{"report_id":"7cfd18ac-4b81-4762-b2a8-fde5ab903b60","version":0,"status":"done","tags":[],"date":"2026-08-23T10:36:20Z","url":{"schema":"https","addr":"happymodx.com/fc-mobile-soccer/","fqdn":"happymodx.com","domain":"happymodx.com","tld":"com"},"ip":{"addr":"104.21.39.80","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"happymodx.com/fc-mobile-soccer/","fqdn":"happymodx.com","domain":"happymodx.com","tld":"com"},"title":"EA Sports FC Mobile 26 MOD APK v27.0.03 (Unlimited Money/ MOD Menu/ Unlocked)","dom":{"size":204372,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (11378)","md5":"f43a1df30019c9511d7ebbef011a175d","sha1":"9b47942da36041244a3a2063317b68c879f8ff4c","sha256":"b785682b01e6f10deb461e632e9299e57d6439f853ca79b332304bb493a0f818","sha512":"4f0b41c4642a2e4ffd461ed4cc4da5cd54a06a1831bdc2d2ee096d6cc08acf2962bf62fb3f564f1b5133fb04336102945c23452d853f4cdb55d31cfb64e99402","ssdeep":"6144:HNXJ01WxDD44ofF5pejZTXF3ft17CKgs9rw6m3:FJ01WxDD44Mjpevg6m3","tlshash":"0d147ce1e774143b2a7b42b9b11a624eb2b6d512df4685e0f1acc1585fc8ee204a3f4d","dom_hash":"domhash7316354e0a711575a14bb3ea367c4c15","first_seen":"2026-08-23T10:36:29.835137Z","last_seen":"2026-08-23T10:36:29.835137Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"happymodx.com/fc-mobile-soccer/","fqdn":"happymodx.com","domain":"happymodx.com","tld":"com"},"ip":{"addr":"104.21.39.80","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-09-27T10:36:20Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":8}},"detection":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-22","alert":"Sinkholed","trigger":"cdn.show-sb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-22","alert":"Sinkholed","trigger":"cdn.show-sb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-23","alert":"Sinkholed","trigger":"kettledroopingcontinuation.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-23","alert":"Sinkholed","trigger":"kettledroopingcontinuation.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-23","alert":"Sinkholed","trigger":"kettledroopingcontinuation.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-22","alert":"Sinkholed","trigger":"zoologyfibre.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-23","alert":"Sinkholed","trigger":"happymodx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-22","alert":"Sinkholed","trigger":"portalfluently.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"cdn.storageimagedisplay.com","ip":{"addr":"45.133.44.1","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"domain_registered":"2024-09-13","domain_rank":170153,"first_seen":"2024-09-13T12:56:32Z","last_seen":"2026-08-21T12:50:24.228435Z","alert_count":0,"request_count":4,"received_data":85260,"sent_data":2092,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"www.googletagmanager.com","ip":{"addr":"142.250.178.72","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2011-11-11","domain_rank":283,"first_seen":"2012-10-04T01:07:32Z","last_seen":"2026-08-16T22:33:33.289447Z","alert_count":0,"request_count":1,"received_data":497253,"sent_data":476,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"cdn.show-sb.com","ip":{"addr":"104.21.95.140","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2024-08-20","domain_rank":187612,"first_seen":"2024-08-31T03:46:04Z","last_seen":"2026-08-21T13:31:39.00531Z","alert_count":4,"request_count":2,"received_data":4685,"sent_data":1004,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]}]},{"fqdn":"yastatic.net","ip":{"addr":"37.9.64.225","port":443,"asn":13238,"as":"YANDEX LLC","country":"Russia","country_code":"RU"},"domain_registered":"2013-11-28","domain_rank":3963,"first_seen":"2014-03-11T07:15:28Z","last_seen":"2026-08-17T15:48:14.67349Z","alert_count":0,"request_count":9,"received_data":1529050,"sent_data":4443,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"establishscarcely.com","ip":{"addr":"172.240.108.68","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"domain_registered":"2025-04-23","domain_rank":0,"first_seen":"2025-06-08T20:31:42.93068Z","last_seen":"2026-08-16T09:34:15.917236Z","alert_count":0,"request_count":5,"received_data":304790,"sent_data":2640,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.28.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}]},{"fqdn":"kettledroopingcontinuation.com","ip":{"addr":"23.111.84.228","port":443,"asn":7979,"as":"SERVERS-COM","country":"The Netherlands","country_code":"NL"},"domain_registered":"2024-09-01","domain_rank":196057,"first_seen":"2025-07-30T15:18:19.355595Z","last_seen":"2026-08-21T17:12:18.920633Z","alert_count":30,"request_count":10,"received_data":28246,"sent_data":17855,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.30.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"telegram.im","ip":{"addr":"65.108.253.105","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Finland","country_code":"FI"},"domain_registered":"unknown","domain_rank":22587,"first_seen":"2016-10-02T02:36:30Z","last_seen":"2026-08-22T20:28:53.929571Z","alert_count":0,"request_count":5,"received_data":63198,"sent_data":2454,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"yandex.ru","ip":{"addr":"77.88.44.55","port":443,"asn":13238,"as":"YANDEX LLC","country":"Russia","country_code":"RU"},"domain_registered":"1997-09-23","domain_rank":248,"first_seen":"2012-05-21T21:15:36Z","last_seen":"2026-08-20T03:23:11.694124Z","alert_count":0,"request_count":1,"received_data":1231,"sent_data":9822,"comment":"","tags":null,"fingerprints":null},{"fqdn":"happymodx.com","ip":{"addr":"104.21.39.80","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-09-23","domain_rank":0,"first_seen":"2025-12-06T17:52:28.236075Z","last_seen":"2026-08-04T20:39:11.279095Z","alert_count":51,"request_count":51,"received_data":658003,"sent_data":28565,"comment":"","tags":null,"fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Contact Form 7:6.1.7","description":"Contact Form 7 is an WordPress plugin which can manage multiple contact forms. The form supports Ajax-powered submitting, CAPTCHA, Akismet spam filtering.","website":"https://contactform7.com","common_platform_enumeration":"","icon":"Contact Form 7.png","categories":["WordPress plugins","Form builders"]},{"name":"PHP:8.3.31","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Google Analytics","description":"Google Analytics is a free web analytics service that tracks and reports website traffic.","website":"https://google.com/analytics","common_platform_enumeration":"","icon":"Google Analytics.svg","categories":["Analytics"]},{"name":"Kadence WP Blocks","description":"Kadence Blocks is a plugin for WordPress that provides a collection of custom blocks for the WordPress Block Editor, allowing users to create custom layouts and designs for their website without needing to know how to code.","website":"https://www.kadencewp.com/kadence-blocks/","common_platform_enumeration":"","icon":"Kadence WP.svg","categories":["WordPress plugins"]},{"name":"jQuery Migrate:3.4.1","description":"Query Migrate is a javascript library that allows you to preserve the compatibility of your jQuery code developed for versions of jQuery older than 1.9.","website":"https://github.com/jquery/jquery-migrate","common_platform_enumeration":"","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"GeneratePress GP Premium:2.5.6","description":"GP Premium is a premium add-on plugin for the GeneratePress WordPress theme.","website":"https://docs.generatepress.com/article/installing-gp-premium/","common_platform_enumeration":"","icon":"generatepress.png","categories":["WordPress plugins"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]},{"name":"WordPress:7.1","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"WordPress Block Editor","description":"Sites using the WordPress Block Editor, also known as Gutenberg.","website":"https://wordpress.org/gutenberg/","common_platform_enumeration":"","icon":"WordPress.svg","categories":["Page builders"]},{"name":"GeneratePress","description":"GeneratePress is a lightweight WordPress theme that focuses on speed, stability, and accessibility","website":"https://generatepress.com","common_platform_enumeration":"","icon":"generatepress.png","categories":["WordPress themes"]}]},{"fqdn":"you.developzilla.com","ip":{"addr":"23.109.84.164","port":443,"asn":7979,"as":"SERVERS-COM","country":"The Netherlands","country_code":"NL"},"domain_registered":"2008-04-23","domain_rank":2737026,"first_seen":"2026-07-21T13:53:45.317303Z","last_seen":"2026-08-22T19:41:49.281098Z","alert_count":0,"request_count":2,"received_data":2183,"sent_data":1077,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.25.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"cdn.redgarto.com","ip":{"addr":"104.21.80.164","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2026-06-09","domain_rank":0,"first_seen":"2026-06-10T14:51:12.515203Z","last_seen":"2026-08-20T00:38:37.93117Z","alert_count":0,"request_count":9,"received_data":351984,"sent_data":4365,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-08-16T22:23:57.509837Z","alert_count":0,"request_count":2,"received_data":49744,"sent_data":1147,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"zoologyfibre.com","ip":{"addr":"23.111.84.124","port":443,"asn":7979,"as":"SERVERS-COM","country":"The Netherlands","country_code":"NL"},"domain_registered":"2024-09-03","domain_rank":0,"first_seen":"2026-05-23T09:52:15.201176Z","last_seen":"2026-08-22T18:50:41.03848Z","alert_count":13,"request_count":13,"received_data":22848,"sent_data":23947,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.30.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}]},{"fqdn":"protrafficinspector.com","ip":{"addr":"18.196.51.86","port":443,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"domain_registered":"2025-06-18","domain_rank":614186,"first_seen":"2025-07-25T22:45:21.95813Z","last_seen":"2026-08-20T05:21:18.852103Z","alert_count":0,"request_count":3,"received_data":1548,"sent_data":1452,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-08-16T22:20:46.906465Z","alert_count":0,"request_count":4,"received_data":34696,"sent_data":2220,"comment":"","tags":null,"fingerprints":null},{"fqdn":"portalfluently.com","ip":{"addr":"23.111.84.220","port":443,"asn":7979,"as":"SERVERS-COM","country":"The Netherlands","country_code":"NL"},"domain_registered":"2026-06-18","domain_rank":0,"first_seen":"2026-06-19T16:11:46.270184Z","last_seen":"2026-08-22T01:23:43.611861Z","alert_count":2,"request_count":2,"received_data":171838,"sent_data":906,"comment":"","tags":null,"fingerprints":[{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.30.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"cdn.redgarto.com/sb/ssp/interstitial/bottom_banner/1/js/jquery.min.js","fqdn":"cdn.redgarto.com","domain":"redgarto.com","tld":"com"},"ip":{"addr":"104.21.80.164","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"561acb3e541133bbdd2c0c19f8ee35a1","sha1":"ffd1353cf3f77d25f801c84d8208613eb0d3d548","sha256":"9fde6da568db31801e29243a903bf24f342256b41e3c01e7d018ff7c566ce7fc","sha512":"8a647ed6f56b4da93c7a034609060991cc8080350f057f4f2af2c369f18af066db3b4e77701fc017027fd774264a6d0f84927239d7d2f693edc6f7d6a0917be3","ssdeep":"1536:YjExXUqrnxDjoXEZxkMV4SYSt0zvDD6ip3h5cApwEjOPrBeU6QLiTFbc0QlQvakV:YYh8eip3hXuf6IidlrvakdtQ47GKl","tlshash":"f993f9ddb2c6702257a720ba007f510bf236199d6c4d8450f265d8e9bcb8a4e827bf7d","size":89492,"data":"","first_seen":"2023-03-07T01:04:00Z","last_seen":"2026-08-23T10:37:00.30618Z","times_seen":8033,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"happymodx.com/fc-mobile-soccer/","fqdn":"happymodx.com","domain":"happymodx.com","tld":"com"},"ip":{"addr":"104.21.39.80","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"28b7e14444c50e019c55e859a6a84ab9","sha1":"1967e2187f8c53745c5789c3fa5a374ac1c0a3f3","sha256":"a26a4b51a06ef906a96df73c99b1d2176c0b0657decc788ead1f13fc8ef68875","sha512":"8b785e8a7e51ecd3cdb57a09abbbe61b5ef33e2786fc36c2604a91afef89dc32d8c59c68115d9d39f18d5b7d15d666a01c02dd1e9fb33b7ac674a7e7c1cc1b7b","ssdeep":"","tlshash":"28c02bcc320a0c7167eb2f408b3fb600b001320894e16d31081d23084d20f13d744c10","size":149,"data":"","first_seen":"2026-08-04T20:39:25.891622Z","last_seen":"2026-08-23T10:37:00.347437Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"happymodx.com/fc-mobile-soccer/","fqdn":"happymodx.com","domain":"happymodx.com","tld":"com"},"ip":{"addr":"104.21.39.80","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"e73aecda17aef85b6300a100806ae6e9","sha1":"d15cc4385370d4aa893cfe76c3a0e0297f7e5f1d","sha256":"fde5d3a6db7a00495d7b38ab493e7aacaf2392a703794b1caf37563b50ef6afd","sha512":"31adb611ef56722e02428f23de9b2813a67748ea0b0f0e3d711203469908e8f1bbbcc9d58960dd654c6a6f5f70507c13a7575ac2b9d5a8de00afd1b93fbffc53","ssdeep":"","tlshash":"369000a82202808222a080200f0b23802230202880a280208820200cb0c08038a200fa","size":41,"data":"","first_seen":"2023-03-07T01:02:59Z","last_seen":"2026-08-23T11:44:10.094653Z","times_seen":15129,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"happymodx.com/fc-mobile-soccer/","fqdn":"happymodx.com","domain":"happymodx.com","tld":"com"},"ip":{"addr":"104.21.39.80","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"ef87c37b4e983951aa972bb00e95da78","sha1":"6000e04e699eae9e28a7a5a27491aabbe23175ce","sha256":"b352484b53cc755f00346ff29a85978e0c0ea4c79451362224c4c1aeb0deb23f","sha512":"7aee225ea1a7ead019a0dd747f5a2cc72cb2db3b9453f7a6bf3d000e470de15436f044bce1a8a6080e372dd493be8db5fec2de261e60d7c59fe1b0b174272716","ssdeep":"","tlshash":"b0c08017fb60247302155010991c04153d62018757cf84497b3c351d3bfc02a12d76d8","size":161,"data":"","first_seen":"2026-08-04T20:39:25.895465Z","last_seen":"2026-08-23T10:37:00.348665Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"happymodx.com/fc-mobile-soccer/","fqdn":"happymodx.com","domain":"happymodx.com","tld":"com"},"ip":{"addr":"104.21.39.80","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"b3c7f0bc535589853e0d703e6922cee8","sha1":"2682659c09f1582cdbd434786dee1163fd7469ec","sha256":"a3ac05597522944b949d8065ba0fa49c5fb896b0ac4018a2375b604ab3079f7a","sha512":"4ecad3f9ed2a979aa22b7868a6bfc7e171b7715964f265624ac3362f0ef155d58a7a2d267975c2d24e536719b615027e5fcf1a2bbd195ececf27e45d577c614b","ssdeep":"","tlshash":"76f0277d96b01a328233a296178fe2957622005720c9e6453b2e86854f99cd44e6b9ee","size":463,"data":"","first_seen":"2026-08-04T20:39:25.897938Z","last_seen":"2026-08-23T10:37:00.349318Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"happymodx.com/fc-mobile-soccer/","fqdn":"happymodx.com","domain":"happymodx.com","tld":"com"},"ip":{"addr":"104.21.39.80","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"f1457dd16c3e16f0ab702f273bdf770e","sha1":"f29cd095518823a2f1867f9d759dbea5e7da6082","sha256":"09525e752cf0eb5263c786e32c5e86ef858c521dd2ca0461189799d7c58ec676","sha512":"cfcbb35fb59248495da4518aa3ac1155919d5fe930ec8bb8778f42b29655d9fed0560ec4aef8fe6573c2e56b458c7a7433fcd4c433de28ec019be3d8a4aa1dfb","ssdeep":"","tlshash":"d9c04cfa514bb2141057c91b5868d541a2204d5b3d87696676d465185fcc51980f2b78","size":147,"data":"","first_seen":"2026-08-04T20:39:25.899746Z","last_seen":"2026-08-23T10:36:29.992998Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"happymodx.com/fc-mobile-soccer/","fqdn":"happymodx.com","domain":"happymodx.com","tld":"com"},"ip":{"addr":"104.21.39.80","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"2ada7e4b7d856a9e4da7378626e9bee1","sha1":"ddb72659a8a7c7f8731fa72593b823b3aef17873","sha256":"3c0d50f32b21ff9ad5d359a5b7f5154495e485883f6a803626e3760b336661f1","sha512":"255b9191e6f889df2d85fd002c76d4e7c8faea12453c534a3b4f2302bf9c71240334482bffd16feae7017db73873de67315362a5164c128471303e7fe3d473ee","ssdeep":"","tlshash":"1ad02b086dd7c1205915254f627bc294306320126015f00828c8ce5d4f24fdd0c69e98","size":274,"data":"","first_seen":"2026-08-04T20:39:25.901427Z","last_seen":"2026-08-23T10:36:29.994671Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"happymodx.com/fc-mobile-soccer/","fqdn":"happymodx.com","domain":"happymodx.com","tld":"com"},"ip":{"addr":"104.21.39.80","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"4d06f41c436029629e0401b256fb8fa8","sha1":"37e3f1a5c38f12dd622605a643e6c14ea7d4536f","sha256":"5409925e6ca57c95c766db74b1902dcf7440e9f6734b85d8d5853905c434de9e","sha512":"3bbe11a8105bdbbed70b3516281f1a5d3b2ec997017bfd40d84b6d6154b2b88358469171a31931f6fdefe58ddca432642005eeb3a5a9570d9893b832aabb2195","ssdeep":"","tlshash":"1dc08ca8204bb2240455c8370868a04822104e173d0c282239c0a0000fc841e88f7fb5","size":147,"data":"","first_seen":"2026-08-04T20:39:25.903883Z","last_seen":"2026-08-23T10:37:00.34989Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"happymodx.com/fc-mobile-soccer/","fqdn":"happymodx.com","domain":"happymodx.com","tld":"com"},"ip":{"addr":"104.21.39.80","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"c0a7cc2a478ee980b5b074f27e19126c","sha1":"8d08513e910c3b512b55c94fd87aa41108138f00","sha256":"2b3e6324476f0acb62176022e37fa4c1e3bb0a6cf1f4d303875c4245dac0a6d3","sha512":"9774055f699db798e15546cce038dae0425e535cd68f9ec11764d82f00a207904bc2806988e6a320d182d23ee9f8f6cf966fadb622ed0c5a4885d5890d7f425e","ssdeep":"","tlshash":"d7e0cd7b17561f3904d3729931efb3417b73075574c001076cb4c5492f645c581ba4c6","size":292,"data":"","first_seen":"2025-06-01T08:24:54.291781Z","last_seen":"2026-08-23T12:36:48.417323Z","times_seen":4551,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"happymodx.com/fc-mobile-soccer/","fqdn":"happymodx.com","domain":"happymodx.com","tld":"com"},"ip":{"addr":"104.21.39.80","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"e7c749255f0c7603b90f6196e3087ad6","sha1":"87ca6ed12bb4d899eb515fcbf1b06cd77bfecf35","sha256":"6c91320d2a35084146720e73b9eb506f8f042d304770136f76fdb279d3e82c90","sha512":"17c60dcf3f92c9719372b169ccdad70f329b88e816784043bc83bab6fae403aecab83deda08b8a8c2727ad201d11b2641646e45548d69e9accdadeb0566a3038","ssdeep":"","tlshash":"02b0128b74a73d50828fc7b44d23ba014510208782afc50875e59d3096718c0b4c352f","size":97,"data":"","first_seen":"2025-12-03T09:23:15.289558Z","last_seen":"2026-08-23T12:58:05.32665Z","times_seen":47583,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"happymodx.com/fc-mobile-soccer/","fqdn":"happymodx.com","domain":"happymodx.com","tld":"com"},"ip":{"addr":"104.21.39.80","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"e66ac384cf025190f4d34dad4d87a0d2","sha1":"db4d5989dee4af99f3fd38122865543f695a6e92","sha256":"50cde1bcdb71f309953d7a1087cef6b47ba265528190e25c9114690d3fa3d63b","sha512":"6caee8e49e3851d45a8840212c639f9800a9229363a5eb92c2b2ca9dc3526225feb007bb3c1d275f52fc00713e80536b3db5f7de007dd63bc3c51ca37e7db37d","ssdeep":"","tlshash":"89c08096d5f82d4924d5c158017c1325b115a527cf2f5e59b24d014c5fbc47db5146ca","size":187,"data":"","first_seen":"2026-08-04T20:39:25.908528Z","last_seen":"2026-08-23T10:37:00.352383Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"happymodx.com/fc-mobile-soccer/","fqdn":"happymodx.com","domain":"happymodx.com","tld":"com"},"ip":{"addr":"104.21.39.80","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"61890d43bff44dac953d90fead8cd4af","sha1":"761ada01e3b53c56997c1cff2d515b8e5abcf5a3","sha256":"77a58e14e4dfd0c27f236bd3ba1dc853eb9f4f52a50d315892db76f3f5839b46","sha512":"e3eafbf24aaa6890ea8136e852d868e2d86d8dfe986b4727c311c9275e0895a73f0d3f58c94801c2cd29749c7d335936389d376aed1cfe8b569786c6e77ef69e","ssdeep":"","tlshash":"59b0120b84defdfd54078c307075af38194d54c18351c63c7c8617521a34ec27741d25","size":105,"data":"","first_seen":"2026-06-24T06:05:19.882003Z","last_seen":"2026-08-23T10:37:00.352937Z","times_seen":11,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"happymodx.com/fc-mobile-soccer/","fqdn":"happymodx.com","domain":"happymodx.com","tld":"com"},"ip":{"addr":"104.21.39.80","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"6f9628e4b18850a174544bb7525406f3","sha1":"008dfe8efd2a993e828671bd5ef2be9e62d65a76","sha256":"cec332186e7bc1138a030b49dab78ab179de1b83e7ca5ca4f8a06a26544eb720","sha512":"f02cfd008eea4edd9323b4db94832838bbdb2769ebd2260ef3af28263f36dd874df9ecb004ed9adba5fe073e3045537fc1d5219a5b18a0094c1cdfdf030cac6c","ssdeep":"","tlshash":"4ec02b0fc01a04a300ec1a02c2c23f3377310082c0221811cb9ccd108075f3a3afe060","size":149,"data":"","first_seen":"2025-12-04T01:20:21.915222Z","last_seen":"2026-08-23T12:53:02.710449Z","times_seen":326,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"happymodx.com/fc-mobile-soccer/","fqdn":"happymodx.com","domain":"happymodx.com","tld":"com"},"ip":{"addr":"104.21.39.80","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"de6b907e7c9acc3ec71b63dd98662d15","sha1":"0195003c4f893ac858e57aba493d34f67d37b857","sha256":"e87ec566c8cb94a0dc45dd3b5b873198b4af1808e8bc0fdefd0a096439479114","sha512":"4f93b1de62593d00533306627c0814b910eada56909b167165df319e690bd94c7e0a3f47e8b7808ca540aa12d1fd6ab1b8a03b03824caee09040e3e09e2ffc86","ssdeep":"","tlshash":"48c08c966ee82f1e1e431b84081e13f6217a88a4cbb14c084bcf5484413efc28b11d08","size":170,"data":"","first_seen":"2026-08-23T10:36:30.006239Z","last_seen":"2026-08-23T10:37:00.354024Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"happymodx.com/fc-mobile-soccer/","fqdn":"happymodx.com","domain":"happymodx.com","tld":"com"},"ip":{"addr":"104.21.39.80","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"bafa580a1c90b331a31a712eefdce1aa","sha1":"80453b10d1a9c0e9b0e881c7db22d7a99bf1d019","sha256":"7bfcfba5ab9adad6d8c7b6100d0c25de7750ba2810d3e775b81c59cbb5f5b586","sha512":"b124c22ed68960265aebd6b3e97c930784e6e287af1c85dbea796b30ade56a9debf6a1fc8568134314105d06597d37f4eda9ab7c3c776cff0332a2586c2294eb","ssdeep":"","tlshash":"d1a022e8c0ec2e200200082cc02b02f2a88c0088c0200a02830c80000032033c208c03","size":63,"data":"","first_seen":"2026-01-10T11:27:03.936191Z","last_seen":"2026-08-23T11:06:12.604571Z","times_seen":334,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"happymodx.com/fc-mobile-soccer/","fqdn":"happymodx.com","domain":"happymodx.com","tld":"com"},"ip":{"addr":"104.21.39.80","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"65b8253490a85024e67923866f60b939","sha1":"79585e079bc6547d3c45d2e3242444037c6b5918","sha256":"bd6ba37dc1dcbd23ad18e03b8010a821833b48a7d5001ed7c336d0e41c9719f1","sha512":"37ff34460f85ad2d34892b121252bdc267991a2c6fd1908017d26e2f9e1bb890e085ab723b314b9280b05c1f46813e9da74461b72e473bd2b6f74016020abe65","ssdeep":"","tlshash":"e1e0c280a25c1d54e193363b7f3645da283c07f159a2d8acc88fad503052c4046eb5a8","size":292,"data":"","first_seen":"2025-12-17T03:04:22.786617Z","last_seen":"2026-08-23T10:37:00.355106Z","times_seen":581,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"happymodx.com/fc-mobile-soccer/","fqdn":"happymodx.com","domain":"happymodx.com","tld":"com"},"ip":{"addr":"104.21.39.80","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"6181d945d9a7cb6b9fb6301785933821","sha1":"52ee2a4d68c58d9e2b540d1c05a9e319f1923978","sha256":"4114bf475786f47ccd328c98b5f6dc2e28e4382cc80c24644e13969c0ac06e5c","sha512":"e91f2b4849680c06fe301c7d5bcb540c56dbd9faf3b6f1a098089a383c3e33a959a2fe6731515b523257714b449400b2e798aba89d420a0e775a98e966339887","ssdeep":"","tlshash":"9341b7b8b83570a8a9f39026543f730371792661a189c090c2b1dad57cba7c2d3d7e0d","size":2193,"data":"","first_seen":"2025-12-28T16:59:24.723331Z","last_seen":"2026-08-23T13:07:54.760084Z","times_seen":5150,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"happymodx.com/fc-mobile-soccer/","fqdn":"happymodx.com","domain":"happymodx.com","tld":"com"},"ip":{"addr":"104.21.39.80","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"e053e2e7242fb707a47e112f89ff9d2e","sha1":"52288b9b87f4120579270c0efdc7f1a2b02eb369","sha256":"e39f49ad6f34897420a1480fd5ac52ca60b0bd329fe1485615958e892ef2b79b","sha512":"e487febc848421f0e10405fd3d8b7dbb9612afac85c0ca11a3e341c034c42551b5fe80e57884e6f18ccb930669d3d924ea94488cfeab7b354ba809e808330d7b","ssdeep":"","tlshash":"6bf0dcb2729d0d4240124ada8f20c637bfcc8c041833c915e108d288c01df81d08f926","size":466,"data":"","first_seen":"2026-08-04T20:39:25.920731Z","last_seen":"2026-08-23T10:37:00.356105Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"happymodx.com/fc-mobile-soccer/","fqdn":"happymodx.com","domain":"happymodx.com","tld":"com"},"ip":{"addr":"104.21.39.80","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"ac0adf5b1efd634163485c205fc275ea","sha1":"9cc2a537bc141a53a28091bd9fb0ad096f8ad542","sha256":"b81063319c61a49cc7ccab5d7409cd6826aea48f1c8bc0257d9dac5b2ed7d280","sha512":"62e3c72ad653a590b88c9f3efa8ab0176b9f6f25bf0c23a6a0fafe1b9987e11218d6d1abf3cd1c0c78e0239676ed47621fc166ad9e9b2b8ed10260258b875661","ssdeep":"","tlshash":"df6187b9715e753b09638735502f720aa27b095864e9c02cb436ece06f74f5c609be2f","size":3446,"data":"","first_seen":"2025-12-28T16:59:24.726853Z","last_seen":"2026-08-23T13:07:54.761439Z","times_seen":4973,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"happymodx.com/fc-mobile-soccer/","fqdn":"happymodx.com","domain":"happymodx.com","tld":"com"},"ip":{"addr":"104.21.39.80","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"cae6d450443b024ed3b0d4cfae4a51e4","sha1":"2968657a9a3cbecbb0a0ea5ac13d5280486f12ee","sha256":"93f8b2f4401ab8a704ff4c440fd8a38c742b50aa53e9d063c82250ba589b81c4","sha512":"d8b5294df596567f1af73043d64883580e3e9eed26b98655b3db9002df83f09e4370ba10e04047a3640075de8bb56056c1d3118d0b898448775a78176f0038ce","ssdeep":"","tlshash":"31c080ad51825632c1c11b505350e533d0350858c209481ff19d50dca835ca31ccd443","size":164,"data":"","first_seen":"2025-12-04T06:26:02.354099Z","last_seen":"2026-08-23T11:36:16.248923Z","times_seen":2726,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"happymodx.com/fc-mobile-soccer/","fqdn":"happymodx.com","domain":"happymodx.com","tld":"com"},"ip":{"addr":"104.21.39.80","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"6373e2920cfbf18a28fe987e97347295","sha1":"14ea7bf422412d36b20c987253b3028ad992f1ab","sha256":"a75c40f54fad37fc397a6badaf632cce6d888dfff30fa526efb6837a438229ed","sha512":"44c85125db18595b06eeb19d48ae4c6d2a68bf5b7127acbbd513a581f10cf3e3728cde4d25f80dc5b530a4020dfe7ac64b09842d1939daf4385fac85c0208382","ssdeep":"","tlshash":"8ab012ef8488003000c38c2022105730f068a024c1474051d0ce100bd133c015859881","size":90,"data":"","first_seen":"2025-12-04T01:20:21.91771Z","last_seen":"2026-08-23T11:36:16.250087Z","times_seen":668,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"happymodx.com/fc-mobile-soccer/","fqdn":"happymodx.com","domain":"happymodx.com","tld":"com"},"ip":{"addr":"104.21.39.80","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"5e701d11b302d7009dcccbb5984fb95d","sha1":"fe5d62901c7fa7ac6b0fe03f9aa1c4b574610196","sha256":"70f226c0eeb7dc6947dcf69b0b05027451a11126ff7011c1928a144f4f2b7ca6","sha512":"e5982b22f6f2d49008f32730451c902bee4dbcf29c2a158d9da1e9b2b9d7f45476ae5f38c55ed7f26a3abb23f81d00398fb14dbea7d1830f7ec3b7c7d23107ec","ssdeep":"1536:NqBu6DD4UaD2L694onHfEwn6bDBffA6cuK/nqipePGncXZfO0UVsC6pF34LWZtFl:kDD44OqCf2ifqipejZfrXF3ft72297C8","tlshash":"78833bd1bf3069361ebb41b1b06f018bb6f5d9375a894061e508c8a92f68c9710f7f6a","size":85220,"data":"","first_seen":"2026-04-06T07:54:21.225283Z","last_seen":"2026-08-23T10:52:51.870256Z","times_seen":1561,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"establishscarcely.com/f0/58/2d/f0582dcc2dc78c0d7cc66bdcca52b3ab.js","fqdn":"establishscarcely.com","domain":"establishscarcely.com","tld":"com"},"ip":{"addr":"172.240.108.68","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"ef637b7f1a38433c5868b15ef1ea8469","sha1":"4f40f90c3807e74487d74813588d5197d75e9b24","sha256":"0333c9fb6aeac3f526a440507211fee316f9ac3b740f1260d87a549121d142d7","sha512":"50f20d70ec055211a199779451f87bbc2c3691930e9bfdb0b1fbea43cfdbe96f62ae4d1d58e227a9758b829511c53b04056f493a746bdf12026404779b05f487","ssdeep":"1536:7V4VImwg+YocgELIUlsgjJMODRr2EJt7jQW3j:7QLIUCgjJvDRr2EJt4Wz","tlshash":"2993d9983fbba87d03d97077762f9417f26d1c01008dd8bcd943b8acb968b54a476a36","size":97099,"data":"","first_seen":"2026-08-23T10:36:29.859014Z","last_seen":"2026-08-23T10:36:29.859014Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"happymodx.com/wp-content/themes/generatepress/assets/js/back-to-top.min.js?ver=3.6.1","fqdn":"happymodx.com","domain":"happymodx.com","tld":"com"},"ip":{"addr":"104.21.39.80","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"5fc35421139ef9851bc72d3edb90cfba","sha1":"0091cadf005c865d7c4ef093fac9d35566fd1e48","sha256":"3310986e26439bd35318188bd35b0c326bd3334e6699ca0469fd4f0b7d497098","sha512":"0fda88fda5b8a67c7b750712da3543e4572cb89565284cf1cbffb1ec0927f21626ff78d6fe9fa4ac13ce9f780ddc0c36ca46fedeb1c2e7f754573d7acddc7432","ssdeep":"","tlshash":"0401d0fd1190553514fb8695739fbf41393120a686039411812ccca0f5a8ce7f912bc7","size":737,"data":"","first_seen":"2024-09-02T00:59:07Z","last_seen":"2026-08-23T12:36:48.399839Z","times_seen":5620,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"about","addr":"about:blank","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"8d70c25ea11df41ea6b4c42942055d1b","sha1":"e94b19c4b201a2fc1d10f775d74331ebdde7adea","sha256":"8e0b605ad36e821399f4310d2b2355465902bd7685bf3f884d0f6d17c539be67","sha512":"42ec3c7fadee499222ae7f3ba0ffbe67c6fd1821750331b719e84758d538d9201283e66855dbc0d61cbde7e5ed7f066c2659b0ac83a2b3cce1c7b9730c9cd157","ssdeep":"","tlshash":"84214c16391543b66327f155008e72d8f621152f6a59473735ac0fc80ff1a2702aedf6","size":1271,"data":"","first_seen":"2026-08-23T10:36:30.020558Z","last_seen":"2026-08-23T10:37:00.372571Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"happymodx.com/wp-content/plugins/gp-premium/menu-plus/functions/js/sticky.min.js?ver=2.5.6","fqdn":"happymodx.com","domain":"happymodx.com","tld":"com"},"ip":{"addr":"104.21.39.80","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"b4054cf702149de2ebe6578b6c5e21d4","sha1":"898f2ff50a92069b4d5886ee0b378f36e8f0c906","sha256":"57d35f39158ef6990a75261c466b5c93e3f441b5b05426a35975fc3f31c19c45","sha512":"54fe82d5c65f91daa1cacfad3d996709098622731ed79e37b780f5ef8c07b30b92c9b66b7ec0c8c0c052085caa2fb281492bc125101b6e3086a6346ac8b36ff1","ssdeep":"96:BiLzZp1jH2BKyAWjjp9+1YYE7Aq5l0ok7yyAMGrrAU9gEuqOxVTHjiQzBSw6MCnk:B6jH2cK5IKD0Y3vm17iQz8VBAn06kY","tlshash":"f602d88cf71034b548bfc69e81dba500d1bbc92596439086f69d8c4e1949f6813e7fdd","size":8524,"data":"","first_seen":"2023-03-29T21:09:46Z","last_seen":"2026-08-23T10:37:00.322454Z","times_seen":4374,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"happymodx.com/wp-content/plugins/convert-rank-math-faq-to-accordion/assets/js/inb-rm-faq-accordion.min.js?ver=1.0.8","fqdn":"happymodx.com","domain":"happymodx.com","tld":"com"},"ip":{"addr":"104.21.39.80","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"8133e6ce51f0bdc05d4445fd979d8885","sha1":"ce5e6afe1e7aad97a9aabc3d839a216e70854a64","sha256":"cc5ea4cbdc4308e3df9c4e85aaa164b424c9891121c7a0b00462718e7c1b16bd","sha512":"a4c380899c0343daeff0ca3b96e0970b2febeba6b10875a876c1f15aa2fd2465a62ed8970b066cbffaf54e7d78ad49cc71d7569724e25eb2a7bc5f3d4074c40e","ssdeep":"","tlshash":"3531c344700c677501bb338a1c43db05541ee861f670ae58756355bd1e2ada4ff36b27","size":1700,"data":"","first_seen":"2025-08-14T13:44:27.515728Z","last_seen":"2026-08-23T10:37:00.290081Z","times_seen":46,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"happymodx.com/fc-mobile-soccer/rocket-browser-checker-js-after","fqdn":"happymodx.com","domain":"happymodx.com","tld":"com"},"ip":{"addr":"104.21.39.80","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"e37ddd31df8263a368f0d7f0fed420e5","sha1":"8d49642cf1ab7c61fa7fd48305f5fe0dfabf354d","sha256":"cab422c68386eea64a58c64a1df63997de99b94ba73989d08d3064c057312a39","sha512":"a9e32df9be415d0b504259b899741290e65120f010c3213d57a01f65a1f9149395b751d90952c22023f8e40794934fd3226b25d678409845a8b4db784072ca07","ssdeep":"","tlshash":"866195a8f83570a8a9f39036543b630371692661e1898090c2b1dad56cba7c2d3d7e09","size":3196,"data":"","first_seen":"2025-12-16T12:13:42.913353Z","last_seen":"2026-08-23T10:36:30.021816Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yastatic.net/partner-code-bundles/1306332/6bbc20c3e18b7d73.js","fqdn":"yastatic.net","domain":"yastatic.net","tld":"net"},"ip":{"addr":"37.9.64.225","port":443,"asn":13238,"as":"YANDEX LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"781552904ab4e5929a979384b73ade07","sha1":"1a584b5a46e7b532fb12c20c1e8012826f7760d1","sha256":"4a4b1d95b2390db32f76ae30a9d7964514d29b3b9f54e1b64f40f15600be57d8","sha512":"212badbf5257cfda6819f2fcc81154c04d1c391797a452d9e7d40b335fab2f34c0bd2e92860de09bbb986088a44d1cdea0c8e8b42d88534db9ccd7a11cc162e2","ssdeep":"768:sS8S2XuKTeA/l05jtCCtjCaCAbCGRCbpNxNWtI//IxagFZmrm0ZrdzS8HoCqyzH3:fay0MlyAvKzZ3m+TTX","tlshash":"4903c58db1d1f0a24a97a070813f210ff37b6895a81d9480f666e4d17cba99f6073f6d","size":38365,"data":"","first_seen":"2026-08-21T19:08:41.872139Z","last_seen":"2026-08-23T13:06:25.367733Z","times_seen":35,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"happymodx.com/wp-content/plugins/contact-form-7/includes/swv/js/index.js?ver=6.1.7","fqdn":"happymodx.com","domain":"happymodx.com","tld":"com"},"ip":{"addr":"104.21.39.80","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"96e7dc3f0e8559e4a3f3ca40b17ab9c3","sha1":"d363d0291e92c233e828023583dcf6685f2da5a2","sha256":"29fdd17a7002a2e1bbd9b33adafc53457c64006b5aca8f6e4dbf907de35433ca","sha512":"851dcea59510a12dd72c8391a9ea6ffa96bcbe0f009037d7a0b6e27bae63a494709b6eee912b5ed8d25605fbb767a885f543915996f8a8aff34395992e3332dc","ssdeep":"384:wwuf8OQL0sARrAZcNWLq/+Ffm/hibLexa2VautyX2fsL3ZHO1O9H:wwuf8OQL0sAZAGNWmGcibLexa2Vau0XD","tlshash":"d34235e16197e0f0c7c338a48816c051f2bf866cb9898054fb5dcdd22d5de07626b77a","size":12512,"data":"","first_seen":"2025-03-11T19:47:45.42406Z","last_seen":"2026-08-23T12:29:55.626161Z","times_seen":230615,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"about","addr":"about:blank","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"eval","is_inline":false,"md5":"fdc3caaaaf4f32287efb6eeefd5224d9","sha1":"03bb11d157ad1bc0131825db32065ee428312f27","sha256":"826bb910840b5a7c54fe758594721c68b5da3bb531f58824f200abc03d113537","sha512":"5fe75806618f3250217f773acb33b4dd5cac5128ad13187c80f94ebe9b74badbd616e611afdd267126fc6442a94a70874a2c3fde1ed54175c74876aa3b892d17","ssdeep":"","tlshash":"1c31da6768693123a62a6777696df6395c7cef8b08c2b3847c570f1416105ed0776ccc","size":1560,"data":"","first_seen":"2026-08-23T10:36:30.023017Z","last_seen":"2026-08-23T10:36:30.023017Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"happymodx.com/wp-includes/js/wp-emoji-release.min.js?ver=7.1","fqdn":"happymodx.com","domain":"happymodx.com","tld":"com"},"ip":{"addr":"104.21.39.80","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"7dcb0bb1f67bc5cd9aa86bc0577108e3","sha1":"c90b1ed149a278c322a63f3a79443ccce5592382","sha256":"063840b4b3f5869e0f0d078bab8bd29cfb3a59ee85e8e3edbbec35a8fe846fd3","sha512":"d09c60fc702e1d3fb839685770b2626a64cbc6373ac4bf3a63c3536caef34f4f6caf76adfbd5c2d15bed6e1396ed4f3ca80f6673e3421b2ae2f9e7aa5ccf16f2","ssdeep":"384:WzevzApRZTbbUL3px/bEg1XgA5OOkpJTX:Wsk9bUL3px/YqXgAP+hX","tlshash":"79a2949ba33a4e8f343e3bd78d968f4dc9da555321c0e079dbefb6c169a00568274c90","size":22752,"data":"","first_seen":"2026-06-05T05:27:24.795617Z","last_seen":"2026-08-23T12:34:54.816024Z","times_seen":40282,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yandex.ru/ads/system/context.js","fqdn":"yandex.ru","domain":"yandex.ru","tld":"ru"},"ip":{"addr":"77.88.44.55","port":443,"asn":13238,"as":"YANDEX LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"84ec079330a6ceff58a9cebe7f358671","sha1":"145ae49510768353793692d7e5077f1d24d993f7","sha256":"ecf89d96769948337dd7ef79d1a7da856bece3793606b18a4950f6f157a9b57e","sha512":"3e97b68a2126ec3ff4a5e8cd249561031953af77dfff109456f454c47d76a2fa83f84ecbf837bbc3d4330391b68bea8b70ff5eb8e6a5a8ace5dc8586990a9503","ssdeep":"6144:Odc8jywuh4BJXW3+AiczeqK2E+91QVyxsysZzCAQAY/IM70rNvytLwwgArDSxXRj:w5ytaLnaoIYgDa","tlshash":"ec94c59db5e2f0a143e761a4803f5a0bf23a6955780d9090e725e8d1bcb899f9133f3d","size":417852,"data":"","first_seen":"2026-08-23T10:36:30.024298Z","last_seen":"2026-08-23T10:36:30.024298Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yastatic.net/partner-code-bundles/libs/libs-033ae686.js","fqdn":"yastatic.net","domain":"yastatic.net","tld":"net"},"ip":{"addr":"37.9.64.225","port":443,"asn":13238,"as":"YANDEX LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"8e28de8572712134d1bc4a77e52bafe5","sha1":"dea7f17d1a27bb63cb09902e4e21ad59809f2480","sha256":"4cb8e701d93fbf469464d6711bf8aec61ea16595a804ee56d926e999ae12920a","sha512":"0699663a24d534849484ec03b3f2cebf8ea5dd856d9c0760de18332920aa940d097ac8edf246fe153ac91cd1d9c06c9ca04994f654f39a7297032d3847dcef74","ssdeep":"192:iHFHNNSZkrXmgldEq88LX15yvOYq7YLYIP3qt4MV+9XE:iHFn8CX+q8Y1yqcsLWMQ9XE","tlshash":"8a12d9f932a1b8c012f669c1085f557b01ba7e07b90e255b472659927d240ce60f2fef","size":9232,"data":"","first_seen":"2026-05-27T08:51:43.706545Z","last_seen":"2026-08-23T13:06:25.419921Z","times_seen":3255,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"happymodx.com/wp-content/plugins/luckywp-table-of-contents/front/assets/main.min.js?ver=2.1.14","fqdn":"happymodx.com","domain":"happymodx.com","tld":"com"},"ip":{"addr":"104.21.39.80","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"d5e3262f9f557bb91d6ffba0801707f6","sha1":"2beed0a2c56d4511f7bbdcf07500e9d12f3342c8","sha256":"995456f7211327129612b97dc0a2baa2288f1e3065d1d6ed1882a0eb89d6baac","sha512":"b25997c3b7923f6c52baae4bc7a476b39bde52944eaee992b33ae7042bd26d5ea61cfcdf32cfb5ffb0e77b2e69a494f507978480e1b50aa4f0927fd0c6b2be02","ssdeep":"","tlshash":"207187fa7200763349fbb196da1f53423035207577079484e63cf88a547c9d63a27eb9","size":3678,"data":"","first_seen":"2023-03-07T12:24:12Z","last_seen":"2026-08-23T12:51:51.365362Z","times_seen":1322,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"about","addr":"about:blank","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"eval","is_inline":false,"md5":"6622f1e7b62767e0003837a3d130b433","sha1":"c625f366eef38aa95a1dc6e04cd03e12e7cfaad1","sha256":"2239fd41b07bc4c9b5ceff222534f39c19d87ee1fee7387ae79d1d1e1e337d04","sha512":"6adf6fe47b574109a69b6194f9b5fb31e34db28d33bcab8a8a4d6605435bc0be60f64d46d2d9cf9e19f4bfe8a403d42ca0eeb582f8856f8ce79709037b99cdcc","ssdeep":"","tlshash":"cd31bab7e5af68755dd9a677414e7f181d3b91768e04268741b0c780161c4d6cbb2cc4","size":1560,"data":"","first_seen":"2026-08-23T10:36:30.025408Z","last_seen":"2026-08-23T10:36:30.025408Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yastatic.net/partner-code-bundles/1306332/9463272d90252442.js","fqdn":"yastatic.net","domain":"yastatic.net","tld":"net"},"ip":{"addr":"37.9.64.225","port":443,"asn":13238,"as":"YANDEX LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"a2bc48de172e6f03248a25ea5f2bfbf2","sha1":"12e26a4ade44191766a86a92be01360be53b43ac","sha256":"1b0321c48c0f69a6c52b6ceba8ecc46894fa3e1a52e0116ee185186dc9a43fe4","sha512":"bdbec2742a5d55e1bbbc7dd83b79e4ec3b4bb2b6ad31df09da5df110f134847241b4e38bce5540a1a0a4557ca76e54c553ead19dc474a2c3db631fa78357b474","ssdeep":"3072:UIJjYLKYHr0t1QD+QtTl+qTcXW3rUGWKWx8geVioJAGYXwLw1IourJ9AhpBkZamv:UIJ1YL0t1QD+QtTl+qTcXW3rUGWKWx8F","tlshash":"0ee3c68db2e1b47142d7a0f5503f6a0af33a6459a4098094b72de9e16fb898f5137f3c","size":156071,"data":"","first_seen":"2026-08-21T19:08:41.897466Z","last_seen":"2026-08-23T13:13:30.553902Z","times_seen":35,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"about","addr":"about:blank","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"14595a9afb3d61fa64bd1749e15fd2bb","sha1":"dadc5fe5b13095559876f664da8df44d72dc9a17","sha256":"f773323c5524b164efff75abd04c7247909672e8e4fb988e5d38f6a7763a4b39","sha512":"e6cd7bbd70429c908555f7b1f333b943f56482d29000ce9774fa479bc620a849ffdc1d5b7f3fa0e2a9dae27e07a2828008cfdceea76a91802d0c043b4a26d3d0","ssdeep":"","tlshash":"eb813bbe7eea41711816f17f137ba6092d65900b6601de057c9cd6042feabb00e1bac4","size":4064,"data":"","first_seen":"2026-08-23T10:36:30.026504Z","last_seen":"2026-08-23T10:36:30.026504Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"happymodx.com/wp-includes/js/jquery/jquery.min.js?ver=3.7.1","fqdn":"happymodx.com","domain":"happymodx.com","tld":"com"},"ip":{"addr":"104.21.39.80","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"826eb77e86b02ab7724fe3d0141ff87c","sha1":"79cd3587d565afe290076a8d36c31c305a573d18","sha256":"cb6f2d32c49d1c2b25e9ffc9aaafa3f83075346c01bcd4ae6eb187392a4292cf","sha512":"fc79fdb76763025dc39fac045a215ff155ef2f492a0e9640079d6f089fa6218af2b3ab7c6eaf636827dee9294e6939a95ab24554e870c976679c25567ad6374c","ssdeep":"1536:0RUX9uDgwxcy2KVBNwchN6SLaHEk2BSrBESp+a/IEk4aAocVi8SMBQ47GKO:sHNwcv9VBQpLl88SMBQ47GKO","tlshash":"7483f8df77ca702247ab30b9006f550bf276199d684d4400f159d8e9bcb8a4a827bf7e","size":87553,"data":"","first_seen":"2023-11-03T09:26:43Z","last_seen":"2026-08-23T12:26:44.497155Z","times_seen":1030476,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"happymodx.com/fc-mobile-soccer/rocket-preload-links-js-extra","fqdn":"happymodx.com","domain":"happymodx.com","tld":"com"},"ip":{"addr":"104.21.39.80","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"1b52d5d9ba0863675b0efe1a25b9dcf3","sha1":"2531019b19c539f0e2484b1fcfc2756853429153","sha256":"1184c2c986ccadd683cc3c58e43eadb83478d0f77333735f4e5ba60ca53f40c9","sha512":"24941131ec276d9f49b469aa6b3260a65c125527186c578d6995e3de161991878758cbbb9ac84425140af35aeb5d149a6e2f33c23be73d4fc69ebc3344fdb99b","ssdeep":"","tlshash":"bc31dcb2f29d0d4280124afa8f20c637bfcc8c04d833c915e108d288c01df81d08f926","size":1473,"data":"","first_seen":"2026-08-23T10:36:30.02788Z","last_seen":"2026-08-23T10:36:30.02788Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"portalfluently.com/sfp.js","fqdn":"portalfluently.com","domain":"portalfluently.com","tld":"com"},"ip":{"addr":"23.111.84.220","port":443,"asn":7979,"as":"SERVERS-COM","country":"The Netherlands","country_code":"NL"},"introduction_type":"scriptElement","is_inline":false,"md5":"b3a5ba94d627e64a77c0e11eaffc96ed","sha1":"f7358693b31e44211dd98b5aa0dc2a3f423286aa","sha256":"600f01dd96f043e58e0e70a82afbba6ffe0923d836f6293c1e6fc1cb5b074d34","sha512":"64800bcce3e1a65638dfedfe22f205b51725865db3332be95a142e39e4cb40f57358d0c4c01ebb366b8da56aa978b6c7ee992e2c27563bac76c3998014c3d64b","ssdeep":"1536:nPncLBSUBULrSVvTfMtfj3FkdFcE5PnoRC:nPncLBSUBULGVTfGpucE5foM","tlshash":"488395807ac06488d3979b7bb73bf4eaf65a299f38c4044bd100fc48b69562af9f5534","size":85379,"data":"","first_seen":"2025-11-18T17:36:30.149277Z","last_seen":"2026-08-23T10:52:27.81712Z","times_seen":27125,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"establishscarcely.com/ccf2cef4382fd13c1ed6f76b041b5c50/invoke.js","fqdn":"establishscarcely.com","domain":"establishscarcely.com","tld":"com"},"ip":{"addr":"172.240.108.68","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"7fa9873459e99e518bd2adee137faea5","sha1":"2bb113f8e93141b23c11d8a747a243084de7ddd1","sha256":"d5bbb8f5b8b5ce3d8f5ce61cc3da1158675af3676b775b4a5048bcaeffeb028f","sha512":"4b1e39f21bdf20e57f7e34a08984a0fb835ec6fd1070d6e182cecb07b4bec248156a7268eddb93a371780d0a7aa0171761c1bb503986a755f9976e21cf00a4bd","ssdeep":"768:y+QGHr9qbbrW34GKDTr5IzOVeYcxoy+XuYE+5d/raP4QEoG:Jg04GK3r5ISVcxA7n5dzatEoG","tlshash":"d3f2d5c83fe1d06f17b664a3332be52ba05b1e40568de8a8e877b45ce904f15f8791a0","size":35423,"data":"","first_seen":"2026-08-23T10:36:29.84585Z","last_seen":"2026-08-23T10:36:29.84585Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"happymodx.com/fc-mobile-soccer/generate-smooth-scroll-js-extra","fqdn":"happymodx.com","domain":"happymodx.com","tld":"com"},"ip":{"addr":"104.21.39.80","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"110a48927ac91b35eae71d5a24d55399","sha1":"b0e4d10561596280916954470e2f84bf35a0d7c4","sha256":"5616d0bd89c76761a0d22d56871cd1a196d82450aad03c97dd5f3e3bb6426200","sha512":"0d369e8f625eb1ede12f210fc0da10956dd7fbbd0cf45eaa6c554fdcf2c24444184ac535005c57003b2d5c3243bf05c2190e26e1185ea54f259a354c74876bd8","ssdeep":"","tlshash":"5e212b0fc01a04a300ec1e32c6c63f3377310082c0225811cb9ccd1080b5f3a3afe060","size":1128,"data":"","first_seen":"2026-03-22T02:19:23.574985Z","last_seen":"2026-08-23T10:36:30.029049Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"happymodx.com/fc-mobile-soccer/generate-menu-js-before","fqdn":"happymodx.com","domain":"happymodx.com","tld":"com"},"ip":{"addr":"104.21.39.80","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"cdee6f27ba6591851fa49a744e615d50","sha1":"b015ebe05ea06f7327a8179025d85db83d243905","sha256":"342ec7ff496eb3b281a93a6286e364336c43fe087fbc6cb930775c675fe36cb9","sha512":"911eb65e7f137a92bf17bc5b9283b575ed95b99d0d7b4fd12046032338114a27fb0bbdf5644d1397cc0b85a64cc8073e07bcbaf8dee839d85cfcba8d09005e15","ssdeep":"","tlshash":"1a2180add1825632c1c15b705350e533d035085cc209481ff19d90dca835ca31ccd443","size":1182,"data":"","first_seen":"2026-07-16T05:43:18.067695Z","last_seen":"2026-08-23T10:36:30.030247Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"telegram.im/widget-button/index.php?id=@happymodx_com","fqdn":"telegram.im","domain":"telegram.im","tld":"im"},"ip":{"addr":"65.108.253.105","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Finland","country_code":"FI"},"introduction_type":"scriptElement","is_inline":false,"md5":"89b19094b50e5f48cfde93017e9b1955","sha1":"9362f00425461f12682365f4c9de9c3606e4acf0","sha256":"db1f461314ae65f94583f6c4c7953c8e8aaa4db12372c6b0a8e95d22ae170114","sha512":"651c7ef8a6aeea0c87b1c2b57c8291cf4203bc792d946fdc2f82460a340e27dc0298364e4f319d46725a7d5d6165147035b598afee44123af0a70c64dfce68e6","ssdeep":"","tlshash":"6e81d1585f0c022566b735be9e62a208f872e13fe010b9017ccd85f66fb4b9064b7e5e","size":3856,"data":"","first_seen":"2023-03-07T12:27:10Z","last_seen":"2026-08-23T10:36:29.949655Z","times_seen":586,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"about","addr":"about:blank","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"80da5239292aea6c0f26295398c0f53e","sha1":"19e67f168df3771f0414b750547ae6f693860fc6","sha256":"cb067b7b7628fe22e69ac51d31d4603553cde464196c2ce1ffcace3bdb0967f2","sha512":"15de2c0a998b954b4e833295d07f9135e52bcdf4299cb7b5fc2653fd788856c83102039d3b04fdf611a87a5b9ffe2ac2d07d71a98e0389083ec522d9cdd55473","ssdeep":"","tlshash":"6981fab59ee7d4786c85a17f426f7a082d36912b5e04ae07b5dcc6810f188e1cea2dd4","size":4068,"data":"","first_seen":"2026-08-23T10:36:30.03194Z","last_seen":"2026-08-23T10:36:30.03194Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"happymodx.com/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.4.1","fqdn":"happymodx.com","domain":"happymodx.com","tld":"com"},"ip":{"addr":"104.21.39.80","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"9ffeb32e2d9efbf8f70caabded242267","sha1":"3ad0c10e501ac2a9bfa18f9cd7e700219b378738","sha256":"5274f11e6fb32ae0cf2dfb9f8043272865c397a7c4223b4cfa7d50ea52fbde89","sha512":"8d6be545508a1c38278b8ad780c3758ae48a25e4e12eee443375aa56031d9b356f8c90f22d4f251140fa3f65603af40523165e33cae2e2d62fc78ec106e3d731","ssdeep":"192:5rprDN+sag6ifKIUpQI99P1tLm9kdgyq1+J3aCJQ+h4MPLORq:5rprxaefKI0LP19m4q1WW+h4Mjp","tlshash":"9952c8adb56679724eb721b8f03bd24f71b205de560d8940d19cc4f6282dc6e812bf78","size":13577,"data":"","first_seen":"2023-05-09T19:21:05Z","last_seen":"2026-08-23T12:26:44.466041Z","times_seen":943340,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"happymodx.com/fc-mobile-soccer/wp-i18n-js-after","fqdn":"happymodx.com","domain":"happymodx.com","tld":"com"},"ip":{"addr":"104.21.39.80","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"eacbc858af76cd7e0a7897be457b12d9","sha1":"08b042219b107389bc8350780bb838ad27c6f044","sha256":"a44551d9591ecc6f5af45222f06a687f9bcc58ff9d4e2b3a74d674635c4143a2","sha512":"04ffa0c66a848fd36ee90f53757bdbb91f0edf5b333c25ad277a742160691316ac481c27d02d1baf46494a44983613f712190dfcb1467fcc5f9b768395185241","ssdeep":"","tlshash":"c41112cbf4ab3d50828fc7b48d23be0145502487c2afd50875e59d3496718c0b4c362f","size":1055,"data":"","first_seen":"2025-12-16T13:11:53.440797Z","last_seen":"2026-08-23T10:36:30.033924Z","times_seen":102,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"happymodx.com/fc-mobile-soccer/generate-back-to-top-js-before","fqdn":"happymodx.com","domain":"happymodx.com","tld":"com"},"ip":{"addr":"104.21.39.80","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"3814b1dcbbd5679de3b5b25a6e7bb6d9","sha1":"8745af5ee2d2ea119d27bb34a8054c596a675281","sha256":"c98b4464bb3f08c2ded5b3434875e95da2f4290d8556af28e4e0f6033043b048","sha512":"ce5844438bd6c9a0d25b05c2267a3c2dfaa6db6954bed4150442bb3427213ada04e352bfcf2699350ef661711ab9bae09b5990cc274cd0c8447b859de4983b40","ssdeep":"","tlshash":"722112efc488003040c3cc3026105730f0a8a028c1478051d0ce500bd173c01585d881","size":1114,"data":"","first_seen":"2026-08-23T10:36:30.034636Z","last_seen":"2026-08-23T10:36:30.034636Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-ZKZB7TG472","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.178.72","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"f915af4b023ea2d7dee921992f30a131","sha1":"db466189ad64363e5ea29863bd94a49df909165c","sha256":"ecadee919b3cdb96675aaad1d5043ea191dcaba701a0817205ac5343d5f6a42f","sha512":"324a58005038f4fc2873d9c43ecb98247cd283795e7e0b69cf02465b1097d51a5a77473b8ee74ac3093113ae2788c742641d692182ea882fb9396fde1345c483","ssdeep":"6144:5HoO9AY1iLZKHg0D70HtdZen0okfha5gcXsL3EQB3PDqlbzW0cHHNN1FG:RcdLZMvDwO0lokHPu","tlshash":"c6b4e7cdb3d674665396f078903f01cba57b28a2b45cc89af189cce42e7469a4127f7c","size":496649,"data":"","first_seen":"2026-08-23T10:36:29.915154Z","last_seen":"2026-08-23T10:37:00.281978Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"about","addr":"about:blank","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"eval","is_inline":false,"md5":"02a23f66960bed4293c307396d6dba71","sha1":"336de01d696cdc900c6939cbf92bb182233ff9fa","sha256":"583ba09e7e150c357885a3872f7d3fcbd03a721698171005a440bd31b2e56a2c","sha512":"3214ebd0f46f34f32ca422b973eb1f6a9c57dbe06218a52101001b17e8761ce4b8fd8fbec9ede50d96d017a3db123b71ebbce963adab8d8afac3611d06c9ea78","ssdeep":"","tlshash":"7521c8becbbbc9ac2ec89a1a854e6e242d7b513dde08220642b0c2815a59493cf910f4","size":1290,"data":"","first_seen":"2026-08-23T10:36:30.036112Z","last_seen":"2026-08-23T10:36:30.036112Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"happymodx.com/wp-content/plugins/contact-form-7/includes/js/index.js?ver=6.1.7","fqdn":"happymodx.com","domain":"happymodx.com","tld":"com"},"ip":{"addr":"104.21.39.80","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"2912c657d0592cc532dff73d0d2ce7bb","sha1":"70a679e2769825236f83bcc56965a9d0bd86c4e9","sha256":"ddcce687729cb358abf9d0d8e1217a097859be2b0d18c23d7c851b38c87bc9c0","sha512":"9646384e65d09bf00cb20365f43e06dd41e7428e3fc6cc2737f4e69b50f006ebb25bd24a566fcd9faec2f0dcb24404e25d57ba7b8c6aba61797a29c515ad5144","ssdeep":"384:IsIRHeFJ1yQ7QdfnJgeYh7MXlsNqrBp1pgQpwOjNtqohIQ/5Z:IsIR+L1yQ7QdpYh7M1iqrBp1pgQpwOjn","tlshash":"0a52d7a1472955321eb506e391e513c1769075aef44b8aa1a898dc2e18bdcc328f3ff7","size":13452,"data":"","first_seen":"2024-11-04T17:50:00.022634Z","last_seen":"2026-08-23T12:26:44.489901Z","times_seen":237560,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"telegram.im/widget-button/WidgetTelegramButton.min.js","fqdn":"telegram.im","domain":"telegram.im","tld":"im"},"ip":{"addr":"65.108.253.105","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Finland","country_code":"FI"},"introduction_type":"scriptElement","is_inline":false,"md5":"2af011bc87be69d9f58e4446f03cf0a0","sha1":"b7bc1469100c91981177e49cb6f90c3a67f8e696","sha256":"c87d9ded7d493e779fca78d1ff9b3fdd46c42487c9a78723e71b8557c79f0b3a","sha512":"3f66c185b4d6780beaba41337953b3e29788b77e3c90031643429ac692667a4e0a211b71bbcbec4bfbef4cd15fe806678854dde2910f958cd7bfe000ec05aed7","ssdeep":"768:HLziVQlONMhua9950ETdsO8WCrAJEbzobsrG4emO:HLznIGhualdstWCrAJ8MsC4emO","tlshash":"513351c83749215953be313b1e3ba3096931d4bdf8057444a8be48f629ecd81b877b7a","size":50540,"data":"","first_seen":"2023-03-07T12:27:09Z","last_seen":"2026-08-23T10:36:29.913595Z","times_seen":576,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yastatic.net/partner-code-bundles/libs/libs_render-033ae686.js","fqdn":"yastatic.net","domain":"yastatic.net","tld":"net"},"ip":{"addr":"37.9.64.225","port":443,"asn":13238,"as":"YANDEX LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"d754269422d94f98d69252e63d2024cc","sha1":"2258f9d30e0785989a536f5fb220b6be68219328","sha256":"9858dd7119d0f2eccec9bfa316d4aa0f99b6ddef5e1320cd1722f735674bc6da","sha512":"e9956dc4f9326cb89b82cc774831de1656309a9423f2a764fd156944e9c2560d02f4ed9a049ba2770c97636ba1b568b4dcce303c81e305dd0d0254f917002028","ssdeep":"1536:dBD/fF6QaNTGIc7cX8qeLaAryfkEeOR66llyp23j4GOQ6ckUcWRxH4tEluKR1i0i:P5SGX7g8BYlyp2z2BWoy5Xix","tlshash":"9434c5e1863a0d1c1dea3142ea752c3e24662cc7d908cb6dee6f915fe544be4f38135a","size":249149,"data":"","first_seen":"2026-05-28T17:31:03.147441Z","last_seen":"2026-08-23T13:13:30.552364Z","times_seen":2418,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yastatic.net/partner-code-bundles/1306332/6c8051c07f30fe3d.js","fqdn":"yastatic.net","domain":"yastatic.net","tld":"net"},"ip":{"addr":"37.9.64.225","port":443,"asn":13238,"as":"YANDEX LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"fa54c7d917719e73d4d217f799f7a9b5","sha1":"df9e16a33e96906a2ac9bd1a095229e301e87f75","sha256":"341db261c56b3048ad0a6fa1d497816842765921ba9436d835f9f05a38c741f3","sha512":"f1d61337364aac2849569df190de630149bfb099e4ec47ce367d28d239afda660cf24690e8e82e0ac17a94a6556c13e0cd19df933b9ec0efb11fdf87016453ce","ssdeep":"12288:/7Usakm25wu1jCKynKFs/brlGp6wwSvL0YPtnhBPnzB1:/7Usai5wu1jCKuKFs/brlGp6wwSvL0Yh","tlshash":"41e4d88af5e1b06142e7a0f9803f150ff23a7a15550980a4f62ae8e57ebc58e5137f3d","size":683110,"data":"","first_seen":"2026-08-21T19:08:41.888471Z","last_seen":"2026-08-23T13:13:30.527987Z","times_seen":36,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"establishscarcely.com/ccf2cef4382fd13c1ed6f76b041b5c50/invoke.js","fqdn":"establishscarcely.com","domain":"establishscarcely.com","tld":"com"},"ip":{"addr":"172.240.108.68","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"3c72b19bc2d6bfda9b3cc1e2d2a7c673","sha1":"83371eea4f3a762eab3cf1b09afe0bc5721c91c4","sha256":"c8a457350065846159d9334f26b6796694235372a75002cba0358695c2bf7abe","sha512":"7518a670016e48d57c2a455931b105aac59c5b6a176645d7ba273c48e51489474962799150fbf9c7686f26727855833dc7b1f47f0193b50edd3732f337dce9f8","ssdeep":"768:y+QGHr9qbGrW34GKD3r5IzOVeYcx9y+XuYE+5d/raP4QEoG:J104GK7r5ISVcyA7n5dzatEoG","tlshash":"50f2d5c83fe1d06f17b664a3332be52ba05b1e40578de8a8e877b45ce904f15f8791a0","size":35479,"data":"","first_seen":"2026-08-23T10:36:29.89172Z","last_seen":"2026-08-23T10:36:29.89172Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"happymodx.com/wp-content/plugins/gp-premium/general/js/smooth-scroll.min.js?ver=2.5.6","fqdn":"happymodx.com","domain":"happymodx.com","tld":"com"},"ip":{"addr":"104.21.39.80","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"ca1e68e1ae2dbb2206d21481576bbb45","sha1":"eecac929830764dba8b0734241090f2403671fa8","sha256":"ce43697d26defc72fa5aa7e3d7f1296cd19ba9a67cad0e2557aacc7702454f4d","sha512":"1544aed0f5def1ef73206a17cf7f540ad8b4d58a5e9b84d0c16639d8a4500b534c940184c310ecc9d4d458edbfa933ed1d0f542c7dc2ee67446029c7e48b21cd","ssdeep":"96:99BBG3KIUhniQscmPS8qeBxJmSjfijAzpFnIFW6fI2WsnSSORdgAL:NB7p6dmiFN61WsnSSqn","tlshash":"5ae1a6ea35607473caeb42b6a22f534677301163344b2054a36ddcdc39b5aa6835bfb8","size":6883,"data":"","first_seen":"2023-11-19T10:25:22Z","last_seen":"2026-08-23T12:36:48.402582Z","times_seen":3048,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"happymodx.com/wp-content/plugins/real-time-auto-find-and-replace/assets/js/rtafar.local.js?ver=1.9.5","fqdn":"happymodx.com","domain":"happymodx.com","tld":"com"},"ip":{"addr":"104.21.39.80","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"8102dc9eee0565de28649497220d8d17","sha1":"a32963be36656f3dd149892540138913bc88de6c","sha256":"51ff2b4b46acab057eba32dc5fbd0bcf410f0ad2bb75d7a92b230bc627d930d6","sha512":"3dcd2d1084b5903e84ebf14fa18fea644d77a7b5b140563fa7eff43f3029b1c32bae0431746e86a26ecc4de8f2341f0cb1f74fc92cc9c92a408ea87556c5412e","ssdeep":"","tlshash":"657000232200083000328282080a000aaa0c8282800822000820308020a0200000882a","size":19,"data":"","first_seen":"2023-03-07T12:08:00Z","last_seen":"2026-08-23T11:06:12.517966Z","times_seen":3192,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"about","addr":"about:blank","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"f105835d257ffa815597641f172ffbc3","sha1":"4ea772a1e20450d6b19492037ac08e375741adc7","sha256":"97b3b83d0db7ee84515c425bfef174edca742f921cfd779608da179293015392","sha512":"823e607bce286eb4cac57914cad3c1889be56b6d4d89ea1d7e06f833effef4dd66b03fd523397732ede74dbc3b263a2641cb26db849e77bc0aa4d756645840bb","ssdeep":"","tlshash":"aa813bbaaca56138281360af6c39a5582c74d60b1d41db057c5dd9159f20bf04fbafec","size":4068,"data":"","first_seen":"2026-08-23T10:36:30.037463Z","last_seen":"2026-08-23T10:36:30.037463Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"about","addr":"about:blank","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"3d2305b9285ec6144584106930a52222","sha1":"002596b3c8c6c71281d99634e08f06fc06db175d","sha256":"f7273aa6fd7caf9b23a70f164a9b19a9486f7a8eedd9f3806fa9c78cc8c6a061","sha512":"13eeb28b8f94331f45c617f038c595b40b8aaa2b9c3ba25d79f5f46a1257bdbbcda2c01d3a3b2e3c75a3f5ec909a03ff2f57ed03d9d5ae45272492c2d299a8d1","ssdeep":"","tlshash":"57c08c842f062076ad80b53edb12338c6ec842227d301e126d904040a2d7036c483880","size":145,"data":"","first_seen":"2026-02-02T10:31:07.504064Z","last_seen":"2026-08-23T10:37:00.371899Z","times_seen":9,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"happymodx.com/fc-mobile-soccer/contact-form-7-js-before","fqdn":"happymodx.com","domain":"happymodx.com","tld":"com"},"ip":{"addr":"104.21.39.80","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"f39157302e986da79da3e11a3a327535","sha1":"086906f1a325f8eb86b675636d7b9acfef1328af","sha256":"23c3176805c02b77f2e70432fcbcef38588925b4f31850cd00f5a32e6bc9a5a3","sha512":"b8c2e9fb7a06c68eb8fdb57ee087a3895fd70742483e0f427051128ef8864097cade329f3ae7a5382ce2536071d9a5edc89d0c7eaad3d47ee8f99d1d5ea5a85c","ssdeep":"","tlshash":"b521c096d6f82c0920d1c138013c0321f010a027cf2f5e59b20d010c5ffc07db4142ca","size":1150,"data":"","first_seen":"2026-08-23T10:36:30.040556Z","last_seen":"2026-08-23T10:36:30.040556Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"happymodx.com/fc-mobile-soccer/rocket-preload-links-js-after","fqdn":"happymodx.com","domain":"happymodx.com","tld":"com"},"ip":{"addr":"104.21.39.80","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"7ff7b268ee1f14bd0583c0d50991738c","sha1":"cab4969ce004b69349eff2a180732174d71cae53","sha256":"90d10dd51ed498a6584deedaefaa636230f6ccae3c6881e094c50eb9ab6ff87d","sha512":"a9d753f561bc8c5c1693abe3da188f39bea117ff642b1b841c2e7ac075e6dda67c808e692f8e64d633365b68704bead5f976ed472449a1cb0930cb65585c88a3","ssdeep":"48:Z9GmqipfdcR4C0GbLnghDu98TSTO9xqns6Gm0DDf0kv+lZTmsGY1xC2DfX/AfzWG:Z95qQVNCXwzksxmY06kxY5","tlshash":"7f9187b5f14e743a09638735402f720aa27b0918e4d9c028b436ece05f74f5c609be2e","size":4457,"data":"","first_seen":"2025-12-16T12:13:42.914228Z","last_seen":"2026-08-23T10:36:30.042054Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"happymodx.com/wp-includes/js/wp-emoji-loader.min.js","fqdn":"happymodx.com","domain":"happymodx.com","tld":"com"},"ip":{"addr":"104.21.39.80","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"abd7b673284d19626a3db2a0c42a5f8d","sha1":"25cac8dbff9b28fccac7667bce8f51ea60fc0a0f","sha256":"bcfe866beebbb1277918ea2591ea96a677d1fb0c7d11409be91e8da552d56700","sha512":"fb47abe9fcce77ed032bca60e4945f6785938e67ed1f7f4b1019950c7daed97d1985aabcae1d12e4479d37cf4d1e50c2a6976868d3eae4e4f0f62a28c1c0037f","ssdeep":"","tlshash":"8c819559eb7938db33fa01f2653a4d4beb614436e784d038c9ae631424b1893c375a5a","size":4085,"data":"","first_seen":"2026-08-23T10:36:30.043336Z","last_seen":"2026-08-23T10:36:30.043336Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"happymodx.com/fc-mobile-soccer/inb-rm-faq-accordion-scriptjs-js-extra","fqdn":"happymodx.com","domain":"happymodx.com","tld":"com"},"ip":{"addr":"104.21.39.80","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"a8da41cceecf509f84fbce075af39ef8","sha1":"a4feab479b468cc4c98f0916f494f28d3807953b","sha256":"535ea533a1399257c01525d2e6ea678904f949357d4e3becce2ec35c3214acb1","sha512":"452b3c7d50c74447fd99b2f38482752908ba75983610b2a9e560d6d7ed633d75bb198c95410c13d181ce1a016620fe78749285aa3d0ef1591d45f60165a37236","ssdeep":"","tlshash":"9b11920ac4dab9a994078c306479ab2919895481c291c6286c8a56521a24ac26641925","size":1079,"data":"","first_seen":"2026-08-23T10:36:30.044504Z","last_seen":"2026-08-23T10:36:30.044504Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"happymodx.com/fc-mobile-soccer/rtrar.appLocal-js-extra","fqdn":"happymodx.com","domain":"happymodx.com","tld":"com"},"ip":{"addr":"104.21.39.80","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"2cf3529bc101435b8b30db641d1730cc","sha1":"ea266a83f89c1be9109d506dc8536b97e942196f","sha256":"6f3ec5ca6e3bc0ff62720047c90df121650802b52271c922564037597e66fb36","sha512":"57ee26cb076359fcd1db898bee93a2d31d6705cff8904b47cb27ab2bade2bdf68671742f173a120e48b847976571dd30869bb54d0745e043f91ab04936ab0b2c","ssdeep":"","tlshash":"281122e8c0ec2e2002008c3cc82f02f3a8cc0088c0a08a02830cc00000b2033c208c03","size":1052,"data":"","first_seen":"2026-08-23T10:36:30.045671Z","last_seen":"2026-08-23T10:36:30.045671Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"happymodx.com/wp-content/themes/generatepress/assets/js/menu.min.js?ver=3.6.1","fqdn":"happymodx.com","domain":"happymodx.com","tld":"com"},"ip":{"addr":"104.21.39.80","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"67148b2ff82038d0faf6385f182c5644","sha1":"7452d643e468caf6db8ecf07618f1cb7ff3f7651","sha256":"5af760e4297b064a2150dcd5f63d748a06dfa8b618c9e9d43a87c4ac74fa3974","sha512":"24cb8e3c4f17abc7cf1ba96407ac1eda4e6c5d7c669ac213024a9b428e19cef574cefdb06c4dd28c013f1f8d3c775fb8f98c5a15c142783ba0f25b46f0c6e7ad","ssdeep":"192:iQqHlWQZgROnqWgpkgJMhqDi92FY+alT/fnGtxTbvm:bqHngROnvgJUqDi9cNYTnGvTbvm","tlshash":"6ee112fa964412bb04ef29ca74e6e5c07b7568fdea0184302579c84d1fe8dc202e6bf5","size":7333,"data":"","first_seen":"2024-08-31T11:00:29Z","last_seen":"2026-08-23T12:36:48.374361Z","times_seen":19765,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yastatic.net/partner-code-bundles/1306332/da613ad6370840ac.js","fqdn":"yastatic.net","domain":"yastatic.net","tld":"net"},"ip":{"addr":"37.9.64.225","port":443,"asn":13238,"as":"YANDEX LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"dfb93abc80432e0516b19950c755c26a","sha1":"8059b21a7b7df06d2b9bade4ea047dc7dae9ba36","sha256":"21207f84466f742940ff78df447c64bd01494388f6cbf09750e352ced68c246e","sha512":"e17657ac52818bfb9fa8ae646baf744cea6386d031206899c357b3dc67f65cc1ec769b41f6832c1e9835b039a539a1ff4599eb4839fb9c01cd1507d49035a2a5","ssdeep":"1536:321aRXkNtwZ1df1QUiYnfcsIWerYkN+nF0bNe/mdC6kH9zf6:ZN1dfXIQkN+nF/JH9zf6","tlshash":"0d5475c5da79182d2a903185ea36ff9d0c50a846d60dc3364fbc26cbee54385d3a2bdd","size":305380,"data":"","first_seen":"2026-08-21T19:08:41.86942Z","last_seen":"2026-08-23T13:06:25.368647Z","times_seen":34,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yastatic.net/partner-code-bundles/1306332/e49ddb0165e13b10.js","fqdn":"yastatic.net","domain":"yastatic.net","tld":"net"},"ip":{"addr":"37.9.64.225","port":443,"asn":13238,"as":"YANDEX LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"408c5d359870aeea840ebea93e414010","sha1":"75baae7a8639959512c5cb1116245ba77e4d4366","sha256":"5f8f3e0db1dfb51d9cbeaee6515f2c868f889ac128e6642dc619180a6a7cb1c3","sha512":"61358fde8ab68993a129739b5ff4e45709aeab9cc3a1d817d7aa572f1ac9e1f263192c664cb4369e19393444707ab14cf6ed7c5689ca5b12a826f99842a90950","ssdeep":"96:WjwRO8i264XfmP5IWiwY6dFecX75HiYsPCxhtkkmaXLgXTKTv1J0a2q1:WjC+2AP5IJwYEX95Bswv1JzL1","tlshash":"6881f8fd3681337187c215d491bb9606b63a0d11980d7461f15d84123db5fa760effad","size":4158,"data":"","first_seen":"2026-08-21T19:08:41.867968Z","last_seen":"2026-08-23T13:06:25.328519Z","times_seen":36,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yastatic.net/safeframe-bundles/0.89/host.js","fqdn":"yastatic.net","domain":"yastatic.net","tld":"net"},"ip":{"addr":"37.9.64.225","port":443,"asn":13238,"as":"YANDEX LLC","country":"Russia","country_code":"RU"},"introduction_type":"scriptElement","is_inline":false,"md5":"0c41ddf706aa7735a001411ff5cc9074","sha1":"50097136f039b2b11023b9bec2577b4848a9eba5","sha256":"b4c8c41fa3164e9317bdbe6fc31106d19c327bee8863dc2c6cb3bad19b56cc90","sha512":"5ff8afcb42f7256539ba8f262a9df2fe335e323ba7d17f4cc26bd359a3ff2221aec11afa9a3b3addf8cd744165c5ee818a5c086ec54f785c0c317ad74dfdfa33","ssdeep":"768:r3gRk8LqR50Uta+vmG6lLJTPzCLL8/1vjWcPykZkG:r3skLbA+vx6pcLxclZF","tlshash":"5923c8ef3195b8b502c3a0b4443f220ea33b592564199484b327d8e5bd36acf5167fbe","size":49523,"data":"","first_seen":"2026-07-15T18:17:51.501231Z","last_seen":"2026-08-23T13:13:30.52698Z","times_seen":972,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"establishscarcely.com/8c87b8164b319ffbf2dc17605a4d3e1c/invoke.js","fqdn":"establishscarcely.com","domain":"establishscarcely.com","tld":"com"},"ip":{"addr":"172.240.108.68","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"40b4fd73cd2f2939409a2b9d6d766673","sha1":"2b56a60dde7614c3c1c882677b2d4b0177501730","sha256":"9e16a5a6ba9de22e64691276795ef7ed00254d493c103fe8857bf6c47f41b5c5","sha512":"544bebbec131c82a26bf2c27c86b1879c8914dbe7851b2447082482bc454bb158d55bf0975b20b60c92cc2740dfdb9b6179698d3cf38860f7271e517a9168947","ssdeep":"768:y+QGHr9qbGrW34GKD3r5IzOVeYcx9y+XuYE+5d/raP4QEr2G:J104GK7r5ISVcyA7n5dzatEr2G","tlshash":"d1f2d5c83fe1d06f17b664a3332be52be05b5e40568de8a8e877b45ce904f15f8791a0","size":35479,"data":"","first_seen":"2026-08-23T10:36:29.90389Z","last_seen":"2026-08-23T10:36:29.90389Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"happymodx.com/fc-mobile-soccer/pll_cookie_script-js-after","fqdn":"happymodx.com","domain":"happymodx.com","tld":"com"},"ip":{"addr":"104.21.39.80","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"d3f4c9d58f0916e9aaf7798f63a95a60","sha1":"ef7b34a483b4278be6f4140aa91a4ccdbb14b07e","sha256":"cbc25aacc696b58b4f6950f49d39407ffcff995864d78b5e8690c177eefef835","sha512":"64ebca88e0724158af5c73911b1938cd1f93c1014737ea0d669416814689ae530111901f79ea300a66bd004d5e359ba08293ee554224357a14edc5d89cb6627a","ssdeep":"","tlshash":"5321c280e25c1d54e193363b7f3649da283c07f1d9a2d8acc88fad503152c4146eb5a8","size":1286,"data":"","first_seen":"2026-08-08T14:08:54.434068Z","last_seen":"2026-08-23T10:36:30.046849Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"happymodx.com/wp-content/themes/generatepress/assets/dist/modal.js?ver=3.6.1","fqdn":"happymodx.com","domain":"happymodx.com","tld":"com"},"ip":{"addr":"104.21.39.80","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"e5205f150873787f6a52cf9f01d34f62","sha1":"d799c494d0186f01c31bbf06aadcda91555c860d","sha256":"c28374dac3c83bfa51214ac35d1e63dadd37f15c958fe2e60c76cde5fa156f56","sha512":"76f0174e724098a5ddd6548b3198b2f5f16cd8f11c95ba4ed91cd24b97f459d01a7aab058f6f1b8b0c18e6066a1bffa676c386eb63dd7309b0eb246a0f71b04a","ssdeep":"","tlshash":"6d61c9ed77a4f57219ebb2b5506f960ab7311849984f18204826fc483c7e9da0292e7e","size":3315,"data":"","first_seen":"2025-05-27T23:40:35.271011Z","last_seen":"2026-08-23T10:37:00.309798Z","times_seen":2928,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"about","addr":"about:blank","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"eval","is_inline":false,"md5":"415f9d83a03c64f7f88e0d6f9c1da66e","sha1":"e2383dfc96c45455b80da8a3704a998d6e2e824f","sha256":"cc8473ff004f330672f7e8e7279be5c10b3f5bce924875043383bd87a226aa03","sha512":"107dcf76589fa7bbab84195f47b0fa18c884727d7c5eed9d482e0c49ceab0fcf4e706d0d8cebcbcb27b00951b569149b833c2be217c25a28d412527c6979da24","ssdeep":"","tlshash":"2e310a3f38a92512886ff7b7264fb3614c599d07471219df48a2874821fd5f5072f482","size":1558,"data":"","first_seen":"2026-08-23T10:36:30.047924Z","last_seen":"2026-08-23T10:36:30.047924Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"about","addr":"about:blank","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"c3ea70bfc6b14f2f3c1c081518d2e0b1","sha1":"3e571c5a5776be255bb9f13018e89c8ab7f1595a","sha256":"6f7ef8bb0c0ee0f4811f2488f5b3919068b1699463a307467a5e246a3ecef5e3","sha512":"097785502c1ac509606f0b1d4660514a0f06e4c75868f0de0c5ebf4e69385b3733fd5a13b98ba4fa0033b06f8a23e98933bbea85e59748f45084a15a2281d30f","ssdeep":"","tlshash":"a2c04c996b0e74316551394eea1593c1d8d0065b7de35b4662cc9044af852364051958","size":145,"data":"","first_seen":"2025-12-06T17:52:35.021257Z","last_seen":"2026-08-23T10:36:30.049292Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"happymodx.com/wp-includes/js/dist/hooks.min.js?ver=f0f188028580e8dc1255","fqdn":"happymodx.com","domain":"happymodx.com","tld":"com"},"ip":{"addr":"104.21.39.80","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"140ad332a76e011554bcab096a37f4ac","sha1":"72c9da62a624a99da82f8b53ecd2ba8d8e1bca88","sha256":"fc774906082b59dedcfc55b8ef127783b6d056578ff4586a8ebbdb81bbe286f1","sha512":"ccf2833ab9908f740779b84bfd97903f96572aedf6eb0a37f08e51a88f0634e03408bd3e87e2e0586483835a6e09736848e44907848902ef11f8114a21029eca","ssdeep":"96:Fu/16WIHBLusBcADGDd/R5h2RTLlD3jMXY2yGy94E34sTY2CiB:FGIhNBcAD0NRv8XlD3wXY2yH+EoaY2B","tlshash":"4fb163c43542b830e2777027f0ab58d46175abe1a82d8446d59cd8f12da39cee0e7b3d","size":5107,"data":"","first_seen":"2026-08-19T23:17:42.247117Z","last_seen":"2026-08-23T13:23:37.172031Z","times_seen":912,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"happymodx.com/wp-content/plugins/kk-star-ratings/src/core/public/js/kk-star-ratings.min.js?ver=5.4.10.5","fqdn":"happymodx.com","domain":"happymodx.com","tld":"com"},"ip":{"addr":"104.21.39.80","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"f5e63bd61d061e63482b1d4df3768ee4","sha1":"91df0bce4537e6b65fe380f4f6db9ed9dbe95a41","sha256":"acdebf935ded5cb063dcca7c46be5bbc503af5e76e295f6d0b7093c4514ed256","sha512":"ea99e35812f3abac9b598aed7b608f8a78b342d04922fcdc775390e87fa238891728f7bfd6b8e210580fdd332786fb7fde91f0f10bacaed872bb00610e315a6e","ssdeep":"","tlshash":"8c2175dc7a0878354fcbb2b8a26f968d72751326754b4809122df4919dfdfa80322f4c","size":1359,"data":"","first_seen":"2023-03-07T01:02:48Z","last_seen":"2026-08-23T10:37:00.303556Z","times_seen":3179,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"about","addr":"about:blank","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"eval","is_inline":false,"md5":"69a2d88e30b6b9b379ce55470ff67e9e","sha1":"da989961e8d8bd1ab48a85583b028474c445992c","sha256":"8a7a45e40f9fa4963ac10cbff8227f663288734a43d0f171876513a0fbaf9f85","sha512":"b5c52116579796b4aa3e137da3575076bf6457e61d41f0f6ccca2996ff8aa8da1e3226503a3d5cd149fed8d9e3d46439b0e79ac15ab28d0c833a48a470da11de","ssdeep":"","tlshash":"8621a5aec0665a3d0c5285cd5c350e691db399206e188540042e8c65f3227b17b73bf8","size":1290,"data":"","first_seen":"2026-08-23T10:36:30.050589Z","last_seen":"2026-08-23T10:36:30.050589Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"establishscarcely.com/f0/58/2d/f0582dcc2dc78c0d7cc66bdcca52b3ab.js","fqdn":"establishscarcely.com","domain":"establishscarcely.com","tld":"com"},"ip":{"addr":"172.240.108.68","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"e5b55414f2f4f46617dfc9238c2194d4","sha1":"b25e2b0e7ee782cd4096f78ed22c580c8831ed80","sha256":"937bfd39e4bfd050d2f01575a3f493d70d376b344fb79dac7326d13dd74194bb","sha512":"c853749e63aa1f1bcbe778ab4f987e767da05f126f4991481f07d6d2350715fe40357ed7916b327c05782819568a98ff84ef263f5b5570d29f5cad3234fe9f2f","ssdeep":"1536:7V4VImwg+YjDgELIUlsgjJMODRr2EJt7jQW3j:7Q1IUCgjJvDRr2EJt4Wz","tlshash":"2793d9983fbba87d03d97077762f9417f26d1c01008dd8bcd943b8acb968b54a476a36","size":97071,"data":"","first_seen":"2026-08-23T10:36:29.866387Z","last_seen":"2026-08-23T10:37:00.311383Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"happymodx.com/wp-includes/js/dist/i18n.min.js?ver=1dfe7db3940c23ea9216","fqdn":"happymodx.com","domain":"happymodx.com","tld":"com"},"ip":{"addr":"104.21.39.80","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"d2f655e068f223e5da12d436aac88d38","sha1":"003146f39636a30ac250b0f043d61bcc01117b17","sha256":"5083905862c2b7aa8a84c4f2313d359d2288fb25fbe1ff577fa7325eff2ed2d9","sha512":"c3fa9c3955bbe3b74e30755c4c551204aa1a034f8d48c8ab2747eca57466409ac0dfbdfc76a7a3554ea64cdbd730bf3cae3c1270382e66df24afc8b8ed48bf38","ssdeep":"96:oE7/RPgrMs4WLJOmlWS33c0xyE2B1596NiH826V0NG7CXMGOyd/sEomkKvYCGaMs:Xhgws4WTBYNB1C9aNwAMPyd0R3SGaMSn","tlshash":"f6c1a8c979def056235910a594afb005e134be2870deb800aae0c4957eb44cdb1b7fba","size":5791,"data":"","first_seen":"2026-08-19T23:17:42.197722Z","last_seen":"2026-08-23T13:23:37.123817Z","times_seen":908,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"happymodx.com/fc-mobile-soccer/kk-star-ratings-js-extra","fqdn":"happymodx.com","domain":"happymodx.com","tld":"com"},"ip":{"addr":"104.21.39.80","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"51caa8c5646c8d452c2955471cedd3f1","sha1":"39e68124bd926facff9da489635b868212c12da6","sha256":"e37afacb9f7f86269a362737e0cd40cb7abbc59bd2e8f1e74fb4e7cfc6f51516","sha512":"7c6332f8dfd46ea8d0cc0ea57b4fe6fd0643fe990040db0ae02076e012a3685894c3104ce34034ea7800c77f5d66736f84aa4a9dd867aee9565071e5b431f1a3","ssdeep":"","tlshash":"30218c96eee82f1e5e435fb4081e13f621ba88a4cbf18c084bcf9484413efc28b11d08","size":1154,"data":"","first_seen":"2026-08-23T10:36:30.051811Z","last_seen":"2026-08-23T10:36:30.051811Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"happymodx.com/wp-content/plugins/real-time-auto-find-and-replace/assets/js/rtafar.app.min.js?ver=1.9.5","fqdn":"happymodx.com","domain":"happymodx.com","tld":"com"},"ip":{"addr":"104.21.39.80","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"4031117922153771ac02e7215eba5074","sha1":"65d06636dfc4c918ae149ff2ece13099f9921857","sha256":"2e6b64b2e155135d29959ec0d024b9a629863c378863a6ece4b54c7d9effc1e4","sha512":"6f52e59abc459efa5ffc448411fbe07d59e2db37c13724a116a711a736f7b9a7814446744f7207104dabc9c5471c1c683a9fe1d5e8432b24d88b78d835ae282e","ssdeep":"1536:X+zo1GZGM+xTWaxsZs0JTKzvzokaggU6ExcJBXvtS9Zt8yFpVHyzxgKZZuMg:XutK3omIHtS97zEgKjuMg","tlshash":"1b83f9ddb2cab02247a771b9007f550bf2361999280dc410f159e8e9bc78a4e927bf7d","size":87478,"data":"","first_seen":"2025-01-28T17:58:38.93127Z","last_seen":"2026-08-23T11:06:12.556261Z","times_seen":2493,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"about","addr":"about:blank","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"eval","is_inline":false,"md5":"8b3c5cb256a32f34db6553bf0f5e9a10","sha1":"3233afa55d40cdbc622c4ed9db23fbc3d53ad093","sha256":"bd191863ac1e249d7019e488ea1056c09d4eb1cad70fb782074f85dff0cf0951","sha512":"a595607eebbdcae88ae6c9b4a5ef978b11ccdf2695d83663f980a24c23c544fb68b29230fb6fda94822470eaf23eb032fa8143e55274db412b1c5294058a0ee7","ssdeep":"","tlshash":"0a21c8feab6f43c91424462b43af4ea66bb6441ce056d24001709528ba9ba425a06778","size":1288,"data":"","first_seen":"2026-08-23T10:36:30.053043Z","last_seen":"2026-08-23T10:36:30.053043Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":[{"level":"log","text":"JQMIGRATE: Migrate is installed, version 3.4.1","filename":"https://happymodx.com/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.4.1","line_number":2,"column_number":981},{"level":"error","text":"PAGE_DISABLEDPage \"17756523\" is disabled","filename":"https://yandex.ru/ads/system/context.js","line_number":2,"column_number":150403}]},"http":[{"url":{"schema":"https","addr":"cdn.show-sb.com/sb/au/78/74/fd/7874fd62186fc577273fa59756d17076/1744381737.html","fqdn":"cdn.show-sb.com","domain":"show-sb.com","tld":"com"},"ip":{"addr":"104.21.95.140","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://happymodx.com/fc-mobile-soccer/","date":"2026-08-23T10:35:47.187Z","timestamp":1787481347187,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"show-sb.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 31 Jul 2026 08:49:29 GMT","end":"Thu, 29 Oct 2026 09:49:07 GMT"},"fingerprint":{"sha1":"C6:C1:39:5B:4A:88:46:B1:12:EF:0B:E1:32:AA:4B:26:BC:E9:04:3C","sha256":"97:94:F6:6E:AE:28:3E:4B:61:23:FE:FD:3B:D0:CD:67:8D:82:40:5B:11:AA:57:9E:36:73:2D:B8:75:67:B9:3C"}}},"request":{"raw":"GET /sb/au/78/74/fd/7874fd62186fc577273fa59756d17076/1744381737.html HTTP/1.1\r\nHost: cdn.show-sb.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://happymodx.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://happymodx.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 23 Aug 2026 10:35:47 GMT\r\ncontent-type: text/html\r\nlast-modified: Fri, 11 Apr 2025 14:28:57 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=KhHWAPH%2FSkMxfJOdGONqUz8%2BVJhFEdhJVr3zjgCiRh1vixmjWNcd27nZKWXy4ueJUIeAcwUgWQ1eMnHxQ%2FR1RhjXuU4Wt3npHGvidxZQceU6I744qVPZooCLFIKiAVrrWDI%3D\"}]}\r\npriority: u=3,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: public, max-age=315360000\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: Date\r\nvary: accept-encoding\r\ncf-cache-status: MISS\r\ncontent-encoding: zstd\r\ncf-ray: a2f978f3fe4fb51d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]}],"data":{"size":1544,"size_decoded":1335,"mime_type":"text/html","magic":"HTML document, ASCII text","md5":"972f68410d9349904f897739b33e12cc","sha1":"e41130dbad60e81ad2665bb7407a50888aae8150","sha256":"90c062931018d386488b555fd261405457f9744db31512ff5780d49769d7b0d0","sha512":"905ef97b48b163e2ff2d28316f462ab1db0bdc05df312811c5e24ecb8614424d74f64a88fe31849fc9dd3515bf1d681b136df27aac8b27fc61c07cbda05dd12e","ssdeep":"","tlshash":"eb31f4251df9c9720182a0957b312f2baa91ea47cc8b560133fc4e948feaed9cd5310b","first_seen":"2023-12-18T02:06:40Z","last_seen":"2026-08-23T10:37:00.284876Z","times_seen":2242,"resource_available":false,"data":null}},"time_used":536,"timings":{"blocked":0,"dns":3,"connect":11,"send":0,"wait":522,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-22","alert":"Sinkholed","trigger":"cdn.show-sb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-22","alert":"Sinkholed","trigger":"cdn.show-sb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"yastatic.net/partner-code-bundles/1306332/6bbc20c3e18b7d73.js","fqdn":"yastatic.net","domain":"yastatic.net","tld":"net"},"ip":{"addr":"37.9.64.225","port":443,"asn":13238,"as":"YANDEX LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://happymodx.com/fc-mobile-soccer/","date":"2026-08-23T10:35:47.379Z","timestamp":1787481347379,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.yastatic-net.ru","organization":""},"issuer":{"commonName":"GlobalSign RSA OV SSL CA 2018","organization":"GlobalSign nv-sa"},"validity":{"start":"Thu, 30 Apr 2026 11:34:07 GMT","end":"Wed, 28 Oct 2026 20:59:59 GMT"},"fingerprint":{"sha1":"14:F1:2A:10:FA:A0:C8:25:E4:FA:ED:1B:89:69:12:33:27:F7:15:83","sha256":"C4:5F:F3:D1:06:B5:27:D4:9D:32:12:86:B3:BF:A1:45:D4:C3:D0:F7:8C:1D:83:41:1D:52:97:A1:9F:EE:A2:79"}}},"request":{"raw":"GET /partner-code-bundles/1306332/6bbc20c3e18b7d73.js HTTP/1.1\r\nHost: yastatic.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://happymodx.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://happymodx.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 23 Aug 2026 10:35:47 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ncontent-length: 11102\r\nlast-modified: Fri, 21 Aug 2026 17:58:17 GMT\r\nx-robots-tag: noindex, noarchive, nofollow\r\nstrict-transport-security: max-age=43200000; includeSubDomains;\r\nvary: Accept-Encoding\r\naccess-control-allow-origin: *\r\nexpires: Tue, 22 Aug 2056 16:54:39 GMT\r\ncontent-encoding: br\r\nnel: {\"report_to\": \"network-errors\", \"max_age\": 7200, \"success_fraction\": 0.001, \"failure_fraction\": 0.01}\r\nreport-to: { \"group\": \"network-errors\", \"max_age\": 7200, \"endpoints\": [ { \"url\": \"https://dr.yandex.net/nel\"}]}\r\ntiming-allow-origin: *\r\netag: \"80007698a46c9216111894ea3cc008f3\"\r\ncache-control: public, max-age=946708560\r\nx-strm-log-split: 7\r\nx-request-id: 7985b8d59feae035\r\ncache-host: cloudcdn-rad-11.cdn.yandex.net\r\ncache-status: HIT\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":38365,"size_decoded":11997,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (38323)","md5":"781552904ab4e5929a979384b73ade07","sha1":"1a584b5a46e7b532fb12c20c1e8012826f7760d1","sha256":"4a4b1d95b2390db32f76ae30a9d7964514d29b3b9f54e1b64f40f15600be57d8","sha512":"212badbf5257cfda6819f2fcc81154c04d1c391797a452d9e7d40b335fab2f34c0bd2e92860de09bbb986088a44d1cdea0c8e8b42d88534db9ccd7a11cc162e2","ssdeep":"768:sS8S2XuKTeA/l05jtCCtjCaCAbCGRCbpNxNWtI//IxagFZmrm0ZrdzS8HoCqyzH3:fay0MlyAvKzZ3m+TTX","tlshash":"4903c58db1d1f0a24a97a070813f210ff37b6895a81d9480f666e4d17cba99f6073f6d","first_seen":"2026-08-21T19:08:41.872139Z","last_seen":"2026-08-23T13:06:25.367733Z","times_seen":35,"resource_available":true,"data":null}},"time_used":45,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"establishscarcely.com/ccf2cef4382fd13c1ed6f76b041b5c50/invoke.js","fqdn":"establishscarcely.com","domain":"establishscarcely.com","tld":"com"},"ip":{"addr":"172.240.108.68","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://happymodx.com/fc-mobile-soccer/","date":"2026-08-23T10:35:46.688Z","timestamp":1787481346688,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"establishscarcely.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 16 Aug 2026 21:49:18 GMT","end":"Sat, 14 Nov 2026 21:49:17 GMT"},"fingerprint":{"sha1":"C8:88:67:AE:2D:51:85:B6:4F:55:EE:9C:FE:AB:4F:3A:93:7A:60:3B","sha256":"8C:54:B4:51:FA:49:79:87:4E:7D:F2:16:F4:CA:5B:78:DC:9E:4A:8E:9C:9F:81:73:3C:23:02:6C:D8:DD:38:75"}}},"request":{"raw":"GET /ccf2cef4382fd13c1ed6f76b041b5c50/invoke.js HTTP/1.1\r\nHost: establishscarcely.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://happymodx.com/\r\nCookie: pip_af1d4578dcc89a3eeb602480415e4abe=1; pip_cc31f70d8c4f3f26836c1bf4172703a1=1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.2\r\nDate: Sun, 23 Aug 2026 10:35:46 GMT\r\nContent-Type: application/javascript\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\naccept-ch: X-Operamini-Phone-Ua,X-Ucbrowser-Device-Ua,Sec-Ch-Ua-Platform-Version,Sec-Ch-Ua-Platformuser-Agent,Sec-Ch-Ua-Platform,Sec-Ch-Ua-Model,Device-Stock-Ua,User-Agent,Sec-Ch-Ua,Sec-Ch-Ua-Full-Version-List,Sec-Ch-Ua-Full-Version,Sec-Ch-Ua-Mobile,X-Device-User-Agent\r\naccess-control-allow-origin: *\r\ncontent-encoding: zstd\r\nvary: Accept-Encoding\r\nx-envoy-upstream-service-time: 5\r\nHost: establishscarcely.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: afd5c7a2596c15e21c3b591f253126df\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.28.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}],"data":{"size":35423,"size_decoded":16132,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (35423), with no line terminators","md5":"7fa9873459e99e518bd2adee137faea5","sha1":"2bb113f8e93141b23c11d8a747a243084de7ddd1","sha256":"d5bbb8f5b8b5ce3d8f5ce61cc3da1158675af3676b775b4a5048bcaeffeb028f","sha512":"4b1e39f21bdf20e57f7e34a08984a0fb835ec6fd1070d6e182cecb07b4bec248156a7268eddb93a371780d0a7aa0171761c1bb503986a755f9976e21cf00a4bd","ssdeep":"768:y+QGHr9qbbrW34GKDTr5IzOVeYcxoy+XuYE+5d/raP4QEoG:Jg04GK3r5ISVcxA7n5dzatEoG","tlshash":"d3f2d5c83fe1d06f17b664a3332be52ba05b1e40568de8a8e877b45ce904f15f8791a0","first_seen":"2026-08-23T10:36:29.84585Z","last_seen":"2026-08-23T10:36:29.84585Z","times_seen":1,"resource_available":true,"data":null}},"time_used":102,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":102,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kettledroopingcontinuation.com/impr.gif?sid=H4sIAAAAAAAC_1xSv48bRRSedSIaCgRKkNKQRUoBEnZm9ofXm3QRP6pcgBxKAc382HEmt97d7OzaPlcXDlFQHRJIiGr9-S5uIII_AAn56BBI585FrqGmAlEjXywOmOK9N_M9zbzvm-_TaX1KOqj56t3b-cSkKb8edqj72j2TqXxk3a1tl9EOveneM1k3uOmO16Ec3mB-0KGvu-8kcie_7lFGKaPMfduUic7H189QmOIJi8NON-gw1uuw0MO4_P-JrR1Y7kANT8lLMGr5wm_6Qxi5QDb47s3E7lR58cZbgzrlVV5iqOYfZDtZPsowOC916UBn8003crsk5KsW8my-YYF8eLhmAWGWpPXyU4hsvhkVYnj0bFqRIskg1PMYDRdI0mMYvoDM92HUCQGkwtYdZIPHW3k54rvPUL5Gl-TiX3_AjJbk4tNLyAZPbqVm7N7N07oyeWYx1g3MeAHTX6Coj1FNWjCjY8jqYxj1K6GtV5ANjm7zuuQwanUtCHWkpafbXLGkHdCYtWNJk7ZgPRUmAWdU6TONjF6A2wuorYPaOKh1C3XRwkCtXB73tIi7AY8THWlFWSR56PtxFISe7soQtXwEow4gyz0U5R52zBcnzvzkyvQk-OHE-RpWObAVwVA1Ryq1nm0eq9TWgm2yt8l-M8ur_pQf5VU_yQh4eYBSNYemeGj3IasLs4m2apavAxdVM-NCNTOjKoLy4eoaZZx6iU_bytPddqR6Xlt0pW5rGakoUiyMu_6htlX9n1YVtCNPq7VCui1VEqi4J5iM2bQ4JS-uP8WZ4wg7ycrtyV4keqwbCJ_FWgvtKcmiLg15oPyESVjTwNgWuHUwMUvy3jdXUJglefWjqxD8GDY9hjSXwWsXfDTzPQp-HyHFJPv2Pi-K3UGuxh2ZD6DyBkV1EdWuM01PyaXZ-9u3fjxziO58iUT-TDYLsmxQlA0emJ8I-umj7-8UlRmYCV9b5m7Fq-Q5cLMkzoXPIc2SXP5z_8y9N_q_QxZ7sMU_d81SWyyJ3r4KmxOIgiA1BGly_hgXDey_9uK8ntpP0C8diNSZibQkhyIt0wNYs3J7nkepZF6s4jCI_Z5OwoBFURIyv5tQP0Rllw8--6X1dwAAAP__cNVIBUMEAAA=","fqdn":"kettledroopingcontinuation.com","domain":"kettledroopingcontinuation.com","tld":"com"},"ip":{"addr":"23.111.84.228","port":443,"asn":7979,"as":"SERVERS-COM","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://happymodx.com/fc-mobile-soccer/","date":"2026-08-23T10:35:46.928Z","timestamp":1787481346928,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"kettledroopingcontinuation.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 23 Aug 2026 00:02:23 GMT","end":"Sat, 21 Nov 2026 00:02:22 GMT"},"fingerprint":{"sha1":"45:C6:44:0A:42:17:85:94:0C:43:02:EA:82:14:8D:F8:D3:13:D9:E2","sha256":"8C:E7:C4:F5:8F:DB:E8:10:A8:55:E4:5C:85:CC:97:D0:7D:0A:FE:C9:6C:C4:4D:6A:FF:20:87:2C:BC:34:2D:F4"}}},"request":{"raw":"GET /impr.gif?sid=H4sIAAAAAAAC_1xSv48bRRSedSIaCgRKkNKQRUoBEnZm9ofXm3QRP6pcgBxKAc382HEmt97d7OzaPlcXDlFQHRJIiGr9-S5uIII_AAn56BBI585FrqGmAlEjXywOmOK9N_M9zbzvm-_TaX1KOqj56t3b-cSkKb8edqj72j2TqXxk3a1tl9EOveneM1k3uOmO16Ec3mB-0KGvu-8kcie_7lFGKaPMfduUic7H189QmOIJi8NON-gw1uuw0MO4_P-JrR1Y7kANT8lLMGr5wm_6Qxi5QDb47s3E7lR58cZbgzrlVV5iqOYfZDtZPsowOC916UBn8003crsk5KsW8my-YYF8eLhmAWGWpPXyU4hsvhkVYnj0bFqRIskg1PMYDRdI0mMYvoDM92HUCQGkwtYdZIPHW3k54rvPUL5Gl-TiX3_AjJbk4tNLyAZPbqVm7N7N07oyeWYx1g3MeAHTX6Coj1FNWjCjY8jqYxj1K6GtV5ANjm7zuuQwanUtCHWkpafbXLGkHdCYtWNJk7ZgPRUmAWdU6TONjF6A2wuorYPaOKh1C3XRwkCtXB73tIi7AY8THWlFWSR56PtxFISe7soQtXwEow4gyz0U5R52zBcnzvzkyvQk-OHE-RpWObAVwVA1Ryq1nm0eq9TWgm2yt8l-M8ur_pQf5VU_yQh4eYBSNYemeGj3IasLs4m2apavAxdVM-NCNTOjKoLy4eoaZZx6iU_bytPddqR6Xlt0pW5rGakoUiyMu_6htlX9n1YVtCNPq7VCui1VEqi4J5iM2bQ4JS-uP8WZ4wg7ycrtyV4keqwbCJ_FWgvtKcmiLg15oPyESVjTwNgWuHUwMUvy3jdXUJglefWjqxD8GDY9hjSXwWsXfDTzPQp-HyHFJPv2Pi-K3UGuxh2ZD6DyBkV1EdWuM01PyaXZ-9u3fjxziO58iUT-TDYLsmxQlA0emJ8I-umj7-8UlRmYCV9b5m7Fq-Q5cLMkzoXPIc2SXP5z_8y9N_q_QxZ7sMU_d81SWyyJ3r4KmxOIgiA1BGly_hgXDey_9uK8ntpP0C8diNSZibQkhyIt0wNYs3J7nkepZF6s4jCI_Z5OwoBFURIyv5tQP0Rllw8--6X1dwAAAP__cNVIBUMEAAA= HTTP/1.1\r\nHost: kettledroopingcontinuation.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: uid_id2=45f7fc2f-ad1e-4091-9c0e-b18d5e4a10df:3:1; ain=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJwIjp7ImlkIjoyNzc2MzM2NSwiayI6IjhjODdiODE2NGIzMTlmZmJmMmRjMTc2MDVhNGQzZTFjIiwic2lkIjoiIiwiaXNpZCI6MiwiYXNpZCI6MSwiemlkIjo1MzUyNDczLCJwaWQiOjIxODYyNzEsImFuIjp0cnVlLCJsYW4iOnRydWUsImNpZCI6MjEsImFpZCI6MzIsInB0Ijo0LCJwayI6Imt3ZHdmOTJweGEiLCJjcGtzIjp7IjI4IjoiY2MzMWY3MGQ4YzRmM2YyNjgzNmMxYmY0MTcyNzAzYTEifSwidCI6MX0sInUiOnsidSI6MSwiYXUiOjEsImQiOnsiaWQiOjI2NjU2MTExNSwiaWRzIjoiIiwiaWMiOmZhbHNlLCJuIjoiRGVza3RvcCxFbXVsYXRvciIsInYiOiJVbmtub3duIiwibSI6IlVua25vd24iLCJmIjoxLCJmbiI6IkRlc2t0b3AiLCJvaWQiOjM4OTE0LCJvbiI6IldpbmRvd3MiLCJvdiI6IjEwLjAiLCJiaWQiOjEzNjkyNSwiYm4iOiJGaXJlZm94IiwiYnYiOiIxMzQuMCIsInd2IjpmYWxzZSwiZSI6dHJ1ZSwiYWIiOmZhbHNlfSwiYyI6eyJpZCI6MTYyLCJjIjoiTk8iLCJuIjoiTm9yd2F5In0sImN0Ijp7ImlkIjozMTQ2MjcwLCJuIjoiTWF1cmEifSwicmciOnsiaWQiOjMyNzEsIm4iOiJWaWtlbiJ9LCJhIjpmYWxzZSwiY3IiOnsibiI6IkJsaXggU29sdXRpb25zIn0sInhmIjoiIiwiaXhmIjpmYWxzZSwiaWd4ZiI6ZmFsc2UsIml3ZiI6dHJ1ZSwidXAiOnRydWUsInIiOiJodHRwczovL2hhcHB5bW9keC5jb20vZmMtbW9iaWxlLXNvY2Nlci8iLCJ0eiI6MiwiaWR1YyI6MCwiYXIiOltdfX0.RnYQF76paCH96o53rLCvaa-rsLWl01ui6dzgog9SHqM; pdhtkv=true; uncs=1; pdhtkv27=true; uncs27=1; u_pl27763416=1; pdhtkv32=true; uncs32=1; u_pl27763365=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.30.2\r\nDate: Sun, 23 Aug 2026 10:35:46 GMT\r\nContent-Type: image/gif\r\nContent-Length: 7\r\nConnection: keep-alive\r\naccept-ch: Sec-Ch-Ua-Platform,X-Operamini-Phone-Ua,X-Ucbrowser-Device-Ua,User-Agent,Sec-Ch-Ua-Platform-Version,Sec-Ch-Ua,Sec-Ch-Ua-Platformuser-Agent,Sec-Ch-Ua-Model,Sec-Ch-Ua-Mobile,Device-Stock-Ua,X-Device-User-Agent,Sec-Ch-Ua-Full-Version-List,Sec-Ch-Ua-Full-Version\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: *\r\nset-cookie: iprc_c+acdfe8b1b13a65a680bb51363c8264c0=1438851; Path=/; Expires=Mon, 24 Aug 2026 10:35:46 GMT; Secure; SameSite=None\niprc_c-1438851=8; Path=/; Expires=Mon, 24 Aug 2026 10:35:46 GMT; Secure; SameSite=None\r\nvary: Origin\r\nx-envoy-upstream-service-time: 3\r\nHost: kettledroopingcontinuation.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: de4b2ea2bfc4f5664d3d9b10cd2155d0\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":[{"name":"iprc_c+acdfe8b1b13a65a680bb51363c8264c0","value":"1438851","quoted":false,"path":"/","expires":"2026-08-24T10:35:46Z","raw_expires":"Mon, 24 Aug 2026 10:35:46 GMT","secure":true,"http_only":false,"same_site":"None","partitioned":false,"raw":"iprc_c+acdfe8b1b13a65a680bb51363c8264c0=1438851; Path=/; Expires=Mon, 24 Aug 2026 10:35:46 GMT; Secure; SameSite=None"},{"name":"iprc_c-1438851","value":"8","quoted":false,"path":"/","expires":"2026-08-24T10:35:46Z","raw_expires":"Mon, 24 Aug 2026 10:35:46 GMT","secure":true,"http_only":false,"same_site":"None","partitioned":false,"raw":"iprc_c-1438851=8; Path=/; Expires=Mon, 24 Aug 2026 10:35:46 GMT; Secure; SameSite=None"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.30.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/gif","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-23T12:26:49.723432Z","times_seen":18055306,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-23","alert":"Sinkholed","trigger":"kettledroopingcontinuation.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-23","alert":"Sinkholed","trigger":"kettledroopingcontinuation.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-23","alert":"Sinkholed","trigger":"kettledroopingcontinuation.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zoologyfibre.com/pixel/sbls?bv=\u0026tmpl=482\u0026u=https%3A%2F%2Fcdn.show-sb.com%2Fsb%2Fau%2F78%2F74%2Ffd%2F7874fd62186fc577273fa59756d17076%2F1744381737.html\u0026l=1544\u0026fd=287","fqdn":"zoologyfibre.com","domain":"zoologyfibre.com","tld":"com"},"ip":{"addr":"23.111.84.124","port":443,"asn":7979,"as":"SERVERS-COM","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://happymodx.com/fc-mobile-soccer/","date":"2026-08-23T10:35:47.714Z","timestamp":1787481347714,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"zoologyfibre.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 27 Jun 2026 03:57:55 GMT","end":"Fri, 25 Sep 2026 03:57:54 GMT"},"fingerprint":{"sha1":"21:E1:0C:F0:3C:47:B6:51:43:59:A6:9C:7F:45:F3:83:AF:8E:E8:1C","sha256":"8C:62:F5:05:48:06:52:25:19:4D:0F:3D:B5:18:63:0E:57:03:24:EE:E2:B9:FB:E5:24:00:E5:7B:9C:AE:94:CB"}}},"request":{"raw":"GET /pixel/sbls?bv=\u0026tmpl=482\u0026u=https%3A%2F%2Fcdn.show-sb.com%2Fsb%2Fau%2F78%2F74%2Ffd%2F7874fd62186fc577273fa59756d17076%2F1744381737.html\u0026l=1544\u0026fd=287 HTTP/1.1\r\nHost: zoologyfibre.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://happymodx.com/\r\nCookie: uid_id2=45f7fc2f-ad1e-4091-9c0e-b18d5e4a10df:3:1; ain=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.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.rD8lnIlgN_MXbDR-XfeCHTcB5ZDvbXg0XIRp7IoGSLU; pdhtkv=true; uncs=2; pdhtkv27=true; uncs27=1; u_pl27763416=1; iprc_c+713dfa2da62b5b8f41671024dfebcde0=1438851; iprc_c-1438851=8; pdhtkv29=true; uncs29=1; u_pl28373961=1; slecf0582dcc2dc78c0d7cc66bdcca52b3ab=[6790251]\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.30.2\r\nDate: Sun, 23 Aug 2026 10:35:47 GMT\r\nContent-Length: 0\r\nConnection: keep-alive\r\nAccept-Ch: X-Device-User-Agent, X-Operamini-Phone-Ua, User-Agent, Sec-Ch-Ua-Platform-Version, X-Ucbrowser-Device-Ua, Sec-Ch-Ua, Sec-Ch-Ua-Platformuser-Agent, Sec-Ch-Ua-Full-Version-List, Sec-Ch-Ua-Full-Version, Sec-Ch-Ua-Platform, Sec-Ch-Ua-Model, Sec-Ch-Ua-Mobile, Device-Stock-Ua\r\nHost: zoologyfibre.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nCache-Control: no-cache\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Allow-Methods: GET, POST, OPTIONS\r\nAccess-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Upgrade-Insecure-Requests,C-High-Entropy-Values\r\nAccess-Control-Expose-Headers: Content-Length,Content-Range\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.30.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":798,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-23T12:26:49.723432Z","times_seen":18055306,"resource_available":true,"data":null}},"time_used":29,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":29,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-22","alert":"Sinkholed","trigger":"zoologyfibre.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"happymodx.com/wp-content/plugins/contact-form-7/includes/js/index.js?ver=6.1.7","fqdn":"happymodx.com","domain":"happymodx.com","tld":"com"},"ip":{"addr":"104.21.39.80","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://happymodx.com/fc-mobile-soccer/","date":"2026-08-23T10:35:45.977Z","timestamp":1787481345977,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"happymodx.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 28 Jul 2026 09:00:25 GMT","end":"Mon, 26 Oct 2026 10:00:20 GMT"},"fingerprint":{"sha1":"FE:29:9A:0F:BF:23:3E:7B:7B:09:E3:15:8C:DD:03:24:B2:44:F9:87","sha256":"D3:DC:55:AE:12:9C:AC:87:D1:C7:22:A0:4D:BA:D1:40:94:85:03:14:B3:02:E8:37:C8:78:61:6F:C5:79:A4:BD"}}},"request":{"raw":"GET /wp-content/plugins/contact-form-7/includes/js/index.js?ver=6.1.7 HTTP/1.1\r\nHost: happymodx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://happymodx.com/fc-mobile-soccer/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Sun, 30 Aug 2026 08:58:45 GMT\r\ncontent-type: application/x-javascript; charset=UTF-8\r\nlast-modified: Sat, 22 Aug 2026 15:34:59 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding,Accept-Encoding\r\nserver-timing: cfExtPri\r\ndate: Sun, 23 Aug 2026 10:35:45 GMT\r\nserver: cloudflare\r\nplatform: hostinger\r\npanel: hpanel\r\ncontent-security-policy: upgrade-insecure-requests\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 5820\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=NN3JG4C8ogJYCXI4o5%2BOUC4aSdfDhKMNOQghPZNo3UysxrEXHX%2B%2Bmw77357NvC%2B%2BiycJXJHAsRTKfscFg3H8RNsoA1UBDTluxfealy7mxWIU5AsxsrGGjzGAWQwsxCed\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: a2f978ec5c80568a-OSL\r\ncontent-length: 3999\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":13452,"size_decoded":4934,"mime_type":"application/x-javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (13452), with no line terminators","md5":"2912c657d0592cc532dff73d0d2ce7bb","sha1":"70a679e2769825236f83bcc56965a9d0bd86c4e9","sha256":"ddcce687729cb358abf9d0d8e1217a097859be2b0d18c23d7c851b38c87bc9c0","sha512":"9646384e65d09bf00cb20365f43e06dd41e7428e3fc6cc2737f4e69b50f006ebb25bd24a566fcd9faec2f0dcb24404e25d57ba7b8c6aba61797a29c515ad5144","ssdeep":"384:IsIRHeFJ1yQ7QdfnJgeYh7MXlsNqrBp1pgQpwOjNtqohIQ/5Z:IsIR+L1yQ7QdpYh7M1iqrBp1pgQpwOjn","tlshash":"0a52d7a1472955321eb506e391e513c1769075aef44b8aa1a898dc2e18bdcc328f3ff7","first_seen":"2024-11-04T17:50:00.022634Z","last_seen":"2026-08-23T12:26:44.489901Z","times_seen":237560,"resource_available":true,"data":null}},"time_used":29,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":29,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-23","alert":"Sinkholed","trigger":"happymodx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"happymodx.com/wp-content/uploads/2025/12/Toon-Cup.webp","fqdn":"happymodx.com","domain":"happymodx.com","tld":"com"},"ip":{"addr":"104.21.39.80","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://happymodx.com/fc-mobile-soccer/","date":"2026-08-23T10:35:46.028Z","timestamp":1787481346028,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"happymodx.