f98106fb379a50d5","first_seen":"2026-07-11T07:18:49.209537Z","last_seen":"2026-07-12T21:02:12.889065Z","times_seen":2,"resource_available":false,"data":null}},"time_used":64,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":38,"receive":26,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"refund-vertex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"refund-vertex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"vertex-legal.org/wp-content/uploads/2023/02/glitter-img.png","fqdn":"vertex-legal.org","domain":"vertex-legal.org","tld":"org"},"ip":{"addr":"172.67.144.12","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://refund-vertex.com/","date":"2026-07-12T21:01:32.278Z","timestamp":1783890092278,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vertex-legal.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 30 Jun 2026 13:44:58 GMT","end":"Mon, 28 Sep 2026 14:43:29 GMT"},"fingerprint":{"sha1":"4A:1A:1E:6F:F9:02:AD:DF:24:95:C3:D8:C0:17:35:DE:BC:CC:5C:B8","sha256":"52:9D:7E:11:74:8D:04:4F:63:5C:A2:08:18:17:46:61:5A:70:6D:A9:F2:00:79:CC:A8:3B:F5:4C:BA:EE:A0:63"}}},"request":{"raw":"GET /wp-content/uploads/2023/02/glitter-img.png HTTP/1.1\r\nHost: vertex-legal.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://refund-vertex.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://refund-vertex.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sun, 12 Jul 2026 21:01:32 GMT\r\nserver: cloudflare\r\nlast-modified: Wed, 01 Jul 2026 12:08:56 GMT\r\naccept-ranges: bytes\r\npriority: u=5,i\r\nserver-timing: cfExtPri\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=jvH53civlPxF%2B0FtIlSH6Mmm9Leo1%2FFYXlf1G%2FTk9%2B28Rs7shpLQCzJ14qkMJga42wJxJ5zkHvY3pY03O1Kv33homQAQzjFMznx8pBdSdGVZuIDnIg8W6x1oY5KGQInBac9e\"}]}\r\ncontent-type: image/png\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1a2fbd4baa323eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 2512\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2512,"size_decoded":3177,"mime_type":"image/png","magic":"PNG image data, 64 x 64, 8-bit/color RGBA, non-interlaced","md5":"97398b6ae14915d268f6372de5e36a81","sha1":"b8bc72bdd3f194e0d0b4601ee3bc8c02f07e6f3a","sha256":"59a280ac5378eaed7344f883b1d3aaddaf234feaccb4fd446bad1fcd80c7208f","sha512":"f5c3269b35ca8e16fa8f52c938b05cc2cde39ab444057cc674b77b0962e8966e9290ff886564ce3e8b18d2dca19c85306303da0a8c9a3397ab33b079bfcc0ebd","ssdeep":"","tlshash":"a5512c9ed5f0a95786e1d41178dae40fa42240c4abd5f1a6778bcc860f61ff0048e8e7","first_seen":"2026-01-12T06:43:32.927734Z","last_seen":"2026-07-12T21:02:12.749435Z","times_seen":3,"resource_available":false,"data":null}},"time_used":439,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":439,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"refund-vertex.com/wp-content/plugins/elementor-pro/assets/js/popup.f7b15b2ca565b152bf98.bundle.min.js","fqdn":"refund-vertex.com","domain":"refund-vertex.com","tld":"com"},"ip":{"addr":"104.21.18.129","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://refund-vertex.com/","date":"2026-07-12T21:01:32.338Z","timestamp":1783890092338,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"refund-vertex.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 02 Jul 2026 10:20:14 GMT","end":"Wed, 30 Sep 2026 11:18:49 GMT"},"fingerprint":{"sha1":"32:ED:60:EF:39:C7:37:B9:BB:20:CC:D9:A8:6F:D0:BF:55:E9:09:CA","sha256":"C9:C2:B4:C7:E6:CA:CC:33:A4:FF:64:2A:D2:E4:C0:97:E1:F2:EB:D6:D7:1C:F4:66:6B:5E:AB:51:40:FE:D1:6B"}}},"request":{"raw":"GET /wp-content/plugins/elementor-pro/assets/js/popup.f7b15b2ca565b152bf98.bundle.min.js HTTP/1.1\r\nHost: refund-vertex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://refund-vertex.com/\r\nCookie: _gcl_au=1.1.983493188.1783890092\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sun, 12 Jul 2026 21:01:32 GMT\r\nserver: cloudflare\r\nlast-modified: Wed, 01 Jul 2026 06:49:12 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncontent-encoding: zstd\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=D5hp8mLFomas0ANGlY%2Fysir5%2FF8minXJowpvVc%2BIXSUc4xlSzvWAtWPfeT3T1RpZMfqro%2BAC2ATchHsjIfQJEaC8P7%2Bu8zIrOmrc2kVTBVHHDLGVyIZY2OMcgi5Ef%2FnxLskz4w%3D%3D\"}]}\r\ncontent-type: text/javascript\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\ncf-ray: a1a2fbd51c99712d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":752,"size_decoded":1119,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (708)","md5":"a4252b34b60668051c92cc8e14d1445c","sha1":"6dc469badc2bf2e7c41cef323a0e9bcbe49043a9","sha256":"15e25d8c70881e7b465776ce75b468d12948cfd61c4acf8545bca47271c15261","sha512":"0c9700bb77b1038f74ca9d9148068049095d6bfb6c8ff61973b58f0479e3ab48d321a4b771d0b7aaa00de75fbf1fdd0d86a3d96e785617767c506f75d30e90e6","ssdeep":"","tlshash":"9901d0a030a2b8b605af408b74c7056c65512df2740a78a2b9cb84d16eb4f953352775","first_seen":"2026-02-02T22:12:39.946913Z","last_seen":"2026-07-18T10:33:01.704784Z","times_seen":565,"resource_available":true,"data":null}},"time_used":574,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":574,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"refund-vertex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"refund-vertex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/roboto/v51/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://refund-vertex.com/","date":"2026-07-12T21:01:30.651Z","timestamp":1783890090651,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 22 Jun 2026 08:37:23 GMT","end":"Mon, 14 Sep 2026 08:37:22 GMT"},"fingerprint":{"sha1":"CD:5B:53:23:61:72:75:37:AD:E9:F1:74:B2:D2:EE:09:81:05:55:E1","sha256":"9F:07:21:2D:14:EB:C5:C0:D4:2B:42:E4:55:80:7A:BB:AF:47:A8:BC:0C:5E:05:F3:2A:2B:1F:2A:78:4D:FF:D7"}}},"request":{"raw":"GET /s/roboto/v51/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://refund-vertex.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 43136\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 09 Jul 2026 10:17:38 GMT\r\nexpires: Fri, 09 Jul 2027 10:17:38 GMT\r\ncache-control: public, max-age=31536000\r\nage: 297832\r\nlast-modified: Wed, 18 Feb 2026 19:51:37 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":43136,"size_decoded":43949,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 43136, version 1.0","md5":"665db5e157d2138835c4037c971ff3a4","sha1":"41ca6b7e4818eb81531d8006ff7ddd971c640879","sha256":"1404ca348bd75ef836f4dd8b6f2cc719458642d1237c368296b2fc652dca47dc","sha512":"6c999466673c9873b1b112d6ab95c7cecb99467ea156e3e046b54c5f3d109c3845b05cbb2a0245d178430c7b2ceacd5110f7d8faf7e041100f44852b0c29fe9a","ssdeep":"768:tMTmVhyXCrekkraPAjrWMMWD3UJmw0FRwoglekm+hQ7//geceSF/mEQBPMAmDu5:cmHkCrHvPAjrWMMI3UJswogl4j7/hSlW","tlshash":"f9130231eb70ee59962c903454e7fda9433b1457d731aca80e99a1ce6f8103454facec","first_seen":"2026-02-19T22:27:43.350598Z","last_seen":"2026-07-19T00:18:53.6277Z","times_seen":233944,"resource_available":false,"data":null}},"time_used":46,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":30,"receive":16,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/ccm/collect?rcb=15\u0026frm=0\u0026auid=983493188.1783890092\u0026dt=Vertex-Vegal\u0026en=page_view\u0026dl=https%3A%2F%2Frefund-vertex.com%2F\u0026scrsrc=www.googletagmanager.com\u0026rnd=915589172.1783890092\u0026navt=n\u0026npa=1\u0026gtm=45be6781h1v9257836271za200zd9257836271xec\u0026gcd=13l3l3l2l1l1\u0026dma_cps=a\u0026dma=1\u0026tag_exp=115938466~115938468~118826209~118897920~118897930~119027224\u0026apve=1\u0026apvf=f\u0026apvc=1\u0026tids=AW-18287380654\u0026tid=AW-18287380654\u0026tft=1783890092042\u0026tfd=8643\u0026fmt=8","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.251.152.119","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://refund-vertex.com/","date":"2026-07-12T21:01:32.045Z","timestamp":1783890092045,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 22 Jun 2026 08:35:23 GMT","end":"Mon, 14 Sep 2026 08:35:22 GMT"},"fingerprint":{"sha1":"06:8D:DC:6D:53:C9:22:CC:DE:E3:B9:72:DF:2A:2A:E4:F3:B0:82:DA","sha256":"DC:53:B5:AD:68:0E:E4:41:6D:AC:DF:1A:CD:1F:59:2A:FA:78:43:B8:DC:D8:CB:63:98:E7:A9:7C:F9:DB:34:94"}}},"request":{"raw":"POST /ccm/collect?rcb=15\u0026frm=0\u0026auid=983493188.1783890092\u0026dt=Vertex-Vegal\u0026en=page_view\u0026dl=https%3A%2F%2Frefund-vertex.com%2F\u0026scrsrc=www.googletagmanager.com\u0026rnd=915589172.1783890092\u0026navt=n\u0026npa=1\u0026gtm=45be6781h1v9257836271za200zd9257836271xec\u0026gcd=13l3l3l2l1l1\u0026dma_cps=a\u0026dma=1\u0026tag_exp=115938466~115938468~118826209~118897920~118897930~119027224\u0026apve=1\u0026apvf=f\u0026apvc=1\u0026tids=AW-18287380654\u0026tid=AW-18287380654\u0026tft=1783890092042\u0026tfd=8643\u0026fmt=8 HTTP/1.1\r\nHost: www.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://refund-vertex.com/\r\nOrigin: https://refund-vertex.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/3 200 \r\npragma: no-cache\r\nexpires: Fri, 01 Jan 1990 00:00:00 GMT\r\ndate: Sun, 12 Jul 2026 21:01:32 GMT\r\ncontent-type: text/plain\r\ncache-control: no-cache, no-store, must-revalidate\r\nvary: Origin, X-Origin, Referer\r\nserver: scaffolding on HTTPServer2\r\ncontent-length: 0\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\naccess-control-allow-origin: https://refund-vertex.com\r\naccess-control-expose-headers: date,vary,vary,vary,server,content-length\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":546,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-19T00:20:37.747196Z","times_seen":17351892,"resource_available":true,"data":null}},"time_used":50,"timings":{"blocked":0,"dns":3,"connect":27,"send":0,"wait":19,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"refund-vertex.com/wp-content/themes/igual/assets/js/theme.js?ver=3.0.0","fqdn":"refund-vertex.com","domain":"refund-vertex.com","tld":"com"},"ip":{"addr":"104.21.18.129","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://refund-vertex.com/","date":"2026-07-12T21:01:25.391Z","timestamp":1783890085391,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"refund-vertex.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 02 Jul 2026 10:20:14 GMT","end":"Wed, 30 Sep 2026 11:18:49 GMT"},"fingerprint":{"sha1":"32:ED:60:EF:39:C7:37:B9:BB:20:CC:D9:A8:6F:D0:BF:55:E9:09:CA","sha256":"C9:C2:B4:C7:E6:CA:CC:33:A4:FF:64:2A:D2:E4:C0:97:E1:F2:EB:D6:D7:1C:F4:66:6B:5E:AB:51:40:FE:D1:6B"}}},"request":{"raw":"GET /wp-content/themes/igual/assets/js/theme.js?ver=3.0.0 HTTP/1.1\r\nHost: refund-vertex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://refund-vertex.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sun, 12 Jul 2026 21:01:30 GMT\r\nserver: cloudflare\r\nlast-modified: Wed, 01 Jul 2026 12:02:17 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\ncontent-encoding: zstd\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ZMCsM1GOk3XzZqDPhdthoj%2BR7pMOW5WX6MDWinwZRv%2Buj%2BHM0wmeTXpkB8lIUn8zoZee1fg48tkmEb4uezRlGH1ATnU1SeL5e4SWOEq2jwUpyfPDVZNPrj9bmJm5UStvlq7ZfA%3D%3D\"}]}\r\ncontent-type: text/javascript\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\ncf-ray: a1a2fba9ba43712d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":23223,"size_decoded":6803,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text","md5":"0ed7e81242944925722866f61b9c66ea","sha1":"35285b815505e5860ee3ae7316f91fba7a1c6c3f","sha256":"7fa4b1cbc5873ff17d25d3475e8a1f5d737eac68b5851ac4bc8ee81934abb392","sha512":"6a09ad28755b33c8a0f0bfea78785e99aba240ca7fa40eb345b8ae7610706707f30f63888dadd275a0dcf3345a9f8dff63c30c714925c0438b3dbbae399de295","ssdeep":"384:gSUUFcT0wIf1IxF7xzoWBCtGJSo4u7oTU7wlaCH:gSUUFeIf1IxF7xzXBdk4SUcECH","tlshash":"15a293d4f76d21b5d07f32648a2e9084707ea433ba828c16bc3dc0583fd596d62e6f69","first_seen":"2026-07-11T07:18:49.213701Z","last_seen":"2026-07-12T21:02:12.898593Z","times_seen":2,"resource_available":true,"data":null}},"time_used":4919,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":4894,"receive":25,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"refund-vertex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"refund-vertex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"refund-vertex.com/wp-content/plugins/cool-formkit-for-elementor-forms/assets/addons/js/coolform-date-format.js?ver=1.4.3","fqdn":"refund-vertex.com","domain":"refund-vertex.com","tld":"com"},"ip":{"addr":"104.21.18.129","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://refund-vertex.com/","date":"2026-07-12T21:01:25.430Z","timestamp":1783890085430,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"refund-vertex.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 02 Jul 2026 10:20:14 GMT","end":"Wed, 30 Sep 2026 11:18:49 GMT"},"fingerprint":{"sha1":"32:ED:60:EF:39:C7:37:B9:BB:20:CC:D9:A8:6F:D0:BF:55:E9:09:CA","sha256":"C9:C2:B4:C7:E6:CA:CC:33:A4:FF:64:2A:D2:E4:C0:97:E1:F2:EB:D6:D7:1C:F4:66:6B:5E:AB:51:40:FE:D1:6B"}}},"request":{"raw":"GET /wp-content/plugins/cool-formkit-for-elementor-forms/assets/addons/js/coolform-date-format.js?ver=1.4.3 HTTP/1.1\r\nHost: refund-vertex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://refund-vertex.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sun, 12 Jul 2026 21:01:25 GMT\r\nserver: cloudflare\r\nlast-modified: Thu, 02 Jul 2026 06:40:31 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncontent-encoding: zstd\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=d81%2Fao%2B7XYiGbDKScdsWg%2BBci%2Ff4fDyWATjLbRf%2BgtQDmafiqFdbRRegA6QkhbrRHQfaT05NGUsoHCvH7j4nAfkFaBRrdfWwVcaQBnA%2Fsa5vtS5Z%2F%2FAbx2B87y4F98j1L%2BkDgQ%3D%3D\"}]}\r\ncontent-type: text/javascript\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\ncf-ray: a1a2fba9fa53712d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1709,"size_decoded":1354,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with CRLF line terminators","md5":"1585dea9a11c5718c9efdf8d2bc37d95","sha1":"73a96a9be9cf654608e40d4ef2e4acddfe1e04c6","sha256":"baf48e884211f112dec5a486ef98194be6d496f121a7741f04bfcf3da0b4116d","sha512":"2c5ca5d2a706878d411f6fbc3335aec15ba2e96f7b023f2d49a161cc770eef2f62c3e64eb62465a039886c06f52cbc0459435462d6e761323a019efe4760891f","ssdeep":"","tlshash":"a4317808e89b8c15c93755284be7201cdb54e23b15c452c7beac57211fb3e28aa69f8e","first_seen":"2025-10-08T03:30:06.411381Z","last_seen":"2026-07-12T21:02:12.903011Z","times_seen":47,"resource_available":true,"data":null}},"time_used":44,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":44,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"refund-vertex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"refund-vertex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"refund-vertex.com/wp-content/plugins/classic-elementor-addons-pro/assets/js/infinite-scroll.pkgd.min.js?ver=5.0.0","fqdn":"refund-vertex.com","domain":"refund-vertex.com","tld":"com"},"ip":{"addr":"104.21.18.129","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://refund-vertex.com/","date":"2026-07-12T21:01:25.449Z","timestamp":1783890085449,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"refund-vertex.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 02 Jul 2026 10:20:14 GMT","end":"Wed, 30 Sep 2026 11:18:49 GMT"},"fingerprint":{"sha1":"32:ED:60:EF:39:C7:37:B9:BB:20:CC:D9:A8:6F:D0:BF:55:E9:09:CA","sha256":"C9:C2:B4:C7:E6:CA:CC:33:A4:FF:64:2A:D2:E4:C0:97:E1:F2:EB:D6:D7:1C:F4:66:6B:5E:AB:51:40:FE:D1:6B"}}},"request":{"raw":"GET /wp-content/plugins/classic-elementor-addons-pro/assets/js/infinite-scroll.pkgd.min.js?ver=5.0.0 HTTP/1.1\r\nHost: refund-vertex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://refund-vertex.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sun, 12 Jul 2026 21:01:31 GMT\r\nserver: cloudflare\r\nlast-modified: Wed, 01 Jul 2026 09:47:51 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncontent-encoding: zstd\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=rvksheyZu3a5hY8CeP5UR0icXaVB2icfdWV%2FCQCzN31vsEY%2FaUDXOVRISqjbeuGXFhoKiYgubx5S9lWK2ojAqjVAHFGdxWu8k0SrHWHsZpKEtJXIZrHLxkcubGxs9glCLveo7A%3D%3D\"}]}\r\ncontent-type: text/javascript\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\ncf-ray: a1a2fbaa1a61712d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":22450,"size_decoded":8005,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (17739)","md5":"624fadd4e13a43c1fc46d7dde8dd4766","sha1":"8bca855759eea78c779c193988b06ab0e487300c","sha256":"b4e09a21cb669386bf45f6aae8defe61f042b3d37e499d345355c5c0e9d9cd19","sha512":"0589e816c1d6ac3c20902ed54f73ac8b1e5bb67062bb25662e0dc477c3f7992044f63a43fd55153e5ef5d2c277fd7c63102f6d7eec888081e42204d050a8d32c","ssdeep":"384:urGYraJQsrNixdhre9aqMfKxRqGzRyD07rLRd23OZV8rx5rGrXUpa60rXU64xWE5:xxixA7fxRqGz4EN/8rx5rqyxWsp3XQYJ","tlshash":"59a2e79eb352753253eea0b5e92b060e727354aa2201009cf4a8ecfe9c74d5e6177f74","first_seen":"2025-06-17T10:05:55.802216Z","last_seen":"2026-07-18T15:23:04.694711Z","times_seen":1204,"resource_available":true,"data":null}},"time_used":6306,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6282,"receive":24,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"refund-vertex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"refund-vertex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"refund-vertex.com/wp-content/uploads/2019/04/court-img1-1.png","fqdn":"refund-vertex.com","domain":"refund-vertex.com","tld":"com"},"ip":{"addr":"104.21.18.129","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://refund-vertex.com/","date":"2026-07-12T21:01:30.501Z","timestamp":1783890090501,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"refund-vertex.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 02 Jul 2026 10:20:14 GMT","end":"Wed, 30 Sep 2026 11:18:49 GMT"},"fingerprint":{"sha1":"32:ED:60:EF:39:C7:37:B9:BB:20:CC:D9:A8:6F:D0:BF:55:E9:09:CA","sha256":"C9:C2:B4:C7:E6:CA:CC:33:A4:FF:64:2A:D2:E4:C0:97:E1:F2:EB:D6:D7:1C:F4:66:6B:5E:AB:51:40:FE:D1:6B"}}},"request":{"raw":"GET /wp-content/uploads/2019/04/court-img1-1.png HTTP/1.1\r\nHost: refund-vertex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://refund-vertex.com/wp-content/uploads/elementor/css/post-36316.css?ver=1783699951\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sun, 12 Jul 2026 21:01:31 GMT\r\nserver: cloudflare\r\nlast-modified: Wed, 01 Jul 2026 12:08:02 GMT\r\naccept-ranges: bytes\r\npriority: u=4,i\r\nserver-timing: cfExtPri\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=HnxfYR%2F75ZowjmvT5uLNjQ2ktPrZBOQCPxIxjFu0gbNRxk3PF44BZ5qVnW6Ewy%2BzT2Pxqw%2FopC3gkblc8NinVcR%2BBkDmuKx49dPQ4aBe7%2BmEA6kvRSR1j5m17oJTw0pP8upKZg%3D%3D\"}]}\r\ncontent-type: image/png\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1a2fbc9abed712d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 38402\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":38402,"size_decoded":39078,"mime_type":"image/png","magic":"PNG image data, 700 x 620, 8-bit/color RGBA, non-interlaced","md5":"9cd105ae254bed30cfcf1cdc6a8b9430","sha1":"e9bb6c2b67313f3eccb136ccac4bdcc70ff44e33","sha256":"1545b1d43b43cfdc1c306af160cd4a693d58da73bfb461077d22cda156e460af","sha512":"7b8b5ff1ee7011ef2fb57c99d8f7d8185595b7e3764a1bc902706025f268cda6a6b79c3abce561f1058670e1429f16c70779236a47decb6e1755af37ba537b4a","ssdeep":"768:iRDIT2EJRXD3Kry2yVfF8bESVBc982gYA8IchWGQMZiBvzqrKyN:iRDITDRvVfQESTc9zHNQMZiBByN","tlshash":"3003f1096c4cbe81e9cdea74d056e7193a892bc1e4a44b3fd7087fee78929b0f110725","first_seen":"2025-12-04T01:46:06.100377Z","last_seen":"2026-07-12T21:02:12.905332Z","times_seen":3,"resource_available":false,"data":null}},"time_used":1360,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1334,"receive":26,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"refund-vertex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"refund-vertex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"vertex-legal.org/wp-content/uploads/2023/02/Businessman_small.png","fqdn":"vertex-legal.org","domain":"vertex-legal.org","tld":"org"},"ip":{"addr":"172.67.144.12","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://refund-vertex.com/","date":"2026-07-12T21:01:32.291Z","timestamp":1783890092291,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vertex-legal.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 30 Jun 2026 13:44:58 GMT","end":"Mon, 28 Sep 2026 14:43:29 GMT"},"fingerprint":{"sha1":"4A:1A:1E:6F:F9:02:AD:DF:24:95:C3:D8:C0:17:35:DE:BC:CC:5C:B8","sha256":"52:9D:7E:11:74:8D:04:4F:63:5C:A2:08:18:17:46:61:5A:70:6D:A9:F2:00:79:CC:A8:3B:F5:4C:BA:EE:A0:63"}}},"request":{"raw":"GET /wp-content/uploads/2023/02/Businessman_small.png HTTP/1.1\r\nHost: vertex-legal.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://refund-vertex.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sun, 12 Jul 2026 21:01:32 GMT\r\nserver: cloudflare\r\nlast-modified: Wed, 01 Jul 2026 12:08:55 GMT\r\naccept-ranges: bytes\r\npriority: u=4,i\r\nserver-timing: cfExtPri\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=GkcYTqV%2Fk%2FFoiE0eBZHvtG34SN0vNSkcpYPGEVC5nVD37VYuKboK%2FzQHFL1MobCLabdrm1%2BWtSw371MhhpNFEp36sXvMB46%2FAQTHSQ8dUxKsJpvJXc%2BUMt4Y5tMvYELKz77n\"}]}\r\ncontent-type: image/png\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1a2fbd4de46b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 137571\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":137571,"size_decoded":138242,"mime_type":"image/png","magic":"PNG image data, 689 x 880, 8-bit colormap, non-interlaced","md5":"073189c2739454218b5a75d7294ab887","sha1":"b00ba9a67a5f81e7d05064d7654971d98fb979e1","sha256":"ca5bc4517fd47d7d6d189ccc39e63accc5b79f98f0802f1a9fa680179279a216","sha512":"61d4a1d44d1862663b2b42af19d00ac183c4c7888f0b7ad90af84e25ec7f2cbe7c7b1aa164834f8bc357cafad35aea853ab7306ea3fe7713c6b073a04d64f76a","ssdeep":"3072:11wPGreKQOcMXi7Y9FdLQr+GVTTgmkKZBACKwe9US2aWF:7wUAxMXNFd+tHZBxyWF","tlshash":"ded312887e5fc359ee0a52e5eb1592e5a32772fb8e089d464354a9fb08530c38ec4c1f","first_seen":"2026-07-11T07:18:49.123806Z","last_seen":"2026-07-12T21:02:12.907372Z","times_seen":2,"resource_available":false,"data":null}},"time_used":180,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":98,"receive":82,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"refund-vertex.com/wp-content/plugins/cool-formkit-for-elementor-forms/assets/flags/my.svg","fqdn":"refund-vertex.com","domain":"refund-vertex.com","tld":"com"},"ip":{"addr":"104.21.18.129","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://refund-vertex.com/","date":"2026-07-12T21:01:32.593Z","timestamp":1783890092593,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"refund-vertex.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 02 Jul 2026 10:20:14 GMT","end":"Wed, 30 Sep 2026 11:18:49 GMT"},"fingerprint":{"sha1":"32:ED:60:EF:39:C7:37:B9:BB:20:CC:D9:A8:6F:D0:BF:55:E9:09:CA","sha256":"C9:C2:B4:C7:E6:CA:CC:33:A4:FF:64:2A:D2:E4:C0:97:E1:F2:EB:D6:D7:1C:F4:66:6B:5E:AB:51:40:FE:D1:6B"}}},"request":{"raw":"GET /wp-content/plugins/cool-formkit-for-elementor-forms/assets/flags/my.svg HTTP/1.1\r\nHost: refund-vertex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://refund-vertex.com/\r\nCookie: _gcl_au=1.1.983493188.1783890092\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sun, 12 Jul 2026 21:01:33 GMT\r\nserver: cloudflare\r\nlast-modified: Thu, 02 Jul 2026 06:40:31 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i\r\ncontent-encoding: zstd\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=bfTs7B5At0InpZ3U284juRzn5E07HglSxpF7av32LvuErgFgRBm4YZXUl4iRyqP5zk7KkNNhViflt0BwgVdaH5i40Eg0fc7lMJAk0BOX0WZVDy4YjTxl9DZMP8hZUHvGB%2FaZMQ%3D%3D\"}]}\r\ncontent-type: image/svg+xml\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\ncf-ray: a1a2fbd6bcb1712d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1412,"size_decoded":1160,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"36735200def3b8132f687de43ccbf1dc","sha1":"1e0255b864f73f5ae634fe432a29e32b410c95e9","sha256":"337f855acdba3d4fe8a9cd9d0b043c66f575f9478c9cc582347861b3ee21185e","sha512":"0d61cee3eca41a53e19b0c679f03f33ac0f04e839b6eddc16cd72e999af2245d504755ace0ce5be30bb5c5597ed556e766b860b45965bf53d36170f493e223e2","ssdeep":"","tlshash":"9921e8f494a837188f3587540f7c68e2ce5474cf302943daf45c213aaa7fa8b8d93962","first_seen":"2025-05-17T16:35:05.374971Z","last_seen":"2026-07-12T21:02:12.911421Z","times_seen":11,"resource_available":false,"data":null}},"time_used":577,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":577,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"refund-vertex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"refund-vertex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"refund-vertex.com/wp-content/plugins/classic-elementor-addons-pro/assets/css/bootstrap.min.css?ver=5.3.8","fqdn":"refund-vertex.com","domain":"refund-vertex.com","tld":"com"},"ip":{"addr":"104.21.18.129","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://refund-vertex.com/","date":"2026-07-12T21:01:25.093Z","timestamp":1783890085093,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"refund-vertex.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 02 Jul 2026 10:20:14 GMT","end":"Wed, 30 Sep 2026 11:18:49 GMT"},"fingerprint":{"sha1":"32:ED:60:EF:39:C7:37:B9:BB:20:CC:D9:A8:6F:D0:BF:55:E9:09:CA","sha256":"C9:C2:B4:C7:E6:CA:CC:33:A4:FF:64:2A:D2:E4:C0:97:E1:F2:EB:D6:D7:1C:F4:66:6B:5E:AB:51:40:FE:D1:6B"}}},"request":{"raw":"GET /wp-content/plugins/classic-elementor-addons-pro/assets/css/bootstrap.min.css?ver=5.3.8 HTTP/1.1\r\nHost: refund-vertex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://refund-vertex.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sun, 12 Jul 2026 21:01:25 GMT\r\nserver: cloudflare\r\nlast-modified: Wed, 01 Jul 2026 09:47:51 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\ncontent-encoding: zstd\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=F3hc%2FpikFHxl%2FRuq5ikgRN3s8FlJ1rUTWtXBjw79EI62uZWJUxLMrpEh8oXVPPfVIhzHS76oq2SSslrPyXkjKoDUNlLNmTwCmpkTxDWd5Y35CZaHEpkjEntm10dlQHITK68wcQ%3D%3D\"}]}\r\ncontent-type: text/css\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\ncf-ray: a1a2fba7da09712d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":232110,"size_decoded":35402,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (65343)","md5":"c96d34db5836351a49866b4bcfbf8f35","sha1":"d750a4864840c9f4977b7e274764673ee1fb1511","sha256":"b8886b2730de7c564828e66a47adcdb4460785c8d07addba2cb4863b576cf82b","sha512":"62c9b37a2859d34bbc5a86c9e85763fb4ed4b5570540017e984e08188d4c248de797c5dda569c61540fa28ae1ab02714f7db6cb81ca79de1d669aae24e992a5f","ssdeep":"1536:i9tnXGi9GfJkfvq5wlP7cQZDR9uRV982sYRElV6V6pz600I41r:KnXp9GfVV98II6V6pz600I41r","tlshash":"af3482d6f590317d9ca7c1499681fefd896fa985cb120aa6f003776807cabd30962dcc","first_seen":"2025-11-02T14:50:49.557477Z","last_seen":"2026-07-12T21:02:12.915848Z","times_seen":17,"resource_available":false,"data":null}},"time_used":241,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":120,"receive":121,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"refund-vertex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"refund-vertex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"refund-vertex.com/wp-content/plugins/classic-elementor-addons-pro/assets/js/isotope.pkgd.min.js?ver=3.0.6","fqdn":"refund-vertex.com","domain":"refund-vertex.com","tld":"com"},"ip":{"addr":"104.21.18.129","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://refund-vertex.com/","date":"2026-07-12T21:01:25.450Z","timestamp":1783890085450,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"refund-vertex.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 02 Jul 2026 10:20:14 GMT","end":"Wed, 30 Sep 2026 11:18:49 GMT"},"fingerprint":{"sha1":"32:ED:60:EF:39:C7:37:B9:BB:20:CC:D9:A8:6F:D0:BF:55:E9:09:CA","sha256":"C9:C2:B4:C7:E6:CA:CC:33:A4:FF:64:2A:D2:E4:C0:97:E1:F2:EB:D6:D7:1C:F4:66:6B:5E:AB:51:40:FE:D1:6B"}}},"request":{"raw":"GET /wp-content/plugins/classic-elementor-addons-pro/assets/js/isotope.pkgd.min.js?ver=3.0.6 HTTP/1.1\r\nHost: refund-vertex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://refund-vertex.