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 28 Jul 2026 09:00:25 GMT","end":"Mon, 26 Oct 2026 10:00:20 GMT"},"fingerprint":{"sha1":"FE:29:9A:0F:BF:23:3E:7B:7B:09:E3:15:8C:DD:03:24:B2:44:F9:87","sha256":"D3:DC:55:AE:12:9C:AC:87:D1:C7:22:A0:4D:BA:D1:40:94:85:03:14:B3:02:E8:37:C8:78:61:6F:C5:79:A4:BD"}}},"request":{"raw":"GET /wp-content/uploads/2025/12/Toon-Cup.webp HTTP/1.1\r\nHost: happymodx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://happymodx.com/fc-mobile-soccer/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=10368000\r\nexpires: Mon, 21 Dec 2026 10:35:46 GMT\r\ncontent-type: image/webp\r\nlast-modified: Tue, 16 Dec 2025 06:12:08 GMT\r\naccept-ranges: bytes\r\nserver-timing: cfExtPri\r\ndate: Sun, 23 Aug 2026 10:35:46 GMT\r\nserver: cloudflare\r\nplatform: hostinger\r\npanel: hpanel\r\ncontent-security-policy: upgrade-insecure-requests\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ppx1RcVMR0OcE%2FKcWItF4VSyUVYbYI%2BeNSzqr%2BGykNurLDLTsndF%2B3k7VgN1BEXIjVPPSnb95cN7o64kjXY6BfUN%2Fi8jSuwl%2BYZcBMd2mcHJvtHJPcWUEwTF%2Fi2%2FXsCk\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a2f978ecaca7568a-OSL\r\ncontent-length: 13824\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":13824,"size_decoded":14688,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"097f7ebac098c0f1f1175214fd95820b","sha1":"b17b2551c5e96016a4e88ce548ea87774eb1effa","sha256":"29ffbd0359b7bce33387196c4f5e275acd6610dac0e0e3ddbd6ec86d7b31ea79","sha512":"49e9f06c4f4df82ea9a5daa729d1e326bc34a5f04d2c4436e50b9d4b43ced226796adaa1afc80166ef63539f0b6d9cb3ef2e33e2e90b85d5908ea85acdcdcfa2","ssdeep":"192:JwTnoVvtJE57c/jtke3UFJT8XVOWCC0NGJ2i0S3y/Jo3jKyvnmZ0YuZJfdXbGL1V:JwTnww5FJ4A02iJco3JOZIJN2R3","tlshash":"a352cfa5aad0c3d4cccd0335888a80b626b9fce9f916c337b8d14291bf11be0a165567","first_seen":"2026-08-23T10:36:29.851781Z","last_seen":"2026-08-23T10:36:29.851781Z","times_seen":1,"resource_available":false,"data":null}},"time_used":650,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":618,"receive":32,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-23","alert":"Sinkholed","trigger":"happymodx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"protrafficinspector.com/stats","fqdn":"protrafficinspector.com","domain":"protrafficinspector.com","tld":"com"},"ip":{"addr":"18.196.51.86","port":443,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://happymodx.com/fc-mobile-soccer/","date":"2026-08-23T10:35:46.504Z","timestamp":1787481346504,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"protrafficinspector.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Fri, 26 Jun 2026 00:00:00 GMT","end":"Sat, 09 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"A5:A0:EB:57:26:41:24:03:DD:F3:2D:91:FB:6B:49:B6:53:8B:5F:86","sha256":"82:7E:C7:50:5F:EC:61:E0:5F:7F:ED:2E:10:87:9B:31:A9:8F:4B:DF:E8:99:CC:2E:A1:13:31:E7:45:CE:89:25"}}},"request":{"raw":"GET /stats HTTP/1.1\r\nHost: protrafficinspector.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://happymodx.com\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://happymodx.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 23 Aug 2026 10:35:46 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-length: 40\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: https://happymodx.com\r\nset-cookie: uid_id2=44c15d2c-d5e6-43af-a356-38d3041510be:1:1; Path=/; Expires=Wed, 20 Aug 2036 10:35:46 GMT; Secure; SameSite=None\r\nvary: Origin\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":[{"name":"uid_id2","value":"44c15d2c-d5e6-43af-a356-38d3041510be:1:1","quoted":false,"path":"/","expires":"2036-08-20T10:35:46Z","raw_expires":"Wed, 20 Aug 2036 10:35:46 GMT","secure":true,"http_only":false,"same_site":"None","partitioned":false,"raw":"uid_id2=44c15d2c-d5e6-43af-a356-38d3041510be:1:1; Path=/; Expires=Wed, 20 Aug 2036 10:35:46 GMT; Secure; SameSite=None"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":40,"size_decoded":516,"mime_type":"text/html; charset=UTF-8","magic":"ASCII text, with no line terminators","md5":"306f960e00721779fd0053800a3cb0c4","sha1":"787ff576c039f3b79b868b28f8e7a354c7d2ca16","sha256":"9c1cf5f032947a48842625cca0200b2fdd7385b2d49f1ea6701e5c86031ecf04","sha512":"bc7d0ae651dd7a9711cee6ec880fe3c9de656f05f8efdb06644639bfc7d976a6d33811ae0de504e211c610a28cf4e185e4066d150ac8f210623ae8e32c41b38f","ssdeep":"","tlshash":"e490044454cd74f3c0dd170331c01c054700441101045345071d540331114dc1c1fc11","first_seen":"2026-08-23T10:36:29.854264Z","last_seen":"2026-08-23T10:36:29.854264Z","times_seen":1,"resource_available":false,"data":null}},"time_used":91,"timings":{"blocked":0,"dns":3,"connect":21,"send":0,"wait":21,"receive":0,"ssl":45},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zoologyfibre.com/sbar.json?key=f0582dcc2dc78c0d7cc66bdcca52b3ab\u0026uuid=45f7fc2f-ad1e-4091-9c0e-b18d5e4a10df%3A3%3A1","fqdn":"zoologyfibre.com","domain":"zoologyfibre.com","tld":"com"},"ip":{"addr":"23.111.84.124","port":443,"asn":7979,"as":"SERVERS-COM","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://happymodx.com/fc-mobile-soccer/","date":"2026-08-23T10:35:47.227Z","timestamp":1787481347227,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"zoologyfibre.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 27 Jun 2026 03:57:55 GMT","end":"Fri, 25 Sep 2026 03:57:54 GMT"},"fingerprint":{"sha1":"21:E1:0C:F0:3C:47:B6:51:43:59:A6:9C:7F:45:F3:83:AF:8E:E8:1C","sha256":"8C:62:F5:05:48:06:52:25:19:4D:0F:3D:B5:18:63:0E:57:03:24:EE:E2:B9:FB:E5:24:00:E5:7B:9C:AE:94:CB"}}},"request":{"raw":"GET /sbar.json?key=f0582dcc2dc78c0d7cc66bdcca52b3ab\u0026uuid=45f7fc2f-ad1e-4091-9c0e-b18d5e4a10df%3A3%3A1 HTTP/1.1\r\nHost: zoologyfibre.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://happymodx.com\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://happymodx.com/\r\nCookie: uid_id2=45f7fc2f-ad1e-4091-9c0e-b18d5e4a10df:3:1; ain=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.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.rD8lnIlgN_MXbDR-XfeCHTcB5ZDvbXg0XIRp7IoGSLU; pdhtkv=true; uncs=1; pdhtkv27=true; uncs27=1; u_pl27763416=1; iprc_c+713dfa2da62b5b8f41671024dfebcde0=1438851; iprc_c-1438851=8\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.30.2\r\nDate: Sun, 23 Aug 2026 10:35:47 GMT\r\nContent-Type: text/plain; charset=utf-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\naccept-ch: Sec-Ch-Ua-Model,Sec-Ch-Ua-Mobile,Device-Stock-Ua,X-Device-User-Agent,X-Ucbrowser-Device-Ua,User-Agent,Sec-Ch-Ua-Platform-Version,Sec-Ch-Ua-Platformuser-Agent,Sec-Ch-Ua-Platform,X-Operamini-Phone-Ua,Sec-Ch-Ua,Sec-Ch-Ua-Full-Version-List,Sec-Ch-Ua-Full-Version\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: https://happymodx.com\r\ncontent-encoding: zstd\r\nset-cookie: uid_id2=45f7fc2f-ad1e-4091-9c0e-b18d5e4a10df:3:1; Path=/; Expires=Sun, 30 Aug 2026 10:35:47 GMT; Secure; SameSite=None\nuncs=2; Path=/; Expires=Mon, 24 Aug 2026 10:35:47 GMT; Secure; SameSite=None\npdhtkv29=true; Path=/; Expires=Mon, 24 Aug 2026 10:35:47 GMT; Secure; SameSite=None\nuncs29=1; Path=/; Expires=Mon, 24 Aug 2026 10:35:47 GMT; Secure; SameSite=None\nu_pl28373961=1; Path=/; Expires=Mon, 24 Aug 2026 10:35:47 GMT; Secure; SameSite=None\nslecf0582dcc2dc78c0d7cc66bdcca52b3ab=[6790251]; Path=/; Expires=Sun, 23 Aug 2026 10:35:52 GMT; Secure; SameSite=None\r\nvary: Accept-Encoding\r\nx-envoy-upstream-service-time: 133\r\nHost: zoologyfibre.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: 192ff70cfcbb3e84b46d17ea38c708cc\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":[{"name":"uid_id2","value":"45f7fc2f-ad1e-4091-9c0e-b18d5e4a10df:3:1","quoted":false,"path":"/","expires":"2026-08-30T10:35:47Z","raw_expires":"Sun, 30 Aug 2026 10:35:47 GMT","secure":true,"http_only":false,"same_site":"None","partitioned":false,"raw":"uid_id2=45f7fc2f-ad1e-4091-9c0e-b18d5e4a10df:3:1; Path=/; Expires=Sun, 30 Aug 2026 10:35:47 GMT; Secure; SameSite=None"},{"name":"uncs","value":"2","quoted":false,"path":"/","expires":"2026-08-24T10:35:47Z","raw_expires":"Mon, 24 Aug 2026 10:35:47 GMT","secure":true,"http_only":false,"same_site":"None","partitioned":false,"raw":"uncs=2; Path=/; Expires=Mon, 24 Aug 2026 10:35:47 GMT; Secure; SameSite=None"},{"name":"pdhtkv29","value":"true","quoted":false,"path":"/","expires":"2026-08-24T10:35:47Z","raw_expires":"Mon, 24 Aug 2026 10:35:47 GMT","secure":true,"http_only":false,"same_site":"None","partitioned":false,"raw":"pdhtkv29=true; Path=/; Expires=Mon, 24 Aug 2026 10:35:47 GMT; Secure; SameSite=None"},{"name":"uncs29","value":"1","quoted":false,"path":"/","expires":"2026-08-24T10:35:47Z","raw_expires":"Mon, 24 Aug 2026 10:35:47 GMT","secure":true,"http_only":false,"same_site":"None","partitioned":false,"raw":"uncs29=1; Path=/; Expires=Mon, 24 Aug 2026 10:35:47 GMT; Secure; SameSite=None"},{"name":"u_pl28373961","value":"1","quoted":false,"path":"/","expires":"2026-08-24T10:35:47Z","raw_expires":"Mon, 24 Aug 2026 10:35:47 GMT","secure":true,"http_only":false,"same_site":"None","partitioned":false,"raw":"u_pl28373961=1; Path=/; Expires=Mon, 24 Aug 2026 10:35:47 GMT; Secure; SameSite=None"},{"name":"slecf0582dcc2dc78c0d7cc66bdcca52b3ab","value":"[6790251]","quoted":false,"path":"/","expires":"2026-08-23T10:35:52Z","raw_expires":"Sun, 23 Aug 2026 10:35:52 GMT","secure":true,"http_only":false,"same_site":"None","partitioned":false,"raw":"slecf0582dcc2dc78c0d7cc66bdcca52b3ab=[6790251]; Path=/; Expires=Sun, 23 Aug 2026 10:35:52 GMT; Secure; SameSite=None"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.30.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}],"data":{"size":6158,"size_decoded":7605,"mime_type":"text/plain; charset=utf-8","magic":"JSON text data","md5":"3cee8ea83c554eee1a7fcc3327dae5fd","sha1":"b27bfb737288445a13d9f545a91aa2b1eb3b0a12","sha256":"dd7228a3d0c2dd980dcaf017b7bba4446eaf3982c1bab7a0075458f222df0a61","sha512":"af5acbf0b0e6fdef58acaf81f46159a993743464953e66d262eb5104b389ed458318933fa0c6adb34f60600fc532d17ae6e3df320f0052bc90eb45a5a1166d6a","ssdeep":"192:9zOh90rNcvCAL+iMUi+keLS+qjdQtMnFZo:9zM90h2CsceGtnFe","tlshash":"50d18ebf46c423483383895493473cf95c458c0f8a999e08e43adbae9523e7663651bf","first_seen":"2026-08-23T10:36:29.856703Z","last_seen":"2026-08-23T10:36:29.856703Z","times_seen":1,"resource_available":false,"data":null}},"time_used":162,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":162,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-22","alert":"Sinkholed","trigger":"zoologyfibre.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"establishscarcely.com/f0/58/2d/f0582dcc2dc78c0d7cc66bdcca52b3ab.js","fqdn":"establishscarcely.com","domain":"establishscarcely.com","tld":"com"},"ip":{"addr":"172.240.108.68","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://happymodx.com/fc-mobile-soccer/","date":"2026-08-23T10:35:45.964Z","timestamp":1787481345964,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"establishscarcely.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 16 Aug 2026 21:49:18 GMT","end":"Sat, 14 Nov 2026 21:49:17 GMT"},"fingerprint":{"sha1":"C8:88:67:AE:2D:51:85:B6:4F:55:EE:9C:FE:AB:4F:3A:93:7A:60:3B","sha256":"8C:54:B4:51:FA:49:79:87:4E:7D:F2:16:F4:CA:5B:78:DC:9E:4A:8E:9C:9F:81:73:3C:23:02:6C:D8:DD:38:75"}}},"request":{"raw":"GET /f0/58/2d/f0582dcc2dc78c0d7cc66bdcca52b3ab.js HTTP/1.1\r\nHost: establishscarcely.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://happymodx.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.2\r\nDate: Sun, 23 Aug 2026 10:35:46 GMT\r\nContent-Type: application/javascript\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\naccept-ch: Device-Stock-Ua,X-Device-User-Agent,X-Operamini-Phone-Ua,X-Ucbrowser-Device-Ua,Sec-Ch-Ua,Sec-Ch-Ua-Platformuser-Agent,Sec-Ch-Ua-Model,User-Agent,Sec-Ch-Ua-Platform-Version,Sec-Ch-Ua-Full-Version-List,Sec-Ch-Ua-Full-Version,Sec-Ch-Ua-Platform,Sec-Ch-Ua-Mobile\r\naccess-control-allow-origin: *\r\ncontent-encoding: zstd\r\nvary: Accept-Encoding\r\nx-envoy-upstream-service-time: 7\r\nHost: establishscarcely.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: 963915454d3c79f1376f07054ed8b101\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.28.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":97099,"size_decoded":35570,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"ef637b7f1a38433c5868b15ef1ea8469","sha1":"4f40f90c3807e74487d74813588d5197d75e9b24","sha256":"0333c9fb6aeac3f526a440507211fee316f9ac3b740f1260d87a549121d142d7","sha512":"50f20d70ec055211a199779451f87bbc2c3691930e9bfdb0b1fbea43cfdbe96f62ae4d1d58e227a9758b829511c53b04056f493a746bdf12026404779b05f487","ssdeep":"1536:7V4VImwg+YocgELIUlsgjJMODRr2EJt7jQW3j:7QLIUCgjJvDRr2EJt4Wz","tlshash":"2993d9983fbba87d03d97077762f9417f26d1c01008dd8bcd943b8acb968b54a476a36","first_seen":"2026-08-23T10:36:29.859014Z","last_seen":"2026-08-23T10:36:29.859014Z","times_seen":1,"resource_available":true,"data":null}},"time_used":519,"timings":{"blocked":-1,"dns":51,"connect":91,"send":0,"wait":101,"receive":91,"ssl":186},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"telegram.im/widget-button/ico/style.css","fqdn":"telegram.im","domain":"telegram.im","tld":"im"},"ip":{"addr":"65.108.253.105","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Finland","country_code":"FI"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://happymodx.com/fc-mobile-soccer/","date":"2026-08-23T10:35:46.841Z","timestamp":1787481346841,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"telegram.im","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 30 Jul 2026 11:44:26 GMT","end":"Wed, 28 Oct 2026 11:44:25 GMT"},"fingerprint":{"sha1":"37:3B:BC:19:2C:2A:AD:80:A3:3A:58:59:D5:92:AA:28:9F:20:A8:83","sha256":"A1:59:5B:02:C4:B6:94:0F:76:11:85:A9:E7:CD:C2:8B:40:62:6A:8B:85:DC:53:4A:DF:94:B6:DF:3C:DF:12:6B"}}},"request":{"raw":"GET /widget-button/ico/style.css HTTP/1.1\r\nHost: telegram.im\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://happymodx.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sun, 23 Aug 2026 10:35:46 GMT\r\nContent-Type: text/css\r\nLast-Modified: Sun, 26 Feb 2017 09:02:08 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"58b29990-42b\"\r\nExpires: Sun, 30 Aug 2026 10:35:46 GMT\r\nCache-Control: max-age=604800\r\nStrict-Transport-Security: max-age=2592000\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1067,"size_decoded":789,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"3ff4afee30979b96f7d1cf7a65ec8c2c","sha1":"9a93a18332973c6424773afe14b152660630ad4e","sha256":"7b67fc13bf4d8f7458ffc48cdd38c49c5bd36794916c70e77c5346ec79c39235","sha512":"ee812b6f3a80799339a6ab2aff59494c485e140fe9f8f88f8e0e1bbee8b9805d0dad96ba3ec769f1777e5992e4ee6353792d40fb9e1ac6bc18bdb6ff4821e88a","ssdeep":"","tlshash":"11116a64675520c1b13048b673a37966370ce159ba1c2591b66d182fefe3f609262f4d","first_seen":"2023-05-05T04:17:30Z","last_seen":"2026-08-23T10:36:29.860905Z","times_seen":424,"resource_available":false,"data":null}},"time_used":51,"timings":{"blocked":-1,"dns":0,"connect":15,"send":0,"wait":16,"receive":0,"ssl":20},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"happymodx.com/wp-content/themes/generatepress/assets/dist/modal.js?ver=3.6.1","fqdn":"happymodx.com","domain":"happymodx.com","tld":"com"},"ip":{"addr":"104.21.39.80","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://happymodx.com/fc-mobile-soccer/","date":"2026-08-23T10:35:45.984Z","timestamp":1787481345984,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"happymodx.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 28 Jul 2026 09:00:25 GMT","end":"Mon, 26 Oct 2026 10:00:20 GMT"},"fingerprint":{"sha1":"FE:29:9A:0F:BF:23:3E:7B:7B:09:E3:15:8C:DD:03:24:B2:44:F9:87","sha256":"D3:DC:55:AE:12:9C:AC:87:D1:C7:22:A0:4D:BA:D1:40:94:85:03:14:B3:02:E8:37:C8:78:61:6F:C5:79:A4:BD"}}},"request":{"raw":"GET /wp-content/themes/generatepress/assets/dist/modal.js?ver=3.6.1 HTTP/1.1\r\nHost: happymodx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://happymodx.com/fc-mobile-soccer/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Sun, 30 Aug 2026 08:58:45 GMT\r\ncontent-type: application/x-javascript; charset=UTF-8\r\nlast-modified: Tue, 02 Dec 2025 00:09:57 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding,Accept-Encoding\r\nserver-timing: cfExtPri\r\ndate: Sun, 23 Aug 2026 10:35:46 GMT\r\nserver: cloudflare\r\nplatform: hostinger\r\npanel: hpanel\r\ncontent-security-policy: upgrade-insecure-requests\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 5820\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ZZCSfyXpTjBuWTUDgHITzV3gT5VSqk8ZwXG9PFEdEN2id89dA4%2BIUqc65wpd25SNc7wTIatSVYVyl7SZR2PCvK3WK7tF3Zgk0i67robrbpwW1vmb5iQPZj1YuJdHjUo8\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: a2f978ec5c86568a-OSL\r\ncontent-length: 1250\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":3315,"size_decoded":2177,"mime_type":"application/x-javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (3315), with no line terminators","md5":"e5205f150873787f6a52cf9f01d34f62","sha1":"d799c494d0186f01c31bbf06aadcda91555c860d","sha256":"c28374dac3c83bfa51214ac35d1e63dadd37f15c958fe2e60c76cde5fa156f56","sha512":"76f0174e724098a5ddd6548b3198b2f5f16cd8f11c95ba4ed91cd24b97f459d01a7aab058f6f1b8b0c18e6066a1bffa676c386eb63dd7309b0eb246a0f71b04a","ssdeep":"","tlshash":"6d61c9ed77a4f57219ebb2b5506f960ab7311849984f18204826fc483c7e9da0292e7e","first_seen":"2025-05-27T23:40:35.271011Z","last_seen":"2026-08-23T10:37:00.309798Z","times_seen":2928,"resource_available":true,"data":null}},"time_used":57,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":57,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-23","alert":"Sinkholed","trigger":"happymodx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"happymodx.com/wp-content/uploads/2025/12/Bowling-Sim.webp","fqdn":"happymodx.com","domain":"happymodx.com","tld":"com"},"ip":{"addr":"104.21.39.80","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://happymodx.com/fc-mobile-soccer/","date":"2026-08-23T10:35:46.025Z","timestamp":1787481346025,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"happymodx.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 28 Jul 2026 09:00:25 GMT","end":"Mon, 26 Oct 2026 10:00:20 GMT"},"fingerprint":{"sha1":"FE:29:9A:0F:BF:23:3E:7B:7B:09:E3:15:8C:DD:03:24:B2:44:F9:87","sha256":"D3:DC:55:AE:12:9C:AC:87:D1:C7:22:A0:4D:BA:D1:40:94:85:03:14:B3:02:E8:37:C8:78:61:6F:C5:79:A4:BD"}}},"request":{"raw":"GET /wp-content/uploads/2025/12/Bowling-Sim.webp HTTP/1.1\r\nHost: happymodx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://happymodx.com/fc-mobile-soccer/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=10368000\r\nexpires: Mon, 21 Dec 2026 10:35:46 GMT\r\ncontent-type: image/webp\r\nlast-modified: Thu, 25 Dec 2025 07:39:03 GMT\r\naccept-ranges: bytes\r\nserver-timing: cfExtPri\r\ndate: Sun, 23 Aug 2026 10:35:46 GMT\r\nserver: cloudflare\r\nplatform: hostinger\r\npanel: hpanel\r\ncontent-security-policy: upgrade-insecure-requests\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4K0erDYUe92sN5FZIp8jHH8fecVb7MYuwhEBsZvWK4HR4LdOcXvKFbBhq4bzn08Kesimg7P0XCo2k5w9CeeLWBbRayiayAm4n3Q4%2BiO8zuCJmhw7ZEsavCEEtKtwi9TW\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a2f978ecaca3568a-OSL\r\ncontent-length: 18148\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":18148,"size_decoded":18998,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"c6a16a82e62514413522128595bb812c","sha1":"e9b25951488fc53d4fc265424da4a752609bc010","sha256":"acb383e053ad8dcdee67fba5f5a3a1509b40a428ebd48694251467a4f3cb747a","sha512":"74eb33faf9c1e7a6bb5323107bf94bfb3b687a78658147a68406f7d36ddd6060cc94cee15f6583bbfca7c76af8f1684487145e6d18b9cd41647c19857d485ceb","ssdeep":"384:+w3K49xcRk4tGj12aFNXEscYo4hfKv4n5bh6j+qZEA9ExF83MU:HLcRyjgIUs5o4hfR5b1A9waMU","tlshash":"c182d1a325280c59f6ff58fd43814b9493bceae97d056462db20926cff68c449cd83a7","first_seen":"2026-08-23T10:36:29.864505Z","last_seen":"2026-08-23T10:36:29.864505Z","times_seen":1,"resource_available":false,"data":null}},"time_used":643,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":598,"receive":45,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-23","alert":"Sinkholed","trigger":"happymodx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"establishscarcely.com/f0/58/2d/f0582dcc2dc78c0d7cc66bdcca52b3ab.js","fqdn":"establishscarcely.com","domain":"establishscarcely.com","tld":"com"},"ip":{"addr":"172.240.108.68","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://happymodx.com/fc-mobile-soccer/","date":"2026-08-23T10:35:46.565Z","timestamp":1787481346565,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"establishscarcely.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 16 Aug 2026 21:49:18 GMT","end":"Sat, 14 Nov 2026 21:49:17 GMT"},"fingerprint":{"sha1":"C8:88:67:AE:2D:51:85:B6:4F:55:EE:9C:FE:AB:4F:3A:93:7A:60:3B","sha256":"8C:54:B4:51:FA:49:79:87:4E:7D:F2:16:F4:CA:5B:78:DC:9E:4A:8E:9C:9F:81:73:3C:23:02:6C:D8:DD:38:75"}}},"request":{"raw":"GET /f0/58/2d/f0582dcc2dc78c0d7cc66bdcca52b3ab.js HTTP/1.1\r\nHost: establishscarcely.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://happymodx.com/\r\nCookie: pip_af1d4578dcc89a3eeb602480415e4abe=1; pip_cc31f70d8c4f3f26836c1bf4172703a1=1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.2\r\nDate: Sun, 23 Aug 2026 10:35:46 GMT\r\nContent-Type: application/javascript\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\naccept-ch: X-Ucbrowser-Device-Ua,Sec-Ch-Ua-Platformuser-Agent,Sec-Ch-Ua-Full-Version,Sec-Ch-Ua-Platform,Sec-Ch-Ua-Mobile,Device-Stock-Ua,User-Agent,Sec-Ch-Ua-Platform-Version,Sec-Ch-Ua,Sec-Ch-Ua-Full-Version-List,Sec-Ch-Ua-Model,X-Device-User-Agent,X-Operamini-Phone-Ua\r\naccess-control-allow-origin: *\r\ncontent-encoding: zstd\r\nvary: Accept-Encoding\r\nx-envoy-upstream-service-time: 7\r\nHost: establishscarcely.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: 36c7204da5d63a0295c4f81c8dd6d4fd\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":97071,"size_decoded":35595,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"e5b55414f2f4f46617dfc9238c2194d4","sha1":"b25e2b0e7ee782cd4096f78ed22c580c8831ed80","sha256":"937bfd39e4bfd050d2f01575a3f493d70d376b344fb79dac7326d13dd74194bb","sha512":"c853749e63aa1f1bcbe778ab4f987e767da05f126f4991481f07d6d2350715fe40357ed7916b327c05782819568a98ff84ef263f5b5570d29f5cad3234fe9f2f","ssdeep":"1536:7V4VImwg+YjDgELIUlsgjJMODRr2EJt7jQW3j:7Q1IUCgjJvDRr2EJt4Wz","tlshash":"2793d9983fbba87d03d97077762f9417f26d1c01008dd8bcd943b8acb968b54a476a36","first_seen":"2026-08-23T10:36:29.866387Z","last_seen":"2026-08-23T10:37:00.311383Z","times_seen":2,"resource_available":true,"data":null}},"time_used":101,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":101,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/poppins/v24/pxiByp8kv8JHgFVrLCz7Z1xlFQ.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://happymodx.com/fc-mobile-soccer/","date":"2026-08-23T10:35:46.696Z","timestamp":1787481346696,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Wed, 05 Aug 2026 20:43:51 GMT","end":"Wed, 28 Oct 2026 20:43:50 GMT"},"fingerprint":{"sha1":"B9:F7:74:85:7B:1C:5F:E9:C2:86:5A:AA:63:0F:34:84:5F:79:D6:96","sha256":"BA:57:10:D4:7E:A5:7C:C6:22:90:71:24:65:31:49:39:40:E5:C8:EB:E4:74:F7:D9:0B:3E:17:36:DD:31:9D:EB"}}},"request":{"raw":"GET /s/poppins/v24/pxiByp8kv8JHgFVrLCz7Z1xlFQ.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://happymodx.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 7816\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Tue, 18 Aug 2026 23:00:34 GMT\r\nexpires: Wed, 18 Aug 2027 23:00:34 GMT\r\ncache-control: public, max-age=31536000\r\nage: 387312\r\nlast-modified: Mon, 15 Sep 2025 16:35:07 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":7816,"size_decoded":8628,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 7816, version 1.0","md5":"25b0e113ca7cce3770d542736db26368","sha1":"cb726212d5d525021752a1d8470a0fb593e0c49e","sha256":"9338e65fc077355c7a87ae0d64cc101e23b9bf8ad78ae65f0f319c857311b526","sha512":"a0d331e62ab4727f49ca286a1ee7fb81cddc5bb9edf71ef84f4bd4fa1552069af1a82752011ba88fae80862d034135926b7e99d70e59d626d66d4ede90e94c30","ssdeep":"192:Agw5ksLwlyK8F2BXU96Fc575OI3+ga534SlEFwTG4ovej9be:Al5y8FSUMS5VOq1KISlvS4ov+4","tlshash":"a3f1af19d5de5a73f80032b45b6911ba7e42fa83bc68bbedf8046a10ad542cb467cc91","first_seen":"2023-04-05T13:48:05Z","last_seen":"2026-08-23T12:27:33.80619Z","times_seen":301748,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zoologyfibre.com/pixel/ase","fqdn":"zoologyfibre.com","domain":"zoologyfibre.com","tld":"com"},"ip":{"addr":"23.111.84.124","port":443,"asn":7979,"as":"SERVERS-COM","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://happymodx.com/fc-mobile-soccer/","date":"2026-08-23T10:35:47.401Z","timestamp":1787481347401,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"zoologyfibre.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 27 Jun 2026 03:57:55 GMT","end":"Fri, 25 Sep 2026 03:57:54 GMT"},"fingerprint":{"sha1":"21:E1:0C:F0:3C:47:B6:51:43:59:A6:9C:7F:45:F3:83:AF:8E:E8:1C","sha256":"8C:62:F5:05:48:06:52:25:19:4D:0F:3D:B5:18:63:0E:57:03:24:EE:E2:B9:FB:E5:24:00:E5:7B:9C:AE:94:CB"}}},"request":{"raw":"OPTIONS /pixel/ase HTTP/1.1\r\nHost: zoologyfibre.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://happymodx.com/\r\nOrigin: https://happymodx.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/1.1 204 No Content\r\nServer: nginx/1.30.2\r\nDate: Sun, 23 Aug 2026 10:35:47 GMT\r\nConnection: keep-alive\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nCache-Control: no-cache\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Allow-Methods: GET, POST, OPTIONS\r\nAccess-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Upgrade-Insecure-Requests,C-High-Entropy-Values\r\nAccess-Control-Allow-Credentials: true\r\nAccess-Control-Max-Age: 1728000\r\nContent-Type: text/plain; charset=utf-8\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Nginx:1.30.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":552,"mime_type":"text/plain; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-23T12:26:49.723432Z","times_seen":18055306,"resource_available":true,"data":null}},"time_used":95,"timings":{"blocked":2,"dns":0,"connect":23,"send":0,"wait":22,"receive":0,"ssl":48},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-22","alert":"Sinkholed","trigger":"zoologyfibre.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"you.developzilla.com/api/files/92-698559?sign=MTc4NDg1MTIwMDAwMHwyNi0yNTF8OTItNjk4NTU5fDJIRXhHYzRYLVMyOHJydXM4Z2luVWxTWTg0LTd5RmhtZ1gyZGpSd1NVRkENCg\u0026updated=1784557846588","fqdn":"you.developzilla.com","domain":"developzilla.com","tld":"com"},"ip":{"addr":"23.109.84.164","port":443,"asn":7979,"as":"SERVERS-COM","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://happymodx.com/fc-mobile-soccer/","date":"2026-08-23T10:35:47.823Z","timestamp":1787481347823,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"developzilla.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Fri, 03 Jul 2026 21:53:47 GMT","end":"Thu, 01 Oct 2026 21:53:46 GMT"},"fingerprint":{"sha1":"82:1C:34:AE:F8:3E:CC:25:FC:73:15:54:05:2C:6F:2F:3A:CF:41:43","sha256":"34:C2:B1:04:FC:19:D3:C9:96:A7:20:F9:5B:39:C4:E3:72:10:E6:48:47:6C:DC:39:70:E9:B5:6A:E7:49:89:D0"}}},"request":{"raw":"GET /api/files/92-698559?sign=MTc4NDg1MTIwMDAwMHwyNi0yNTF8OTItNjk4NTU5fDJIRXhHYzRYLVMyOHJydXM4Z2luVWxTWTg0LTd5RmhtZ1gyZGpSd1NVRkENCg\u0026updated=1784557846588 HTTP/1.1\r\nHost: you.developzilla.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 301 \r\nserver: nginx/1.25.5\r\ndate: Sun, 23 Aug 2026 10:35:47 GMT\r\naccess-control-expose-headers: Location, X-Version\r\nx-xss-protection: 1; mode=block\r\ncontent-security-policy: frame-ancestors 'self' you.developzilla.com you.developzilla.com:8112 www.getpostman.com localhost:8080 techserv2.adsterratech.com:8112 127.0.0.1:8112 10.1.1.51 tp.developzilla.com wiki.developzilla.com:8112 stage:8112 localhost:8112 209.200.46.90:8112 66.207.43.229:8112 maven.developzilla.com:8112 techserv:8112 tn04.trafserv.com:8112 city.developzilla.com you hub.developzilla.com 10.1.1.51:8112 np.kirilldrozdov.developzilla.com np.adsterra.com script.google.com repo.developzilla.com;\r\nx-frame-options: SAMEORIGIN\r\nreferrer-policy: same-origin\r\nx-youtrack-user: guest\r\nlocation: /issue/attachment\r\nstrict-transport-security: max-age=86400; includeSubDomains; preload;\r\nx-content-type-options: nosniff, nosniff\r\nx-robots-tag: none\r\nx-download-options: noopen\r\nx-permitted-cross-domain-policies: none\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"Moved Permanently","fingerprints":[{"name":"Nginx:1.25.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-23T12:26:49.723432Z","times_seen":18055306,"resource_available":true,"data":null}},"time_used":150,"timings":{"blocked":-1,"dns":53,"connect":22,"send":0,"wait":27,"receive":0,"ssl":48},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"happymodx.com/wp-content/plugins/gp-premium/blog/functions/css/style.min.css?ver=2.5.6","fqdn":"happymodx.com","domain":"happymodx.com","tld":"com"},"ip":{"addr":"104.21.39.80","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://happymodx.com/fc-mobile-soccer/","date":"2026-08-23T10:35:45.954Z","timestamp":1787481345954,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"happymodx.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 28 Jul 2026 09:00:25 GMT","end":"Mon, 26 Oct 2026 10:00:20 GMT"},"fingerprint":{"sha1":"FE:29:9A:0F:BF:23:3E:7B:7B:09:E3:15:8C:DD:03:24:B2:44:F9:87","sha256":"D3:DC:55:AE:12:9C:AC:87:D1:C7:22:A0:4D:BA:D1:40:94:85:03:14:B3:02:E8:37:C8:78:61:6F:C5:79:A4:BD"}}},"request":{"raw":"GET /wp-content/plugins/gp-premium/blog/functions/css/style.min.css?ver=2.5.6 HTTP/1.1\r\nHost: happymodx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://happymodx.com/fc-mobile-soccer/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=31536000\r\nexpires: Mon, 23 Aug 2027 08:58:40 GMT\r\ncontent-type: text/css; charset=UTF-8\r\nlast-modified: Mon, 15 Jun 2026 12:22:12 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding,Accept-Encoding\r\nserver-timing: cfExtPri\r\ndate: Sun, 23 Aug 2026 10:35:46 GMT\r\nserver: cloudflare\r\nplatform: hostinger\r\npanel: hpanel\r\ncontent-security-policy: upgrade-insecure-requests\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 5825\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=dDXt4v2tr1E%2BH8zEPhm4DSC7sPzSXrAhV4EiPkJ6HvQqtI%2B%2FXsZRmkxk21j6%2FuutV1cEeoZVPyJs77eCOEX%2F7NL90KpW%2BqFVdBP78%2Bk515IsWs3Nl%2BHid711Jlx7sl8c\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\ncf-ray: a2f978ec3c75568a-OSL\r\ncontent-length: 1007\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":5677,"size_decoded":1934,"mime_type":"text/css; charset=UTF-8","magic":"ASCII text, with very long lines (5677), with no line terminators","md5":"e1faab7794cdeb6bfe4916eb0e3f7a0e","sha1":"c4d492688b4ced0d09495c98c79eed510df9302a","sha256":"6e860c1714d11b1b75c4b3ff39cc1139bc9d379628ce7f2b0c978a367b3c07fc","sha512":"2a2efb20469181a6eea3490f35a2b8c5adcd85599ad07f587f21a3e42407f3e90f9510f22ff2a2224fe2fe455cd6f9e7cc7a4d96c1f0f1c430538b1191abc492","ssdeep":"48:w0l0Uh1t1daU9u3GY7171QkDxZ191Kc+I1+nGcHYHTF3FIZietxg9fg0zBE0lBES:TDnaxkCvby1lwE1qZNw+P4w+O","tlshash":"f2c1988d89867db773e7022ff49b50282e929c93d39aefda600fc406d3c2da755341a5","first_seen":"2023-04-09T18:34:00Z","last_seen":"2026-08-23T10:36:29.869289Z","times_seen":1018,"resource_available":false,"data":null}},"time_used":68,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":68,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-23","alert":"Sinkholed","trigger":"happymodx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"happymodx.com/fc-mobile-soccer/","fqdn":"happymodx.com","domain":"happymodx.com","tld":"com"},"ip":{"addr":"104.21.39.80","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-08-23T10:35:40.642Z","timestamp":1787481340642,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"happymodx.