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sun, 12 Jul 2026 21:01:30 GMT\r\nserver: cloudflare\r\nlast-modified: Wed, 01 Jul 2026 09:47:51 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncontent-encoding: zstd\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ovsDJs14qY1pQAFIfUIghEKpejgUz2V0AK%2BSVyhTH4Yhoh7XwhkgQxKvU4e7FcAbRp3RZtufSNJkxL9nJ%2BsXvsz6frGQLsiBs%2F%2FuwTMNqs%2FHx4Sj0Jnaz0tN%2BHE9kQ0IF%2FMadA%3D%3D\"}]}\r\ncontent-type: text/javascript\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\ncf-ray: a1a2fbaa1a62712d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":35445,"size_decoded":11593,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (32019)","md5":"2afcff647ed260006faa71c8e779e8d4","sha1":"c4e5994f24ee8c8d2cf2d6602f0b56b9096a2e98","sha256":"081ae9baaacc857c1c2cb51de6dbd0e1eb811c2761ef01a50df373f2f6eefe22","sha512":"66ad813b1ca1be74455eed3e584ea88e964b394da3767a9baccd61995746cf27826b50e03375f943803f22cf710352246d478377bef9e5d34d23f3f349fd8f7b","ssdeep":"768:LAyxsGKyc1gfflZVP4eAnmc6FumKSshD6cD6GLQfq9SvDz2A1Fxt:rxVKDSfJP4Nnmc6FuCshD6cD6xS9ODzV","tlshash":"f3f2d84f73403925468bf166926f160fb137a56c6a4790acba6ad8db1c79c0d6033fbc","first_seen":"2023-03-07T01:03:01Z","last_seen":"2026-07-18T23:44:45.810206Z","times_seen":24972,"resource_available":true,"data":null}},"time_used":5133,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5106,"receive":27,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"refund-vertex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"refund-vertex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"refund-vertex.com/wp-content/plugins/elementor-pro/assets/js/webpack-pro.runtime.min.js?ver=3.35.0","fqdn":"refund-vertex.com","domain":"refund-vertex.com","tld":"com"},"ip":{"addr":"104.21.18.129","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://refund-vertex.com/","date":"2026-07-12T21:01:25.457Z","timestamp":1783890085457,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"refund-vertex.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 02 Jul 2026 10:20:14 GMT","end":"Wed, 30 Sep 2026 11:18:49 GMT"},"fingerprint":{"sha1":"32:ED:60:EF:39:C7:37:B9:BB:20:CC:D9:A8:6F:D0:BF:55:E9:09:CA","sha256":"C9:C2:B4:C7:E6:CA:CC:33:A4:FF:64:2A:D2:E4:C0:97:E1:F2:EB:D6:D7:1C:F4:66:6B:5E:AB:51:40:FE:D1:6B"}}},"request":{"raw":"GET /wp-content/plugins/elementor-pro/assets/js/webpack-pro.runtime.min.js?ver=3.35.0 HTTP/1.1\r\nHost: refund-vertex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://refund-vertex.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sun, 12 Jul 2026 21:01:31 GMT\r\nserver: cloudflare\r\nlast-modified: Wed, 01 Jul 2026 06:49:12 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncontent-encoding: zstd\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=No0EssSev5mk5s6ADJ2f5zlU2z%2FJgZU16%2F17AAqHFQn90FkibYZWFmwtpuwGE7bWVJC1OkfvOOgChizJMxkAwKcE5khzLqw37Uc5VqShy4NrwZHkg5OlZVsYcv3tQu9b%2Fl9zXg%3D%3D\"}]}\r\ncontent-type: text/javascript\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\ncf-ray: a1a2fbaa1a68712d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6248,"size_decoded":3589,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (6204)","md5":"8b9a270439e91d1a97947bd8620937c9","sha1":"5b3d8ae9b04f6106fac3fa6737414ae9f23b3ad6","sha256":"ca7656084f325781c0f02ad113584f5ee8b697d3aa9a2290f4282e41be7b7490","sha512":"f293c3f47c2e2717c38998d65acaed5baaef4f9962747e5096156f4e95f33278efcd2daf0195271daa22f7bfd09c5e7789a5c06d05e3699ca383b50be5b6b0ec","ssdeep":"96:BSfNg2SXdvjUq7VbocvCHHAiam4NBEPnh3CDjl2D/VTKV47YQGLo7cu8k2:sVNSXdvZVbocakNOPEDe/QOkQQbk2","tlshash":"e6d154980a589e2f26e13ad8b0976b701a3dd0723c19e991e651eddc18f8fd143da932","first_seen":"2026-02-02T16:50:51.717764Z","last_seen":"2026-07-18T16:55:56.934521Z","times_seen":2530,"resource_available":true,"data":null}},"time_used":6350,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6350,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"refund-vertex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"refund-vertex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"refund-vertex.com/wp-content/plugins/zozo-header-footer/assets/css/themify-icons.css?ver=1.0","fqdn":"refund-vertex.com","domain":"refund-vertex.com","tld":"com"},"ip":{"addr":"104.21.18.129","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://refund-vertex.com/","date":"2026-07-12T21:01:25.100Z","timestamp":1783890085100,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"refund-vertex.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 02 Jul 2026 10:20:14 GMT","end":"Wed, 30 Sep 2026 11:18:49 GMT"},"fingerprint":{"sha1":"32:ED:60:EF:39:C7:37:B9:BB:20:CC:D9:A8:6F:D0:BF:55:E9:09:CA","sha256":"C9:C2:B4:C7:E6:CA:CC:33:A4:FF:64:2A:D2:E4:C0:97:E1:F2:EB:D6:D7:1C:F4:66:6B:5E:AB:51:40:FE:D1:6B"}}},"request":{"raw":"GET /wp-content/plugins/zozo-header-footer/assets/css/themify-icons.css?ver=1.0 HTTP/1.1\r\nHost: refund-vertex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://refund-vertex.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sun, 12 Jul 2026 21:01:25 GMT\r\nserver: cloudflare\r\nlast-modified: Wed, 01 Jul 2026 09:48:11 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\ncontent-encoding: zstd\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vbZ3vkWaR8ocQSANY4mLhLCAOKczT9XO30dKIk6JC7iauL98uRJj3pbuImbJZKnBlFXOaG4FiSOC658VfMp5UsAFUwT%2FJDRrZFSHXQhsrwtzijBG661HkIt4PBZXlDMONCJ4tw%3D%3D\"}]}\r\ncontent-type: text/css\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\ncf-ray: a1a2fba7ea0c712d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":16396,"size_decoded":3668,"mime_type":"text/css","magic":"ASCII text","md5":"618b09ad6e7615a54765de7495dcd58c","sha1":"59448422203d094f936e63ea250213ff4b43e857","sha256":"ce9af444584313e143441b82e02d377e2864bf44a8a69dd0b2d28b497d61693e","sha512":"2d1be7e1596b9476f299c31c6f0e2c66220d029697e744a4870356e3e6e823803bc2df067a66e1bd1a5c5f93b7047531797f525234ca616d20097dcd1e827569","ssdeep":"192:OSl5yC7huMqJ5UmejPz35E3r4F5cvOAtH:3ysEDy+3HvJ","tlshash":"4472dda49d0f3caa6795e0c16b447a195b0da738de822c6fd113bd3cbbd3a11d6c42d8","first_seen":"2023-04-06T20:34:37Z","last_seen":"2026-07-18T02:31:22.585075Z","times_seen":1717,"resource_available":false,"data":null}},"time_used":137,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":113,"receive":24,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"refund-vertex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"refund-vertex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"refund-vertex.com/wp-content/plugins/elementor-pro/assets/css/widget-form.min.css?ver=3.35.0","fqdn":"refund-vertex.com","domain":"refund-vertex.com","tld":"com"},"ip":{"addr":"104.21.18.129","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://refund-vertex.com/","date":"2026-07-12T21:01:25.127Z","timestamp":1783890085127,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"refund-vertex.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 02 Jul 2026 10:20:14 GMT","end":"Wed, 30 Sep 2026 11:18:49 GMT"},"fingerprint":{"sha1":"32:ED:60:EF:39:C7:37:B9:BB:20:CC:D9:A8:6F:D0:BF:55:E9:09:CA","sha256":"C9:C2:B4:C7:E6:CA:CC:33:A4:FF:64:2A:D2:E4:C0:97:E1:F2:EB:D6:D7:1C:F4:66:6B:5E:AB:51:40:FE:D1:6B"}}},"request":{"raw":"GET /wp-content/plugins/elementor-pro/assets/css/widget-form.min.css?ver=3.35.0 HTTP/1.1\r\nHost: refund-vertex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://refund-vertex.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sun, 12 Jul 2026 21:01:27 GMT\r\nserver: cloudflare\r\nlast-modified: Wed, 01 Jul 2026 06:49:12 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\ncontent-encoding: zstd\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5yyFWnU40CoCclkkCRQeLMUPS7FQlARDgUYX5WwFdGEEkb6ijwxtEpNpgXP6H%2F053G%2Fjo1FPdbWUoIPYvQZU8AkVxCYU1h9mb75jxwEJDMdMfjMo6kDNihStSN6h%2BmvyxuT3Jw%3D%3D\"}]}\r\ncontent-type: text/css\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\ncf-ray: a1a2fba80a18712d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6798,"size_decoded":2349,"mime_type":"text/css","magic":"ASCII text, with very long lines (6754)","md5":"a81edab2de779df49961c4732352b592","sha1":"b7fc37f55640a81f191a0724602c03ee38ed8f3e","sha256":"9ad4ad6a91ab45b03d2d936a4e83556204c64f90bed48dc18728cfc96218b3f4","sha512":"be145fb9a824058322968b69424b97977889653f070ac36edc4457a6fdb53c164f3f418a260b3748603ffd5298a78f976ff4c3680710c210f27d9fe0fc1e80c0","ssdeep":"96:BDnuedCc+P7p6YWHZENaFqZERQZENapmzYTWCqz6P1TZM3AKA/AujMWJpS5vF9I0:kQEcME+EcdV4C5LT4jv","tlshash":"e9e177f1bc22852b1927b8f9c5d524cc028866a08bc1c58b9c7c6458c3feaf1537678f","first_seen":"2026-02-02T22:12:39.840062Z","last_seen":"2026-07-18T10:33:01.669112Z","times_seen":607,"resource_available":false,"data":null}},"time_used":2109,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2109,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"refund-vertex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"refund-vertex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"refund-vertex.com/wp-content/plugins/classic-elementor-addons-pro/assets/css/magnific-popup.min.css?ver=1.2.0","fqdn":"refund-vertex.com","domain":"refund-vertex.com","tld":"com"},"ip":{"addr":"104.21.18.129","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://refund-vertex.com/","date":"2026-07-12T21:01:25.138Z","timestamp":1783890085138,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"refund-vertex.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 02 Jul 2026 10:20:14 GMT","end":"Wed, 30 Sep 2026 11:18:49 GMT"},"fingerprint":{"sha1":"32:ED:60:EF:39:C7:37:B9:BB:20:CC:D9:A8:6F:D0:BF:55:E9:09:CA","sha256":"C9:C2:B4:C7:E6:CA:CC:33:A4:FF:64:2A:D2:E4:C0:97:E1:F2:EB:D6:D7:1C:F4:66:6B:5E:AB:51:40:FE:D1:6B"}}},"request":{"raw":"GET /wp-content/plugins/classic-elementor-addons-pro/assets/css/magnific-popup.min.css?ver=1.2.0 HTTP/1.1\r\nHost: refund-vertex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://refund-vertex.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sun, 12 Jul 2026 21:01:29 GMT\r\nserver: cloudflare\r\nlast-modified: Wed, 01 Jul 2026 09:47:51 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\ncontent-encoding: zstd\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Ot07avWbJRgevg1%2F4X3ZV4dSadbi%2BCt%2FacVCg%2FukJakz09QzAz5O74dinQCIdOXdVrBfIa7cPcWR0eJ0gIHwXzlJujpPsyWyPJ9%2F9LWzNu8%2FXvvrTrLJIMtLBM5ztXyrPqG%2Frg%3D%3D\"}]}\r\ncontent-type: text/css\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\ncf-ray: a1a2fba81a1f712d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5265,"size_decoded":2362,"mime_type":"text/css","magic":"ASCII text, with very long lines (5235)","md5":"dbfe6457f00a8332d0f4e99811daf22c","sha1":"6b141ad3f8b414a4a554f9e69b62221263908078","sha256":"d2cef61096b6ba01671c97a49965ef03b84da35f9b0999f7da69798663932194","sha512":"50f7151bb9dc238d5d76ab32c58cdf788e4e9d03d047fa3b2f5e8c13541dee85bc623be482a0de6728458c61cc91b4b245312cbcf36644817921c842a1dffeed","ssdeep":"96:fMc4SCO7EWPWNM0aDQX8EiUkXudlsb3Dm5Mk9rCWhb:fMWCO7EWPWNDaDQMEiGdgqMk9GWhb","tlshash":"cbb175f3a941313ad633c926d5c39b9c3223a227f6a3569fdf82a419c6cf4cc0625748","first_seen":"2026-07-11T07:18:49.100489Z","last_seen":"2026-07-12T21:02:12.935436Z","times_seen":2,"resource_available":false,"data":null}},"time_used":4167,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":4167,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"refund-vertex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"refund-vertex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"refund-vertex.com/wp-content/plugins/classic-elementor-addons-pro/assets/js/custom.js?ver=1.0","fqdn":"refund-vertex.com","domain":"refund-vertex.com","tld":"com"},"ip":{"addr":"104.21.18.129","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://refund-vertex.com/","date":"2026-07-12T21:01:25.416Z","timestamp":1783890085416,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"refund-vertex.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 02 Jul 2026 10:20:14 GMT","end":"Wed, 30 Sep 2026 11:18:49 GMT"},"fingerprint":{"sha1":"32:ED:60:EF:39:C7:37:B9:BB:20:CC:D9:A8:6F:D0:BF:55:E9:09:CA","sha256":"C9:C2:B4:C7:E6:CA:CC:33:A4:FF:64:2A:D2:E4:C0:97:E1:F2:EB:D6:D7:1C:F4:66:6B:5E:AB:51:40:FE:D1:6B"}}},"request":{"raw":"GET /wp-content/plugins/classic-elementor-addons-pro/assets/js/custom.js?ver=1.0 HTTP/1.1\r\nHost: refund-vertex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://refund-vertex.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sun, 12 Jul 2026 21:01:30 GMT\r\nserver: cloudflare\r\nlast-modified: Wed, 01 Jul 2026 09:47:51 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncontent-encoding: zstd\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=rDjjjVAc1rd6VKQH%2F25M5MxG1yV9SHzew%2BFsxCE5VeK106yI52Dk0%2FngrFJq%2BqRwG%2FGF%2Bj0iyWUbTDXULIHokngpaNlJbyNnlGzqB4U9d3iYzfYB49yLlXAxpfM8yKZkjd4QSg%3D%3D\"}]}\r\ncontent-type: text/javascript\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\ncf-ray: a1a2fba9da4d712d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5831,"size_decoded":2633,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text","md5":"94032083bec8d4236fb8e63e96768cbf","sha1":"099741cf6e685f9b91ce90422c13ddc16b186549","sha256":"d0d4d021fbc23bab6569b60ec8f0930040a8eeffd1c89ad2bf9fdb5b388eca11","sha512":"ec5cae26a0bc648d926686714f2aeaa298eb2be6d3f5225534cbbec7245950e71eccd469952a978e93d17e337816e86f748026cd557ed68480eb49c9aa06d0b4","ssdeep":"96:/3G9XT9j0S1Qy5UM+6kmtz5UWO+rDHqMY0WJlYxWW+6mJklciMUYcEM8k6UQXYNb:fGjjd2yQ6kmtVUWf5WLYxWt6qkhDYZkZ","tlshash":"aac1fdd5f34e2856607b31664d6f3189b65c9433ca419deb3cba8438b8f3e6c2625e18","first_seen":"2025-09-28T23:25:19.09669Z","last_seen":"2026-07-12T21:02:12.938349Z","times_seen":17,"resource_available":true,"data":null}},"time_used":5009,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5009,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"refund-vertex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"refund-vertex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"refund-vertex.com/wp-content/plugins/classic-elementor-addons-pro/assets/js/owl.carousel.min.js?ver=2.3.4","fqdn":"refund-vertex.com","domain":"refund-vertex.com","tld":"com"},"ip":{"addr":"104.21.18.129","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://refund-vertex.com/","date":"2026-07-12T21:01:25.444Z","timestamp":1783890085444,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"refund-vertex.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 02 Jul 2026 10:20:14 GMT","end":"Wed, 30 Sep 2026 11:18:49 GMT"},"fingerprint":{"sha1":"32:ED:60:EF:39:C7:37:B9:BB:20:CC:D9:A8:6F:D0:BF:55:E9:09:CA","sha256":"C9:C2:B4:C7:E6:CA:CC:33:A4:FF:64:2A:D2:E4:C0:97:E1:F2:EB:D6:D7:1C:F4:66:6B:5E:AB:51:40:FE:D1:6B"}}},"request":{"raw":"GET /wp-content/plugins/classic-elementor-addons-pro/assets/js/owl.carousel.min.js?ver=2.3.4 HTTP/1.1\r\nHost: refund-vertex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://refund-vertex.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sun, 12 Jul 2026 21:01:30 GMT\r\nserver: cloudflare\r\nlast-modified: Wed, 01 Jul 2026 09:47:51 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncontent-encoding: zstd\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Udba25Xg1v1o2PiujnwRQ7%2F%2B6rT0Vo440IPajntxQO3TqKKFsVQk1tMROjEMDxeiqPzLSzQhA%2F4SdTdHwdJmV8eFKCXXBAofTC5V2sxitCTyXVfmesoAQBT6V59CmW5L1LYFhg%3D%3D\"}]}\r\ncontent-type: text/javascript\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\ncf-ray: a1a2fbaa0a5d712d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":44342,"size_decoded":13478,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (31997)","md5":"f416f9031fef25ae25ba9756e3eb6978","sha1":"e2a600e433df72b4cfde93d7880e3114917a3cbe","sha256":"a53c43f834b32309b084ea9314df8307e9c78cee2202c6e07f216ae4ae5b704d","sha512":"6cfb3b01eea956f84e4a221cc940a547bfead8e02c462a2fc38bc0917fb325bc374a101e7aa7b3ab9d11208708511abb39adb4ad6da7daaf9fc9704d714f65af","ssdeep":"768:UCI7dmuMFAAJG4dlQKNORpnXGAtep2lcwJeL+wr2RSGc7UuHjRUQuFBt33:PITMFC4dbMVRSGcgRDV","tlshash":"e7137346b3202d2a869b61a0663f160bb23a241ce414547d7d79e6de6d7dc8c213ffbc","first_seen":"2023-03-07T01:02:37Z","last_seen":"2026-07-19T00:21:07.13503Z","times_seen":64620,"resource_available":true,"data":null}},"time_used":5020,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":4982,"receive":38,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"refund-vertex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"refund-vertex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"refund-vertex.com/wp-content/plugins/cool-formkit-for-elementor-forms/assets/js/country-code-script.js?ver=1.4.3","fqdn":"refund-vertex.com","domain":"refund-vertex.com","tld":"com"},"ip":{"addr":"104.21.18.129","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://refund-vertex.com/","date":"2026-07-12T21:01:25.456Z","timestamp":1783890085456,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"refund-vertex.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 02 Jul 2026 10:20:14 GMT","end":"Wed, 30 Sep 2026 11:18:49 GMT"},"fingerprint":{"sha1":"32:ED:60:EF:39:C7:37:B9:BB:20:CC:D9:A8:6F:D0:BF:55:E9:09:CA","sha256":"C9:C2:B4:C7:E6:CA:CC:33:A4:FF:64:2A:D2:E4:C0:97:E1:F2:EB:D6:D7:1C:F4:66:6B:5E:AB:51:40:FE:D1:6B"}}},"request":{"raw":"GET /wp-content/plugins/cool-formkit-for-elementor-forms/assets/js/country-code-script.js?ver=1.4.3 HTTP/1.1\r\nHost: refund-vertex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://refund-vertex.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sun, 12 Jul 2026 21:01:31 GMT\r\nserver: cloudflare\r\nlast-modified: Thu, 02 Jul 2026 06:40:31 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncontent-encoding: zstd\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=dNIamEXcGlYCDKIjT8fxyjtW%2Bons7rcuW7Lxy2adNVuOM6%2BkiI98c1toklwh4Mt8SQfx%2BJOFkfPx9se8l59D%2BY8QGwV4kzPuUupUJDrVUOqJurvLOxRN2FdT%2FA8KivMlE2%2Bj4A%3D%3D\"}]}\r\ncontent-type: text/javascript\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\ncf-ray: a1a2fbaa1a66712d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":36147,"size_decoded":9516,"mime_type":"text/javascript","magic":"ASCII text, with CRLF line terminators","md5":"7b34ee4ee2d12a11e605a194f0254922","sha1":"597ac312d6baf3ae127d7f142ff8912d3dbcd648","sha256":"13bbaea80f13572792c7bb05cdba850cc9a4ebdd3e0671b639748798a9f848ee","sha512":"519727be0f81563186ce09425eb36680bc93cc2ba3d20abdb55422340a19eb606a3d4a1b8a822d13efba8b3a23c386d10e814abf15863a0fcded41daa4fca765","ssdeep":"768:VsENWT9CGS+L33c43gdLShB1xxpVWV+R+mU5I1G7lo3izxKGkc4aD0cU:VsEUT9A0P3gNShBTH3MxKGd41cU","tlshash":"baf2854de2590369e877937dbe9bc11de72a126b6c9142443ddc43402f708e1aba2ff9","first_seen":"2025-10-18T02:52:31.464327Z","last_seen":"2026-07-12T21:02:12.973298Z","times_seen":6,"resource_available":true,"data":null}},"time_used":5690,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5663,"receive":27,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"refund-vertex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"refund-vertex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"refund-vertex.com/wp-content/uploads/elementor/thumbs/left-quote1-1-rprl37qsoj256izc3bvmbpia5o5wkxscdcm91p9zko.png","fqdn":"refund-vertex.com","domain":"refund-vertex.com","tld":"com"},"ip":{"addr":"104.21.18.129","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://refund-vertex.com/","date":"2026-07-12T21:01:25.498Z","timestamp":1783890085498,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"refund-vertex.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 02 Jul 2026 10:20:14 GMT","end":"Wed, 30 Sep 2026 11:18:49 GMT"},"fingerprint":{"sha1":"32:ED:60:EF:39:C7:37:B9:BB:20:CC:D9:A8:6F:D0:BF:55:E9:09:CA","sha256":"C9:C2:B4:C7:E6:CA:CC:33:A4:FF:64:2A:D2:E4:C0:97:E1:F2:EB:D6:D7:1C:F4:66:6B:5E:AB:51:40:FE:D1:6B"}}},"request":{"raw":"GET /wp-content/uploads/elementor/thumbs/left-quote1-1-rprl37qsoj256izc3bvmbpia5o5wkxscdcm91p9zko.png HTTP/1.1\r\nHost: refund-vertex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://refund-vertex.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sun, 12 Jul 2026 21:01:31 GMT\r\nserver: cloudflare\r\nlast-modified: Wed, 01 Jul 2026 12:11:28 GMT\r\naccept-ranges: bytes\r\npriority: u=5,i\r\nserver-timing: cfExtPri\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vLt3VfVGaZHCmSmhTRODZwttPPlegrPmbKPUqUnvrHddLqyuFbQ4MJDNHNZrVxPbLD0jH%2B95Aky9lzx8s1OAGWzlSTJqgnUyAInmtX2vLiLotKnuAgdzSAvklbsvEG%2FV9eTjoA%3D%3D\"}]}\r\ncontent-type: image/png\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1a2fbaa5a71712d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 3042\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3042,"size_decoded":3711,"mime_type":"image/png","magic":"PNG image data, 60 x 60, 8-bit/color RGBA, non-interlaced","md5":"7763e29a107a68ea45a1b0af1a90c0a4","sha1":"fe78be3b7250c80185dde34b214699b57fe8c3c7","sha256":"21948074710c1275097eb9f3117a3add1bf7fc11ccc2079c0c9b50c5d53df978","sha512":"8e990058b3054c23ebe365136d098cdb568ac684f76245d33ffea334040f86269c4816cea7a6e7d12b52c1ee96ce3890bfcb072441020dbae0ed0f5fa5847511","ssdeep":"","tlshash":"ae514d427a6407f1939bc846a22ac560a9e78d7ac9264402270c51d3fde7fdcec5911d","first_seen":"2026-07-11T07:18:49.139284Z","last_seen":"2026-07-12T21:02:12.975326Z","times_seen":2,"resource_available":false,"data":null}},"time_used":6318,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6318,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"refund-vertex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"refund-vertex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"refund-vertex.com/wp-content/uploads/2019/04/team-6.jpg","fqdn":"refund-vertex.com","domain":"refund-vertex.com","tld":"com"},"ip":{"addr":"104.21.18.129","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://refund-vertex.com/","date":"2026-07-12T21:01:25.507Z","timestamp":1783890085507,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"refund-vertex.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 02 Jul 2026 10:20:14 GMT","end":"Wed, 30 Sep 2026 11:18:49 GMT"},"fingerprint":{"sha1":"32:ED:60:EF:39:C7:37:B9:BB:20:CC:D9:A8:6F:D0:BF:55:E9:09:CA","sha256":"C9:C2:B4:C7:E6:CA:CC:33:A4:FF:64:2A:D2:E4:C0:97:E1:F2:EB:D6:D7:1C:F4:66:6B:5E:AB:51:40:FE:D1:6B"}}},"request":{"raw":"GET /wp-content/uploads/2019/04/team-6.jpg HTTP/1.1\r\nHost: refund-vertex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://refund-vertex.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sun, 12 Jul 2026 21:01:31 GMT\r\nserver: cloudflare\r\nlast-modified: Wed, 01 Jul 2026 12:08:34 GMT\r\naccept-ranges: bytes\r\npriority: u=5,i\r\nserver-timing: cfExtPri\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=i2HwcGBHOqHCbxJcuvri64TlAHhex1pk5LibZh2rgqHDUhkE%2FUlO1C1ePHeg86N0QBWlBo10T%2FZqEJ%2BbeA8bw6nPOcAe5xS0irEnEMuN87cusaDAr6UKdEcc4NdGdLCQ0M5A4g%3D%3D\"}]}\r\ncontent-type: image/jpeg\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1a2fbaa6a76712d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 54307\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":54307,"size_decoded":54980,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, progressive, precision 8, 1000x1000, components 3","md5":"ba0b6caefdcec8b454ac439cf7c54f06","sha1":"78c571d85e974ddd8ed4beaf4d1fd6b5a3e6e1da","sha256":"9612a6612d1c5e57858bce6b42ada4799c95dd74d8f7365a79259a4302f71e55","sha512":"b9c07f0283f0e525236d9c508d194f75fb170d70bdb473c75da72500bd1c8373a29afa1a25adcaa931c0c40f3dc01d6dffb8e45b675a2794a8bcb8033f20aa68","ssdeep":"1536:7PDwIfgoWbzoRiP3o/AgJG6Fw7mzGWtPbibFs9sLu:78OObzo0P3o/d5FRywPbibru","tlshash":"6633e0138fc06237d1292634c4fbdb3a266709c2fb61fda76487456b1c382722e696d3","first_seen":"2026-07-11T07:18:49.093417Z","last_seen":"2026-07-12T21:02:12.976377Z","times_seen":2,"resource_available":false,"data":null}},"time_used":6390,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6332,"receive":58,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"refund-vertex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"refund-vertex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"refund-vertex.com/","fqdn":"refund-vertex.com","domain":"refund-vertex.com","tld":"com"},"ip":{"addr":"104.21.18.129","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-07-12T21:01:23.427Z","timestamp":1783890083427,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"refund-vertex.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 02 Jul 2026 10:20:14 GMT","end":"Wed, 30 Sep 2026 11:18:49 GMT"},"fingerprint":{"sha1":"32:ED:60:EF:39:C7:37:B9:BB:20:CC:D9:A8:6F:D0:BF:55:E9:09:CA","sha256":"C9:C2:B4:C7:E6:CA:CC:33:A4:FF:64:2A:D2:E4:C0:97:E1:F2:EB:D6:D7:1C:F4:66:6B:5E:AB:51:40:FE:D1:6B"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: refund-vertex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sun, 12 Jul 2026 21:01:24 GMT\r\nserver: cloudflare\r\nlink: \u003chttps://refund-vertex.com/wp-json/\u003e; rel=\"https://api.w.org/\", \u003chttps://refund-vertex.com/wp-json/wp/v2/pages/36316\u003e; rel=\"alternate\"; title=\"JSON\"; type=\"application/json\", \u003chttps://refund-vertex.com/\u003e; rel=shortlink\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=hHP0ooWPEjzL6zjX%2BFLiYwuzB%2F8I4aBABoj9fnysH%2Bo6USGAQqXj4SFY0c2LrCM87O%2Bn8gLCCSM4AyCCJllZQYxLrjQpj6kqlg6QYDZBnXtEO1ALptW2IEIdxlTL8w22aYgcww%3D%3D\"}]}\r\npriority: u=0,i\r\ncontent-type: text/html; charset=UTF-8\r\ncf-cache-status: DYNAMIC\r\ncontent-encoding: zstd\r\ncf-ray: a1a2fb9d9944712d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"imagesLoaded:5.0.0","description":"jQuery plugin for seeing if the images are loaded.","website":"https://imagesloaded.desandro.com/","common_platform_enumeration":"","icon":"","categories":["JavaScript libraries"]},{"name":"Bootstrap","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]},{"name":"jQuery Migrate:3.4.1","description":"Query Migrate is a javascript library that allows you to preserve the compatibility of your jQuery code developed for versions of jQuery older than 1.9.","website":"https://github.com/jquery/jquery-migrate","common_platform_enumeration":"","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Slider Revolution:6.7.57","description":"Slider Revolution is a flexible and highly customisable slider.","website":"https://www.sliderrevolution.com","common_platform_enumeration":"","icon":"Slider Revolution.svg","categories":["Widgets","Photo galleries"]},{"name":"Elementor:4.1.4","description":"Elementor is a website builder platform for professionals on WordPress.","website":"https://elementor.com","common_platform_enumeration":"","icon":"Elementor.svg","categories":["Page builders","WordPress plugins"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]},{"name":"Infinite Scroll:5.0.0","description":"jQuery plugin for infinite scrolling.","website":"https://infinite-scroll.com/","common_platform_enumeration":"","icon":"Infinite Scroll.svg","categories":["JavaScript libraries"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"OWL Carousel","description":"OWL Carousel is an enabled jQuery plugin that lets you create responsive carousel sliders.","website":"https://owlcarousel2.github.io/OwlCarousel2/","common_platform_enumeration":"","icon":"OWL Carousel.png","categories":["JavaScript libraries"]},{"name":"WordPress:7.0.1","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"Google Analytics","description":"Google Analytics is a free web analytics service that tracks and reports website traffic.","website":"https://google.com/analytics","common_platform_enumeration":"","icon":"Google Analytics.svg","categories":["Analytics"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Contact Form 7:6.1.6","description":"Contact Form 7 is an WordPress plugin which can manage multiple contact forms. The form supports Ajax-powered submitting, CAPTCHA, Akismet spam filtering.","website":"https://contactform7.com","common_platform_enumeration":"","icon":"Contact Form 7.png","categories":["WordPress plugins","Form builders"]}],"data":{"size":206242,"size_decoded":46716,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (26645), with CRLF, LF line terminators","md5":"f5b8187cdabd6974ecbc012877309752","sha1":"3875067a89eba95514ed734d9d0596f148f560dd","sha256":"c002f913a382c86510d8d0f76ca3d6415521dca3527a7e0431d2ab6e94d4da10","sha512":"b818f3c1f9eb2b111cc9af692eb1065a8bfbdb6712e5717d62922ee7bac6110ebeeebde9a881504543abbf34ab3297f15be036e3873acbd349f384a7a7c27e3a","ssdeep":"3072:IScwstsjf8QE3dIngcxqmU1yczWnq2gLzOSCiz+A1uGwSzKM5ikqsPTKvNYPbYSb:h2mwQE3dIgcVU1ycoym7hYYYvYYYMh","tlshash":"991419b1790a1c3a225b03dfe0ab360c69e9aaf5e74153e0f5f985285bd0dd17393329","first_seen":"2026-07-12T21:02:12.977661Z","last_seen":"2026-07-12T21:02:12.977661Z","times_seen":1,"resource_available":true,"data":null}},"time_used":1485,"timings":{"blocked":0,"dns":5,"connect":18,"send":0,"wait":1370,"receive":92,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"refund-vertex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"refund-vertex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"refund-vertex.com/wp-content/plugins/classic-elementor-addons-pro//assets/js/gsap/gsap.min.js?ver=3.13.0","fqdn":"refund-vertex.com","domain":"refund-vertex.com","tld":"com"},"ip":{"addr":"104.21.18.129","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://refund-vertex.com/","date":"2026-07-12T21:01:25.432Z","timestamp":1783890085432,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"refund-vertex.