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 28 Jul 2026 09:00:25 GMT","end":"Mon, 26 Oct 2026 10:00:20 GMT"},"fingerprint":{"sha1":"FE:29:9A:0F:BF:23:3E:7B:7B:09:E3:15:8C:DD:03:24:B2:44:F9:87","sha256":"D3:DC:55:AE:12:9C:AC:87:D1:C7:22:A0:4D:BA:D1:40:94:85:03:14:B3:02:E8:37:C8:78:61:6F:C5:79:A4:BD"}}},"request":{"raw":"GET /fc-mobile-soccer/ HTTP/1.1\r\nHost: happymodx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nx-powered-by: PHP/8.3.31\r\ncontent-type: text/html; charset=UTF-8\r\nx-ua-compatible: IE=edge\r\nlink: \u003chttps://happymodx.com/wp-json/\u003e; rel=\"https://api.w.org/\", \u003chttps://happymodx.com/wp-json/wp/v2/posts/1120\u003e; rel=\"alternate\"; title=\"JSON\"; type=\"application/json\", \u003chttps://happymodx.com/?p=1120\u003e; rel=shortlink\r\ncache-control: public, max-age=0\r\nexpires: Sun, 23 Aug 2026 10:35:45 GMT\r\npriority: u=0,i\r\nvary: Accept-Encoding,Accept-Encoding\r\ndate: Sun, 23 Aug 2026 10:35:45 GMT\r\nserver: cloudflare\r\nplatform: hostinger\r\npanel: hpanel\r\ncontent-security-policy: upgrade-insecure-requests\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=3pLfqkaKDUeI%2BOCdTVA3sJ6HyB%2F8MErYuIKhCpkEQ9DK3VcFhcQIAgnIqbHkqQLZiYbkFNLM9hjPYGVJD8Yv%2BgBkKkZfT7%2BmVG7kZexGjdRgutZb41xZlr0Nvxc3Zfbo\"}]}\r\ncontent-encoding: zstd\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a2f978cb2b62568a-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Contact Form 7:6.1.7","description":"Contact Form 7 is an WordPress plugin which can manage multiple contact forms. The form supports Ajax-powered submitting, CAPTCHA, Akismet spam filtering.","website":"https://contactform7.com","common_platform_enumeration":"","icon":"Contact Form 7.png","categories":["WordPress plugins","Form builders"]},{"name":"PHP:8.3.31","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"Google Analytics","description":"Google Analytics is a free web analytics service that tracks and reports website traffic.","website":"https://google.com/analytics","common_platform_enumeration":"","icon":"Google Analytics.svg","categories":["Analytics"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Kadence WP Blocks","description":"Kadence Blocks is a plugin for WordPress that provides a collection of custom blocks for the WordPress Block Editor, allowing users to create custom layouts and designs for their website without needing to know how to code.","website":"https://www.kadencewp.com/kadence-blocks/","common_platform_enumeration":"","icon":"Kadence WP.svg","categories":["WordPress plugins"]},{"name":"jQuery Migrate:3.4.1","description":"Query Migrate is a javascript library that allows you to preserve the compatibility of your jQuery code developed for versions of jQuery older than 1.9.","website":"https://github.com/jquery/jquery-migrate","common_platform_enumeration":"","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"GeneratePress GP Premium:2.5.6","description":"GP Premium is a premium add-on plugin for the GeneratePress WordPress theme.","website":"https://docs.generatepress.com/article/installing-gp-premium/","common_platform_enumeration":"","icon":"generatepress.png","categories":["WordPress plugins"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"WordPress:7.1","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"WordPress Block Editor","description":"Sites using the WordPress Block Editor, also known as Gutenberg.","website":"https://wordpress.org/gutenberg/","common_platform_enumeration":"","icon":"WordPress.svg","categories":["Page builders"]},{"name":"GeneratePress","description":"GeneratePress is a lightweight WordPress theme that focuses on speed, stability, and accessibility","website":"https://generatepress.com","common_platform_enumeration":"","icon":"generatepress.png","categories":["WordPress themes"]}],"data":{"size":201536,"size_decoded":60597,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (11378), with CRLF, LF line terminators","md5":"c8c8797c677afd9de45da89f54151aff","sha1":"097f0ae6254b242db8a4e1b08241d277538bbb15","sha256":"754bbf450b787c289c30c9e1070e8ab22a6c1fb8bc5220b06ff72f32b899970c","sha512":"80cad0ece625bb9bb3e2ccfa915b12b2b69df5f60da886a5391f3af3e909a6c58d2401bcb13ba73a2ddab0df12505fc75f2533422a91327441c77c544b3e6b15","ssdeep":"6144:LZaJ0D4oDD44ofF5pejZTXF3ft17CKgs90w6mH:sJ0D4oDD44Mjpev56mH","tlshash":"fc146ce1e770143b2a7b4279b11b624ab2b6d512df4a85e0f1bcc1585fc8ee204a3f5d","first_seen":"2026-08-23T10:36:29.871511Z","last_seen":"2026-08-23T10:36:29.871511Z","times_seen":1,"resource_available":false,"data":null}},"time_used":4994,"timings":{"blocked":-1,"dns":9,"connect":19,"send":0,"wait":4894,"receive":72,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-23","alert":"Sinkholed","trigger":"happymodx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"happymodx.com/wp-includes/js/dist/i18n.min.js?ver=1dfe7db3940c23ea9216","fqdn":"happymodx.com","domain":"happymodx.com","tld":"com"},"ip":{"addr":"104.21.39.80","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://happymodx.com/fc-mobile-soccer/","date":"2026-08-23T10:35:45.975Z","timestamp":1787481345975,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"happymodx.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 28 Jul 2026 09:00:25 GMT","end":"Mon, 26 Oct 2026 10:00:20 GMT"},"fingerprint":{"sha1":"FE:29:9A:0F:BF:23:3E:7B:7B:09:E3:15:8C:DD:03:24:B2:44:F9:87","sha256":"D3:DC:55:AE:12:9C:AC:87:D1:C7:22:A0:4D:BA:D1:40:94:85:03:14:B3:02:E8:37:C8:78:61:6F:C5:79:A4:BD"}}},"request":{"raw":"GET /wp-includes/js/dist/i18n.min.js?ver=1dfe7db3940c23ea9216 HTTP/1.1\r\nHost: happymodx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://happymodx.com/fc-mobile-soccer/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Sun, 30 Aug 2026 08:58:44 GMT\r\ncontent-type: application/x-javascript; charset=UTF-8\r\nlast-modified: Fri, 21 Aug 2026 02:21:28 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding,Accept-Encoding\r\nserver-timing: cfExtPri\r\ndate: Sun, 23 Aug 2026 10:35:45 GMT\r\nserver: cloudflare\r\nplatform: hostinger\r\npanel: hpanel\r\ncontent-security-policy: upgrade-insecure-requests\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 5821\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xXYcGwKllwXSFkLp4OJlR2YjdyCbwcQsrlKmhcbmoGna6JLQSgaut9L5e1R13%2FKBTzsnl797vb6JKCZ6s33CC8rXRyFVRT6usTu7aMcxELTdELiRhcaz03h%2Fn9wM9FMC\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: a2f978ec5c7e568a-OSL\r\ncontent-length: 2376\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":5791,"size_decoded":3305,"mime_type":"application/x-javascript; charset=UTF-8","magic":"data","md5":"d2f655e068f223e5da12d436aac88d38","sha1":"003146f39636a30ac250b0f043d61bcc01117b17","sha256":"5083905862c2b7aa8a84c4f2313d359d2288fb25fbe1ff577fa7325eff2ed2d9","sha512":"c3fa9c3955bbe3b74e30755c4c551204aa1a034f8d48c8ab2747eca57466409ac0dfbdfc76a7a3554ea64cdbd730bf3cae3c1270382e66df24afc8b8ed48bf38","ssdeep":"96:oE7/RPgrMs4WLJOmlWS33c0xyE2B1596NiH826V0NG7CXMGOyd/sEomkKvYCGaMs:Xhgws4WTBYNB1C9aNwAMPyd0R3SGaMSn","tlshash":"f6c1a8c979def056235910a594afb005e134be2870deb800aae0c4957eb44cdb1b7fba","first_seen":"2026-08-19T23:17:42.197722Z","last_seen":"2026-08-23T13:23:37.123817Z","times_seen":908,"resource_available":true,"data":null}},"time_used":26,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":26,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-23","alert":"Sinkholed","trigger":"happymodx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"happymodx.com/wp-content/plugins/convert-rank-math-faq-to-accordion/assets/js/inb-rm-faq-accordion.min.js?ver=1.0.8","fqdn":"happymodx.com","domain":"happymodx.com","tld":"com"},"ip":{"addr":"104.21.39.80","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://happymodx.com/fc-mobile-soccer/","date":"2026-08-23T10:35:45.978Z","timestamp":1787481345978,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"happymodx.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 28 Jul 2026 09:00:25 GMT","end":"Mon, 26 Oct 2026 10:00:20 GMT"},"fingerprint":{"sha1":"FE:29:9A:0F:BF:23:3E:7B:7B:09:E3:15:8C:DD:03:24:B2:44:F9:87","sha256":"D3:DC:55:AE:12:9C:AC:87:D1:C7:22:A0:4D:BA:D1:40:94:85:03:14:B3:02:E8:37:C8:78:61:6F:C5:79:A4:BD"}}},"request":{"raw":"GET /wp-content/plugins/convert-rank-math-faq-to-accordion/assets/js/inb-rm-faq-accordion.min.js?ver=1.0.8 HTTP/1.1\r\nHost: happymodx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://happymodx.com/fc-mobile-soccer/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Sun, 30 Aug 2026 08:58:45 GMT\r\ncontent-type: application/x-javascript; charset=UTF-8\r\nlast-modified: Tue, 04 Aug 2026 06:51:25 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding,Accept-Encoding\r\nserver-timing: cfExtPri\r\ndate: Sun, 23 Aug 2026 10:35:46 GMT\r\nserver: cloudflare\r\nplatform: hostinger\r\npanel: hpanel\r\ncontent-security-policy: upgrade-insecure-requests\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 5820\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=SOkG%2FD3UPoNlFFSQEIT7CDEXrEfEUDHOdd4snYIrS3njjr7HbzqHzHqFtto1mMTauIApENgWchZ5qAx%2BN4Cj96qT0EPuLYGy%2BExDjwCOqMlt6PCn%2B%2FNiXUMdtCEEmkOS\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: a2f978ec5c81568a-OSL\r\ncontent-length: 430\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]}],"data":{"size":1700,"size_decoded":1364,"mime_type":"application/x-javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (1700), with no line terminators","md5":"8133e6ce51f0bdc05d4445fd979d8885","sha1":"ce5e6afe1e7aad97a9aabc3d839a216e70854a64","sha256":"cc5ea4cbdc4308e3df9c4e85aaa164b424c9891121c7a0b00462718e7c1b16bd","sha512":"a4c380899c0343daeff0ca3b96e0970b2febeba6b10875a876c1f15aa2fd2465a62ed8970b066cbffaf54e7d78ad49cc71d7569724e25eb2a7bc5f3d4074c40e","ssdeep":"","tlshash":"3531c344700c677501bb338a1c43db05541ee861f670ae58756355bd1e2ada4ff36b27","first_seen":"2025-08-14T13:44:27.515728Z","last_seen":"2026-08-23T10:37:00.290081Z","times_seen":46,"resource_available":true,"data":null}},"time_used":65,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":65,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-23","alert":"Sinkholed","trigger":"happymodx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"happymodx.com/wp-content/plugins/luckywp-table-of-contents/front/assets/main.min.js?ver=2.1.14","fqdn":"happymodx.com","domain":"happymodx.com","tld":"com"},"ip":{"addr":"104.21.39.80","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://happymodx.com/fc-mobile-soccer/","date":"2026-08-23T10:35:45.988Z","timestamp":1787481345988,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"happymodx.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 28 Jul 2026 09:00:25 GMT","end":"Mon, 26 Oct 2026 10:00:20 GMT"},"fingerprint":{"sha1":"FE:29:9A:0F:BF:23:3E:7B:7B:09:E3:15:8C:DD:03:24:B2:44:F9:87","sha256":"D3:DC:55:AE:12:9C:AC:87:D1:C7:22:A0:4D:BA:D1:40:94:85:03:14:B3:02:E8:37:C8:78:61:6F:C5:79:A4:BD"}}},"request":{"raw":"GET /wp-content/plugins/luckywp-table-of-contents/front/assets/main.min.js?ver=2.1.14 HTTP/1.1\r\nHost: happymodx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://happymodx.com/fc-mobile-soccer/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Sun, 30 Aug 2026 08:58:45 GMT\r\ncontent-type: application/x-javascript; charset=UTF-8\r\nlast-modified: Mon, 01 Dec 2025 14:36:19 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding,Accept-Encoding\r\nserver-timing: cfExtPri\r\ndate: Sun, 23 Aug 2026 10:35:46 GMT\r\nserver: cloudflare\r\nplatform: hostinger\r\npanel: hpanel\r\ncontent-security-policy: upgrade-insecure-requests\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 5820\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=hLX%2FGaAy1Om%2BaEkT84QEbMfdebEydwd9DhcaUCaY4cMSlaYrBT1QXVRxgUrBWtX1KWb7fi1puLT2gjgy2iqp1s3AAi%2Bobudhq2y8CVy7QBwI2q6URjXTUeLGzPp6gBAU\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: a2f978ec6c8a568a-OSL\r\ncontent-length: 1333\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":3678,"size_decoded":2264,"mime_type":"application/x-javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (3678), with no line terminators","md5":"d5e3262f9f557bb91d6ffba0801707f6","sha1":"2beed0a2c56d4511f7bbdcf07500e9d12f3342c8","sha256":"995456f7211327129612b97dc0a2baa2288f1e3065d1d6ed1882a0eb89d6baac","sha512":"b25997c3b7923f6c52baae4bc7a476b39bde52944eaee992b33ae7042bd26d5ea61cfcdf32cfb5ffb0e77b2e69a494f507978480e1b50aa4f0927fd0c6b2be02","ssdeep":"","tlshash":"207187fa7200763349fbb196da1f53423035207577079484e63cf88a547c9d63a27eb9","first_seen":"2023-03-07T12:24:12Z","last_seen":"2026-08-23T12:51:51.365362Z","times_seen":1322,"resource_available":true,"data":null}},"time_used":31,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":31,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-23","alert":"Sinkholed","trigger":"happymodx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.redgarto.com/sb/ssp/interstitial/bottom_banner/1/css/animate.css","fqdn":"cdn.redgarto.com","domain":"redgarto.com","tld":"com"},"ip":{"addr":"104.21.80.164","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://happymodx.com/fc-mobile-soccer/","date":"2026-08-23T10:35:47.733Z","timestamp":1787481347733,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"redgarto.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 07 Aug 2026 14:01:04 GMT","end":"Thu, 05 Nov 2026 15:00:52 GMT"},"fingerprint":{"sha1":"7C:BC:79:D9:68:83:B8:37:9E:CC:BA:8F:27:B7:E6:30:D0:CC:5C:D7","sha256":"C7:1A:1B:B8:98:AD:22:5C:50:DD:66:BC:40:9A:82:01:4C:2B:75:DE:91:17:5D:48:DB:0C:B0:5A:69:6E:4E:9E"}}},"request":{"raw":"GET /sb/ssp/interstitial/bottom_banner/1/css/animate.css HTTP/1.1\r\nHost: cdn.redgarto.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://happymodx.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://happymodx.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 23 Aug 2026 10:35:48 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\nlast-modified: Fri, 19 Jan 2024 14:19:45 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"65aa8501-13361\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: public, max-age=315360000\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: Date\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=KdGl97%2FKHus%2Fb%2BnkVx8cUu6Q0VEFCVFpqAWusEvrazuN4DvjQ4DF%2FAZWCTzyfmIBOze2lhUM47iCp8fjuUt2tSs0e9ExCh%2FcsAKECRSY6oexFptdyifNZNnGlMI91eFOWVwP\"}]}\r\ncf-ray: a2f978f75cddc272-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":78689,"size_decoded":5652,"mime_type":"text/css","magic":"ASCII text","md5":"3d4123dbfb33d27a5cfdfcfa91df6783","sha1":"e7d0eeeec54b848f0bc3da8685fa3bc88429d660","sha256":"cb7d1393b65701b2f97d8da244c2c6023e9cbc3463ecb0136b915cfc775c6887","sha512":"75c8a48dc207595e201b50b87ff68782112a21aded9f15f14185c07d40f0151d6afe74a2b278aa575caf12ac422e8166316296ed7b6573ea24e667cca4af51dd","ssdeep":"384:jvuAuF81dghu3ublZlX/m/Gu7uNUtrL4VrbZJgBhLYNKwZiMUL6Vpaj7F:jvuAu21dghu3uLu7uNKwZiMUL6Vpaj7F","tlshash":"22731bad399115845263861d83df9e68273ce5731826acef73c2488bcf8bf9867c9147","first_seen":"2024-01-20T06:37:31Z","last_seen":"2026-08-23T10:37:00.326713Z","times_seen":13559,"resource_available":false,"data":null}},"time_used":479,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":479,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zoologyfibre.com/pixel/sbls?bv=\u0026tmpl=482\u0026u=https%3A%2F%2Fcdn.redgarto.com%2Fsb%2Fssp%2Finterstitial%2Fbottom_banner%2F1%2Fcss%2Fstyle.css\u0026l=3487\u0026fd=491","fqdn":"zoologyfibre.com","domain":"zoologyfibre.com","tld":"com"},"ip":{"addr":"23.111.84.124","port":443,"asn":7979,"as":"SERVERS-COM","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://happymodx.com/fc-mobile-soccer/","date":"2026-08-23T10:35:48.227Z","timestamp":1787481348227,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"zoologyfibre.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 27 Jun 2026 03:57:55 GMT","end":"Fri, 25 Sep 2026 03:57:54 GMT"},"fingerprint":{"sha1":"21:E1:0C:F0:3C:47:B6:51:43:59:A6:9C:7F:45:F3:83:AF:8E:E8:1C","sha256":"8C:62:F5:05:48:06:52:25:19:4D:0F:3D:B5:18:63:0E:57:03:24:EE:E2:B9:FB:E5:24:00:E5:7B:9C:AE:94:CB"}}},"request":{"raw":"GET /pixel/sbls?bv=\u0026tmpl=482\u0026u=https%3A%2F%2Fcdn.redgarto.com%2Fsb%2Fssp%2Finterstitial%2Fbottom_banner%2F1%2Fcss%2Fstyle.css\u0026l=3487\u0026fd=491 HTTP/1.1\r\nHost: zoologyfibre.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://happymodx.com/\r\nCookie: uid_id2=45f7fc2f-ad1e-4091-9c0e-b18d5e4a10df:3:1; ain=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.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.rD8lnIlgN_MXbDR-XfeCHTcB5ZDvbXg0XIRp7IoGSLU; pdhtkv=true; uncs=2; pdhtkv27=true; uncs27=1; u_pl27763416=1; iprc_c+713dfa2da62b5b8f41671024dfebcde0=1438851; iprc_c-1438851=8; pdhtkv29=true; uncs29=1; u_pl28373961=1; slecf0582dcc2dc78c0d7cc66bdcca52b3ab=[6790251]\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.30.2\r\nDate: Sun, 23 Aug 2026 10:35:48 GMT\r\nContent-Length: 0\r\nConnection: keep-alive\r\nAccept-Ch: Sec-Ch-Ua-Platform, Sec-Ch-Ua-Model, X-Ucbrowser-Device-Ua, User-Agent, Sec-Ch-Ua-Platform-Version, Sec-Ch-Ua, Sec-Ch-Ua-Platformuser-Agent, Sec-Ch-Ua-Full-Version-List, Sec-Ch-Ua-Mobile, Device-Stock-Ua, X-Device-User-Agent, X-Operamini-Phone-Ua, Sec-Ch-Ua-Full-Version\r\nHost: zoologyfibre.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nCache-Control: no-cache\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Allow-Methods: GET, POST, OPTIONS\r\nAccess-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Upgrade-Insecure-Requests,C-High-Entropy-Values\r\nAccess-Control-Expose-Headers: Content-Length,Content-Range\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.30.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":798,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-23T12:26:49.723432Z","times_seen":18055306,"resource_available":true,"data":null}},"time_used":24,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":24,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-22","alert":"Sinkholed","trigger":"zoologyfibre.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"happymodx.com/wp-content/uploads/2025/09/cropped-favicon-32x32.png","fqdn":"happymodx.com","domain":"happymodx.com","tld":"com"},"ip":{"addr":"104.21.39.80","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://happymodx.com/fc-mobile-soccer/","date":"2026-08-23T10:35:47.026Z","timestamp":1787481347026,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"happymodx.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 28 Jul 2026 09:00:25 GMT","end":"Mon, 26 Oct 2026 10:00:20 GMT"},"fingerprint":{"sha1":"FE:29:9A:0F:BF:23:3E:7B:7B:09:E3:15:8C:DD:03:24:B2:44:F9:87","sha256":"D3:DC:55:AE:12:9C:AC:87:D1:C7:22:A0:4D:BA:D1:40:94:85:03:14:B3:02:E8:37:C8:78:61:6F:C5:79:A4:BD"}}},"request":{"raw":"GET /wp-content/uploads/2025/09/cropped-favicon-32x32.png HTTP/1.1\r\nHost: happymodx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://happymodx.com/fc-mobile-soccer/\r\nCookie: dom3ic8zudi28v8lr6fgphwffqoz0j6c=45f7fc2f-ad1e-4091-9c0e-b18d5e4a10df%3A3%3A1; pll_language=en; _ga_ZKZB7TG472=GS2.1.s1787481346$o1$g0$t1787481346$j60$l0$h0; _ga=GA1.1.1430642084.1787481347; sb_main_f0582dcc2dc78c0d7cc66bdcca52b3ab=1; sb_count_f0582dcc2dc78c0d7cc66bdcca52b3ab=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=10368000\r\nexpires: Mon, 21 Dec 2026 10:35:47 GMT\r\ncontent-type: image/png\r\nlast-modified: Tue, 23 Sep 2025 10:13:47 GMT\r\naccept-ranges: bytes\r\nserver-timing: cfExtPri\r\ndate: Sun, 23 Aug 2026 10:35:47 GMT\r\nserver: cloudflare\r\nplatform: hostinger\r\npanel: hpanel\r\ncontent-security-policy: upgrade-insecure-requests\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6vJ%2F8fxy75nnGHASu8RavGT18q2YQcPKQb3q3dmQ2%2Fe0Bf8OH5rW8G1mdhwmM7oxAMtqKlhbe4EgxEoHiNXQZJd3lI4zc8nS6tEhiLOBPgZxgxPB%2BGKbpA7AbvBkFfB0\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=6,i=?0\r\ncf-ray: a2f978f3dd13568a-OSL\r\ncontent-length: 1365\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":1365,"size_decoded":2220,"mime_type":"image/png","magic":"PNG image data, 32 x 32, 8-bit colormap, non-interlaced","md5":"0c71c50195a9fd2d06b7c0d184699f59","sha1":"a728ff7844adfd8b3fa3c2d026750f077148b6a0","sha256":"3532d289ebb871fa9f085451a45603d121a7cc25a2f4667af56154fee44e3abd","sha512":"3d222fa4eb8e25b70fbfe5bd7cc7801c263d12e0182c72c3017a73090155de5c61d67e1b3b16741bfb4e619c08c651e4b57ca722e8f290a2ab8fb5965feeef51","ssdeep":"","tlshash":"9321a5e15a6be88cc36a1a3e7d073b8c04975b9d0362d043d44ae62b3e0dfd4537b6a4","first_seen":"2025-12-06T17:52:34.995022Z","last_seen":"2026-08-23T10:37:00.274444Z","times_seen":11,"resource_available":false,"data":null}},"time_used":686,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":686,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-23","alert":"Sinkholed","trigger":"happymodx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.storageimagedisplay.com/cti/ba/61/29/ba6129abebdc29459ff4aec2284b9694/1781174149.jpg","fqdn":"cdn.storageimagedisplay.com","domain":"storageimagedisplay.com","tld":"com"},"ip":{"addr":"45.133.44.1","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://happymodx.com/fc-mobile-soccer/","date":"2026-08-23T10:35:47.042Z","timestamp":1787481347042,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.storageimagedisplay.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 05 Jul 2026 02:32:41 GMT","end":"Sat, 03 Oct 2026 02:32:40 GMT"},"fingerprint":{"sha1":"93:44:E1:27:F0:B8:DC:66:E6:9C:61:B4:0A:67:1A:15:C1:03:96:E0","sha256":"09:8F:8B:62:8F:36:FB:39:E7:E7:46:10:C8:84:35:9D:EC:3D:D1:F9:7A:9A:BA:A9:C2:94:41:1A:DF:D7:05:FC"}}},"request":{"raw":"GET /cti/ba/61/29/ba6129abebdc29459ff4aec2284b9694/1781174149.jpg HTTP/1.1\r\nHost: cdn.storageimagedisplay.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 23 Aug 2026 10:35:47 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 29049\r\nserver: nginx/1.21.6\r\nlast-modified: Thu, 11 Jun 2026 10:35:49 GMT\r\netag: \"6a2a8f85-7179\"\r\nexpires: Tue, 25 Aug 2026 10:35:47 GMT\r\ncache-control: max-age=172800\r\nx-cdn-host-id: AH0543\r\nx-proxy-cache: HIT\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":29049,"size_decoded":29397,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop 26.3 (Macintosh), datetime=2026:06:09 16:04:59], progressive, precision 8, 468x60, components 3","md5":"fbbb01582b346f5320009bd827ab8b18","sha1":"9443e2d64c0fb47568abb1e5ff0ca2dd8c060a1a","sha256":"28d4dc56d69d04766fe6fe78fbb4065e55d58b8211d70d1c28b67bd611845a6d","sha512":"1b4466e9ad6293d0210a3c4eaffe85b14c895266c847269115a71d1bb35dbdd1c2007cb95d2aaaa9281bdbc9fa20743e51b96ad26354406a165f7297a6e193f2","ssdeep":"768:ZLigvwHl4oiKqEHdi7ocbQjJf/1u0wm2HDVQz0p5:Z7ve+2pdimHfwN+QP","tlshash":"3dd2bf26b713eda3fac1433485fbc2a663265e94e74313927ddea0477b352768c18d82","first_seen":"2026-06-27T04:16:07.980453Z","last_seen":"2026-08-23T10:37:00.317698Z","times_seen":211,"resource_available":false,"data":null}},"time_used":27,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"happymodx.com/wp-content/uploads/2025/09/cropped-favicon-192x192.png","fqdn":"happymodx.com","domain":"happymodx.com","tld":"com"},"ip":{"addr":"104.21.39.80","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://happymodx.com/fc-mobile-soccer/","date":"2026-08-23T10:35:47.025Z","timestamp":1787481347025,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"happymodx.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 28 Jul 2026 09:00:25 GMT","end":"Mon, 26 Oct 2026 10:00:20 GMT"},"fingerprint":{"sha1":"FE:29:9A:0F:BF:23:3E:7B:7B:09:E3:15:8C:DD:03:24:B2:44:F9:87","sha256":"D3:DC:55:AE:12:9C:AC:87:D1:C7:22:A0:4D:BA:D1:40:94:85:03:14:B3:02:E8:37:C8:78:61:6F:C5:79:A4:BD"}}},"request":{"raw":"GET /wp-content/uploads/2025/09/cropped-favicon-192x192.png HTTP/1.1\r\nHost: happymodx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://happymodx.com/fc-mobile-soccer/\r\nCookie: dom3ic8zudi28v8lr6fgphwffqoz0j6c=45f7fc2f-ad1e-4091-9c0e-b18d5e4a10df%3A3%3A1; pll_language=en; _ga_ZKZB7TG472=GS2.1.s1787481346$o1$g0$t1787481346$j60$l0$h0; _ga=GA1.1.1430642084.1787481347; sb_main_f0582dcc2dc78c0d7cc66bdcca52b3ab=1; sb_count_f0582dcc2dc78c0d7cc66bdcca52b3ab=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=10368000\r\nexpires: Mon, 21 Dec 2026 08:58:45 GMT\r\ncontent-type: image/png\r\nlast-modified: Tue, 23 Sep 2025 10:13:47 GMT\r\naccept-ranges: bytes\r\nserver-timing: cfExtPri\r\ndate: Sun, 23 Aug 2026 10:35:47 GMT\r\nserver: cloudflare\r\nplatform: hostinger\r\npanel: hpanel\r\ncontent-security-policy: upgrade-insecure-requests\r\nvary: Accept-Encoding\r\nx-turbo-charged-by: LiteSpeed\r\nage: 5821\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Ixf4PjkKKIA4aCNzeiD3xL0lvOSPpvPJC9JwT2ykoibCaSbMXTHGaskbylUVl1fn2O8pxksC%2B1bOPDseFosHO4WVr92%2Buc968TbUkC9foL%2BFIvlm%2Fez5wNAx4QWHTMqW\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=6,i=?0\r\ncf-ray: a2f978f3dd14568a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 3692\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3692,"size_decoded":4559,"mime_type":"image/png","magic":"PNG image data, 192 x 192, 8-bit colormap, non-interlaced","md5":"7a1ec422709186105f85070ca2bbc2a5","sha1":"168a9124d5da6f184ed18a1aa88525c4daf7fd29","sha256":"33a15561c6dd140f189f4aadef23653140760bf49c6713bb485cb7ea619d2f09","sha512":"4bcb40edbe3af7410d356f7e4f157a51cd9b68fce651831363f6f9a557d240a9409bec5036691ca4b2e5048fd91bac2ff58db9885b00a588c6ce1f6f77ba07d2","ssdeep":"","tlshash":"d8714ae255688543c42db3d9a9370acc1e406f834340abf1546dea6c0f3eb5deda2b55","first_seen":"2025-12-06T17:52:34.978133Z","last_seen":"2026-08-23T10:37:00.262348Z","times_seen":11,"resource_available":false,"data":null}},"time_used":26,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":26,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-23","alert":"Sinkholed","trigger":"happymodx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css?family=Poppins:100,100italic,200,200italic,300,300italic,regular,italic,500,500italic,600,600italic,700,700italic,800,800italic,900,900italic\u0026display=auto\u0026ver=3.6.1","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://happymodx.com/fc-mobile-soccer/","date":"2026-08-23T10:35:45.951Z","timestamp":1787481345951,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Wed, 05 Aug 2026 20:43:53 GMT","end":"Wed, 28 Oct 2026 20:43:52 GMT"},"fingerprint":{"sha1":"91:24:44:08:3E:65:60:72:3B:18:06:E2:82:7E:C0:8F:97:46:5D:B2","sha256":"71:59:B7:BB:3B:E8:E0:81:C8:B6:24:A3:57:11:62:47:10:A1:3D:E4:38:30:54:27:2E:19:C8:96:02:25:52:DD"}}},"request":{"raw":"GET /css?family=Poppins:100,100italic,200,200italic,300,300italic,regular,italic,500,500italic,600,600italic,700,700italic,800,800italic,900,900italic\u0026display=auto\u0026ver=3.6.1 HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://happymodx.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Sun, 23 Aug 2026 10:35:46 GMT\r\ndate: Sun, 23 Aug 2026 10:35:46 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":20471,"size_decoded":1574,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"126c2fc4d51084b7607d8e4d1ad1e11e","sha1":"1f269e16f4b33f0760d8b74541c91a6bba61c09b","sha256":"f26b1f3582bfa913f3e65b95a622e11815eceab0c07e3d70e41fcb62736cfc49","sha512":"1c00caa1d2f217e72b86bb841bf2d5e8003579517c3c336b9007881a5bb560d1148eb4961efe6eb7dc802f6bf352089bbf3446976f005482e3046917fd583acb","ssdeep":"384:H3q323Hz3bAE42YsNB10A0Wq2rvDMYJQCx:XqG1QCx","tlshash":"12928ca2083ae11867831dc122cf7c36ef4ea254b444a974abfd1cdcada7c66537172d","first_seen":"2025-09-18T00:19:00.272205Z","last_seen":"2026-08-23T13:08:00.137355Z","times_seen":6205,"resource_available":false,"data":null}},"time_used":93,"timings":{"blocked":-1,"dns":0,"connect":19,"send":0,"wait":36,"receive":0,"ssl":38},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"happymodx.com/wp-content/plugins/polylang-pro/vendor/wpsyntex/polylang/flags/mx.png","fqdn":"happymodx.com","domain":"happymodx.com","tld":"com"},"ip":{"addr":"104.21.39.80","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://happymodx.com/fc-mobile-soccer/","date":"2026-08-23T10:35:46.008Z","timestamp":1787481346008,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"happymodx.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 28 Jul 2026 09:00:25 GMT","end":"Mon, 26 Oct 2026 10:00:20 GMT"},"fingerprint":{"sha1":"FE:29:9A:0F:BF:23:3E:7B:7B:09:E3:15:8C:DD:03:24:B2:44:F9:87","sha256":"D3:DC:55:AE:12:9C:AC:87:D1:C7:22:A0:4D:BA:D1:40:94:85:03:14:B3:02:E8:37:C8:78:61:6F:C5:79:A4:BD"}}},"request":{"raw":"GET /wp-content/plugins/polylang-pro/vendor/wpsyntex/polylang/flags/mx.png HTTP/1.1\r\nHost: happymodx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://happymodx.com/fc-mobile-soccer/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=10368000\r\nexpires: Mon, 21 Dec 2026 08:58:44 GMT\r\ncontent-type: image/png\r\nlast-modified: Sat, 17 Jan 2026 17:46:45 GMT\r\naccept-ranges: bytes\r\nserver-timing: cfExtPri\r\ndate: Sun, 23 Aug 2026 10:35:46 GMT\r\nserver: cloudflare\r\nplatform: hostinger\r\npanel: hpanel\r\ncontent-security-policy: upgrade-insecure-requests\r\nvary: Accept-Encoding\r\nx-turbo-charged-by: LiteSpeed\r\nage: 5821\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=IzUN%2F7gUr9bGgASQ5bHxMfiwllZLslW80VB6JxbCcMtrzYuQFZSevOH0SerLHN1iEyVXZm0%2FEOSfR66NJmkADpLOPnvwnvUKks%2FWqEkviSn28hvKbilqe4vj8waLTl0A\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a2f978ec8c92568a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 301\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":301,"size_decoded":1162,"mime_type":"image/png","magic":"PNG image data, 16 x 11, 8-bit colormap, non-interlaced","md5":"69b201f484ca46fddda2f2dd7ab2fd8d","sha1":"4657a5c946c5df2111dcb3f99bf490bbe73da1b2","sha256":"46eedb9dbf6d84375ff16c1c1d4734b59a4083ebb5f23bcdb0bab7a6bf9b4b04","sha512":"fe756417e6710d4c94f37c0d84d540085dfe0db1a5697de499f563a3d9dc006f12544412162b7690b5282c38f4a11de0bbe8481f62768553c0d48438c621fb05","ssdeep":"","tlshash":"13e07dc21347cd62e639d07a1808a5d4980640390438cc9ba406937156432964d90fe5","first_seen":"2023-08-10T21:26:19Z","last_seen":"2026-08-23T10:37:00.282602Z","times_seen":30,"resource_available":false,"data":null}},"time_used":74,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":74,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-23","alert":"Sinkholed","trigger":"happymodx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"happymodx.com/wp-content/plugins/polylang-pro/vendor/wpsyntex/polylang/flags/id.png","fqdn":"happymodx.com","domain":"happymodx.com","tld":"com"},"ip":{"addr":"104.21.39.80","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://happymodx.com/fc-mobile-soccer/","date":"2026-08-23T10:35:46.009Z","timestamp":1787481346009,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"happymodx.