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 02 Jul 2026 10:20:14 GMT","end":"Wed, 30 Sep 2026 11:18:49 GMT"},"fingerprint":{"sha1":"32:ED:60:EF:39:C7:37:B9:BB:20:CC:D9:A8:6F:D0:BF:55:E9:09:CA","sha256":"C9:C2:B4:C7:E6:CA:CC:33:A4:FF:64:2A:D2:E4:C0:97:E1:F2:EB:D6:D7:1C:F4:66:6B:5E:AB:51:40:FE:D1:6B"}}},"request":{"raw":"GET /wp-content/plugins/classic-elementor-addons-pro//assets/js/gsap/gsap.min.js?ver=3.13.0 HTTP/1.1\r\nHost: refund-vertex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://refund-vertex.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sun, 12 Jul 2026 21:01:30 GMT\r\nserver: cloudflare\r\nlast-modified: Wed, 01 Jul 2026 09:47:51 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncontent-encoding: zstd\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4SyjH5qaqLZ68VvhU5mK4qeZ4kPrdhUa4YPTGqCIoGQEmrqzhCU%2BWjTM9yi2nsORGhWdgbBK8sEfLBKCU5I3NuRbFkQ2beu87j%2BQ09Hs7WqnxLleu2f4tgfNBhf3LtHBaJgijQ%3D%3D\"}]}\r\ncontent-type: text/javascript\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\ncf-ray: a1a2fba9fa56712d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":72444,"size_decoded":30626,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (65314), with CRLF line terminators","md5":"aeffb176c9e17426cc3b8f2fe63bb309","sha1":"2154eafca92a261b5aa5d0d8b28ab805e6904093","sha256":"bc3e10fcc127119c779389326a80890a8eb4c2ae07b476dd06b9c958bb219295","sha512":"d6eb299b5f8f1e4f893c64e0275b69896cdb91fc176c64b1f1fe1f68a1863435ffeaf4900f7a4dfeb1b74c6d33b89bd70675e85600cce646473e866cfde06563","ssdeep":"1536:nha1HvGRpXaDTX+Iq2CpsvO3dyL4NZEkcIRy5ybQ:o1Heaujpc5EKjI+y8","tlshash":"4563e8d93292f427039751a1447f094bb337e998640f0918f269e4ce7e3c99d42bbe7a","first_seen":"2025-09-07T20:10:34.034545Z","last_seen":"2026-07-12T21:02:12.978837Z","times_seen":55,"resource_available":true,"data":null}},"time_used":5030,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":4990,"receive":40,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"refund-vertex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"refund-vertex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"refund-vertex.com/wp-content/plugins/elementor/assets/lib/animations/styles/fadeInLeft.min.css?ver=4.1.4","fqdn":"refund-vertex.com","domain":"refund-vertex.com","tld":"com"},"ip":{"addr":"104.21.18.129","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://refund-vertex.com/","date":"2026-07-12T21:01:25.137Z","timestamp":1783890085137,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"refund-vertex.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 02 Jul 2026 10:20:14 GMT","end":"Wed, 30 Sep 2026 11:18:49 GMT"},"fingerprint":{"sha1":"32:ED:60:EF:39:C7:37:B9:BB:20:CC:D9:A8:6F:D0:BF:55:E9:09:CA","sha256":"C9:C2:B4:C7:E6:CA:CC:33:A4:FF:64:2A:D2:E4:C0:97:E1:F2:EB:D6:D7:1C:F4:66:6B:5E:AB:51:40:FE:D1:6B"}}},"request":{"raw":"GET /wp-content/plugins/elementor/assets/lib/animations/styles/fadeInLeft.min.css?ver=4.1.4 HTTP/1.1\r\nHost: refund-vertex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://refund-vertex.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sun, 12 Jul 2026 21:01:29 GMT\r\nserver: cloudflare\r\nlast-modified: Tue, 30 Jun 2026 16:15:02 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\ncontent-encoding: zstd\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5JFV9ZbIP8WSSrwPdVuTJUx81QJtAHw2h%2F8G%2F9kRfWepQ4Mve1mAC2lFANXkx12IEHzWCa3qPJLjBfbvTZADNiPY6Pnrf5Z9zQAtkLjUHpa5ZrENrEDDup9c8RabYgMRvykaYw%3D%3D\"}]}\r\ncontent-type: text/css\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\ncf-ray: a1a2fba81a1e712d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":137,"size_decoded":758,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"c93c2f1dc1c056bfa90d12be50572e1c","sha1":"bfe7febf218c5771d7834502effe8eb739dccffa","sha256":"26b6a7dd6f4bc210d8d1f180e5cc29393c02ada9e66e2b5e6ec5207035d8d7ea","sha512":"f7bd1d304e451682d453490d40282e2e5e02eb02b6ea83e553365875bcfe4b7c09b1de773d0c8a37c097d30fdd8f63a2b799a1769058583dc99fd24e8ce6e058","ssdeep":"","tlshash":"93c09b1c8d740105039106d658cc5751dc39c7f5dc732dfff144d74649919ed2345153","first_seen":"2024-09-10T20:44:21Z","last_seen":"2026-07-19T00:17:06.549061Z","times_seen":24063,"resource_available":false,"data":null}},"time_used":4158,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":4158,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"refund-vertex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"refund-vertex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"vertex-legal.org/wp-content/uploads/2023/02/pre-loader.gif","fqdn":"vertex-legal.org","domain":"vertex-legal.org","tld":"org"},"ip":{"addr":"172.67.144.12","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://refund-vertex.com/","date":"2026-07-12T21:01:30.462Z","timestamp":1783890090462,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vertex-legal.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 30 Jun 2026 13:44:58 GMT","end":"Mon, 28 Sep 2026 14:43:29 GMT"},"fingerprint":{"sha1":"4A:1A:1E:6F:F9:02:AD:DF:24:95:C3:D8:C0:17:35:DE:BC:CC:5C:B8","sha256":"52:9D:7E:11:74:8D:04:4F:63:5C:A2:08:18:17:46:61:5A:70:6D:A9:F2:00:79:CC:A8:3B:F5:4C:BA:EE:A0:63"}}},"request":{"raw":"GET /wp-content/uploads/2023/02/pre-loader.gif HTTP/1.1\r\nHost: vertex-legal.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://refund-vertex.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sun, 12 Jul 2026 21:01:31 GMT\r\nserver: cloudflare\r\nlast-modified: Wed, 01 Jul 2026 12:08:37 GMT\r\naccept-ranges: bytes\r\npriority: u=4,i\r\nserver-timing: cfExtPri\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2CaPOfF%2F5GmpUrrCH%2FAk6Z%2FOXi%2BeWF7OtvOBqA6WJrmvse3D0c9%2Ft8ec3NRTB4rno%2Fg4qp7rPXHcB2Ahg%2B1Pal2VxvJprDYWpQNi09QE7XqegVuUx5ONzef1hFvGY7NZbsZG\"}]}\r\ncontent-type: image/gif\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1a2fbc9fc72b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 53775\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":53775,"size_decoded":54447,"mime_type":"image/gif","magic":"GIF image data, version 89a, 74 x 74","md5":"fe04354e97623240d4b36f85c64c6e11","sha1":"3c6f7acec8df4c6f6b9215f79e50118ba0770fa7","sha256":"9a711d636b99f9655fb633033c110a8a6d2e247286a9b1f788678d4a05341c55","sha512":"320516bf2475e4bcf5c150de5359610033f1bcb73126ccbe707aac5f7d882519f72d413d356c1551a91c2c56b7ee1289be82aacb0cdfcb86b05912ec6a689997","ssdeep":"768:+EfEfEbd1avnUaAgBk/KW9oXYH0P9otSS9uP14aywEfEfEP:+EfEfEb2vUajW/KC1jEguP7ywEfEfEP","tlshash":"d233bff8ddd8b047ce4748b66504fd047347ef9223998aec2f459b55c82da2b94e0b4b","first_seen":"2026-01-12T06:43:33.031962Z","last_seen":"2026-07-12T21:02:12.980042Z","times_seen":3,"resource_available":false,"data":null}},"time_used":1440,"timings":{"blocked":-1,"dns":71,"connect":15,"send":0,"wait":1294,"receive":59,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vertex-legal.org/wp-content/uploads/2023/02/sign-1.png","fqdn":"vertex-legal.org","domain":"vertex-legal.org","tld":"org"},"ip":{"addr":"172.67.144.12","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://refund-vertex.com/","date":"2026-07-12T21:01:32.295Z","timestamp":1783890092295,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vertex-legal.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 30 Jun 2026 13:44:58 GMT","end":"Mon, 28 Sep 2026 14:43:29 GMT"},"fingerprint":{"sha1":"4A:1A:1E:6F:F9:02:AD:DF:24:95:C3:D8:C0:17:35:DE:BC:CC:5C:B8","sha256":"52:9D:7E:11:74:8D:04:4F:63:5C:A2:08:18:17:46:61:5A:70:6D:A9:F2:00:79:CC:A8:3B:F5:4C:BA:EE:A0:63"}}},"request":{"raw":"GET /wp-content/uploads/2023/02/sign-1.png HTTP/1.1\r\nHost: vertex-legal.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://refund-vertex.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sun, 12 Jul 2026 21:01:32 GMT\r\nserver: cloudflare\r\nlast-modified: Wed, 01 Jul 2026 12:08:56 GMT\r\naccept-ranges: bytes\r\npriority: u=4,i\r\nserver-timing: cfExtPri\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=nOtzq%2B0nKEsNif72TImeaXKbWoBVmW6hbklvSXzOgQdh%2F1ZUe7ga8DqBWsT%2FFFmUDKpEXLAAcZiFiku%2BUjo7osKa8FEIINANqXgnrQ5QmCBNfcXz9ll1OtsPM6VPJJK0KU1t\"}]}\r\ncontent-type: image/png\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1a2fbd4de48b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 4488\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4488,"size_decoded":5153,"mime_type":"image/png","magic":"PNG image data, 122 x 61, 8-bit/color RGBA, non-interlaced","md5":"c1fb0d4a48e77cef04269f27dcb8248a","sha1":"3ae3708fbf4dbfc7e02512beb1e540c69f58ecf4","sha256":"f8d6baea7a2aa16f46e9dff61795cc056fe3ba11b96eb988b2d53cdd340bb699","sha512":"f08b5ffc66a671ffe33bb72f50fba746f8101c5da22f6f2479349f8d19469866d6ce9c3275b58be79810f916dbfa6a771816b3571500d1fce8bc5df55eab2ffb","ssdeep":"96:BY2UPUoQMh9GrVouejYB98iKTJQ6HTuoeM/e2m8Fd/t:B+UoVjGBPejYBTKNQGuZ8FH","tlshash":"01917c9af89e0d4083eccd793cfa2cb258176e0c1eb1af3e5dcaca18666151b88144c3","first_seen":"2026-07-11T07:18:49.083278Z","last_seen":"2026-07-12T21:02:12.77212Z","times_seen":2,"resource_available":false,"data":null}},"time_used":98,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":98,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"refund-vertex.com/wp-content/uploads/elementor/css/base-desktop.css?ver=6a5119ef39ab2","fqdn":"refund-vertex.com","domain":"refund-vertex.com","tld":"com"},"ip":{"addr":"104.21.18.129","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://refund-vertex.com/","date":"2026-07-12T21:01:25.145Z","timestamp":1783890085145,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"refund-vertex.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 02 Jul 2026 10:20:14 GMT","end":"Wed, 30 Sep 2026 11:18:49 GMT"},"fingerprint":{"sha1":"32:ED:60:EF:39:C7:37:B9:BB:20:CC:D9:A8:6F:D0:BF:55:E9:09:CA","sha256":"C9:C2:B4:C7:E6:CA:CC:33:A4:FF:64:2A:D2:E4:C0:97:E1:F2:EB:D6:D7:1C:F4:66:6B:5E:AB:51:40:FE:D1:6B"}}},"request":{"raw":"GET /wp-content/uploads/elementor/css/base-desktop.css?ver=6a5119ef39ab2 HTTP/1.1\r\nHost: refund-vertex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://refund-vertex.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sun, 12 Jul 2026 21:01:29 GMT\r\nserver: cloudflare\r\nlast-modified: Fri, 10 Jul 2026 16:12:31 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\ncontent-encoding: zstd\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=uBSy6kdHnQFMqQuMm2i2GJ9cTYGJGzgocghlOY6gDmtJ%2BCQs5aIr7SiUhEMzyW%2ByHMHtBCi6l6WC8QEoj%2FCi79RioX55q9dKP3Eyg1QmcKslrVtYDmrlCP3fR50bgZ7z%2FxUKcQ%3D%3D\"}]}\r\ncontent-type: text/css\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\ncf-ray: a1a2fba82a23712d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1735,"size_decoded":1246,"mime_type":"text/css","magic":"ASCII text, with very long lines (1735), with no line terminators","md5":"f4ae22fff3e0007efae769790c89f43c","sha1":"55c8b97f3ae5755e8637f3ab2dddf9149fb1a3c5","sha256":"48b19bde9211d669e5fd6f84c10d34ba3d7e1cf5efef32d1ad1dc730f1527580","sha512":"fcf2c834b112fa1e49a9ad2534434d3b48f83990ae361f1fcf39b888097a967c874f19fc916262d554b4885af66873d35567f88834767bcb85abbe7fc01073be","ssdeep":"","tlshash":"e1317720ba13967a123fc10badd7b68f50d042a372c563d9fc606122e9ad9447fb7307","first_seen":"2026-06-11T10:39:40.63669Z","last_seen":"2026-07-18T17:34:22.651758Z","times_seen":85,"resource_available":false,"data":null}},"time_used":4163,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":4163,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"refund-vertex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"refund-vertex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"refund-vertex.com/wp-content/plugins/revslider/public/js/libs/tptools.js?ver=6.7.57","fqdn":"refund-vertex.com","domain":"refund-vertex.com","tld":"com"},"ip":{"addr":"104.21.18.129","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://refund-vertex.com/","date":"2026-07-12T21:01:25.388Z","timestamp":1783890085388,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"refund-vertex.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 02 Jul 2026 10:20:14 GMT","end":"Wed, 30 Sep 2026 11:18:49 GMT"},"fingerprint":{"sha1":"32:ED:60:EF:39:C7:37:B9:BB:20:CC:D9:A8:6F:D0:BF:55:E9:09:CA","sha256":"C9:C2:B4:C7:E6:CA:CC:33:A4:FF:64:2A:D2:E4:C0:97:E1:F2:EB:D6:D7:1C:F4:66:6B:5E:AB:51:40:FE:D1:6B"}}},"request":{"raw":"GET /wp-content/plugins/revslider/public/js/libs/tptools.js?ver=6.7.57 HTTP/1.1\r\nHost: refund-vertex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://refund-vertex.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sun, 12 Jul 2026 21:01:30 GMT\r\nserver: cloudflare\r\nlast-modified: Wed, 01 Jul 2026 09:48:22 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncontent-encoding: zstd\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=BqbPtu1OfnA1h48g2OeHXFXpBhlP5D6PCzmxf4q0%2FPmhN%2B44L%2BJD3kvHOWJjqWjuB39kaZEHQaW3EM5IFlmmJjs5YFQr%2BXUSzvL3YXydKYsNALGMJAGMhYYDuFCgJPn0OsdoqQ%3D%3D\"}]}\r\ncontent-type: text/javascript\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\ncf-ray: a1a2fba9aa41712d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":208838,"size_decoded":79756,"mime_type":"text/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (53284)","md5":"7a48c52c849d19588b172c03df75b236","sha1":"94907ae9c88535577f44cd1cd50f7f229b7828f3","sha256":"16780269e362021d705b44bc75b8f5bb3e44619427c64a972a8ac7f1fe3bb1fc","sha512":"39df5b5c6994a6200b86e27eff016311f521e5024a9e2c0a55d398fb807cc3b9ab051d62ae5e9fe3b53c8c8565998fc925d745e465aad73b709596d4c0ba9939","ssdeep":"3072:IWa1SNwMXbvGpL2SEMg34v4VTE+0Asn7m2JKDYe4inrxPaRgVj7Djev5YjjTHo:dNwMXbvGpO9VYLm2edBntXVTjsabI","tlshash":"4f144ad87151b432029263a6503f0b0bf23b9dd5744b44a8f328d8d9bd789a990bff79","first_seen":"2026-02-11T00:53:21.318921Z","last_seen":"2026-07-19T00:13:19.709285Z","times_seen":2466,"resource_available":true,"data":null}},"time_used":4991,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":4895,"receive":96,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"refund-vertex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"refund-vertex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/dmsans/v17/rP2Yp2ywxg089UriI5-g4vlH9VoD8Cmcqbu0-K6z8GXhnU0.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://refund-vertex.com/","date":"2026-07-12T21:01:30.637Z","timestamp":1783890090637,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 22 Jun 2026 08:37:23 GMT","end":"Mon, 14 Sep 2026 08:37:22 GMT"},"fingerprint":{"sha1":"CD:5B:53:23:61:72:75:37:AD:E9:F1:74:B2:D2:EE:09:81:05:55:E1","sha256":"9F:07:21:2D:14:EB:C5:C0:D4:2B:42:E4:55:80:7A:BB:AF:47:A8:BC:0C:5E:05:F3:2A:2B:1F:2A:78:4D:FF:D7"}}},"request":{"raw":"GET /s/dmsans/v17/rP2Yp2ywxg089UriI5-g4vlH9VoD8Cmcqbu0-K6z8GXhnU0.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://refund-vertex.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 36932\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 09 Jul 2026 04:44:35 GMT\r\nexpires: Fri, 09 Jul 2027 04:44:35 GMT\r\ncache-control: public, max-age=31536000\r\nage: 317815\r\nlast-modified: Wed, 10 Sep 2025 16:31:03 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":36932,"size_decoded":37745,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 36932, version 1.0","md5":"7c87a648293fbb5b2924aafaa59e8aea","sha1":"c57593e0adc4cf99dd9e67cb782242220a061a9d","sha256":"9fea608a947e67020c33cad9a6fe3d60c54119dfb8cff87768a8117a15ed7543","sha512":"764ced325a768dca84e1fb0cc458818239ce379dbcbdb324ee8849bbe15f54e3f0254ae6e52ee5a92741840637b4f9885d246a0978af23176b3acfe5b9cec23f","ssdeep":"768:mMQPOAQQKW6GccoXQ+OGpHNzXgtDM0SVu7P3nqtPl9Bf2csDpHUjbYE8j2:mMQz4W5og+tpH6tDJku73EPlPOcs5U/l","tlshash":"c0f2f23e7ea5691487c2b0be506b00935344c9bd37c18121bbb953f44ea67addc5d63c","first_seen":"2025-09-11T17:08:25.889763Z","last_seen":"2026-07-19T00:19:55.55867Z","times_seen":30334,"resource_available":false,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/marcellus/v14/wEO_EBrOk8hQLDvIAF81VvoK.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://refund-vertex.com/","date":"2026-07-12T21:01:30.639Z","timestamp":1783890090639,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 22 Jun 2026 08:37:23 GMT","end":"Mon, 14 Sep 2026 08:37:22 GMT"},"fingerprint":{"sha1":"CD:5B:53:23:61:72:75:37:AD:E9:F1:74:B2:D2:EE:09:81:05:55:E1","sha256":"9F:07:21:2D:14:EB:C5:C0:D4:2B:42:E4:55:80:7A:BB:AF:47:A8:BC:0C:5E:05:F3:2A:2B:1F:2A:78:4D:FF:D7"}}},"request":{"raw":"GET /s/marcellus/v14/wEO_EBrOk8hQLDvIAF81VvoK.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://refund-vertex.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 14552\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 09 Jul 2026 05:03:16 GMT\r\nexpires: Fri, 09 Jul 2027 05:03:16 GMT\r\ncache-control: public, max-age=31536000\r\nage: 316694\r\nlast-modified: Wed, 10 Sep 2025 16:22:05 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":14552,"size_decoded":15365,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 14552, version 1.0","md5":"d8d78c8d074b3e3ee4232d269932f9a2","sha1":"10f9e448571b8095b380bb2ea019cfc68fb27a9b","sha256":"8a539799d12e3a144273288055490f57e1eee84da7a9145f085bc522e80719c3","sha512":"1f9fb25600f96edd372205fb73b2809fe243ec68d893e8cb73d3590e9a7d39cf4fd2713ec8e9a535b57b8db2e7102f6caf8c1523dc927895ce798fe05c5a1381","ssdeep":"384:01vT1iuqrjvhKYZ6Qc7YiDnxQnGmxPQwRHZgLGftWGTD0Z3Rs3al:Wr1i3Uo6QcMiDnxQGwRHSLGftWoDt34","tlshash":"de62c1b15cdc3ed1e623607e4b27595de7b66f43b5000b81ad07bf487587ad0ea0461a","first_seen":"2023-05-06T03:31:20Z","last_seen":"2026-07-18T21:06:41.195242Z","times_seen":3789,"resource_available":false,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":20,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"vertex-legal.org/wp-content/uploads/2023/02/slider1.jpg","fqdn":"vertex-legal.org","domain":"vertex-legal.org","tld":"org"},"ip":{"addr":"172.67.144.12","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://refund-vertex.com/","date":"2026-07-12T21:01:32.408Z","timestamp":1783890092408,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vertex-legal.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 30 Jun 2026 13:44:58 GMT","end":"Mon, 28 Sep 2026 14:43:29 GMT"},"fingerprint":{"sha1":"4A:1A:1E:6F:F9:02:AD:DF:24:95:C3:D8:C0:17:35:DE:BC:CC:5C:B8","sha256":"52:9D:7E:11:74:8D:04:4F:63:5C:A2:08:18:17:46:61:5A:70:6D:A9:F2:00:79:CC:A8:3B:F5:4C:BA:EE:A0:63"}}},"request":{"raw":"GET /wp-content/uploads/2023/02/slider1.jpg HTTP/1.1\r\nHost: vertex-legal.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://refund-vertex.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sun, 12 Jul 2026 21:01:33 GMT\r\nserver: cloudflare\r\nlast-modified: Wed, 01 Jul 2026 12:08:55 GMT\r\naccept-ranges: bytes\r\npriority: u=5,i\r\nserver-timing: cfExtPri\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=BudLDJU%2FyyNczR1O786iTIe8ALFpqizAR1XT4q0kJxVMSVcz%2FzZgRyGqIZzW4BEuSDuHh3ubLl%2F%2B0g1qd0kGvtzylmhQ3H5fUqOGrePldKgH5lWJEXDjPhMJsYoqadwMOAWN\"}]}\r\ncontent-type: image/jpeg\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1a2fbd58e63b1b8-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 84393\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":84393,"size_decoded":85060,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, little-endian, direntries=0], baseline, precision 8, 1920x1200, components 3","md5":"a3d7a1b9866b004b50d3a16072f1b553","sha1":"e2b2cddfa045b6918f89d489d424f0b87501dbd9","sha256":"6727458be906f52d70bc9b5b14895d6ae66c569f947b614983307a07960ad121","sha512":"186781ec2092714941a7c3fad6c791cd7c520c7bc159e2bcb1184686a31c691315e6b33283c1c5ad0a65576ab6b2c2c645d462ff22a46187bcb99e2f0335cc66","ssdeep":"1536:rTGrEvt1wpWNztY2DbyI0eR1y0DHBV/uF/2/tLKi9ovFEM1D:/IG/28tY2Dbf20H/uFbOMFEq","tlshash":"9c83e13bef66a783c5ac873215fb2f5c3b2604b49391195353b9223152f63887c9eda0","first_seen":"2025-07-07T18:12:14.007968Z","last_seen":"2026-07-12T21:02:12.983128Z","times_seen":4,"resource_available":false,"data":null}},"time_used":791,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":729,"receive":62,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"refund-vertex.com/wp-content/uploads/elementor/css/post-36316.css?ver=1783699951","fqdn":"refund-vertex.com","domain":"refund-vertex.com","tld":"com"},"ip":{"addr":"104.21.18.129","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://refund-vertex.com/","date":"2026-07-12T21:01:25.143Z","timestamp":1783890085143,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"refund-vertex.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 02 Jul 2026 10:20:14 GMT","end":"Wed, 30 Sep 2026 11:18:49 GMT"},"fingerprint":{"sha1":"32:ED:60:EF:39:C7:37:B9:BB:20:CC:D9:A8:6F:D0:BF:55:E9:09:CA","sha256":"C9:C2:B4:C7:E6:CA:CC:33:A4:FF:64:2A:D2:E4:C0:97:E1:F2:EB:D6:D7:1C:F4:66:6B:5E:AB:51:40:FE:D1:6B"}}},"request":{"raw":"GET /wp-content/uploads/elementor/css/post-36316.css?ver=1783699951 HTTP/1.1\r\nHost: refund-vertex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://refund-vertex.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sun, 12 Jul 2026 21:01:29 GMT\r\nserver: cloudflare\r\nlast-modified: Fri, 10 Jul 2026 16:12:31 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\ncontent-encoding: zstd\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Xg%2FwaMxdY065GaJK5PNk7F9tF3%2BVUoblVhoiQLpaAidEDM4bV%2BFPd2kO5QShCeFSg%2BE3BLd8x3FTzZrDDfWa8biTf20AvLyZ9FIx2nwm5cp%2BLaCWUt4obd%2BVKzoOd8OM2YRRSA%3D%3D\"}]}\r\ncontent-type: text/css\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\ncf-ray: a1a2fba82a22712d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":97288,"size_decoded":10371,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"c38985cdbc31502c846bee2dff01cd52","sha1":"3396cad505ef95b0a4785f38c29a12b086efee85","sha256":"e46cc6d5fd48355e3057aa5dfeadb8e6a2b502f0ede7eadf4be05e75fcbf15ee","sha512":"d1633aa3132cd357f60970f4fe56051970861d11d09fe9aaa839bccad13c6daf3357036aa001ce67b7f0306b0515513d43ba5087fa9d2a5a656c9a19783dbe7f","ssdeep":"1536:HQwFspNYeHx6J7Ip8U+tMQ18DhOjF+A8p8wMSTI4yKqh+Td:HQwFspNYeHx6J7Ip8U+tMQ18DhFA8pFv","tlshash":"9e934354bc134110b92f3b9f5243a18c31394cfac6ada2e6fa725817f5f6da133d2a16","first_seen":"2026-07-11T07:18:49.216928Z","last_seen":"2026-07-12T21:02:12.98451Z","times_seen":2,"resource_available":false,"data":null}},"time_used":4218,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":4164,"receive":54,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"refund-vertex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"refund-vertex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"refund-vertex.com/wp-content/plugins/classic-elementor-addons-pro/assets/js/split-type.min.js?ver=0.3.4","fqdn":"refund-vertex.com","domain":"refund-vertex.com","tld":"com"},"ip":{"addr":"104.21.18.129","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://refund-vertex.com/","date":"2026-07-12T21:01:25.412Z","timestamp":1783890085412,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"refund-vertex.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 02 Jul 2026 10:20:14 GMT","end":"Wed, 30 Sep 2026 11:18:49 GMT"},"fingerprint":{"sha1":"32:ED:60:EF:39:C7:37:B9:BB:20:CC:D9:A8:6F:D0:BF:55:E9:09:CA","sha256":"C9:C2:B4:C7:E6:CA:CC:33:A4:FF:64:2A:D2:E4:C0:97:E1:F2:EB:D6:D7:1C:F4:66:6B:5E:AB:51:40:FE:D1:6B"}}},"request":{"raw":"GET /wp-content/plugins/classic-elementor-addons-pro/assets/js/split-type.min.js?ver=0.3.4 HTTP/1.1\r\nHost: refund-vertex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://refund-vertex.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sun, 12 Jul 2026 21:01:30 GMT\r\nserver: cloudflare\r\nlast-modified: Wed, 01 Jul 2026 09:47:51 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncontent-encoding: zstd\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Nzf%2BpKoiGwyrai0s2SrjFxrjoCvhsovU7NlnDTx0c08GFys94V2fTRMmckVDLtP44O%2FdOFqoEIN%2B3tbnKE01tL4I6Tl8mhwrblrYbOE2f1suJRRV74xCbIhS6khRWuJJ0VBfkQ%3D%3D\"}]}\r\ncontent-type: text/javascript\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\ncf-ray: a1a2fba9da4c712d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":11803,"size_decoded":5409,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (11676)","md5":"93ce8d084f20e581f001b63dbbfe50fc","sha1":"04b8a2b2997999389ab72ffa8b121ee6ef20db24","sha256":"deeb8303ba3d919cbaeeb3c4d768684ce9b5e89ff6e8013f7238b8f4026f8089","sha512":"ab1b4d949006d81b8c3feb92c71e37b9674d8d81da83919fad54556e1262a65b397f0cc4bb7e4c2df4b413c67da5fdd9cc93bc6d41791a3d364fd52f482e9631","ssdeep":"192:XZ4ZgkQoOfxUCpCOCpgYsv65SRxcqL1a1gkXQsksbEy/iFXGvy5P6rhZNaSQvukD:XCZlCVCLsC5+Va1cmU2vyR68S3gR3/ZX","tlshash":"3632e94cb2a7b5a196561028817f530ff235702aa55bc450e177fcf56c34caf62a3e39","first_seen":"2025-07-03T11:01:10.69158Z","last_seen":"2026-07-16T12:55:24.863886Z","times_seen":106,"resource_available":true,"data":null}},"time_used":5023,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5000,"receive":23,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"refund-vertex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"refund-vertex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"refund-vertex.com/wp-content/plugins/elementor-pro/assets/js/frontend.min.js?ver=3.35.0","fqdn":"refund-vertex.com","domain":"refund-vertex.com","tld":"com"},"ip":{"addr":"104.21.18.129","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://refund-vertex.com/","date":"2026-07-12T21:01:25.459Z","timestamp":1783890085459,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"refund-vertex.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 02 Jul 2026 10:20:14 GMT","end":"Wed, 30 Sep 2026 11:18:49 GMT"},"fingerprint":{"sha1":"32:ED:60:EF:39:C7:37:B9:BB:20:CC:D9:A8:6F:D0:BF:55:E9:09:CA","sha256":"C9:C2:B4:C7:E6:CA:CC:33:A4:FF:64:2A:D2:E4:C0:97:E1:F2:EB:D6:D7:1C:F4:66:6B:5E:AB:51:40:FE:D1:6B"}}},"request":{"raw":"GET /wp-content/plugins/elementor-pro/assets/js/frontend.min.js?ver=3.35.0 HTTP/1.1\r\nHost: refund-vertex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://refund-vertex.