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 28 Jul 2026 09:00:25 GMT","end":"Mon, 26 Oct 2026 10:00:20 GMT"},"fingerprint":{"sha1":"FE:29:9A:0F:BF:23:3E:7B:7B:09:E3:15:8C:DD:03:24:B2:44:F9:87","sha256":"D3:DC:55:AE:12:9C:AC:87:D1:C7:22:A0:4D:BA:D1:40:94:85:03:14:B3:02:E8:37:C8:78:61:6F:C5:79:A4:BD"}}},"request":{"raw":"GET /wp-content/plugins/polylang-pro/vendor/wpsyntex/polylang/flags/id.png HTTP/1.1\r\nHost: happymodx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://happymodx.com/fc-mobile-soccer/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=10368000\r\nexpires: Mon, 21 Dec 2026 08:58:44 GMT\r\ncontent-type: image/png\r\nlast-modified: Sat, 17 Jan 2026 17:46:45 GMT\r\naccept-ranges: bytes\r\nserver-timing: cfExtPri\r\ndate: Sun, 23 Aug 2026 10:35:46 GMT\r\nserver: cloudflare\r\nplatform: hostinger\r\npanel: hpanel\r\ncontent-security-policy: upgrade-insecure-requests\r\nvary: Accept-Encoding\r\nx-turbo-charged-by: LiteSpeed\r\nage: 5821\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=AA9sPhpxK7tdbzUInrHkojsLkI3%2Fzwnhzq%2FR6G2Y3aCXbC0HohfDy%2B%2BqJArgtUUjt3c8dhy1ZO4kzuZC5oNpXyYCVJ3612vkJDXDTCzXLYa1WQcG6TDjlfFAzMVTiq3m\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a2f978ec8c93568a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 209\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]}],"data":{"size":209,"size_decoded":1072,"mime_type":"image/png","magic":"PNG image data, 16 x 11, 8-bit colormap, non-interlaced","md5":"ba885e9307bb09329efdca99b46cd159","sha1":"f9d4ad41a24287017c5970918dbed0c679af3e16","sha256":"6d6be5e8968870bd645d4eca1d28a7b0eb085c9292822fc5564a45174c6290a0","sha512":"f32112097c73a9eafed32d58a8b114b545ee4a28a7450a1e296ba05b37f4d197463e21464510abc9ffc615b4a19a8458d0303e9a1ef3b337d86519562844e9b6","ssdeep":"","tlshash":"dbd022e7abd8ac3cf1c51f33400f8808a8e2ceba0cd24a1c149aaf2c2022000ccc00a1","first_seen":"2023-07-06T09:52:10Z","last_seen":"2026-08-23T10:37:00.305656Z","times_seen":115,"resource_available":false,"data":null}},"time_used":51,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":51,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-23","alert":"Sinkholed","trigger":"happymodx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"yastatic.net/s3/home/fonts/ys/3/text-variable-full.woff2","fqdn":"yastatic.net","domain":"yastatic.net","tld":"net"},"ip":{"addr":"37.9.64.225","port":443,"asn":13238,"as":"YANDEX LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://happymodx.com/fc-mobile-soccer/","date":"2026-08-23T10:35:47.370Z","timestamp":1787481347370,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.yastatic-net.ru","organization":""},"issuer":{"commonName":"GlobalSign RSA OV SSL CA 2018","organization":"GlobalSign nv-sa"},"validity":{"start":"Thu, 30 Apr 2026 11:34:07 GMT","end":"Wed, 28 Oct 2026 20:59:59 GMT"},"fingerprint":{"sha1":"14:F1:2A:10:FA:A0:C8:25:E4:FA:ED:1B:89:69:12:33:27:F7:15:83","sha256":"C4:5F:F3:D1:06:B5:27:D4:9D:32:12:86:B3:BF:A1:45:D4:C3:D0:F7:8C:1D:83:41:1D:52:97:A1:9F:EE:A2:79"}}},"request":{"raw":"GET /s3/home/fonts/ys/3/text-variable-full.woff2 HTTP/1.1\r\nHost: yastatic.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://happymodx.com/\r\nOrigin: https://happymodx.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 23 Aug 2026 10:35:47 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 26004\r\nvary: Accept-Encoding\r\nnel: {\"report_to\": \"network-errors\", \"max_age\": 7200, \"success_fraction\": 0.001, \"failure_fraction\": 0.01}\r\nx-nginx-request-id: dbb20c93c1affbdc\r\nlast-modified: Mon, 25 Apr 2022 14:02:39 GMT\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=31556952\r\naccess-control-allow-origin: *\r\nx-amz-meta-owner: {\"role\":\"admin\",\"login\":\"4eb0da\"}\r\nstrict-transport-security: max-age=43200000; includeSubDomains;\r\nexpires: Mon, 23 Aug 2027 15:57:07 GMT\r\nreport-to: { \"group\": \"network-errors\", \"max_age\": 7200, \"endpoints\": [ { \"url\": \"https://dr.yandex.net/nel\"}]}\r\netag: \"7f0cdaf91230f9789ca4162aedff612e\"\r\nx-strm-log-split: 0\r\nx-request-id: 6d0c52c1874c0939\r\ncache-host: cloudcdn-rad-11.cdn.yandex.net\r\ncache-status: HIT\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":26004,"size_decoded":26903,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 26004, version 1.0","md5":"7f0cdaf91230f9789ca4162aedff612e","sha1":"965de571aa794dab64076c3cc64dc8894b843f23","sha256":"033696b7f1ac04d1dcc102be84550e146236ceffc25a6cabc12aa51a6ee410b9","sha512":"444460846fa2bfddd7990c792c6fd8389c564b5c967b5cc10fb3717117c5424fa33f23f8c4cffefad176016a79be5557920908cc82f7942700a0fac71eefde36","ssdeep":"768:cBrkn2SWY48o/bS/qDzWhKnxy03RQD1K4Gzs:cBrKS8o2kKKxyKQD1K4Gzs","tlshash":"37c2d0a5e7112b92c93556a4f6cb4849bc25b0532c56f3825fa9af80344be8357efc3c","first_seen":"2023-04-05T11:29:19Z","last_seen":"2026-08-23T11:45:44.394124Z","times_seen":29439,"resource_available":false,"data":null}},"time_used":54,"timings":{"blocked":-1,"dns":0,"connect":14,"send":0,"wait":16,"receive":1,"ssl":22},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"happymodx.com/wp-content/plugins/convert-rank-math-faq-to-accordion/assets/css/inb-rm-faq-accordion.min.css?ver=1.0.8","fqdn":"happymodx.com","domain":"happymodx.com","tld":"com"},"ip":{"addr":"104.21.39.80","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://happymodx.com/fc-mobile-soccer/","date":"2026-08-23T10:35:45.773Z","timestamp":1787481345773,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"happymodx.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 28 Jul 2026 09:00:25 GMT","end":"Mon, 26 Oct 2026 10:00:20 GMT"},"fingerprint":{"sha1":"FE:29:9A:0F:BF:23:3E:7B:7B:09:E3:15:8C:DD:03:24:B2:44:F9:87","sha256":"D3:DC:55:AE:12:9C:AC:87:D1:C7:22:A0:4D:BA:D1:40:94:85:03:14:B3:02:E8:37:C8:78:61:6F:C5:79:A4:BD"}}},"request":{"raw":"GET /wp-content/plugins/convert-rank-math-faq-to-accordion/assets/css/inb-rm-faq-accordion.min.css?ver=1.0.8 HTTP/1.1\r\nHost: happymodx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://happymodx.com/fc-mobile-soccer/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=31536000\r\nexpires: Mon, 23 Aug 2027 08:58:40 GMT\r\ncontent-type: text/css; charset=UTF-8\r\nlast-modified: Tue, 04 Aug 2026 06:51:25 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding,Accept-Encoding\r\nserver-timing: cfExtPri\r\ndate: Sun, 23 Aug 2026 10:35:45 GMT\r\nserver: cloudflare\r\nplatform: hostinger\r\npanel: hpanel\r\ncontent-security-policy: upgrade-insecure-requests\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 5824\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=AfKTjOV0j%2Fr6vpMYweQfv7pYG3MmOi18GTeDXz%2BNJHEvJtizKL349zh9Ox8f6W2PopVs07RoJiaZ0actJBimesP3dPn84wMY%2BR1r%2FRXAtyZACPI%2F0rzimvE%2BJizM%2BpBe\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\ncf-ray: a2f978eb0c51568a-OSL\r\ncontent-length: 422\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":1585,"size_decoded":1346,"mime_type":"text/css; charset=UTF-8","magic":"ASCII text, with very long lines (1585), with no line terminators","md5":"a7f0bc63f94ba4a89f91520c0269431a","sha1":"f627156a1d537e4b62e7460831bb772881d0eac6","sha256":"9597d6ba5aa3a50e29c3cd728653a1119e7c374e1e8c92f543e9fdb4079edcac","sha512":"76527271c73e71e4704cf101931361ea136e7fb5377fba4f3d3f60d8587dc5f11056bc84079bd82796455defb3e0cee4b532ea92060584078c267ffaec5cd62f","ssdeep":"","tlshash":"b931816370c99278d40b5b291ad6dd982c13db42ed6267a4b501544c47cf7f9f71870e","first_seen":"2025-08-14T13:44:27.508453Z","last_seen":"2026-08-23T10:37:00.342108Z","times_seen":67,"resource_available":false,"data":null}},"time_used":72,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":72,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-23","alert":"Sinkholed","trigger":"happymodx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"happymodx.com/wp-content/themes/generatepress/assets/css/components/widget-areas.min.css?ver=3.6.1","fqdn":"happymodx.com","domain":"happymodx.com","tld":"com"},"ip":{"addr":"104.21.39.80","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://happymodx.com/fc-mobile-soccer/","date":"2026-08-23T10:35:45.779Z","timestamp":1787481345779,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"happymodx.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 28 Jul 2026 09:00:25 GMT","end":"Mon, 26 Oct 2026 10:00:20 GMT"},"fingerprint":{"sha1":"FE:29:9A:0F:BF:23:3E:7B:7B:09:E3:15:8C:DD:03:24:B2:44:F9:87","sha256":"D3:DC:55:AE:12:9C:AC:87:D1:C7:22:A0:4D:BA:D1:40:94:85:03:14:B3:02:E8:37:C8:78:61:6F:C5:79:A4:BD"}}},"request":{"raw":"GET /wp-content/themes/generatepress/assets/css/components/widget-areas.min.css?ver=3.6.1 HTTP/1.1\r\nHost: happymodx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://happymodx.com/fc-mobile-soccer/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=31536000\r\nexpires: Mon, 23 Aug 2027 08:58:40 GMT\r\ncontent-type: text/css; charset=UTF-8\r\nlast-modified: Tue, 02 Dec 2025 00:09:57 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding,Accept-Encoding\r\nserver-timing: cfExtPri\r\ndate: Sun, 23 Aug 2026 10:35:45 GMT\r\nserver: cloudflare\r\nplatform: hostinger\r\npanel: hpanel\r\ncontent-security-policy: upgrade-insecure-requests\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 5824\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=bQL%2B%2FK006vlwuFzqsiId%2BFKWEGB2yOHeQn7lwQzmuxY5Ko1yTuVloTFcPrbfKcSKZKjwvcRCmmBTsRpjSH78cL4VzQcBXoBKwOfOenzZBXMW7QbSFIdlzDF1yieJDP5y\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\ncf-ray: a2f978eb1c57568a-OSL\r\ncontent-length: 622\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":3356,"size_decoded":1538,"mime_type":"text/css; charset=UTF-8","magic":"ASCII text, with very long lines (3356), with no line terminators","md5":"f9b0b1948dca272b16005165ab098f29","sha1":"6e6ae044e8392eb26831476b5340808d076ff76f","sha256":"f67e99114807ecac9bba6fbb9f81eea467c50c9f03b59974fe696bdfab6ba227","sha512":"ef44daa0524b9154a0d83b57e66accc70284c318893df7ccee6de0bcb7e9f537d1fd47ca4e52c88de7d519290f53c76641812f1cdd0ddb4b5e90b6acb5718477","ssdeep":"","tlshash":"1b61ac2078759d2eb937450676f120086450a6ebea5a9cfb7cbeff76c4825c04c364ed","first_seen":"2024-02-10T03:24:26Z","last_seen":"2026-08-23T13:02:57.233989Z","times_seen":7102,"resource_available":false,"data":null}},"time_used":76,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":76,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-23","alert":"Sinkholed","trigger":"happymodx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"portalfluently.com/sfp.js","fqdn":"portalfluently.com","domain":"portalfluently.com","tld":"com"},"ip":{"addr":"23.111.84.220","port":443,"asn":7979,"as":"SERVERS-COM","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://happymodx.com/fc-mobile-soccer/","date":"2026-08-23T10:35:46.503Z","timestamp":1787481346503,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"portalfluently.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 17 Aug 2026 23:40:44 GMT","end":"Sun, 15 Nov 2026 23:40:43 GMT"},"fingerprint":{"sha1":"04:7E:87:1C:D4:BF:C8:7A:47:9E:4C:FB:2A:44:D1:25:8D:83:7F:1A","sha256":"0B:F1:DB:9B:8C:77:3E:61:8B:03:C2:BF:97:81:32:72:FC:3C:87:CC:8E:6E:6B:D5:93:EF:4F:11:1C:B6:E2:06"}}},"request":{"raw":"GET /sfp.js HTTP/1.1\r\nHost: portalfluently.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://happymodx.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.30.2\r\nDate: Sun, 23 Aug 2026 10:35:46 GMT\r\nContent-Type: application/javascript; charset=utf-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\naccess-control-allow-origin: *\r\ncontent-encoding: zstd\r\nvary: Accept-Encoding\r\nx-envoy-upstream-service-time: 1\r\nHost: portalfluently.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: 5dd38b519486ca2e9d2c5d8a68c24f4b\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.30.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":85379,"size_decoded":31089,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65529), with no line terminators","md5":"b3a5ba94d627e64a77c0e11eaffc96ed","sha1":"f7358693b31e44211dd98b5aa0dc2a3f423286aa","sha256":"600f01dd96f043e58e0e70a82afbba6ffe0923d836f6293c1e6fc1cb5b074d34","sha512":"64800bcce3e1a65638dfedfe22f205b51725865db3332be95a142e39e4cb40f57358d0c4c01ebb366b8da56aa978b6c7ee992e2c27563bac76c3998014c3d64b","ssdeep":"1536:nPncLBSUBULrSVvTfMtfj3FkdFcE5PnoRC:nPncLBSUBULGVTfGpucE5foM","tlshash":"488395807ac06488d3979b7bb73bf4eaf65a299f38c4044bd100fc48b69562af9f5534","first_seen":"2025-11-18T17:36:30.149277Z","last_seen":"2026-08-23T10:52:27.81712Z","times_seen":27125,"resource_available":true,"data":null}},"time_used":158,"timings":{"blocked":0,"dns":2,"connect":18,"send":0,"wait":23,"receive":56,"ssl":58},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-22","alert":"Sinkholed","trigger":"portalfluently.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zoologyfibre.com/pixel/sbls?bv=\u0026tmpl=482\u0026u=https%3A%2F%2Fcdn.show-sb.com%2Fsb%2Fau%2F78%2F74%2Ffd%2F7874fd62186fc577273fa59756d17076%2F1744381737.html\u0026l=1544\u0026fd=540","fqdn":"zoologyfibre.com","domain":"zoologyfibre.com","tld":"com"},"ip":{"addr":"23.111.84.124","port":443,"asn":7979,"as":"SERVERS-COM","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://happymodx.com/fc-mobile-soccer/","date":"2026-08-23T10:35:47.737Z","timestamp":1787481347737,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"zoologyfibre.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 27 Jun 2026 03:57:55 GMT","end":"Fri, 25 Sep 2026 03:57:54 GMT"},"fingerprint":{"sha1":"21:E1:0C:F0:3C:47:B6:51:43:59:A6:9C:7F:45:F3:83:AF:8E:E8:1C","sha256":"8C:62:F5:05:48:06:52:25:19:4D:0F:3D:B5:18:63:0E:57:03:24:EE:E2:B9:FB:E5:24:00:E5:7B:9C:AE:94:CB"}}},"request":{"raw":"GET /pixel/sbls?bv=\u0026tmpl=482\u0026u=https%3A%2F%2Fcdn.show-sb.com%2Fsb%2Fau%2F78%2F74%2Ffd%2F7874fd62186fc577273fa59756d17076%2F1744381737.html\u0026l=1544\u0026fd=540 HTTP/1.1\r\nHost: zoologyfibre.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://happymodx.com/\r\nCookie: uid_id2=45f7fc2f-ad1e-4091-9c0e-b18d5e4a10df:3:1; ain=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.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.rD8lnIlgN_MXbDR-XfeCHTcB5ZDvbXg0XIRp7IoGSLU; pdhtkv=true; uncs=2; pdhtkv27=true; uncs27=1; u_pl27763416=1; iprc_c+713dfa2da62b5b8f41671024dfebcde0=1438851; iprc_c-1438851=8; pdhtkv29=true; uncs29=1; u_pl28373961=1; slecf0582dcc2dc78c0d7cc66bdcca52b3ab=[6790251]\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.30.2\r\nDate: Sun, 23 Aug 2026 10:35:47 GMT\r\nContent-Length: 0\r\nConnection: keep-alive\r\nAccept-Ch: Device-Stock-Ua, X-Device-User-Agent, X-Operamini-Phone-Ua, User-Agent, Sec-Ch-Ua-Platformuser-Agent, Sec-Ch-Ua-Full-Version, Sec-Ch-Ua-Platform, Sec-Ch-Ua-Mobile, X-Ucbrowser-Device-Ua, Sec-Ch-Ua-Platform-Version, Sec-Ch-Ua, Sec-Ch-Ua-Full-Version-List, Sec-Ch-Ua-Model\r\nHost: zoologyfibre.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nCache-Control: no-cache\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Allow-Methods: GET, POST, OPTIONS\r\nAccess-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Upgrade-Insecure-Requests,C-High-Entropy-Values\r\nAccess-Control-Expose-Headers: Content-Length,Content-Range\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.30.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":798,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-23T12:26:49.723432Z","times_seen":18055306,"resource_available":true,"data":null}},"time_used":39,"timings":{"blocked":0,"dns":0,"connect":22,"send":0,"wait":32,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-22","alert":"Sinkholed","trigger":"zoologyfibre.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zoologyfibre.com/pixel/sbls?bv=\u0026tmpl=482\u0026u=https%3A%2F%2Fcdn.redgarto.com%2Fsb%2Fssp%2Finterstitial%2Fbottom_banner%2F1%2Fcss%2Fstyle.css\u0026l=3487\u0026fd=491","fqdn":"zoologyfibre.com","domain":"zoologyfibre.com","tld":"com"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://happymodx.com/fc-mobile-soccer/","date":"2026-08-23T10:35:48.317Z","timestamp":1787481348317,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /pixel/sbls?bv=\u0026tmpl=482\u0026u=https%3A%2F%2Fcdn.redgarto.com%2Fsb%2Fssp%2Finterstitial%2Fbottom_banner%2F1%2Fcss%2Fstyle.css\u0026l=3487\u0026fd=491 HTTP/1.1\r\nHost: zoologyfibre.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://happymodx.com/\r\nCookie: uid_id2=45f7fc2f-ad1e-4091-9c0e-b18d5e4a10df:3:1; ain=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.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.rD8lnIlgN_MXbDR-XfeCHTcB5ZDvbXg0XIRp7IoGSLU; pdhtkv=true; uncs=2; pdhtkv27=true; uncs27=1; u_pl27763416=1; iprc_c+713dfa2da62b5b8f41671024dfebcde0=1438851; iprc_c-1438851=8; pdhtkv29=true; uncs29=1; u_pl28373961=1; slecf0582dcc2dc78c0d7cc66bdcca52b3ab=[6790251]\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-23T12:26:49.723432Z","times_seen":18055306,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-22","alert":"Sinkholed","trigger":"zoologyfibre.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"happymodx.com/wp-content/plugins/kk-star-ratings/src/core/public/svg/inactive.svg","fqdn":"happymodx.com","domain":"happymodx.com","tld":"com"},"ip":{"addr":"104.21.39.80","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://happymodx.com/fc-mobile-soccer/","date":"2026-08-23T10:35:46.567Z","timestamp":1787481346567,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"happymodx.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 28 Jul 2026 09:00:25 GMT","end":"Mon, 26 Oct 2026 10:00:20 GMT"},"fingerprint":{"sha1":"FE:29:9A:0F:BF:23:3E:7B:7B:09:E3:15:8C:DD:03:24:B2:44:F9:87","sha256":"D3:DC:55:AE:12:9C:AC:87:D1:C7:22:A0:4D:BA:D1:40:94:85:03:14:B3:02:E8:37:C8:78:61:6F:C5:79:A4:BD"}}},"request":{"raw":"GET /wp-content/plugins/kk-star-ratings/src/core/public/svg/inactive.svg HTTP/1.1\r\nHost: happymodx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://happymodx.com/wp-content/plugins/kk-star-ratings/src/core/public/css/kk-star-ratings.min.css?ver=5.4.10.5\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=10368000\r\nexpires: Mon, 21 Dec 2026 08:58:44 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Thu, 09 Jul 2026 03:45:58 GMT\r\npriority: u=4,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=CYS8v2KOK93CIiIoUgWO%2FaXPWsk2PfA4aXz0cWF%2FbUOXetUk%2BdTRC3IA8H3BAs8KeO338aQxGyScbpxwCybLRjioviSzdfgdXTPUTgQeKJcg%2FnxPQmoqwCFg0461UMEf\"}]}\r\ndate: Sun, 23 Aug 2026 10:35:46 GMT\r\nserver: cloudflare\r\nplatform: hostinger\r\npanel: hpanel\r\ncontent-security-policy: upgrade-insecure-requests\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 5822\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a2f978f00cdf568a-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":238,"size_decoded":1042,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"5e86cb665cf3001e54a890d4c32275d7","sha1":"555f2d46621a249c86a3a319792e675d87bfc8b6","sha256":"2c0c291bc0981ba13c0fab388914b31ab2729ab42036ef251081077a196403f6","sha512":"63d2b7a9dd81921cdd37f64ac732bf86e5ca8a98c8e58c93fb1526fe539a2d8c0ed8c7f49d378aefbdb1466c5f1b60257f4bc1036c3a6a1b1a3e8de6d68cb0c9","ssdeep":"","tlshash":"4fd0a7a9967d84a6c7a58f527f6435a0682e383e5180c25d704c25305788296d817e94","first_seen":"2023-05-17T12:41:47Z","last_seen":"2026-08-23T10:36:29.88731Z","times_seen":1300,"resource_available":false,"data":null}},"time_used":69,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":69,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-23","alert":"Sinkholed","trigger":"happymodx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.storageimagedisplay.com/cti/47/b3/99/47b39994b130f963ec19bebb5a194e79/1781174117.jpg","fqdn":"cdn.storageimagedisplay.com","domain":"storageimagedisplay.com","tld":"com"},"ip":{"addr":"45.133.44.1","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://happymodx.com/fc-mobile-soccer/","date":"2026-08-23T10:35:46.927Z","timestamp":1787481346927,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.storageimagedisplay.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 05 Jul 2026 02:32:41 GMT","end":"Sat, 03 Oct 2026 02:32:40 GMT"},"fingerprint":{"sha1":"93:44:E1:27:F0:B8:DC:66:E6:9C:61:B4:0A:67:1A:15:C1:03:96:E0","sha256":"09:8F:8B:62:8F:36:FB:39:E7:E7:46:10:C8:84:35:9D:EC:3D:D1:F9:7A:9A:BA:A9:C2:94:41:1A:DF:D7:05:FC"}}},"request":{"raw":"GET /cti/47/b3/99/47b39994b130f963ec19bebb5a194e79/1781174117.jpg HTTP/1.1\r\nHost: cdn.storageimagedisplay.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 23 Aug 2026 10:35:46 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 23687\r\nserver: nginx/1.21.6\r\nlast-modified: Thu, 11 Jun 2026 10:35:17 GMT\r\netag: \"6a2a8f65-5c87\"\r\nexpires: Tue, 25 Aug 2026 10:35:46 GMT\r\ncache-control: max-age=172800\r\nx-cdn-host-id: AH0543\r\nx-proxy-cache: HIT\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":23687,"size_decoded":24035,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop 26.3 (Macintosh), datetime=2026:06:10 16:35:03], progressive, precision 8, 320x50, components 3","md5":"a00939334cad5796259546d8a8cf7ceb","sha1":"d685a3e5efb1ff3f4d254ff772053e814c8eae08","sha256":"819f23f958b13ad7623c8ac7dc200fbcd4e24feabfbbccc6be295dd1f9a7952b","sha512":"052b948c57d171190b0c4bc00374df06a4ac1e5750743be0ddd76ed2ee845f25b68db533a0bff1936ae31cc9dfcc5c1e556135f298a9b8be778d9323c269f7dc","ssdeep":"384:i6L9i61iS36L9i6tnQRLBQblHraW0HAcWExkoYue6H7kPVbSR:iwi61iSwi6tQiOtH3VYue67kxSR","tlshash":"1fb29e21b794ce22f4e0523a9450c787ab31fd886ab32b457dce78513f7a3a44e5e242","first_seen":"2026-07-02T17:48:05.253007Z","last_seen":"2026-08-23T10:36:29.889123Z","times_seen":130,"resource_available":false,"data":null}},"time_used":79,"timings":{"blocked":-1,"dns":0,"connect":21,"send":0,"wait":31,"receive":3,"ssl":24},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yastatic.net/partner-code-bundles/libs/libs_render-033ae686.js","fqdn":"yastatic.net","domain":"yastatic.net","tld":"net"},"ip":{"addr":"37.9.64.225","port":443,"asn":13238,"as":"YANDEX LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://happymodx.com/fc-mobile-soccer/","date":"2026-08-23T10:35:47.382Z","timestamp":1787481347382,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.yastatic-net.ru","organization":""},"issuer":{"commonName":"GlobalSign RSA OV SSL CA 2018","organization":"GlobalSign nv-sa"},"validity":{"start":"Thu, 30 Apr 2026 11:34:07 GMT","end":"Wed, 28 Oct 2026 20:59:59 GMT"},"fingerprint":{"sha1":"14:F1:2A:10:FA:A0:C8:25:E4:FA:ED:1B:89:69:12:33:27:F7:15:83","sha256":"C4:5F:F3:D1:06:B5:27:D4:9D:32:12:86:B3:BF:A1:45:D4:C3:D0:F7:8C:1D:83:41:1D:52:97:A1:9F:EE:A2:79"}}},"request":{"raw":"GET /partner-code-bundles/libs/libs_render-033ae686.js HTTP/1.1\r\nHost: yastatic.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://happymodx.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://happymodx.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 23 Aug 2026 10:35:47 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ncontent-length: 45019\r\nstrict-transport-security: max-age=43200000; includeSubDomains;\r\ncache-control: public, max-age=946708560\r\nexpires: Tue, 22 Aug 2056 16:57:30 GMT\r\naccess-control-allow-origin: *\r\nx-robots-tag: noindex, noarchive, nofollow\r\ntiming-allow-origin: *\r\nvary: Accept-Encoding\r\nnel: {\"report_to\": \"network-errors\", \"max_age\": 7200, \"success_fraction\": 0.001, \"failure_fraction\": 0.01}\r\nlast-modified: Tue, 26 May 2026 15:44:21 GMT\r\nreport-to: { \"group\": \"network-errors\", \"max_age\": 7200, \"endpoints\": [ { \"url\": \"https://dr.yandex.net/nel\"}]}\r\ncontent-encoding: br\r\netag: \"f0e84c9dc13c60b7f85fb5ec13d7117c\"\r\nx-strm-log-split: 0\r\nx-request-id: b9d72b24971d63b5\r\ncache-host: cloudcdn-rad-11.cdn.yandex.net\r\ncache-status: HIT\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":249149,"size_decoded":45914,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65499)","md5":"d754269422d94f98d69252e63d2024cc","sha1":"2258f9d30e0785989a536f5fb220b6be68219328","sha256":"9858dd7119d0f2eccec9bfa316d4aa0f99b6ddef5e1320cd1722f735674bc6da","sha512":"e9956dc4f9326cb89b82cc774831de1656309a9423f2a764fd156944e9c2560d02f4ed9a049ba2770c97636ba1b568b4dcce303c81e305dd0d0254f917002028","ssdeep":"1536:dBD/fF6QaNTGIc7cX8qeLaAryfkEeOR66llyp23j4GOQ6ckUcWRxH4tEluKR1i0i:P5SGX7g8BYlyp2z2BWoy5Xix","tlshash":"9434c5e1863a0d1c1dea3142ea752c3e24662cc7d908cb6dee6f915fe544be4f38135a","first_seen":"2026-05-28T17:31:03.147441Z","last_seen":"2026-08-23T13:13:30.552364Z","times_seen":2418,"resource_available":true,"data":null}},"time_used":81,"timings":{"blocked":-1,"dns":1,"connect":16,"send":0,"wait":39,"receive":7,"ssl":17},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.redgarto.com/sb/ssp/interstitial/bottom_banner/1/css/style.css","fqdn":"cdn.redgarto.com","domain":"redgarto.com","tld":"com"},"ip":{"addr":"104.21.80.164","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://happymodx.com/fc-mobile-soccer/","date":"2026-08-23T10:35:47.708Z","timestamp":1787481347708,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"redgarto.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 07 Aug 2026 14:01:04 GMT","end":"Thu, 05 Nov 2026 15:00:52 GMT"},"fingerprint":{"sha1":"7C:BC:79:D9:68:83:B8:37:9E:CC:BA:8F:27:B7:E6:30:D0:CC:5C:D7","sha256":"C7:1A:1B:B8:98:AD:22:5C:50:DD:66:BC:40:9A:82:01:4C:2B:75:DE:91:17:5D:48:DB:0C:B0:5A:69:6E:4E:9E"}}},"request":{"raw":"GET /sb/ssp/interstitial/bottom_banner/1/css/style.css HTTP/1.1\r\nHost: cdn.redgarto.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://happymodx.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://happymodx.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 23 Aug 2026 10:35:48 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\nlast-modified: Fri, 19 Jan 2024 14:19:45 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"65aa8501-d9f\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: public, max-age=315360000\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: Date\r\ncontent-encoding: gzip\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=wA0CrjTe%2Bs8RtsftS5GEwiHnACyLus6H%2B52PStyIDie83FqgJk5npHWHHEs9Ww7KTC31LEEbDxLEaPvdP02pWZnJj8TXgUaEtw1TLApDUY0O%2Byku5YJSrjbO%2FFk3FjKZJfvJ\"}]}\r\ncf-ray: a2f978f73c85c272-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3487,"size_decoded":1785,"mime_type":"text/css","magic":"ASCII text","md5":"f9f1955433320a3b43c5741f2bde9a3d","sha1":"3b70c2a57fad02833bf227d8b6a0391ac8b98432","sha256":"cbb99d697521db3b645225c1b50873e6aa8a39c91afcc7c8dd756746b8bf2645","sha512":"7a1022ad699c484dd3b7e5a870d01b8baa4a357f203d6dd73ddaa237bd1aa8d2cd5a599077c261dd6ea45cdaa685285aba8b844090fdef7fa0f0b9ecf4a70fda","ssdeep":"","tlshash":"7a710f863b7916047427d96a38112b5777198103aa4fdd74afd1381cceca38acaa33cf","first_seen":"2024-09-26T07:50:15Z","last_seen":"2026-08-23T10:37:00.309267Z","times_seen":2211,"resource_available":false,"data":null}},"time_used":486,"timings":{"blocked":0,"dns":2,"connect":1,"send":0,"wait":472,"receive":0,"ssl":11},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.redgarto.com/sb/ssp/interstitial/bottom_banner/1/css/style.css","fqdn":"cdn.redgarto.com","domain":"redgarto.com","tld":"com"},"ip":{"addr":"104.21.80.164","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://happymodx.com/fc-mobile-soccer/","date":"2026-08-23T10:35:47.734Z","timestamp":1787481347734,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"redgarto.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 07 Aug 2026 14:01:04 GMT","end":"Thu, 05 Nov 2026 15:00:52 GMT"},"fingerprint":{"sha1":"7C:BC:79:D9:68:83:B8:37:9E:CC:BA:8F:27:B7:E6:30:D0:CC:5C:D7","sha256":"C7:1A:1B:B8:98:AD:22:5C:50:DD:66:BC:40:9A:82:01:4C:2B:75:DE:91:17:5D:48:DB:0C:B0:5A:69:6E:4E:9E"}}},"request":{"raw":"GET /sb/ssp/interstitial/bottom_banner/1/css/style.css HTTP/1.1\r\nHost: cdn.redgarto.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://happymodx.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://happymodx.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 23 Aug 2026 10:35:48 GMT\r\ncontent-type: text/css\r\nserver: cloudflare\r\nlast-modified: Fri, 19 Jan 2024 14:19:45 GMT\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\netag: W/\"65aa8501-d9f\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: public, max-age=315360000\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: Date\r\ncontent-encoding: gzip\r\nage: 0\r\ncf-cache-status: HIT\r\nvary: accept-encoding\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=dSqZrbQkuyckk9FSgzi2RZU0wbioF1CjlR4bpvRE4pR3Zu7YovH7G7l4%2BZVxUvL7wXnF57yhULg3V%2FoqcUFT2fVMNUd7L0wBCCnLqLsdwU%2FW20dpaO5O4RPW16hDDJjOblth\"}]}\r\ncf-ray: a2f978f75ce1c272-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3487,"size_decoded":1790,"mime_type":"text/css","magic":"ASCII text","md5":"f9f1955433320a3b43c5741f2bde9a3d","sha1":"3b70c2a57fad02833bf227d8b6a0391ac8b98432","sha256":"cbb99d697521db3b645225c1b50873e6aa8a39c91afcc7c8dd756746b8bf2645","sha512":"7a1022ad699c484dd3b7e5a870d01b8baa4a357f203d6dd73ddaa237bd1aa8d2cd5a599077c261dd6ea45cdaa685285aba8b844090fdef7fa0f0b9ecf4a70fda","ssdeep":"","tlshash":"7a710f863b7916047427d96a38112b5777198103aa4fdd74afd1381cceca38acaa33cf","first_seen":"2024-09-26T07:50:15Z","last_seen":"2026-08-23T10:37:00.309267Z","times_seen":2211,"resource_available":false,"data":null}},"time_used":501,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":500,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.redgarto.com/sb/ssp/interstitial/bottom_banner/1/js/jquery.min.js","fqdn":"cdn.redgarto.com","domain":"redgarto.com","tld":"com"},"ip":{"addr":"104.21.80.164","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://happymodx.com/fc-mobile-soccer/","date":"2026-08-23T10:35:47.838Z","timestamp":1787481347838,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"redgarto.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 07 Aug 2026 14:01:04 GMT","end":"Thu, 05 Nov 2026 15:00:52 GMT"},"fingerprint":{"sha1":"7C:BC:79:D9:68:83:B8:37:9E:CC:BA:8F:27:B7:E6:30:D0:CC:5C:D7","sha256":"C7:1A:1B:B8:98:AD:22:5C:50:DD:66:BC:40:9A:82:01:4C:2B:75:DE:91:17:5D:48:DB:0C:B0:5A:69:6E:4E:9E"}}},"request":{"raw":"GET /sb/ssp/interstitial/bottom_banner/1/js/jquery.min.js HTTP/1.1\r\nHost: cdn.redgarto.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 23 Aug 2026 10:35:47 GMT\r\ncontent-type: application/javascript\r\nserver-timing: cfExtPri\r\nlast-modified: Fri, 19 Jan 2024 14:19:45 GMT\r\npriority: u=3,i=?0\r\netag: \"65aa8501-15d94\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: public, max-age=315360000\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: Date\r\naccept-ranges: bytes\r\nage: 2076465\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=si%2Bn1k2KkjjE%2ByVLz37vbNuSLTYmaG8jHx%2BDWHjCl%2BtUXyVk2RGDI927a%2FV9IggcFC2s4rC4lHbRYyRcXYVd%2FuTDcBcRZJuCE0MkTCHnZKTwc6dYQUweGhNVPLJKr7kBZC8I\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a2f978f7fb9656b7-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 89492\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":89492,"size_decoded":90336,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65451)","md5":"561acb3e541133bbdd2c0c19f8ee35a1","sha1":"ffd1353cf3f77d25f801c84d8208613eb0d3d548","sha256":"9fde6da568db31801e29243a903bf24f342256b41e3c01e7d018ff7c566ce7fc","sha512":"8a647ed6f56b4da93c7a034609060991cc8080350f057f4f2af2c369f18af066db3b4e77701fc017027fd774264a6d0f84927239d7d2f693edc6f7d6a0917be3","ssdeep":"1536:YjExXUqrnxDjoXEZxkMV4SYSt0zvDD6ip3h5cApwEjOPrBeU6QLiTFbc0QlQvakV:YYh8eip3hXuf6IidlrvakdtQ47GKl","tlshash":"f993f9ddb2c6702257a720ba007f510bf236199d6c4d8450f265d8e9bcb8a4e827bf7d","first_seen":"2023-03-07T01:04:00Z","last_seen":"2026-08-23T10:37:00.30618Z","times_seen":8033,"resource_available":true,"data":null}},"time_used":15,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":11,"receive":4,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"establishscarcely.com/ccf2cef4382fd13c1ed6f76b041b5c50/invoke.js","fqdn":"establishscarcely.com","domain":"establishscarcely.com","tld":"com"},"ip":{"addr":"172.240.108.68","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://happymodx.com/fc-mobile-soccer/","date":"2026-08-23T10:35:45.970Z","timestamp":1787481345970,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"establishscarcely.