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sun, 12 Jul 2026 21:01:31 GMT\r\nserver: cloudflare\r\nlast-modified: Wed, 01 Jul 2026 06:49:12 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncontent-encoding: zstd\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=K%2BxMGgvslFKf2Q6rOc6oLxHSkbx%2FjtLX22%2BNKUUG%2Fw5cOe6150Y964oUJblSUzruxeio376GIIiJUtlSI8XQIiEiRfmJygfN2Dy2OzYigBBXLZkpcHd2bITGRMFDR6X%2BPGut%2Fw%3D%3D\"}]}\r\ncontent-type: text/javascript\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\ncf-ray: a1a2fbaa1a69712d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":24047,"size_decoded":7776,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (24003)","md5":"fc97b5610be4284f233a25a6ca87c77e","sha1":"c27dc8325c38493aac36775fdc03c8097f74c650","sha256":"bb7880a86907cdd3807816fa9fb35273592799faf5995c10424f617de3af50dd","sha512":"b54189cb021a862fcdc57af81410cbaaf2fd22238b0c44ff7e3a1029bc490537ba93bca689f24cf094a7a15c408f1866c306f6fc890aff7a417d7bfc93f59ed6","ssdeep":"384:IGy+EVxFm6cKJskdHd7glQtHuGJswg/i+TSQDTWmMo7YtDT5HJiIqkoh+vFWN7Kh:IR+EVxFm6cKikdHd7glQtHuGJswg/DT6","tlshash":"6bb2d9023163ac3a50cf815be067420e7b374995b40570ed7abc6cdba5b8d9a33ea335","first_seen":"2026-02-02T16:50:51.794182Z","last_seen":"2026-07-18T16:55:56.849738Z","times_seen":2543,"resource_available":true,"data":null}},"time_used":6350,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6325,"receive":25,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"refund-vertex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"refund-vertex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"refund-vertex.com/wp-content/uploads/2026/07/vert_lg2.png","fqdn":"refund-vertex.com","domain":"refund-vertex.com","tld":"com"},"ip":{"addr":"104.21.18.129","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://refund-vertex.com/","date":"2026-07-12T21:01:25.494Z","timestamp":1783890085494,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"refund-vertex.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 02 Jul 2026 10:20:14 GMT","end":"Wed, 30 Sep 2026 11:18:49 GMT"},"fingerprint":{"sha1":"32:ED:60:EF:39:C7:37:B9:BB:20:CC:D9:A8:6F:D0:BF:55:E9:09:CA","sha256":"C9:C2:B4:C7:E6:CA:CC:33:A4:FF:64:2A:D2:E4:C0:97:E1:F2:EB:D6:D7:1C:F4:66:6B:5E:AB:51:40:FE:D1:6B"}}},"request":{"raw":"GET /wp-content/uploads/2026/07/vert_lg2.png HTTP/1.1\r\nHost: refund-vertex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://refund-vertex.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sun, 12 Jul 2026 21:01:31 GMT\r\nserver: cloudflare\r\nlast-modified: Thu, 02 Jul 2026 06:18:50 GMT\r\naccept-ranges: bytes\r\npriority: u=5,i\r\nserver-timing: cfExtPri\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=epNxplvg1K8ReEWVnG5oaX2F7IekFRZbr6aEhB5cILtO3v%2B4OXs4pgq4WclXs3RAoQYjfNomy5MPvQ00hvoKiMGaba0gWKRsWOQ5nhRsVkRCeL%2FzAxT%2B01gCxZFu8Z3%2BeVyHpA%3D%3D\"}]}\r\ncontent-type: image/png\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1a2fbaa5a6f712d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 40967\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":40967,"size_decoded":41641,"mime_type":"image/png","magic":"PNG image data, 716 x 255, 8-bit/color RGBA, non-interlaced","md5":"062768206f6e7be1fcd1cb892854e79e","sha1":"fb95f1f2af55aa8471e3730a053ef1f7b5beda5e","sha256":"d2c90dff4c3b64b0bc6da3a1b41bfe7fa866d7d05f42393f86b8c1dd21dee3c8","sha512":"6cd35ade577bf2754538f6477cebabdecd62605971d48b1b8d3436fba75058a41b85fd48a90bc00ac112475bb74292ae0231f55f6f6cf24bdbcc6582f2bf8396","ssdeep":"768:jjy3GD9ZsySHZydwSnZIdyDBoSKWi06vONssGOpVE/ywd:jn9ZsV2puyoAiMsB+MyQ","tlshash":"c703e1c86b0ddd66df64b02b9fd16c3396c732ad198ada236142c62608b45bbee017d1","first_seen":"2026-07-11T07:18:49.148371Z","last_seen":"2026-07-12T21:02:12.986701Z","times_seen":2,"resource_available":false,"data":null}},"time_used":6378,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6325,"receive":53,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"refund-vertex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"refund-vertex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"refund-vertex.com/wp-content/uploads/2023/02/scale-1.png","fqdn":"refund-vertex.com","domain":"refund-vertex.com","tld":"com"},"ip":{"addr":"104.21.18.129","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://refund-vertex.com/","date":"2026-07-12T21:01:30.498Z","timestamp":1783890090498,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"refund-vertex.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 02 Jul 2026 10:20:14 GMT","end":"Wed, 30 Sep 2026 11:18:49 GMT"},"fingerprint":{"sha1":"32:ED:60:EF:39:C7:37:B9:BB:20:CC:D9:A8:6F:D0:BF:55:E9:09:CA","sha256":"C9:C2:B4:C7:E6:CA:CC:33:A4:FF:64:2A:D2:E4:C0:97:E1:F2:EB:D6:D7:1C:F4:66:6B:5E:AB:51:40:FE:D1:6B"}}},"request":{"raw":"GET /wp-content/uploads/2023/02/scale-1.png HTTP/1.1\r\nHost: refund-vertex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://refund-vertex.com/wp-content/uploads/elementor/css/post-36316.css?ver=1783699951\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sun, 12 Jul 2026 21:01:30 GMT\r\nserver: cloudflare\r\nlast-modified: Wed, 01 Jul 2026 12:07:43 GMT\r\naccept-ranges: bytes\r\npriority: u=4,i\r\nserver-timing: cfExtPri\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=QQE2RNEjq4a55FY8JX3BVIiRmghDVg%2FIfMrufQUi8Fa0GRiTYmZsxnOQ%2BkaGt3IBzxthMvGQZlKj%2Fe4efZ6wf3aE0QVZJ49pmyQl6hNx6XFm7QIiFZABMeC6RbjvZSEas4V%2FYQ%3D%3D\"}]}\r\ncontent-type: image/png\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1a2fbc99bec712d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 7668\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7668,"size_decoded":8341,"mime_type":"image/png","magic":"PNG image data, 214 x 252, 8-bit/color RGBA, non-interlaced","md5":"6354aa3bc1262f7c742f4b77e88f1377","sha1":"0a386ce44ae088a83cba1e40347f21030b3d00b1","sha256":"62017cfa89d2162ba0994f35bf2cdea76e526c45884f3552b9f07355613725b4","sha512":"a1369d3fcdcf23f262f8ac52a442af198ce474e99f6d8c32323a45b172d8bf6c890461aab6359c41f8ac8aeac9d81cd8214cfa692299662c524e60349043b5d9","ssdeep":"192:MXr0FoaW3uumk0S1Zwr4xthoBZtB/Bzjw9kdB8YfdWLG1LtRB+:M70FbmuFe1ur4lGv3+A/vpRB+","tlshash":"66f18f0dd0065410046a9d960affa383cf364c465bf2be7c35c5f97b19592b7aa2a486","first_seen":"2025-12-04T17:22:00.365092Z","last_seen":"2026-07-12T21:02:12.987867Z","times_seen":3,"resource_available":false,"data":null}},"time_used":38,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":38,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"refund-vertex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"refund-vertex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/dmsans/v17/rP2tp2ywxg089UriI5-g4vlH9VoD8CmcqZG40F9JadbnoEwARZtRSW32.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://refund-vertex.com/","date":"2026-07-12T21:01:30.641Z","timestamp":1783890090641,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 22 Jun 2026 08:37:23 GMT","end":"Mon, 14 Sep 2026 08:37:22 GMT"},"fingerprint":{"sha1":"CD:5B:53:23:61:72:75:37:AD:E9:F1:74:B2:D2:EE:09:81:05:55:E1","sha256":"9F:07:21:2D:14:EB:C5:C0:D4:2B:42:E4:55:80:7A:BB:AF:47:A8:BC:0C:5E:05:F3:2A:2B:1F:2A:78:4D:FF:D7"}}},"request":{"raw":"GET /s/dmsans/v17/rP2tp2ywxg089UriI5-g4vlH9VoD8CmcqZG40F9JadbnoEwARZtRSW32.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://refund-vertex.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 14348\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sun, 12 Jul 2026 12:33:36 GMT\r\nexpires: Mon, 12 Jul 2027 12:33:36 GMT\r\ncache-control: public, max-age=31536000\r\nage: 30474\r\nlast-modified: Wed, 10 Sep 2025 16:29:36 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":14348,"size_decoded":15160,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 14348, version 1.0","md5":"9508ec8af5185edfc30ec76125ee0dd0","sha1":"fc31558149b2585f34abf097e50bb06a368f2379","sha256":"35c5efa0e5daa52ee5c6500f5be354bf751fb65c4e49e1d6806c6eb5883e8fe9","sha512":"d27ef8002d11c05bdd71267b52035769d23463cbacd17c57076c14b0c783ff8dcfe8c7437dc900fb4c3a5372f9f4dfcc8c8251b7401267ca5adad565dbdf70cc","ssdeep":"192:0Ia6UeJuAc9X5HMnQ63M2im+R9hv6IbQanP2tUqYU95C3HOZ18s1TotqlKiC0QcB:TUguNWFxa1MdUqN0XOZ1D1ToglhrgU","tlshash":"2e52cfae0781f314ca662b66d83ac5d3c6147aebbf14683dda0c85eec961f0818e40c1","first_seen":"2025-09-12T07:33:47.330806Z","last_seen":"2026-07-18T20:33:56.346079Z","times_seen":1129,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/dmsans/v17/rP2Wp2ywxg089UriCZaSExd86J3t9jz86MvyyKy58UfkvU0oaw.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://refund-vertex.com/","date":"2026-07-12T21:01:30.654Z","timestamp":1783890090654,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 22 Jun 2026 08:37:23 GMT","end":"Mon, 14 Sep 2026 08:37:22 GMT"},"fingerprint":{"sha1":"CD:5B:53:23:61:72:75:37:AD:E9:F1:74:B2:D2:EE:09:81:05:55:E1","sha256":"9F:07:21:2D:14:EB:C5:C0:D4:2B:42:E4:55:80:7A:BB:AF:47:A8:BC:0C:5E:05:F3:2A:2B:1F:2A:78:4D:FF:D7"}}},"request":{"raw":"GET /s/dmsans/v17/rP2Wp2ywxg089UriCZaSExd86J3t9jz86MvyyKy58UfkvU0oaw.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://refund-vertex.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 39712\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 06 Jul 2026 13:46:34 GMT\r\nexpires: Tue, 06 Jul 2027 13:46:34 GMT\r\ncache-control: public, max-age=31536000\r\nage: 544496\r\nlast-modified: Wed, 10 Sep 2025 16:31:35 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":39712,"size_decoded":40525,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 39712, version 1.0","md5":"d981d4cbcf42c4a39cb417e9673b683b","sha1":"5f8b496f77d410d16bdebb9c274cfb899d22f4a1","sha256":"f1a235db5bcb8730707844188d35201ecdf63e56c5dcce97bab24a9c7066091d","sha512":"9aac6a14434a483a6475d50246930e24ddd57d4c0760e47dd0b38106fba02555059ee7bf87fd53b16006e7939ac1e3b2685b6baca448717ea626c4d1f7438ed3","ssdeep":"768:IVdy5zzQjGgkbcR6OT6wHbYkYw15zdDJVn2d4F882A6rcck:P5oKbcR626wLn54288v","tlshash":"e603f11855db2b11cc8beb703a3a603e4823a55a0900dae8ed7f7d76d9d5e32c45f983","first_seen":"2025-09-14T19:53:40.224227Z","last_seen":"2026-07-18T21:40:31.498487Z","times_seen":3115,"resource_available":false,"data":null}},"time_used":42,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":29,"receive":13,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"refund-vertex.com/wp-content/plugins/cool-formkit-for-elementor-forms/assets/css/intlTelInput.min.css?ver=1.4.3","fqdn":"refund-vertex.com","domain":"refund-vertex.com","tld":"com"},"ip":{"addr":"104.21.18.129","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://refund-vertex.com/","date":"2026-07-12T21:01:25.405Z","timestamp":1783890085405,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"refund-vertex.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 02 Jul 2026 10:20:14 GMT","end":"Wed, 30 Sep 2026 11:18:49 GMT"},"fingerprint":{"sha1":"32:ED:60:EF:39:C7:37:B9:BB:20:CC:D9:A8:6F:D0:BF:55:E9:09:CA","sha256":"C9:C2:B4:C7:E6:CA:CC:33:A4:FF:64:2A:D2:E4:C0:97:E1:F2:EB:D6:D7:1C:F4:66:6B:5E:AB:51:40:FE:D1:6B"}}},"request":{"raw":"GET /wp-content/plugins/cool-formkit-for-elementor-forms/assets/css/intlTelInput.min.css?ver=1.4.3 HTTP/1.1\r\nHost: refund-vertex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://refund-vertex.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sun, 12 Jul 2026 21:01:30 GMT\r\nserver: cloudflare\r\nlast-modified: Thu, 02 Jul 2026 06:40:31 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\ncontent-encoding: zstd\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=lMeJBcieQNTwwH%2FyNCh9pESiqDQMxRmIjpsK320xd5XWfCCOQZFpQQ9fjed6geGKZbUmWUTyTxEvduE0fwiPhZFdfQDEK9EkjJW13X%2BZvjlINd1TI1nTiEFFe%2Bg1NS9ADHa4xg%3D%3D\"}]}\r\ncontent-type: text/css\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\ncf-ray: a1a2fba9ca48712d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":16969,"size_decoded":3998,"mime_type":"text/css","magic":"ASCII text, with very long lines (16969), with no line terminators","md5":"2639cf3705277797a4b513e10dc38e27","sha1":"c2fec4ddfbfcd7487cc20b5150f1873fbec316d9","sha256":"c3ea362734651f7cfeeb6f0c97abf694bbf7ec9bfc7cfc1ed24d5c92fc410d63","sha512":"98aee7bf96951c70a0c08dbe485e0d6f6b56f21f1f339aa0c7603ff520f1b75e84c95bbb34a5c35ca8b4bfe2b40a8bd48008bdac1361bb64b9fe888dbd4881ed","ssdeep":"192:ei3ikXMyn4P5KraHEX8C2EvVP7xISS6li4IYhYAZJ9oe8uK3/0fdKTeM5c3ygM:f3T/IkYEXG0ZkMQ","tlshash":"cf72a2130318913ee792c1397063c5bd7bef6f44b9d7cae2d6c9821f5883580c9aaa5d","first_seen":"2025-10-02T10:44:23.853135Z","last_seen":"2026-07-12T21:02:12.989Z","times_seen":9,"resource_available":false,"data":null}},"time_used":5012,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":4978,"receive":34,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"refund-vertex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"refund-vertex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"refund-vertex.com/wp-content/plugins/classic-elementor-addons-pro/assets/js/jquery.magnific.popup.min.js?ver=1.2.0","fqdn":"refund-vertex.com","domain":"refund-vertex.com","tld":"com"},"ip":{"addr":"104.21.18.129","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://refund-vertex.com/","date":"2026-07-12T21:01:25.446Z","timestamp":1783890085446,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"refund-vertex.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 02 Jul 2026 10:20:14 GMT","end":"Wed, 30 Sep 2026 11:18:49 GMT"},"fingerprint":{"sha1":"32:ED:60:EF:39:C7:37:B9:BB:20:CC:D9:A8:6F:D0:BF:55:E9:09:CA","sha256":"C9:C2:B4:C7:E6:CA:CC:33:A4:FF:64:2A:D2:E4:C0:97:E1:F2:EB:D6:D7:1C:F4:66:6B:5E:AB:51:40:FE:D1:6B"}}},"request":{"raw":"GET /wp-content/plugins/classic-elementor-addons-pro/assets/js/jquery.magnific.popup.min.js?ver=1.2.0 HTTP/1.1\r\nHost: refund-vertex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://refund-vertex.