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 16 Aug 2026 21:49:18 GMT","end":"Sat, 14 Nov 2026 21:49:17 GMT"},"fingerprint":{"sha1":"C8:88:67:AE:2D:51:85:B6:4F:55:EE:9C:FE:AB:4F:3A:93:7A:60:3B","sha256":"8C:54:B4:51:FA:49:79:87:4E:7D:F2:16:F4:CA:5B:78:DC:9E:4A:8E:9C:9F:81:73:3C:23:02:6C:D8:DD:38:75"}}},"request":{"raw":"GET /ccf2cef4382fd13c1ed6f76b041b5c50/invoke.js HTTP/1.1\r\nHost: establishscarcely.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://happymodx.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.2\r\nDate: Sun, 23 Aug 2026 10:35:46 GMT\r\nContent-Type: application/javascript\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\naccept-ch: Sec-Ch-Ua-Platform,Sec-Ch-Ua-Model,Sec-Ch-Ua-Mobile,X-Device-User-Agent,X-Ucbrowser-Device-Ua,Sec-Ch-Ua-Platformuser-Agent,Sec-Ch-Ua-Full-Version-List,Sec-Ch-Ua-Full-Version,Device-Stock-Ua,X-Operamini-Phone-Ua,User-Agent,Sec-Ch-Ua-Platform-Version,Sec-Ch-Ua\r\naccess-control-allow-origin: *\r\ncontent-encoding: zstd\r\nset-cookie: pip_af1d4578dcc89a3eeb602480415e4abe=1; Path=/; Expires=Mon, 24 Aug 2026 10:35:46 GMT; Secure; SameSite=None\r\nvary: Accept-Encoding\r\nx-envoy-upstream-service-time: 6\r\nHost: establishscarcely.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: 98d29c88fc2a57a178e066361d98940f\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":[{"name":"pip_af1d4578dcc89a3eeb602480415e4abe","value":"1","quoted":false,"path":"/","expires":"2026-08-24T10:35:46Z","raw_expires":"Mon, 24 Aug 2026 10:35:46 GMT","secure":true,"http_only":false,"same_site":"None","partitioned":false,"raw":"pip_af1d4578dcc89a3eeb602480415e4abe=1; Path=/; Expires=Mon, 24 Aug 2026 10:35:46 GMT; Secure; SameSite=None"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.28.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}],"data":{"size":35479,"size_decoded":16239,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (35479), with no line terminators","md5":"3c72b19bc2d6bfda9b3cc1e2d2a7c673","sha1":"83371eea4f3a762eab3cf1b09afe0bc5721c91c4","sha256":"c8a457350065846159d9334f26b6796694235372a75002cba0358695c2bf7abe","sha512":"7518a670016e48d57c2a455931b105aac59c5b6a176645d7ba273c48e51489474962799150fbf9c7686f26727855833dc7b1f47f0193b50edd3732f337dce9f8","ssdeep":"768:y+QGHr9qbGrW34GKD3r5IzOVeYcx9y+XuYE+5d/raP4QEoG:J104GK7r5ISVcyA7n5dzatEoG","tlshash":"50f2d5c83fe1d06f17b664a3332be52ba05b1e40578de8a8e877b45ce904f15f8791a0","first_seen":"2026-08-23T10:36:29.89172Z","last_seen":"2026-08-23T10:36:29.89172Z","times_seen":1,"resource_available":true,"data":null}},"time_used":516,"timings":{"blocked":-1,"dns":46,"connect":91,"send":0,"wait":101,"receive":91,"ssl":187},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"happymodx.com/wp-content/plugins/polylang-pro/vendor/wpsyntex/polylang/flags/az.png","fqdn":"happymodx.com","domain":"happymodx.com","tld":"com"},"ip":{"addr":"104.21.39.80","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://happymodx.com/fc-mobile-soccer/","date":"2026-08-23T10:35:46.012Z","timestamp":1787481346012,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"happymodx.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 28 Jul 2026 09:00:25 GMT","end":"Mon, 26 Oct 2026 10:00:20 GMT"},"fingerprint":{"sha1":"FE:29:9A:0F:BF:23:3E:7B:7B:09:E3:15:8C:DD:03:24:B2:44:F9:87","sha256":"D3:DC:55:AE:12:9C:AC:87:D1:C7:22:A0:4D:BA:D1:40:94:85:03:14:B3:02:E8:37:C8:78:61:6F:C5:79:A4:BD"}}},"request":{"raw":"GET /wp-content/plugins/polylang-pro/vendor/wpsyntex/polylang/flags/az.png HTTP/1.1\r\nHost: happymodx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://happymodx.com/fc-mobile-soccer/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=10368000\r\nexpires: Mon, 21 Dec 2026 08:58:45 GMT\r\ncontent-type: image/png\r\nlast-modified: Sat, 17 Jan 2026 17:46:45 GMT\r\naccept-ranges: bytes\r\nserver-timing: cfExtPri\r\ndate: Sun, 23 Aug 2026 10:35:46 GMT\r\nserver: cloudflare\r\nplatform: hostinger\r\npanel: hpanel\r\ncontent-security-policy: upgrade-insecure-requests\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 5820\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=MuW%2F1dfmumnZCFU8cOXlzDb5WIF3R0XwHmHuV3loCUqemKpqkha9%2BFFqn7pNsMD0kKvhYpaMRaPPtVFCdvlrkQWIPtkiVdd%2FC8aKvtMBDrqGkRT98ZE6Tf9Of5gYreCj\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a2f978ec8c95568a-OSL\r\ncontent-length: 319\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":319,"size_decoded":1180,"mime_type":"image/png","magic":"PNG image data, 16 x 11, 8-bit colormap, non-interlaced","md5":"fa69cba634fa02ff8270494a97d5b0c2","sha1":"0ab09605e4566a9ae7c72ffb99062ce8fa7bec1f","sha256":"a3d32650c890312ff9ec149392629e866888fd96801ad1afd89a52929fdf2fcd","sha512":"30a6843689246d5044ff14e15dfb77174832a03725ed4d445af82c4ae45dbddc3023c868d2e2232a836959ab6c4cdc6a1755af01ee1bea296d46cb5d341fd009","ssdeep":"","tlshash":"98e02d0627680f29ec25053e482c012dc92329a30fef984c3bc8c2ae22cb8438684802","first_seen":"2023-08-10T21:26:19Z","last_seen":"2026-08-23T10:37:00.305168Z","times_seen":25,"resource_available":false,"data":null}},"time_used":73,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":73,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-23","alert":"Sinkholed","trigger":"happymodx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kettledroopingcontinuation.com/watch.1379401047695.js?dev=e\u0026fstu=01a02e30-d2c9-7e69-acb3-184804f44b88\u0026key=ccf2cef4382fd13c1ed6f76b041b5c50\u0026kw=%5B%22ea%22%2C%22sports%22%2C%22fc%22%2C%22mobile%22%2C%2226%22%2C%22mod%22%2C%22apk%22%2C%22v27%22%2C%220%22%2C%2203%22%2C%22unlimited%22%2C%22money%22%2C%22menu%22%2C%22unlocked%22%5D\u0026ps1=1787481346\u0026rb=e\u0026refer=https%3A%2F%2Fhappymodx.com%2Ffc-mobile-soccer%2F\u0026res=14.1055\u0026rmtc=t\u0026sht=Dlt5iNZ98KX87eSJKEn2E1sXgLPMzUXGe9-pxMlai2M\u0026shv=2\u0026st1=cb8c7baca70a10cd97a868208976742d\u0026tz=0\u0026uuid=495bd5a7-ba41-442d-a6d6-948b2a6dbd5c%3A1%3A1","fqdn":"kettledroopingcontinuation.com","domain":"kettledroopingcontinuation.com","tld":"com"},"ip":{"addr":"23.111.84.228","port":443,"asn":7979,"as":"SERVERS-COM","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://happymodx.com/fc-mobile-soccer/","date":"2026-08-23T10:35:46.780Z","timestamp":1787481346780,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"kettledroopingcontinuation.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 23 Aug 2026 00:02:23 GMT","end":"Sat, 21 Nov 2026 00:02:22 GMT"},"fingerprint":{"sha1":"45:C6:44:0A:42:17:85:94:0C:43:02:EA:82:14:8D:F8:D3:13:D9:E2","sha256":"8C:E7:C4:F5:8F:DB:E8:10:A8:55:E4:5C:85:CC:97:D0:7D:0A:FE:C9:6C:C4:4D:6A:FF:20:87:2C:BC:34:2D:F4"}}},"request":{"raw":"GET /watch.1379401047695.js?dev=e\u0026fstu=01a02e30-d2c9-7e69-acb3-184804f44b88\u0026key=ccf2cef4382fd13c1ed6f76b041b5c50\u0026kw=%5B%22ea%22%2C%22sports%22%2C%22fc%22%2C%22mobile%22%2C%2226%22%2C%22mod%22%2C%22apk%22%2C%22v27%22%2C%220%22%2C%2203%22%2C%22unlimited%22%2C%22money%22%2C%22menu%22%2C%22unlocked%22%5D\u0026ps1=1787481346\u0026rb=e\u0026refer=https%3A%2F%2Fhappymodx.com%2Ffc-mobile-soccer%2F\u0026res=14.1055\u0026rmtc=t\u0026sht=Dlt5iNZ98KX87eSJKEn2E1sXgLPMzUXGe9-pxMlai2M\u0026shv=2\u0026st1=cb8c7baca70a10cd97a868208976742d\u0026tz=0\u0026uuid=495bd5a7-ba41-442d-a6d6-948b2a6dbd5c%3A1%3A1 HTTP/1.1\r\nHost: kettledroopingcontinuation.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://happymodx.com\r\nReferer: https://happymodx.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: uid_id2=495bd5a7-ba41-442d-a6d6-948b2a6dbd5c:1:1; ain=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.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.rD8lnIlgN_MXbDR-XfeCHTcB5ZDvbXg0XIRp7IoGSLU\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.30.2\r\nDate: Sun, 23 Aug 2026 10:35:46 GMT\r\nContent-Type: text/html\r\nContent-Length: 1994\r\nConnection: keep-alive\r\naccept-ch: Sec-Ch-Ua-Full-Version,Sec-Ch-Ua-Platform,Sec-Ch-Ua-Mobile,X-Device-User-Agent,X-Operamini-Phone-Ua,Sec-Ch-Ua-Platform-Version,Sec-Ch-Ua-Platformuser-Agent,Sec-Ch-Ua-Model,Device-Stock-Ua,X-Ucbrowser-Device-Ua,User-Agent,Sec-Ch-Ua,Sec-Ch-Ua-Full-Version-List\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: https://happymodx.com\r\ncontent-encoding: zstd\r\nset-cookie: uid_id2=495bd5a7-ba41-442d-a6d6-948b2a6dbd5c:1:1; Path=/; Expires=Sun, 30 Aug 2026 10:35:46 GMT; Secure; SameSite=None\npdhtkv=true; Path=/; Expires=Mon, 24 Aug 2026 10:35:46 GMT; Secure; SameSite=None\nuncs=1; Path=/; Expires=Mon, 24 Aug 2026 10:35:46 GMT; Secure; SameSite=None\npdhtkv27=true; Path=/; Expires=Mon, 24 Aug 2026 10:35:46 GMT; Secure; SameSite=None\nuncs27=1; Path=/; Expires=Mon, 24 Aug 2026 10:35:46 GMT; Secure; SameSite=None\nu_pl27763416=1; Path=/; Expires=Mon, 24 Aug 2026 10:35:46 GMT; Secure; SameSite=None\r\nvary: Accept-Encoding\r\nx-envoy-upstream-service-time: 16\r\nHost: kettledroopingcontinuation.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: 8e1e6a718d5e3f539193b7f12ff1ca6d\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":[{"name":"uid_id2","value":"495bd5a7-ba41-442d-a6d6-948b2a6dbd5c:1:1","quoted":false,"path":"/","expires":"2026-08-30T10:35:46Z","raw_expires":"Sun, 30 Aug 2026 10:35:46 GMT","secure":true,"http_only":false,"same_site":"None","partitioned":false,"raw":"uid_id2=495bd5a7-ba41-442d-a6d6-948b2a6dbd5c:1:1; Path=/; Expires=Sun, 30 Aug 2026 10:35:46 GMT; Secure; SameSite=None"},{"name":"pdhtkv","value":"true","quoted":false,"path":"/","expires":"2026-08-24T10:35:46Z","raw_expires":"Mon, 24 Aug 2026 10:35:46 GMT","secure":true,"http_only":false,"same_site":"None","partitioned":false,"raw":"pdhtkv=true; Path=/; Expires=Mon, 24 Aug 2026 10:35:46 GMT; Secure; SameSite=None"},{"name":"uncs","value":"1","quoted":false,"path":"/","expires":"2026-08-24T10:35:46Z","raw_expires":"Mon, 24 Aug 2026 10:35:46 GMT","secure":true,"http_only":false,"same_site":"None","partitioned":false,"raw":"uncs=1; Path=/; Expires=Mon, 24 Aug 2026 10:35:46 GMT; Secure; SameSite=None"},{"name":"pdhtkv27","value":"true","quoted":false,"path":"/","expires":"2026-08-24T10:35:46Z","raw_expires":"Mon, 24 Aug 2026 10:35:46 GMT","secure":true,"http_only":false,"same_site":"None","partitioned":false,"raw":"pdhtkv27=true; Path=/; Expires=Mon, 24 Aug 2026 10:35:46 GMT; Secure; SameSite=None"},{"name":"uncs27","value":"1","quoted":false,"path":"/","expires":"2026-08-24T10:35:46Z","raw_expires":"Mon, 24 Aug 2026 10:35:46 GMT","secure":true,"http_only":false,"same_site":"None","partitioned":false,"raw":"uncs27=1; Path=/; Expires=Mon, 24 Aug 2026 10:35:46 GMT; Secure; SameSite=None"},{"name":"u_pl27763416","value":"1","quoted":false,"path":"/","expires":"2026-08-24T10:35:46Z","raw_expires":"Mon, 24 Aug 2026 10:35:46 GMT","secure":true,"http_only":false,"same_site":"None","partitioned":false,"raw":"u_pl27763416=1; Path=/; Expires=Mon, 24 Aug 2026 10:35:46 GMT; Secure; SameSite=None"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.30.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4100,"size_decoded":3383,"mime_type":"text/html","magic":"JavaScript source, ASCII text, with very long lines (3224)","md5":"10bc832b96831826cb057eff2cb762bd","sha1":"a47dc98af36e0764023b8d8698390f31e113342b","sha256":"819c4dd3f5eab90f3d3b7c7a817abe37eacdec6dc9439f35c307c58720ed6753","sha512":"7187c3a270cd998e06cc10f628ac7a437ab0238d86a29114fbcd387ec914c54be8f12c6128309260d897cc57189dad3fdfe89d26da343d4e739c29a0438a8333","ssdeep":"96:srozsLHSFTtaGU4oOKJFk/fSFTtaGU4oOKJE1ZD0CfMEDaH:ZzbdtOiokidtOiNV0CkCaH","tlshash":"f28109b59ee7c47c6c86603f426f7a083d36912b5e00aa07b5dcd6400f188e1cea2dd8","first_seen":"2026-08-23T10:36:29.894312Z","last_seen":"2026-08-23T10:36:29.894312Z","times_seen":1,"resource_available":false,"data":null}},"time_used":40,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":40,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-23","alert":"Sinkholed","trigger":"kettledroopingcontinuation.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-23","alert":"Sinkholed","trigger":"kettledroopingcontinuation.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-23","alert":"Sinkholed","trigger":"kettledroopingcontinuation.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"happymodx.com/wp-content/plugins/luckywp-table-of-contents/front/assets/main.min.css?ver=2.1.14","fqdn":"happymodx.com","domain":"happymodx.com","tld":"com"},"ip":{"addr":"104.21.39.80","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://happymodx.com/fc-mobile-soccer/","date":"2026-08-23T10:35:45.962Z","timestamp":1787481345962,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"happymodx.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 28 Jul 2026 09:00:25 GMT","end":"Mon, 26 Oct 2026 10:00:20 GMT"},"fingerprint":{"sha1":"FE:29:9A:0F:BF:23:3E:7B:7B:09:E3:15:8C:DD:03:24:B2:44:F9:87","sha256":"D3:DC:55:AE:12:9C:AC:87:D1:C7:22:A0:4D:BA:D1:40:94:85:03:14:B3:02:E8:37:C8:78:61:6F:C5:79:A4:BD"}}},"request":{"raw":"GET /wp-content/plugins/luckywp-table-of-contents/front/assets/main.min.css?ver=2.1.14 HTTP/1.1\r\nHost: happymodx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://happymodx.com/fc-mobile-soccer/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=31536000\r\nexpires: Mon, 23 Aug 2027 08:58:40 GMT\r\ncontent-type: text/css; charset=UTF-8\r\nlast-modified: Mon, 01 Dec 2025 14:36:19 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding,Accept-Encoding\r\nserver-timing: cfExtPri\r\ndate: Sun, 23 Aug 2026 10:35:46 GMT\r\nserver: cloudflare\r\nplatform: hostinger\r\npanel: hpanel\r\ncontent-security-policy: upgrade-insecure-requests\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 5825\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=BaDqwDMfkAqYVPisv12Cg8Hxo9BoohWIIQe1dhGv7xKte9P1iX5YyPtYKLXS5jq32C%2F1hTqKUeV1ycFVXnMt3ncImmw9au338m5PDUIKd6yxQJufAAhi3wWl3bilZkAv\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\ncf-ray: a2f978ec3c7a568a-OSL\r\ncontent-length: 638\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3029,"size_decoded":1550,"mime_type":"text/css; charset=UTF-8","magic":"ASCII text, with very long lines (3029), with no line terminators","md5":"828a9fe6e0d92027ef15bf1c6699f672","sha1":"e8f7d3afeae0498bfd05e780129202111d32961a","sha256":"5978d7eee4b0fb37c9409a3315f1ca722ebd7dfd476a42e9efa8cb016c076414","sha512":"623758277f3baaa54920d955eaea49f2c7c5d96ec0b5a956cde3cad5abf0fe0d940ed1311b1c67b52c13661ab6815795843e6d7addb87bfe9a3c1e3da2771233","ssdeep":"","tlshash":"cd519b51af56707390e2b92ef25ca12bf22c5d39c30bc72eb896e313e5415562922f17","first_seen":"2023-04-05T11:13:21Z","last_seen":"2026-08-23T12:51:51.360879Z","times_seen":1349,"resource_available":false,"data":null}},"time_used":51,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":51,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-23","alert":"Sinkholed","trigger":"happymodx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"yastatic.net/partner-code-bundles/libs/libs-033ae686.js","fqdn":"yastatic.net","domain":"yastatic.net","tld":"net"},"ip":{"addr":"37.9.64.225","port":443,"asn":13238,"as":"YANDEX LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://happymodx.com/fc-mobile-soccer/","date":"2026-08-23T10:35:47.363Z","timestamp":1787481347363,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.yastatic-net.ru","organization":""},"issuer":{"commonName":"GlobalSign RSA OV SSL CA 2018","organization":"GlobalSign nv-sa"},"validity":{"start":"Thu, 30 Apr 2026 11:34:07 GMT","end":"Wed, 28 Oct 2026 20:59:59 GMT"},"fingerprint":{"sha1":"14:F1:2A:10:FA:A0:C8:25:E4:FA:ED:1B:89:69:12:33:27:F7:15:83","sha256":"C4:5F:F3:D1:06:B5:27:D4:9D:32:12:86:B3:BF:A1:45:D4:C3:D0:F7:8C:1D:83:41:1D:52:97:A1:9F:EE:A2:79"}}},"request":{"raw":"GET /partner-code-bundles/libs/libs-033ae686.js HTTP/1.1\r\nHost: yastatic.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://happymodx.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://happymodx.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 23 Aug 2026 10:35:47 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ncontent-length: 3886\r\nnel: {\"report_to\": \"network-errors\", \"max_age\": 7200, \"success_fraction\": 0.001, \"failure_fraction\": 0.01}\r\nreport-to: { \"group\": \"network-errors\", \"max_age\": 7200, \"endpoints\": [ { \"url\": \"https://dr.yandex.net/nel\"}]}\r\nlast-modified: Tue, 26 May 2026 15:44:21 GMT\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nstrict-transport-security: max-age=43200000; includeSubDomains;\r\nvary: Accept-Encoding\r\nexpires: Tue, 22 Aug 2056 16:46:44 GMT\r\ncache-control: public, max-age=946708560\r\netag: \"556781190b14c63983c333fb72e695d7\"\r\nx-robots-tag: noindex, noarchive, nofollow\r\ncontent-encoding: br\r\nx-strm-log-split: 6\r\nx-request-id: b07b719107c2f697\r\ncache-host: cloudcdn-rad-11.cdn.yandex.net\r\ncache-status: HIT\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":9232,"size_decoded":4780,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (9202)","md5":"8e28de8572712134d1bc4a77e52bafe5","sha1":"dea7f17d1a27bb63cb09902e4e21ad59809f2480","sha256":"4cb8e701d93fbf469464d6711bf8aec61ea16595a804ee56d926e999ae12920a","sha512":"0699663a24d534849484ec03b3f2cebf8ea5dd856d9c0760de18332920aa940d097ac8edf246fe153ac91cd1d9c06c9ca04994f654f39a7297032d3847dcef74","ssdeep":"192:iHFHNNSZkrXmgldEq88LX15yvOYq7YLYIP3qt4MV+9XE:iHFn8CX+q8Y1yqcsLWMQ9XE","tlshash":"8a12d9f932a1b8c012f669c1085f557b01ba7e07b90e255b472659927d240ce60f2fef","first_seen":"2026-05-27T08:51:43.706545Z","last_seen":"2026-08-23T13:06:25.419921Z","times_seen":3255,"resource_available":true,"data":null}},"time_used":100,"timings":{"blocked":-1,"dns":0,"connect":30,"send":0,"wait":35,"receive":0,"ssl":34},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yastatic.net/partner-code-bundles/1306332/e49ddb0165e13b10.js","fqdn":"yastatic.net","domain":"yastatic.net","tld":"net"},"ip":{"addr":"37.9.64.225","port":443,"asn":13238,"as":"YANDEX LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://happymodx.com/fc-mobile-soccer/","date":"2026-08-23T10:35:47.368Z","timestamp":1787481347368,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.yastatic-net.ru","organization":""},"issuer":{"commonName":"GlobalSign RSA OV SSL CA 2018","organization":"GlobalSign nv-sa"},"validity":{"start":"Thu, 30 Apr 2026 11:34:07 GMT","end":"Wed, 28 Oct 2026 20:59:59 GMT"},"fingerprint":{"sha1":"14:F1:2A:10:FA:A0:C8:25:E4:FA:ED:1B:89:69:12:33:27:F7:15:83","sha256":"C4:5F:F3:D1:06:B5:27:D4:9D:32:12:86:B3:BF:A1:45:D4:C3:D0:F7:8C:1D:83:41:1D:52:97:A1:9F:EE:A2:79"}}},"request":{"raw":"GET /partner-code-bundles/1306332/e49ddb0165e13b10.js HTTP/1.1\r\nHost: yastatic.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://happymodx.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://happymodx.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 23 Aug 2026 10:35:47 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ncontent-length: 1762\r\ncontent-encoding: br\r\naccess-control-allow-origin: *\r\nlast-modified: Fri, 21 Aug 2026 17:58:17 GMT\r\nvary: Accept-Encoding\r\nnel: {\"report_to\": \"network-errors\", \"max_age\": 7200, \"success_fraction\": 0.001, \"failure_fraction\": 0.01}\r\nstrict-transport-security: max-age=43200000; includeSubDomains;\r\ncache-control: public, max-age=946708560\r\nexpires: Tue, 22 Aug 2056 16:54:39 GMT\r\nx-robots-tag: noindex, noarchive, nofollow\r\nreport-to: { \"group\": \"network-errors\", \"max_age\": 7200, \"endpoints\": [ { \"url\": \"https://dr.yandex.net/nel\"}]}\r\ntiming-allow-origin: *\r\netag: \"434eac2832d4b26f718f3f18228bd6ae\"\r\nx-strm-log-split: 7\r\nx-request-id: 679cbeca516d942e\r\ncache-host: cloudcdn-rad-11.cdn.yandex.net\r\ncache-status: HIT\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":4158,"size_decoded":2656,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (4119)","md5":"408c5d359870aeea840ebea93e414010","sha1":"75baae7a8639959512c5cb1116245ba77e4d4366","sha256":"5f8f3e0db1dfb51d9cbeaee6515f2c868f889ac128e6642dc619180a6a7cb1c3","sha512":"61358fde8ab68993a129739b5ff4e45709aeab9cc3a1d817d7aa572f1ac9e1f263192c664cb4369e19393444707ab14cf6ed7c5689ca5b12a826f99842a90950","ssdeep":"96:WjwRO8i264XfmP5IWiwY6dFecX75HiYsPCxhtkkmaXLgXTKTv1J0a2q1:WjC+2AP5IJwYEX95Bswv1JzL1","tlshash":"6881f8fd3681337187c215d491bb9606b63a0d11980d7461f15d84123db5fa760effad","first_seen":"2026-08-21T19:08:41.867968Z","last_seen":"2026-08-23T13:06:25.328519Z","times_seen":36,"resource_available":true,"data":null}},"time_used":89,"timings":{"blocked":-1,"dns":0,"connect":14,"send":0,"wait":50,"receive":0,"ssl":24},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yastatic.net/safeframe-bundles/0.89/host.js","fqdn":"yastatic.net","domain":"yastatic.net","tld":"net"},"ip":{"addr":"37.9.64.225","port":443,"asn":13238,"as":"YANDEX LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://happymodx.com/fc-mobile-soccer/","date":"2026-08-23T10:35:47.385Z","timestamp":1787481347385,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.yastatic-net.ru","organization":""},"issuer":{"commonName":"GlobalSign RSA OV SSL CA 2018","organization":"GlobalSign nv-sa"},"validity":{"start":"Thu, 30 Apr 2026 11:34:07 GMT","end":"Wed, 28 Oct 2026 20:59:59 GMT"},"fingerprint":{"sha1":"14:F1:2A:10:FA:A0:C8:25:E4:FA:ED:1B:89:69:12:33:27:F7:15:83","sha256":"C4:5F:F3:D1:06:B5:27:D4:9D:32:12:86:B3:BF:A1:45:D4:C3:D0:F7:8C:1D:83:41:1D:52:97:A1:9F:EE:A2:79"}}},"request":{"raw":"GET /safeframe-bundles/0.89/host.js HTTP/1.1\r\nHost: yastatic.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://happymodx.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://happymodx.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 23 Aug 2026 10:35:47 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ncontent-length: 11893\r\ntiming-allow-origin: *\r\nnel: {\"report_to\": \"network-errors\", \"max_age\": 7200, \"success_fraction\": 0.001, \"failure_fraction\": 0.01}\r\nreport-to: { \"group\": \"network-errors\", \"max_age\": 7200, \"endpoints\": [ { \"url\": \"https://dr.yandex.net/nel\"}]}\r\nvary: Accept-Encoding\r\nstrict-transport-security: max-age=43200000; includeSubDomains;\r\nexpires: Tue, 22 Aug 2056 16:53:24 GMT\r\nx-robots-tag: noindex, noarchive, nofollow\r\netag: \"2e7b6e3fb8d17570cbabde24df196cc6\"\r\ncache-control: public, max-age=946708560\r\nlast-modified: Wed, 15 Jul 2026 12:02:36 GMT\r\ncontent-encoding: br\r\naccess-control-allow-origin: *\r\nx-strm-log-split: 9\r\nx-request-id: fcd732bdcfdaed1d\r\ncache-host: cloudcdn-rad-11.cdn.yandex.net\r\ncache-status: HIT\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":49523,"size_decoded":12788,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (49523), with no line terminators","md5":"0c41ddf706aa7735a001411ff5cc9074","sha1":"50097136f039b2b11023b9bec2577b4848a9eba5","sha256":"b4c8c41fa3164e9317bdbe6fc31106d19c327bee8863dc2c6cb3bad19b56cc90","sha512":"5ff8afcb42f7256539ba8f262a9df2fe335e323ba7d17f4cc26bd359a3ff2221aec11afa9a3b3addf8cd744165c5ee818a5c086ec54f785c0c317ad74dfdfa33","ssdeep":"768:r3gRk8LqR50Uta+vmG6lLJTPzCLL8/1vjWcPykZkG:r3skLbA+vx6pcLxclZF","tlshash":"5923c8ef3195b8b502c3a0b4443f220ea33b592564199484b327d8e5bd36acf5167fbe","first_seen":"2026-07-15T18:17:51.501231Z","last_seen":"2026-08-23T13:13:30.52698Z","times_seen":972,"resource_available":true,"data":null}},"time_used":70,"timings":{"blocked":18,"dns":0,"connect":0,"send":0,"wait":50,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zoologyfibre.com/ren.gif?sid=H4sIAAAAAAAC_1xSPYwbRRid9V2XAoFCJAoSI6UACft21rtemysiRQFEkQtHglKAhOZnxzfxenezs2v7XF0IoSBCOjoKivWz7w5QiEKXDuSjQSeQ2M5FrqGgoEGKhIRokO8sRWKK7xu990nz3nzv03F-TOrI2fzdq_FIhyFb8-p29dWbOpLxwFQ3blSpXbfXqzd11HTXq8NFSftv0IZbt1-rvh2Ibrzm2NS2qU2rb-k0UPFw7YSFTh7StldvunVKW3XqORim_0dMXoFhFmT_mLwALcvnflcfQIsZot6jK4HpZnHy-pu9PGRZnKIvD96PulE8iNB7dlWpBRUdLKcRm5KQLyuIo4OlC8T96cIFuC5J5dwT8OhgKRW8v3eqlocIInB5BoP-DEE4g2YziPgutPyNAEJi4xqi3v5GnA7Y9inLFmxJVv9-Cj0oyeqTs4h6Dy-Heli9Hod5puPIYKgK6OEMujNDkh8iG1WgB4cQ2cfQ8ldiV84j6u1dZXnKoOX8ouspXwlH1ZikQc2127TWFnZQ47QlvcBl1Jbq5I-0moGZFeTGQq4t5KqCPKmgJ-dV1m4p3m66rB0oX0mb-oJ5jUbbdz1HNYWHXNyBlrsQ6b39PBLG8cf0Qf5REjq-32y4tDmm-4ncyrr9aZbmwXQxM6Zfn0KOfwIiSXfQ1bswcgUmK4m1uYO-LPZkaBxT7MvQ5Jwuu7PsjWISZ50x24uzThARsHQXqSymOrlt7kJkK5ORMnISLwrjWTFhXBYTLTOC9Pb8ok2Z7QQNuyZdxmp-y6Y1pkSj1rYbqtXyPEc26VSZLC_GyTF5frEg69HTn9EN5lVley1HCuFI4beELX0hmk0uhWCewxuMw-gC2lTAjIWRLsnmg5eQ6JK88uEFcHYIEx5C6BfB8pfBBgXYVoFR9N0WS5LtXiyHdRH3IOMCSbaKbNsah8fk7OS9G5d_PAlK56suAnF06Z9v_v0jvH8FIi2QpAVu6Z8IOuGd768lme7pEVsk53rGsmAVTJfkzP0LELok576NTkK8XnsHItmBSY4uHT_e_PPe-ceT0CQlCT6fw8QEPLEQaoIwOCLLA8YLmODZ4zw4-uGvU25sPkEntcBDa8LD1JryMA2_ONVr9LxqSzegos08XwWe53HPdYRS3PYd1Wg4rTYyU9767JeV_wIAAP__WmopSk8EAAA=","fqdn":"zoologyfibre.com","domain":"zoologyfibre.com","tld":"com"},"ip":{"addr":"23.111.84.124","port":443,"asn":7979,"as":"SERVERS-COM","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://happymodx.com/fc-mobile-soccer/","date":"2026-08-23T10:35:47.400Z","timestamp":1787481347400,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"zoologyfibre.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 27 Jun 2026 03:57:55 GMT","end":"Fri, 25 Sep 2026 03:57:54 GMT"},"fingerprint":{"sha1":"21:E1:0C:F0:3C:47:B6:51:43:59:A6:9C:7F:45:F3:83:AF:8E:E8:1C","sha256":"8C:62:F5:05:48:06:52:25:19:4D:0F:3D:B5:18:63:0E:57:03:24:EE:E2:B9:FB:E5:24:00:E5:7B:9C:AE:94:CB"}}},"request":{"raw":"GET /ren.gif?sid=H4sIAAAAAAAC_1xSPYwbRRid9V2XAoFCJAoSI6UACft21rtemysiRQFEkQtHglKAhOZnxzfxenezs2v7XF0IoSBCOjoKivWz7w5QiEKXDuSjQSeQ2M5FrqGgoEGKhIRokO8sRWKK7xu990nz3nzv03F-TOrI2fzdq_FIhyFb8-p29dWbOpLxwFQ3blSpXbfXqzd11HTXq8NFSftv0IZbt1-rvh2Ibrzm2NS2qU2rb-k0UPFw7YSFTh7StldvunVKW3XqORim_0dMXoFhFmT_mLwALcvnflcfQIsZot6jK4HpZnHy-pu9PGRZnKIvD96PulE8iNB7dlWpBRUdLKcRm5KQLyuIo4OlC8T96cIFuC5J5dwT8OhgKRW8v3eqlocIInB5BoP-DEE4g2YziPgutPyNAEJi4xqi3v5GnA7Y9inLFmxJVv9-Cj0oyeqTs4h6Dy-Heli9Hod5puPIYKgK6OEMujNDkh8iG1WgB4cQ2cfQ8ldiV84j6u1dZXnKoOX8ouspXwlH1ZikQc2127TWFnZQ47QlvcBl1Jbq5I-0moGZFeTGQq4t5KqCPKmgJ-dV1m4p3m66rB0oX0mb-oJ5jUbbdz1HNYWHXNyBlrsQ6b39PBLG8cf0Qf5REjq-32y4tDmm-4ncyrr9aZbmwXQxM6Zfn0KOfwIiSXfQ1bswcgUmK4m1uYO-LPZkaBxT7MvQ5Jwuu7PsjWISZ50x24uzThARsHQXqSymOrlt7kJkK5ORMnISLwrjWTFhXBYTLTOC9Pb8ok2Z7QQNuyZdxmp-y6Y1pkSj1rYbqtXyPEc26VSZLC_GyTF5frEg69HTn9EN5lVley1HCuFI4beELX0hmk0uhWCewxuMw-gC2lTAjIWRLsnmg5eQ6JK88uEFcHYIEx5C6BfB8pfBBgXYVoFR9N0WS5LtXiyHdRH3IOMCSbaKbNsah8fk7OS9G5d_PAlK56suAnF06Z9v_v0jvH8FIi2QpAVu6Z8IOuGd768lme7pEVsk53rGsmAVTJfkzP0LELok576NTkK8XnsHItmBSY4uHT_e_PPe-ceT0CQlCT6fw8QEPLEQaoIwOCLLA8YLmODZ4zw4-uGvU25sPkEntcBDa8LD1JryMA2_ONVr9LxqSzegos08XwWe53HPdYRS3PYd1Wg4rTYyU9767JeV_wIAAP__WmopSk8EAAA= HTTP/1.1\r\nHost: zoologyfibre.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://happymodx.com/\r\nCookie: uid_id2=45f7fc2f-ad1e-4091-9c0e-b18d5e4a10df:3:1; ain=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.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.rD8lnIlgN_MXbDR-XfeCHTcB5ZDvbXg0XIRp7IoGSLU; pdhtkv=true; uncs=2; pdhtkv27=true; uncs27=1; u_pl27763416=1; iprc_c+713dfa2da62b5b8f41671024dfebcde0=1438851; iprc_c-1438851=8; pdhtkv29=true; uncs29=1; u_pl28373961=1; slecf0582dcc2dc78c0d7cc66bdcca52b3ab=[6790251]\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.30.2\r\nDate: Sun, 23 Aug 2026 10:35:47 GMT\r\nContent-Type: image/gif\r\nContent-Length: 7\r\nConnection: keep-alive\r\naccept-ch: Sec-Ch-Ua,Sec-Ch-Ua-Platformuser-Agent,Sec-Ch-Ua-Full-Version,Sec-Ch-Ua-Model,Device-Stock-Ua,X-Operamini-Phone-Ua,X-Ucbrowser-Device-Ua,User-Agent,Sec-Ch-Ua-Full-Version-List,Sec-Ch-Ua-Platform,Sec-Ch-Ua-Mobile,X-Device-User-Agent,Sec-Ch-Ua-Platform-Version\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: *\r\nvary: Origin\r\nx-envoy-upstream-service-time: 3\r\nHost: zoologyfibre.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: bd646eab11c47db018a2cf162e8bdf20\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.30.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/gif","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-23T12:26:49.723432Z","times_seen":18055306,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-22","alert":"Sinkholed","trigger":"zoologyfibre.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"happymodx.com/wp-content/plugins/contact-form-7/includes/css/styles.css?ver=6.1.7","fqdn":"happymodx.com","domain":"happymodx.com","tld":"com"},"ip":{"addr":"104.21.39.80","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://happymodx.com/fc-mobile-soccer/","date":"2026-08-23T10:35:45.772Z","timestamp":1787481345772,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"happymodx.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 28 Jul 2026 09:00:25 GMT","end":"Mon, 26 Oct 2026 10:00:20 GMT"},"fingerprint":{"sha1":"FE:29:9A:0F:BF:23:3E:7B:7B:09:E3:15:8C:DD:03:24:B2:44:F9:87","sha256":"D3:DC:55:AE:12:9C:AC:87:D1:C7:22:A0:4D:BA:D1:40:94:85:03:14:B3:02:E8:37:C8:78:61:6F:C5:79:A4:BD"}}},"request":{"raw":"GET /wp-content/plugins/contact-form-7/includes/css/styles.css?ver=6.1.7 HTTP/1.1\r\nHost: happymodx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://happymodx.com/fc-mobile-soccer/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=31536000\r\nexpires: Mon, 23 Aug 2027 08:58:40 GMT\r\ncontent-type: text/css; charset=UTF-8\r\nlast-modified: Sat, 22 Aug 2026 15:34:59 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding,Accept-Encoding\r\nserver-timing: cfExtPri\r\ndate: Sun, 23 Aug 2026 10:35:45 GMT\r\nserver: cloudflare\r\nplatform: hostinger\r\npanel: hpanel\r\ncontent-security-policy: upgrade-insecure-requests\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 5824\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Pv0M%2BvtX2fCWVcR6YvhkLx%2F92uKbysbpP2KaHW72orzq2AG%2FK9SC%2FJ8xDiG2EqEU8iFvlR31zVzNZ3yA%2BBelhYP8DvgVFHP7WJAx5%2BdmX0U9JLpwr0psETeramBuH80Z\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\ncf-ray: a2f978eb0c4f568a-OSL\r\ncontent-length: 901\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":2979,"size_decoded":1823,"mime_type":"text/css; charset=UTF-8","magic":"ASCII text","md5":"b2b463a5bdb73833be2a6afbc1843ddd","sha1":"ade55e90dd7694b7974edd336b555e765967e702","sha256":"a3b9f5df6bf638a4cb583480bed6e18a84ad7141cc3d75b81094f91dd7b82f32","sha512":"431fcb88c720bc2ee3cd950772bbf03194b28f5a00c602287ea4877829ed377f0742dcff523e88e07dd4a7968ea8618fae59b883617d9112d61feee5167ae191","ssdeep":"","tlshash":"aa510264660028504bff92db6eaddb047b6e7481cd1faf97b0c21a7c57782851223e5e","first_seen":"2026-05-15T04:06:26.038056Z","last_seen":"2026-08-23T13:00:29.602Z","times_seen":22448,"resource_available":false,"data":null}},"time_used":72,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":72,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-23","alert":"Sinkholed","trigger":"happymodx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"happymodx.com/wp-content/themes/generatepress/assets/js/back-to-top.min.js?ver=3.6.1","fqdn":"happymodx.com","domain":"happymodx.com","tld":"com"},"ip":{"addr":"104.21.39.80","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://happymodx.com/fc-mobile-soccer/","date":"2026-08-23T10:35:45.985Z","timestamp":1787481345985,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"happymodx.