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sun, 12 Jul 2026 21:01:25 GMT\r\nserver: cloudflare\r\nlast-modified: Wed, 01 Jul 2026 09:47:51 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncontent-encoding: zstd\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Z22xHaFZzEIdqPOeuMrqH1IXsApzrpt72ni17WQJnLsoLiUR%2FdPCyMMIpw%2B%2B0hr%2BEDQVYykW%2BL5t4WuV64drDzrLgtekclvAZqPGeVbHM3a9deJGhOkpFlX4o09VYotqXUvRLQ%3D%3D\"}]}\r\ncontent-type: text/javascript\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\ncf-ray: a1a2fbaa0a5f712d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":20864,"size_decoded":8841,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (20735)","md5":"17f82cf70098a848404ca2a6287c7d80","sha1":"af0189f5158028251935acf0edc30ac1a9e4a3d3","sha256":"4792fad7d450a4d419f1effc816b20d6ad5b89535f0b4f6da97f9aea8c3ed035","sha512":"885ebda23860874edabbc70dc3886f5ae128dfa0fb77da8bfbbda296ccdc0ff6dc1d2beb5447372a75b7b00580ac58868f0ecac5b89c3bb924cc1ab06d5e3e5b","ssdeep":"384:aK+Ypwhc1sBEVEtk94tBnKIO46FbUkOK/NF0Sv/lZzZyQtdhTZF5ZFB:aEl73MoUkOKv0GMAdXF59","tlshash":"5f922ca4f161b27397e361b8188f382c367a9922cd078412b65498d4adf8fd89137f7d","first_seen":"2026-07-11T07:18:49.177908Z","last_seen":"2026-07-12T21:02:12.989562Z","times_seen":2,"resource_available":true,"data":null}},"time_used":71,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":41,"receive":30,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"refund-vertex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"refund-vertex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ajax.googleapis.com/ajax/libs/webfont/1.5.3/webfont.js","fqdn":"ajax.googleapis.com","domain":"ajax.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.42","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://refund-vertex.com/","date":"2026-07-12T21:01:30.395Z","timestamp":1783890090395,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 22 Jun 2026 08:37:24 GMT","end":"Mon, 14 Sep 2026 08:37:23 GMT"},"fingerprint":{"sha1":"85:D0:EC:C2:01:33:25:23:96:FB:2B:54:90:54:84:07:0A:49:1F:03","sha256":"9D:7C:1C:9C:6A:25:1E:17:E0:DC:FD:42:95:CA:47:3D:C1:9C:20:FB:22:47:02:E3:27:EC:7C:62:03:30:83:BA"}}},"request":{"raw":"GET /ajax/libs/webfont/1.5.3/webfont.js HTTP/1.1\r\nHost: ajax.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://refund-vertex.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/hosted-libraries-pushers\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"hosted-libraries-pushers\"\r\nreport-to: {\"group\":\"hosted-libraries-pushers\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/hosted-libraries-pushers\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 6791\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Sun, 12 Jul 2026 11:04:06 GMT\r\nexpires: Mon, 12 Jul 2027 11:04:06 GMT\r\ncache-control: public, max-age=31536000, stale-while-revalidate=2592000\r\nage: 35845\r\nlast-modified: Tue, 03 Mar 2020 19:15:00 GMT\r\ncontent-type: text/javascript; charset=UTF-8\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":17380,"size_decoded":7753,"mime_type":"text/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (1322)","md5":"b1214132e520a7e9bd89af99237c5f24","sha1":"45b3a11f70e46248a30471795ab43861e98b48e7","sha256":"36ef095d011c4ced97b0acef551ca36d76b95299518595dc1acab792a2344601","sha512":"a4a1b77cef6938660f94217ef56f5b72c07cd5176c95b78a3c65e52d8764fc957572cf546423f1df30b4403569fae7d7f83b0a4d006ef1c3a85c5680c36a0861","ssdeep":"384:41ETmxlLRSaNeiFG6TsBMGrM2NdWLW+iwduEtiUBXMt2cP5AuKl:4GTmxSaNeqTs+Gkz+EtilPJKl","tlshash":"9272e9487a51a179825384f3163f050e977fa96eb41888ecb584d6e19cb4938037ffbc","first_seen":"2023-03-07T01:03:03Z","last_seen":"2026-07-18T21:10:33.508119Z","times_seen":3264,"resource_available":true,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":2,"connect":15,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"refund-vertex.com/wp-content/uploads/2023/02/arrow-mark-1.png","fqdn":"refund-vertex.com","domain":"refund-vertex.com","tld":"com"},"ip":{"addr":"104.21.18.129","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://refund-vertex.com/","date":"2026-07-12T21:01:30.506Z","timestamp":1783890090506,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"refund-vertex.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 02 Jul 2026 10:20:14 GMT","end":"Wed, 30 Sep 2026 11:18:49 GMT"},"fingerprint":{"sha1":"32:ED:60:EF:39:C7:37:B9:BB:20:CC:D9:A8:6F:D0:BF:55:E9:09:CA","sha256":"C9:C2:B4:C7:E6:CA:CC:33:A4:FF:64:2A:D2:E4:C0:97:E1:F2:EB:D6:D7:1C:F4:66:6B:5E:AB:51:40:FE:D1:6B"}}},"request":{"raw":"GET /wp-content/uploads/2023/02/arrow-mark-1.png HTTP/1.1\r\nHost: refund-vertex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://refund-vertex.com/wp-content/uploads/elementor/css/post-36316.css?ver=1783699951\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sun, 12 Jul 2026 21:01:30 GMT\r\nserver: cloudflare\r\nlast-modified: Wed, 01 Jul 2026 12:08:49 GMT\r\naccept-ranges: bytes\r\npriority: u=4,i\r\nserver-timing: cfExtPri\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=CBVWISQlwa3n8NuPPa6bb5VPSk9bvpDa9MxePa2Uss3gsnhUTkbfG5iypcLEtoS3hpNme53FTFVn9y13uVSHJ4UNzKOqCgJPkt%2FS9dBVWN1QduLyzfaSyJmRzwi8qECOCqi80Q%3D%3D\"}]}\r\ncontent-type: image/png\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1a2fbc9abef712d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 36211\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":36211,"size_decoded":36879,"mime_type":"image/png","magic":"PNG image data, 774 x 789, 8-bit/color RGBA, non-interlaced","md5":"1d92a73b83af7fb27a84b98b7793522e","sha1":"675ea212596d162f40befa5f465b2fe4db4cb231","sha256":"edb3d8dcdc02c170c6335ddc925f343fd00fa3d57878be13b294571d5733edb1","sha512":"2f8f92103e65ecef9e58b66a24d22a8aa604aa6437b153db6be9a4fdf6e506ff4e20e2197b09d09c6cab7a9ba593972f800062ef74473a3c4c1e4970de07fb88","ssdeep":"768:zKYf8ZKKv236pb4f3PoFrdQng8UojOgcA9NQenGbpC90RrwNSnTX+:zKYfQ+36iWhp8UYlcA9lnpShwNq+","tlshash":"a1f2e0994f84bdb5ccbc56bf14d98608bd518bc34370f088dbeddd0bae1b298b819958","first_seen":"2025-12-04T01:46:06.049384Z","last_seen":"2026-07-12T21:02:12.991501Z","times_seen":3,"resource_available":false,"data":null}},"time_used":71,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":41,"receive":30,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"refund-vertex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"refund-vertex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"vertex-legal.org/wp-content/uploads/2023/02/Businessman_small.png","fqdn":"vertex-legal.org","domain":"vertex-legal.org","tld":"org"},"ip":{"addr":"172.67.144.12","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://refund-vertex.com/","date":"2026-07-12T21:01:32.275Z","timestamp":1783890092275,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"vertex-legal.org","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 30 Jun 2026 13:44:58 GMT","end":"Mon, 28 Sep 2026 14:43:29 GMT"},"fingerprint":{"sha1":"4A:1A:1E:6F:F9:02:AD:DF:24:95:C3:D8:C0:17:35:DE:BC:CC:5C:B8","sha256":"52:9D:7E:11:74:8D:04:4F:63:5C:A2:08:18:17:46:61:5A:70:6D:A9:F2:00:79:CC:A8:3B:F5:4C:BA:EE:A0:63"}}},"request":{"raw":"GET /wp-content/uploads/2023/02/Businessman_small.png HTTP/1.1\r\nHost: vertex-legal.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://refund-vertex.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://refund-vertex.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sun, 12 Jul 2026 21:01:32 GMT\r\nserver: cloudflare\r\nlast-modified: Wed, 01 Jul 2026 12:08:55 GMT\r\naccept-ranges: bytes\r\npriority: u=5,i\r\nserver-timing: cfExtPri\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=AUmxhwwTfQc4VbPuvh19TGlgDXLmDlhLtM5s46MzJHBTxlpR9MUlIP8MjHKBeVAnPFfWkWCw1hfsFphcIbySI%2BboZWs9pe%2BolYXF7B%2Fx1T6O%2BQJNqJzNyj6qq5GMjCORaIP8\"}]}\r\ncontent-type: image/png\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a1a2fbd4baa223eb-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 137571\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7947,"size_decoded":8614,"mime_type":"image/png","magic":"PNG image data, 689 x 880, 8-bit colormap, non-interlaced","md5":"cdad9db61ff3a4f6ec59c89425bbe3d7","sha1":"a9f85febf628c50f4a5cf73c96317c80a4ef3c87","sha256":"4711d65dfb802a2d5a9e5675446b37028dcd47e328ffdc6636eab031970d4036","sha512":"f867af338a919492c0f57761f696d96a47c041d034842f4a54038022d1c3bd3a3fdb1b024bd65f5ba3ce60feded71e1dc065a9e0dd181cef2c1ae7842186ebc4","ssdeep":"192:IW39JG8QkksTrNmVz/jane0OVmfoO7bT1g7uIQuog:1JaPsTrNC7jseZPGgVog","tlshash":"53f19ffd390ee5afe9eb18ec7a9212316b31bc8b1c105ea55460f4f91a105dec9e1336","first_seen":"2026-07-11T07:18:49.096552Z","last_seen":"2026-07-12T21:02:12.992825Z","times_seen":2,"resource_available":false,"data":null}},"time_used":128,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":115,"receive":13,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"refund-vertex.com/wp-content/plugins/classic-elementor-addons-pro/assets/css/font-awesome.css?ver=4.7.0","fqdn":"refund-vertex.com","domain":"refund-vertex.com","tld":"com"},"ip":{"addr":"104.21.18.129","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://refund-vertex.com/","date":"2026-07-12T21:01:25.098Z","timestamp":1783890085098,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"refund-vertex.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 02 Jul 2026 10:20:14 GMT","end":"Wed, 30 Sep 2026 11:18:49 GMT"},"fingerprint":{"sha1":"32:ED:60:EF:39:C7:37:B9:BB:20:CC:D9:A8:6F:D0:BF:55:E9:09:CA","sha256":"C9:C2:B4:C7:E6:CA:CC:33:A4:FF:64:2A:D2:E4:C0:97:E1:F2:EB:D6:D7:1C:F4:66:6B:5E:AB:51:40:FE:D1:6B"}}},"request":{"raw":"GET /wp-content/plugins/classic-elementor-addons-pro/assets/css/font-awesome.css?ver=4.7.0 HTTP/1.1\r\nHost: refund-vertex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://refund-vertex.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sun, 12 Jul 2026 21:01:25 GMT\r\nserver: cloudflare\r\nlast-modified: Wed, 01 Jul 2026 09:47:51 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\ncontent-encoding: zstd\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=lL8IXu1tEphctuoEd6oOKWpZJVcq61SGzrFLE0LXynialp3sdP22K0%2Fz3LXhkN0zhHb3GvBdV1aHiTYvj%2FP3wMA5AS0WerWVscax0iG%2B1S8YPvdRXKzCBm%2BHCXePwdCKfM%2FEmg%3D%3D\"}]}\r\ncontent-type: text/css\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\ncf-ray: a1a2fba7da0b712d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":37414,"size_decoded":8399,"mime_type":"text/css","magic":"troff or preprocessor input, ASCII text, with very long lines (372)","md5":"c495654869785bc3df60216616814ad1","sha1":"0140952c64e3f2b74ef64e050f2fe86eab6624c8","sha256":"36e0a7e08bee65774168528938072c536437669c1b7458ac77976ec788e4439c","sha512":"e40f27c1d30e5ab4b3db47c3b2373381489d50147c9623d853e5b299364fd65998f46e8e73b1e566fd79e97aa7b20354cd3c8c79f15372c147fed9c913ffb106","ssdeep":"768:mmMtI+A4CSIDqvnI+YTBrFPvVrJjhiRAiiEL:mXtI+A4GDUI+Y9rpVljhiIEL","tlshash":"37f241ece5bf18904391e0d16386a370bb3dbb2c8d4a6d5cd2a6798cb1c1255d2c63ed","first_seen":"2023-04-05T05:21:01Z","last_seen":"2026-07-18T23:38:30.484733Z","times_seen":89073,"resource_available":false,"data":null}},"time_used":132,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":106,"receive":26,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"refund-vertex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"refund-vertex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"refund-vertex.com/wp-includes/js/dist/hooks.min.js?ver=7496969728ca0f95732d","fqdn":"refund-vertex.com","domain":"refund-vertex.com","tld":"com"},"ip":{"addr":"104.21.18.129","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://refund-vertex.com/","date":"2026-07-12T21:01:25.418Z","timestamp":1783890085418,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"refund-vertex.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 02 Jul 2026 10:20:14 GMT","end":"Wed, 30 Sep 2026 11:18:49 GMT"},"fingerprint":{"sha1":"32:ED:60:EF:39:C7:37:B9:BB:20:CC:D9:A8:6F:D0:BF:55:E9:09:CA","sha256":"C9:C2:B4:C7:E6:CA:CC:33:A4:FF:64:2A:D2:E4:C0:97:E1:F2:EB:D6:D7:1C:F4:66:6B:5E:AB:51:40:FE:D1:6B"}}},"request":{"raw":"GET /wp-includes/js/dist/hooks.min.js?ver=7496969728ca0f95732d HTTP/1.1\r\nHost: refund-vertex.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://refund-vertex.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sun, 12 Jul 2026 21:01:30 GMT\r\nserver: cloudflare\r\nlast-modified: Fri, 10 Jul 2026 04:11:54 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncontent-encoding: zstd\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Oe00omnANXCXDSePXbXwiMEybsxH0gDKRkge5PX%2Fj9RgrUsiEF0aQpp85N3Vy5msRD%2FcNMEL5enNbNyZRngVpJJrV9UuA2VTAfed%2F%2FEowBHe5ZeZ70p9VFQFJdpurT%2BwsDGdLA%3D%3D\"}]}\r\ncontent-type: text/javascript\r\ncache-control: max-age=14400\r\ncf-cache-status: MISS\r\ncf-ray: a1a2fba9da4f712d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5050,"size_decoded":2564,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (5014)","md5":"55c5129ccd0fa8f383d9de82a91c5877","sha1":"596918015fa62e4f18533b69b0e6822ebee3cb2d","sha256":"cce388fed1a82ebd20ce7d9601e4b6c83a425ea201c333d71b1183ee887cc090","sha512":"956ab39b4bc0577f0ac50a842bc7f71ac1d5b6f7148f9ba9bdb2a84001b96362f077d417144dce171464de8aac71ffd6e639e35ca12da4de2d12fddd660e64a3","ssdeep":"96:lu/16WIHBLusBcADGDd/R5h2RTLlD3jMXY2yGy94E34sTY2Cif:lGIhNBcAD0NRv8XlD3wXY2yH+EoaY2f","tlshash":"5ca151c43542b930e2b77027f0ab58d46175abe1a82d8446d59cd8f12da39cee0e7b3d","first_seen":"2026-07-02T22:01:42.321596Z","last_seen":"2026-07-19T00:19:49.889395Z","times_seen":5666,"resource_available":true,"data":null}},"time_used":5004,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":5004,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"refund-vertex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-07-12","alert":"Sinkholed","trigger":"refund-vertex.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}