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 28 Jul 2026 09:00:25 GMT","end":"Mon, 26 Oct 2026 10:00:20 GMT"},"fingerprint":{"sha1":"FE:29:9A:0F:BF:23:3E:7B:7B:09:E3:15:8C:DD:03:24:B2:44:F9:87","sha256":"D3:DC:55:AE:12:9C:AC:87:D1:C7:22:A0:4D:BA:D1:40:94:85:03:14:B3:02:E8:37:C8:78:61:6F:C5:79:A4:BD"}}},"request":{"raw":"GET /wp-content/themes/generatepress/assets/js/back-to-top.min.js?ver=3.6.1 HTTP/1.1\r\nHost: happymodx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://happymodx.com/fc-mobile-soccer/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Sun, 30 Aug 2026 08:58:45 GMT\r\ncontent-type: application/x-javascript; charset=UTF-8\r\nlast-modified: Tue, 02 Dec 2025 00:09:57 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding,Accept-Encoding\r\nserver-timing: cfExtPri\r\ndate: Sun, 23 Aug 2026 10:35:46 GMT\r\nserver: cloudflare\r\nplatform: hostinger\r\npanel: hpanel\r\ncontent-security-policy: upgrade-insecure-requests\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 5820\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=00guVsZs8Zmvf6o36OiahNPELqwVtmnFBkG3uH0ZMwIt3IpT4AdJJPg%2Fk8F8xcmG9xVXaGRnUuc4%2FfFAa%2Bq%2F7uNJ%2F2jpWFw4SfvW1MNN1KhPlG480yswAeKJW5ZVj4sU\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: a2f978ec6c87568a-OSL\r\ncontent-length: 337\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":737,"size_decoded":1271,"mime_type":"application/x-javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (737), with no line terminators","md5":"5fc35421139ef9851bc72d3edb90cfba","sha1":"0091cadf005c865d7c4ef093fac9d35566fd1e48","sha256":"3310986e26439bd35318188bd35b0c326bd3334e6699ca0469fd4f0b7d497098","sha512":"0fda88fda5b8a67c7b750712da3543e4572cb89565284cf1cbffb1ec0927f21626ff78d6fe9fa4ac13ce9f780ddc0c36ca46fedeb1c2e7f754573d7acddc7432","ssdeep":"","tlshash":"0401d0fd1190553514fb8695739fbf41393120a686039411812ccca0f5a8ce7f912bc7","first_seen":"2024-09-02T00:59:07Z","last_seen":"2026-08-23T12:36:48.399839Z","times_seen":5620,"resource_available":true,"data":null}},"time_used":74,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":74,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-23","alert":"Sinkholed","trigger":"happymodx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zoologyfibre.com/impr.gif?sid=H4sIAAAAAAAC_1xSP48bxRue9Z1-za9AoAQpQgIjpQAJ-2b2j9dOuohAlUtCglJAM392nMmtdzc7u7bP1YVDFFSHRBFRrR_fxQ2J4AMgIR8dAum2wkWu4QsggaiRLxYHTPG-78zzauZ55n0-m5anpI2SL2_dSCcmjvlW0KbNt-6ZRKUj29y-22S0Ta8275mk419tjlchH15hnt-mbzffj-ROuuVSRimjrPmeySOdjrfOUJjsGesF7Y7fZqzbZoGLcf7fE1s6sNyBGp6SV2BU_dKv-iMYuUAy-ObdyO4UafbO9UEZ8yLNMVTzD5OdJB0lGJyXOnegk_m6G6mtCXncQJrM1yqQDg9XKiBMTRqvPodI5muqEMOjF2xFjCiBUP_HaLhAFB_D8AVkug-jTgggFbZvIhk82U7zEd99gfIVWpPNP3-HGdVk8_kFJINn12Izbt5J47IwaWIx1hXMeAHTXyArj1FMGjCjY8jiExj1M6GN15EMjm7wMucwannZD3SopatbXLGo5dMea_UkjVqCdVUQ-ZxRpc_-yOgFuN1AaR2UxkGpGyizBgZq2eS9rha9js97kQ61oiyUPPC8XugHru7IAKV8BKMOIPM9ZPkedsyXJ8785NL0xP_uxPkKVjVgi5o4t_cwVNWRiq1rqycqtqVg6-yus1fN0qI_5Udp0Y8SAp4fIFfVocke2n3IYmM20VbN0lXgoqhmXKhqZlRBkD9cXqaMUzfyaEt5nLXCIKStruhGLVeEQnapFB1JD7Utyn-1BqIVBh3REl7AWgEXIVVKhK6S0-yUvLwajDPHL9iJlk0ptSsj7XtdVyvmSRapjg47gvpMBDKgsKaCsQ1w62BianL760vITE3e_PgNCH4MGx9Dmovg5Wvgo5nf6YLfR4dikjy9z7Nsd5CqcVumA6i0QlZsoth1pvEpuTD74O61789cotuPEckfyXpB5hWyvMID8wNBP3707c2sMAMz4Svb3Cl4Ef0P3NTE2fgC0tTk4h_7Zw6-0v8NMtuDzf6-axbbrCa3rj-FTQlERhAbgjg6f4yLCvYfe3FeT-2n6OcOROzMRJyTQxHn8QGsWTa7rkupZG5P9QK_53V1FPgsDKOAeZ2IegEKWz_4_KfGXwEAAP__rBl6EEcEAAA=","fqdn":"zoologyfibre.com","domain":"zoologyfibre.com","tld":"com"},"ip":{"addr":"23.111.84.124","port":443,"asn":7979,"as":"SERVERS-COM","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://happymodx.com/fc-mobile-soccer/","date":"2026-08-23T10:35:47.043Z","timestamp":1787481347043,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"zoologyfibre.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 27 Jun 2026 03:57:55 GMT","end":"Fri, 25 Sep 2026 03:57:54 GMT"},"fingerprint":{"sha1":"21:E1:0C:F0:3C:47:B6:51:43:59:A6:9C:7F:45:F3:83:AF:8E:E8:1C","sha256":"8C:62:F5:05:48:06:52:25:19:4D:0F:3D:B5:18:63:0E:57:03:24:EE:E2:B9:FB:E5:24:00:E5:7B:9C:AE:94:CB"}}},"request":{"raw":"GET /impr.gif?sid=H4sIAAAAAAAC_1xSP48bxRue9Z1-za9AoAQpQgIjpQAJ-2b2j9dOuohAlUtCglJAM392nMmtdzc7u7bP1YVDFFSHRBFRrR_fxQ2J4AMgIR8dAum2wkWu4QsggaiRLxYHTPG-78zzauZ55n0-m5anpI2SL2_dSCcmjvlW0KbNt-6ZRKUj29y-22S0Ta8275mk419tjlchH15hnt-mbzffj-ROuuVSRimjrPmeySOdjrfOUJjsGesF7Y7fZqzbZoGLcf7fE1s6sNyBGp6SV2BU_dKv-iMYuUAy-ObdyO4UafbO9UEZ8yLNMVTzD5OdJB0lGJyXOnegk_m6G6mtCXncQJrM1yqQDg9XKiBMTRqvPodI5muqEMOjF2xFjCiBUP_HaLhAFB_D8AVkug-jTgggFbZvIhk82U7zEd99gfIVWpPNP3-HGdVk8_kFJINn12Izbt5J47IwaWIx1hXMeAHTXyArj1FMGjCjY8jiExj1M6GN15EMjm7wMucwannZD3SopatbXLGo5dMea_UkjVqCdVUQ-ZxRpc_-yOgFuN1AaR2UxkGpGyizBgZq2eS9rha9js97kQ61oiyUPPC8XugHru7IAKV8BKMOIPM9ZPkedsyXJ8785NL0xP_uxPkKVjVgi5o4t_cwVNWRiq1rqycqtqVg6-yus1fN0qI_5Udp0Y8SAp4fIFfVocke2n3IYmM20VbN0lXgoqhmXKhqZlRBkD9cXqaMUzfyaEt5nLXCIKStruhGLVeEQnapFB1JD7Utyn-1BqIVBh3REl7AWgEXIVVKhK6S0-yUvLwajDPHL9iJlk0ptSsj7XtdVyvmSRapjg47gvpMBDKgsKaCsQ1w62BianL760vITE3e_PgNCH4MGx9Dmovg5Wvgo5nf6YLfR4dikjy9z7Nsd5CqcVumA6i0QlZsoth1pvEpuTD74O61789cotuPEckfyXpB5hWyvMID8wNBP3707c2sMAMz4Svb3Cl4Ef0P3NTE2fgC0tTk4h_7Zw6-0v8NMtuDzf6-axbbrCa3rj-FTQlERhAbgjg6f4yLCvYfe3FeT-2n6OcOROzMRJyTQxHn8QGsWTa7rkupZG5P9QK_53V1FPgsDKOAeZ2IegEKWz_4_KfGXwEAAP__rBl6EEcEAAA= HTTP/1.1\r\nHost: zoologyfibre.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: uid_id2=45f7fc2f-ad1e-4091-9c0e-b18d5e4a10df:3:1; ain=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJwIjp7ImlkIjoyNzc2MzQxNiwiayI6ImNjZjJjZWY0MzgyZmQxM2MxZWQ2Zjc2YjA0MWI1YzUwIiwic2lkIjoiIiwiaXNpZCI6MiwiYXNpZCI6MSwiemlkIjo1MzUyNDczLCJwaWQiOjIxODYyNzEsImFuIjp0cnVlLCJsYW4iOnRydWUsImNpZCI6MjEsImFpZCI6MjcsInB0Ijo0LCJwayI6InY5ZjVpazljIiwiY3BrcyI6eyIyOCI6ImFmMWQ0NTc4ZGNjODlhM2VlYjYwMjQ4MDQxNWU0YWJlIn0sInQiOjF9LCJ1Ijp7InUiOjEsImF1IjoxLCJkIjp7ImlkIjoyNjY1NjExMTUsImlkcyI6IiIsImljIjpmYWxzZSwibiI6IkRlc2t0b3AsRW11bGF0b3IiLCJ2IjoiVW5rbm93biIsIm0iOiJVbmtub3duIiwiZiI6MSwiZm4iOiJEZXNrdG9wIiwib2lkIjozODkxNCwib24iOiJXaW5kb3dzIiwib3YiOiIxMC4wIiwiYmlkIjoxMzY5MjUsImJuIjoiRmlyZWZveCIsImJ2IjoiMTM0LjAiLCJ3diI6ZmFsc2UsImUiOnRydWUsImFiIjpmYWxzZX0sImMiOnsiaWQiOjE2MiwiYyI6Ik5PIiwibiI6Ik5vcndheSJ9LCJjdCI6eyJpZCI6MzE0NjI3MCwibiI6Ik1hdXJhIn0sInJnIjp7ImlkIjozMjcxLCJuIjoiVmlrZW4ifSwiYSI6ZmFsc2UsImNyIjp7Im4iOiJCbGl4IFNvbHV0aW9ucyJ9LCJ4ZiI6IiIsIml4ZiI6ZmFsc2UsImlneGYiOmZhbHNlLCJpd2YiOnRydWUsInVwIjp0cnVlLCJyIjoiaHR0cHM6Ly9oYXBweW1vZHguY29tL2ZjLW1vYmlsZS1zb2NjZXIvIiwidHoiOjIsImlkdWMiOjAsImFyIjpbXX19.rD8lnIlgN_MXbDR-XfeCHTcB5ZDvbXg0XIRp7IoGSLU; pdhtkv=true; uncs=1; pdhtkv27=true; uncs27=1; u_pl27763416=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.30.2\r\nDate: Sun, 23 Aug 2026 10:35:47 GMT\r\nContent-Type: image/gif\r\nContent-Length: 7\r\nConnection: keep-alive\r\naccept-ch: User-Agent,Sec-Ch-Ua-Platformuser-Agent,Sec-Ch-Ua-Full-Version-List,Sec-Ch-Ua-Full-Version,Sec-Ch-Ua-Platform,Sec-Ch-Ua-Model,X-Device-User-Agent,X-Operamini-Phone-Ua,X-Ucbrowser-Device-Ua,Sec-Ch-Ua-Platform-Version,Sec-Ch-Ua,Sec-Ch-Ua-Mobile,Device-Stock-Ua\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: *\r\nset-cookie: iprc_c+713dfa2da62b5b8f41671024dfebcde0=1438851; Path=/; Expires=Mon, 24 Aug 2026 10:35:47 GMT; Secure; SameSite=None\niprc_c-1438851=8; Path=/; Expires=Mon, 24 Aug 2026 10:35:47 GMT; Secure; SameSite=None\r\nvary: Origin\r\nx-envoy-upstream-service-time: 6\r\nHost: zoologyfibre.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: c670e08a08586967c6d1edb094161368\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":[{"name":"iprc_c+713dfa2da62b5b8f41671024dfebcde0","value":"1438851","quoted":false,"path":"/","expires":"2026-08-24T10:35:47Z","raw_expires":"Mon, 24 Aug 2026 10:35:47 GMT","secure":true,"http_only":false,"same_site":"None","partitioned":false,"raw":"iprc_c+713dfa2da62b5b8f41671024dfebcde0=1438851; Path=/; Expires=Mon, 24 Aug 2026 10:35:47 GMT; Secure; SameSite=None"},{"name":"iprc_c-1438851","value":"8","quoted":false,"path":"/","expires":"2026-08-24T10:35:47Z","raw_expires":"Mon, 24 Aug 2026 10:35:47 GMT","secure":true,"http_only":false,"same_site":"None","partitioned":false,"raw":"iprc_c-1438851=8; Path=/; Expires=Mon, 24 Aug 2026 10:35:47 GMT; Secure; SameSite=None"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.30.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/gif","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-23T12:26:49.723432Z","times_seen":18055306,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-22","alert":"Sinkholed","trigger":"zoologyfibre.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"happymodx.com/wp-includes/js/wp-emoji-release.min.js?ver=7.1","fqdn":"happymodx.com","domain":"happymodx.com","tld":"com"},"ip":{"addr":"104.21.39.80","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://happymodx.com/fc-mobile-soccer/","date":"2026-08-23T10:35:47.089Z","timestamp":1787481347089,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"happymodx.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 28 Jul 2026 09:00:25 GMT","end":"Mon, 26 Oct 2026 10:00:20 GMT"},"fingerprint":{"sha1":"FE:29:9A:0F:BF:23:3E:7B:7B:09:E3:15:8C:DD:03:24:B2:44:F9:87","sha256":"D3:DC:55:AE:12:9C:AC:87:D1:C7:22:A0:4D:BA:D1:40:94:85:03:14:B3:02:E8:37:C8:78:61:6F:C5:79:A4:BD"}}},"request":{"raw":"GET /wp-includes/js/wp-emoji-release.min.js?ver=7.1 HTTP/1.1\r\nHost: happymodx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://happymodx.com/fc-mobile-soccer/\r\nCookie: dom3ic8zudi28v8lr6fgphwffqoz0j6c=45f7fc2f-ad1e-4091-9c0e-b18d5e4a10df%3A3%3A1; pll_language=en; _ga_ZKZB7TG472=GS2.1.s1787481346$o1$g0$t1787481346$j60$l0$h0; _ga=GA1.1.1430642084.1787481347; sb_main_f0582dcc2dc78c0d7cc66bdcca52b3ab=1; sb_count_f0582dcc2dc78c0d7cc66bdcca52b3ab=1\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Sun, 30 Aug 2026 08:58:46 GMT\r\ncontent-type: application/x-javascript; charset=UTF-8\r\nlast-modified: Fri, 10 Jul 2026 03:49:20 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding,Accept-Encoding\r\nserver-timing: cfExtPri\r\ndate: Sun, 23 Aug 2026 10:35:47 GMT\r\nserver: cloudflare\r\nplatform: hostinger\r\npanel: hpanel\r\ncontent-security-policy: upgrade-insecure-requests\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 5820\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=EpV2E5RSNTjPgaTgZgr%2FE%2FC4kV5iNtUs9u1Xw%2BYyzkKalqHG5NPE99N4C2CWbIVW1hQzS51jGvFhiDQ7fahS8GHdh8jDrqifFAkPANhg7AOuOF8eO%2FrdplZxtrqV3aUI\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: a2f978f34d0e568a-OSL\r\ncontent-length: 4916\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]}],"data":{"size":22752,"size_decoded":5849,"mime_type":"application/x-javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (19813)","md5":"7dcb0bb1f67bc5cd9aa86bc0577108e3","sha1":"c90b1ed149a278c322a63f3a79443ccce5592382","sha256":"063840b4b3f5869e0f0d078bab8bd29cfb3a59ee85e8e3edbbec35a8fe846fd3","sha512":"d09c60fc702e1d3fb839685770b2626a64cbc6373ac4bf3a63c3536caef34f4f6caf76adfbd5c2d15bed6e1396ed4f3ca80f6673e3421b2ae2f9e7aa5ccf16f2","ssdeep":"384:WzevzApRZTbbUL3px/bEg1XgA5OOkpJTX:Wsk9bUL3px/YqXgAP+hX","tlshash":"79a2949ba33a4e8f343e3bd78d968f4dc9da555321c0e079dbefb6c169a00568274c90","first_seen":"2026-06-05T05:27:24.795617Z","last_seen":"2026-08-23T12:34:54.816024Z","times_seen":40282,"resource_available":true,"data":null}},"time_used":30,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":30,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-23","alert":"Sinkholed","trigger":"happymodx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"yastatic.net/partner-code-bundles/1306332/9463272d90252442.js","fqdn":"yastatic.net","domain":"yastatic.net","tld":"net"},"ip":{"addr":"37.9.64.225","port":443,"asn":13238,"as":"YANDEX LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://happymodx.com/fc-mobile-soccer/","date":"2026-08-23T10:35:47.386Z","timestamp":1787481347386,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.yastatic-net.ru","organization":""},"issuer":{"commonName":"GlobalSign RSA OV SSL CA 2018","organization":"GlobalSign nv-sa"},"validity":{"start":"Thu, 30 Apr 2026 11:34:07 GMT","end":"Wed, 28 Oct 2026 20:59:59 GMT"},"fingerprint":{"sha1":"14:F1:2A:10:FA:A0:C8:25:E4:FA:ED:1B:89:69:12:33:27:F7:15:83","sha256":"C4:5F:F3:D1:06:B5:27:D4:9D:32:12:86:B3:BF:A1:45:D4:C3:D0:F7:8C:1D:83:41:1D:52:97:A1:9F:EE:A2:79"}}},"request":{"raw":"GET /partner-code-bundles/1306332/9463272d90252442.js HTTP/1.1\r\nHost: yastatic.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://happymodx.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://happymodx.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 23 Aug 2026 10:35:47 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ncontent-length: 31586\r\nnel: {\"report_to\": \"network-errors\", \"max_age\": 7200, \"success_fraction\": 0.001, \"failure_fraction\": 0.01}\r\ntiming-allow-origin: *\r\nreport-to: { \"group\": \"network-errors\", \"max_age\": 7200, \"endpoints\": [ { \"url\": \"https://dr.yandex.net/nel\"}]}\r\ncontent-encoding: br\r\ncache-control: public, max-age=946708560\r\netag: \"56d2cbd60f709522e85275ab000cb130\"\r\nlast-modified: Fri, 21 Aug 2026 17:58:17 GMT\r\nx-robots-tag: noindex, noarchive, nofollow\r\nstrict-transport-security: max-age=43200000; includeSubDomains;\r\naccess-control-allow-origin: *\r\nvary: Accept-Encoding\r\nexpires: Tue, 22 Aug 2056 16:54:37 GMT\r\nx-strm-log-split: 8\r\nx-request-id: ca2cb77fe52aa461\r\ncache-host: cloudcdn-rad-11.cdn.yandex.net\r\ncache-status: HIT\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":156071,"size_decoded":32481,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65493)","md5":"a2bc48de172e6f03248a25ea5f2bfbf2","sha1":"12e26a4ade44191766a86a92be01360be53b43ac","sha256":"1b0321c48c0f69a6c52b6ceba8ecc46894fa3e1a52e0116ee185186dc9a43fe4","sha512":"bdbec2742a5d55e1bbbc7dd83b79e4ec3b4bb2b6ad31df09da5df110f134847241b4e38bce5540a1a0a4557ca76e54c553ead19dc474a2c3db631fa78357b474","ssdeep":"3072:UIJjYLKYHr0t1QD+QtTl+qTcXW3rUGWKWx8geVioJAGYXwLw1IourJ9AhpBkZamv:UIJ1YL0t1QD+QtTl+qTcXW3rUGWKWx8F","tlshash":"0ee3c68db2e1b47142d7a0f5503f6a0af33a6459a4098094b72de9e16fb898f5137f3c","first_seen":"2026-08-21T19:08:41.897466Z","last_seen":"2026-08-23T13:13:30.553902Z","times_seen":35,"resource_available":true,"data":null}},"time_used":73,"timings":{"blocked":18,"dns":0,"connect":0,"send":0,"wait":50,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"happymodx.com/wp-content/uploads/2025/12/FIFA-Rivals.webp","fqdn":"happymodx.com","domain":"happymodx.com","tld":"com"},"ip":{"addr":"104.21.39.80","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://happymodx.com/fc-mobile-soccer/","date":"2026-08-23T10:35:46.026Z","timestamp":1787481346026,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"happymodx.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 28 Jul 2026 09:00:25 GMT","end":"Mon, 26 Oct 2026 10:00:20 GMT"},"fingerprint":{"sha1":"FE:29:9A:0F:BF:23:3E:7B:7B:09:E3:15:8C:DD:03:24:B2:44:F9:87","sha256":"D3:DC:55:AE:12:9C:AC:87:D1:C7:22:A0:4D:BA:D1:40:94:85:03:14:B3:02:E8:37:C8:78:61:6F:C5:79:A4:BD"}}},"request":{"raw":"GET /wp-content/uploads/2025/12/FIFA-Rivals.webp HTTP/1.1\r\nHost: happymodx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://happymodx.com/fc-mobile-soccer/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=10368000\r\nexpires: Mon, 21 Dec 2026 10:35:46 GMT\r\ncontent-type: image/webp\r\nlast-modified: Tue, 23 Dec 2025 05:41:13 GMT\r\naccept-ranges: bytes\r\nserver-timing: cfExtPri\r\ndate: Sun, 23 Aug 2026 10:35:46 GMT\r\nserver: cloudflare\r\nplatform: hostinger\r\npanel: hpanel\r\ncontent-security-policy: upgrade-insecure-requests\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2JKDzIHdGAY6Gx3qVnXuVC%2BLc1UVaAwcnRo7Qy%2BExpI7azCPPu%2BzybH6AtiX3Z29r4iabBlfF3tXQHAsqYaXGrm4h9BPKh6dNyCd7h5ymKwZPJZ3sSyu%2FsvXenktHMZn\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a2f978ecaca5568a-OSL\r\ncontent-length: 11712\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":11712,"size_decoded":12568,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"f0ba5aab456afe0f8d6507cf302e2c09","sha1":"716796c8201d1e9d705c4777bb751735a8690eab","sha256":"deb5647f3dea38f72e01248f8950fcc60ec0b96975e07a1aca38b5db040f5c15","sha512":"554287befd2a319ba48cd8c286d38dd087a897534b5ff160c4157f3ebd24d61dddc705f4b32e154d5a9cf0fb37ba3d79993d2d23fb71090c34bf03a2e12e08ea","ssdeep":"192:hwZivO8MY+gPbpKgs7rbrWxaAGkZN9EJQd96uZhwgH7hK9ZCRPmvfTA:hwyODY+Cpa7/rUaAGkZNmJQd96eO0PRf","tlshash":"9632cfb537556630c3631ebb3045df5152f76e2488cf96a6f1c4021e8a6cbf0bab066c","first_seen":"2026-08-23T10:36:29.90129Z","last_seen":"2026-08-23T10:36:29.90129Z","times_seen":1,"resource_available":false,"data":null}},"time_used":953,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":932,"receive":21,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-23","alert":"Sinkholed","trigger":"happymodx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"yastatic.net/partner-code-bundles/1306332/6c8051c07f30fe3d.js","fqdn":"yastatic.net","domain":"yastatic.net","tld":"net"},"ip":{"addr":"37.9.64.225","port":443,"asn":13238,"as":"YANDEX LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://happymodx.com/fc-mobile-soccer/","date":"2026-08-23T10:35:47.384Z","timestamp":1787481347384,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.yastatic-net.ru","organization":""},"issuer":{"commonName":"GlobalSign RSA OV SSL CA 2018","organization":"GlobalSign nv-sa"},"validity":{"start":"Thu, 30 Apr 2026 11:34:07 GMT","end":"Wed, 28 Oct 2026 20:59:59 GMT"},"fingerprint":{"sha1":"14:F1:2A:10:FA:A0:C8:25:E4:FA:ED:1B:89:69:12:33:27:F7:15:83","sha256":"C4:5F:F3:D1:06:B5:27:D4:9D:32:12:86:B3:BF:A1:45:D4:C3:D0:F7:8C:1D:83:41:1D:52:97:A1:9F:EE:A2:79"}}},"request":{"raw":"GET /partner-code-bundles/1306332/6c8051c07f30fe3d.js HTTP/1.1\r\nHost: yastatic.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://happymodx.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://happymodx.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 23 Aug 2026 10:35:47 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ncontent-length: 131936\r\ncache-control: public, max-age=946708560\r\ntiming-allow-origin: *\r\nlast-modified: Fri, 21 Aug 2026 17:58:17 GMT\r\naccess-control-allow-origin: *\r\nvary: Accept-Encoding\r\ncontent-encoding: br\r\nx-robots-tag: noindex, noarchive, nofollow\r\nexpires: Tue, 22 Aug 2056 16:54:37 GMT\r\nnel: {\"report_to\": \"network-errors\", \"max_age\": 7200, \"success_fraction\": 0.001, \"failure_fraction\": 0.01}\r\netag: \"91a946fb7b9d6dc9b199f86903cf6d62\"\r\nstrict-transport-security: max-age=43200000; includeSubDomains;\r\nreport-to: { \"group\": \"network-errors\", \"max_age\": 7200, \"endpoints\": [ { \"url\": \"https://dr.yandex.net/nel\"}]}\r\nx-strm-log-split: 6\r\nx-request-id: 2af750e7ee45fe7b\r\ncache-host: cloudcdn-rad-11.cdn.yandex.net\r\ncache-status: HIT\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":683110,"size_decoded":132832,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65496)","md5":"fa54c7d917719e73d4d217f799f7a9b5","sha1":"df9e16a33e96906a2ac9bd1a095229e301e87f75","sha256":"341db261c56b3048ad0a6fa1d497816842765921ba9436d835f9f05a38c741f3","sha512":"f1d61337364aac2849569df190de630149bfb099e4ec47ce367d28d239afda660cf24690e8e82e0ac17a94a6556c13e0cd19df933b9ec0efb11fdf87016453ce","ssdeep":"12288:/7Usakm25wu1jCKynKFs/brlGp6wwSvL0YPtnhBPnzB1:/7Usai5wu1jCKuKFs/brlGp6wwSvL0Yh","tlshash":"41e4d88af5e1b06142e7a0f9803f150ff23a7a15550980a4f62ae8e57ebc58e5137f3d","first_seen":"2026-08-21T19:08:41.888471Z","last_seen":"2026-08-23T13:13:30.527987Z","times_seen":36,"resource_available":true,"data":null}},"time_used":68,"timings":{"blocked":18,"dns":0,"connect":0,"send":0,"wait":31,"receive":19,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"establishscarcely.com/8c87b8164b319ffbf2dc17605a4d3e1c/invoke.js","fqdn":"establishscarcely.com","domain":"establishscarcely.com","tld":"com"},"ip":{"addr":"172.240.108.68","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://happymodx.com/fc-mobile-soccer/","date":"2026-08-23T10:35:45.968Z","timestamp":1787481345968,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"establishscarcely.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sun, 16 Aug 2026 21:49:18 GMT","end":"Sat, 14 Nov 2026 21:49:17 GMT"},"fingerprint":{"sha1":"C8:88:67:AE:2D:51:85:B6:4F:55:EE:9C:FE:AB:4F:3A:93:7A:60:3B","sha256":"8C:54:B4:51:FA:49:79:87:4E:7D:F2:16:F4:CA:5B:78:DC:9E:4A:8E:9C:9F:81:73:3C:23:02:6C:D8:DD:38:75"}}},"request":{"raw":"GET /8c87b8164b319ffbf2dc17605a4d3e1c/invoke.js HTTP/1.1\r\nHost: establishscarcely.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://happymodx.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.28.2\r\nDate: Sun, 23 Aug 2026 10:35:46 GMT\r\nContent-Type: application/javascript\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\naccept-ch: X-Ucbrowser-Device-Ua,Sec-Ch-Ua-Platformuser-Agent,Sec-Ch-Ua-Full-Version,Sec-Ch-Ua-Platform,Sec-Ch-Ua-Mobile,Device-Stock-Ua,User-Agent,Sec-Ch-Ua-Platform-Version,Sec-Ch-Ua,Sec-Ch-Ua-Full-Version-List,Sec-Ch-Ua-Model,X-Device-User-Agent,X-Operamini-Phone-Ua\r\naccess-control-allow-origin: *\r\ncontent-encoding: zstd\r\nset-cookie: pip_cc31f70d8c4f3f26836c1bf4172703a1=1; Path=/; Expires=Mon, 24 Aug 2026 10:35:46 GMT; Secure; SameSite=None\r\nvary: Accept-Encoding\r\nx-envoy-upstream-service-time: 7\r\nHost: establishscarcely.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: 29500ebba9489bf404532b3ca65c5f70\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":[{"name":"pip_cc31f70d8c4f3f26836c1bf4172703a1","value":"1","quoted":false,"path":"/","expires":"2026-08-24T10:35:46Z","raw_expires":"Mon, 24 Aug 2026 10:35:46 GMT","secure":true,"http_only":false,"same_site":"None","partitioned":false,"raw":"pip_cc31f70d8c4f3f26836c1bf4172703a1=1; Path=/; Expires=Mon, 24 Aug 2026 10:35:46 GMT; Secure; SameSite=None"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.28.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":35479,"size_decoded":16240,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (35479), with no line terminators","md5":"40b4fd73cd2f2939409a2b9d6d766673","sha1":"2b56a60dde7614c3c1c882677b2d4b0177501730","sha256":"9e16a5a6ba9de22e64691276795ef7ed00254d493c103fe8857bf6c47f41b5c5","sha512":"544bebbec131c82a26bf2c27c86b1879c8914dbe7851b2447082482bc454bb158d55bf0975b20b60c92cc2740dfdb9b6179698d3cf38860f7271e517a9168947","ssdeep":"768:y+QGHr9qbGrW34GKD3r5IzOVeYcx9y+XuYE+5d/raP4QEr2G:J104GK7r5ISVcyA7n5dzatEr2G","tlshash":"d1f2d5c83fe1d06f17b664a3332be52be05b5e40568de8a8e877b45ce904f15f8791a0","first_seen":"2026-08-23T10:36:29.90389Z","last_seen":"2026-08-23T10:36:29.90389Z","times_seen":1,"resource_available":true,"data":null}},"time_used":549,"timings":{"blocked":-1,"dns":48,"connect":98,"send":0,"wait":108,"receive":97,"ssl":198},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"happymodx.com/wp-content/plugins/polylang-pro/vendor/wpsyntex/polylang/flags/br.png","fqdn":"happymodx.com","domain":"happymodx.com","tld":"com"},"ip":{"addr":"104.21.39.80","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://happymodx.com/fc-mobile-soccer/","date":"2026-08-23T10:35:46.006Z","timestamp":1787481346006,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"happymodx.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 28 Jul 2026 09:00:25 GMT","end":"Mon, 26 Oct 2026 10:00:20 GMT"},"fingerprint":{"sha1":"FE:29:9A:0F:BF:23:3E:7B:7B:09:E3:15:8C:DD:03:24:B2:44:F9:87","sha256":"D3:DC:55:AE:12:9C:AC:87:D1:C7:22:A0:4D:BA:D1:40:94:85:03:14:B3:02:E8:37:C8:78:61:6F:C5:79:A4:BD"}}},"request":{"raw":"GET /wp-content/plugins/polylang-pro/vendor/wpsyntex/polylang/flags/br.png HTTP/1.1\r\nHost: happymodx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://happymodx.com/fc-mobile-soccer/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=10368000\r\nexpires: Mon, 21 Dec 2026 08:58:44 GMT\r\ncontent-type: image/png\r\nlast-modified: Sat, 17 Jan 2026 17:46:45 GMT\r\naccept-ranges: bytes\r\nserver-timing: cfExtPri\r\ndate: Sun, 23 Aug 2026 10:35:46 GMT\r\nserver: cloudflare\r\nplatform: hostinger\r\npanel: hpanel\r\ncontent-security-policy: upgrade-insecure-requests\r\nvary: Accept-Encoding\r\nx-turbo-charged-by: LiteSpeed\r\nage: 5821\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=LEfjkEtm01nvciIXUPV%2BLR2rhetv0YBJZxioH6xECE6aRNGRzbn%2FWHSixi11ZJHRWin9P2IdAs4jg8GwaVCqGeZi1FfrCulC6imxegrnENWRolHflLsT%2FB8b01p08%2FXw\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a2f978ec8c91568a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 353\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]}],"data":{"size":353,"size_decoded":1216,"mime_type":"image/png","magic":"PNG image data, 16 x 11, 8-bit colormap, non-interlaced","md5":"a0063869f0bdbaff08b81ce996a3555b","sha1":"0b6d48391262a3f1b764b8f764a3225859c49885","sha256":"7dfe84faf51f33af5a66f356a57efcc53951f01c7529deb3e6edab005e72ae0d","sha512":"5e245bbae4367758f39d37e87bc2da21f59c16ba2c7d3274ef0da4fe7d4f8264fbad62aba7bbf3fba829f008f6cee87312c9deb5a47c02414b43106d1eeb21c9","ssdeep":"","tlshash":"99e0c0c6911bee3dcc1562365e50c024f1222c4c995340cb8f4d48086c6408a10fca54","first_seen":"2023-07-06T09:52:10Z","last_seen":"2026-08-23T10:37:00.336671Z","times_seen":121,"resource_available":false,"data":null}},"time_used":67,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":67,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-23","alert":"Sinkholed","trigger":"happymodx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"happymodx.com/wp-content/plugins/kk-star-ratings/src/core/public/css/kk-star-ratings.min.css?ver=5.4.10.5","fqdn":"happymodx.com","domain":"happymodx.com","tld":"com"},"ip":{"addr":"104.21.39.80","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://happymodx.com/fc-mobile-soccer/","date":"2026-08-23T10:35:45.775Z","timestamp":1787481345775,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"happymodx.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 28 Jul 2026 09:00:25 GMT","end":"Mon, 26 Oct 2026 10:00:20 GMT"},"fingerprint":{"sha1":"FE:29:9A:0F:BF:23:3E:7B:7B:09:E3:15:8C:DD:03:24:B2:44:F9:87","sha256":"D3:DC:55:AE:12:9C:AC:87:D1:C7:22:A0:4D:BA:D1:40:94:85:03:14:B3:02:E8:37:C8:78:61:6F:C5:79:A4:BD"}}},"request":{"raw":"GET /wp-content/plugins/kk-star-ratings/src/core/public/css/kk-star-ratings.min.css?ver=5.4.10.5 HTTP/1.1\r\nHost: happymodx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://happymodx.com/fc-mobile-soccer/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=31536000\r\nexpires: Mon, 23 Aug 2027 08:58:40 GMT\r\ncontent-type: text/css; charset=UTF-8\r\nlast-modified: Thu, 09 Jul 2026 03:45:58 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding,Accept-Encoding\r\nserver-timing: cfExtPri\r\ndate: Sun, 23 Aug 2026 10:35:45 GMT\r\nserver: cloudflare\r\nplatform: hostinger\r\npanel: hpanel\r\ncontent-security-policy: upgrade-insecure-requests\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 5824\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=QBC2SJT4KCnZ78GWwiWI4zKc2JgR%2F5SwDIVVmOzePbtVaeU3Y%2BYa3b9Jinv38o%2FRbaescZlzUyMy362MH7fkEHmm%2FjQ2JsSg99WiRuq9ITQpddLBgMsisY6zcPUPC9zo\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\ncf-ray: a2f978eb1c53568a-OSL\r\ncontent-length: 503\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2259,"size_decoded":1421,"mime_type":"text/css; charset=UTF-8","magic":"ASCII text, with very long lines (2181)","md5":"533af03c49baedabf2e6a0badf1269cf","sha1":"5837bb0d22601bc1e4fd6b610c090b7280a644be","sha256":"1cd6396792d7bfdd898dcb9f2ee195387179b30fb4cc2cdc0c57575fab655230","sha512":"d0c64d59a8b002e02378882511b3d0c2d3af3ebdbdfbe5d96cbfbdbd9c17c08da7283c1900729e36040601fa10787dddb65b8e77570103cf8e04eb2a22b96295","ssdeep":"","tlshash":"f641c1b6e84d228cdd17c8621d0793d745a7e4d68ab5f5ee01ca3518c3afec80661cde","first_seen":"2023-04-05T15:58:59Z","last_seen":"2026-08-23T10:37:00.328187Z","times_seen":2609,"resource_available":false,"data":null}},"time_used":73,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":73,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-23","alert":"Sinkholed","trigger":"happymodx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"protrafficinspector.com/stats","fqdn":"protrafficinspector.com","domain":"protrafficinspector.com","tld":"com"},"ip":{"addr":"18.196.51.86","port":443,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://happymodx.com/fc-mobile-soccer/","date":"2026-08-23T10:35:46.546Z","timestamp":1787481346546,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"protrafficinspector.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Fri, 26 Jun 2026 00:00:00 GMT","end":"Sat, 09 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"A5:A0:EB:57:26:41:24:03:DD:F3:2D:91:FB:6B:49:B6:53:8B:5F:86","sha256":"82:7E:C7:50:5F:EC:61:E0:5F:7F:ED:2E:10:87:9B:31:A9:8F:4B:DF:E8:99:CC:2E:A1:13:31:E7:45:CE:89:25"}}},"request":{"raw":"GET /stats HTTP/1.1\r\nHost: protrafficinspector.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://happymodx.com\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://happymodx.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 23 Aug 2026 10:35:46 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-length: 40\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: https://happymodx.com\r\nset-cookie: uid_id2=45f7fc2f-ad1e-4091-9c0e-b18d5e4a10df:3:1; Path=/; Expires=Wed, 20 Aug 2036 10:35:46 GMT; Secure; SameSite=None\r\nvary: Origin\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":[{"name":"uid_id2","value":"45f7fc2f-ad1e-4091-9c0e-b18d5e4a10df:3:1","quoted":false,"path":"/","expires":"2036-08-20T10:35:46Z","raw_expires":"Wed, 20 Aug 2036 10:35:46 GMT","secure":true,"http_only":false,"same_site":"None","partitioned":false,"raw":"uid_id2=45f7fc2f-ad1e-4091-9c0e-b18d5e4a10df:3:1; Path=/; Expires=Wed, 20 Aug 2036 10:35:46 GMT; Secure; SameSite=None"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":40,"size_decoded":516,"mime_type":"text/html; charset=UTF-8","magic":"ASCII text, with no line terminators","md5":"50cdcbd225cfb08c3838bbee26f2a3fc","sha1":"9bfcb773cfba6b9c16d7c371df4d3b4dfd1cb369","sha256":"13db2fc58f09bbf4303a436b3d560aa99511e154a2e297f71c22d7842dec6be9","sha512":"838b97090ec085b806d2b01b190e5961612a0ff2b5a72162f92f8d9ca593c64a97adf7dd8d54663a4abcb028c0f88b7f46a503d986eb5abd4c613814c24d13b7","ssdeep":"","tlshash":"d99002043111046192102041940198605a598620886e50941a2b56cb091600411d0445","first_seen":"2026-08-23T10:36:29.907023Z","last_seen":"2026-08-23T10:36:29.907023Z","times_seen":1,"resource_available":false,"data":null}},"time_used":88,"timings":{"blocked":0,"dns":0,"connect":21,"send":0,"wait":21,"receive":0,"ssl":45},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"happymodx.com/wp-content/plugins/kk-star-ratings/src/core/public/svg/active.svg","fqdn":"happymodx.com","domain":"happymodx.com","tld":"com"},"ip":{"addr":"104.21.39.80","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://happymodx.com/fc-mobile-soccer/","date":"2026-08-23T10:35:46.568Z","timestamp":1787481346568,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"happymodx.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 28 Jul 2026 09:00:25 GMT","end":"Mon, 26 Oct 2026 10:00:20 GMT"},"fingerprint":{"sha1":"FE:29:9A:0F:BF:23:3E:7B:7B:09:E3:15:8C:DD:03:24:B2:44:F9:87","sha256":"D3:DC:55:AE:12:9C:AC:87:D1:C7:22:A0:4D:BA:D1:40:94:85:03:14:B3:02:E8:37:C8:78:61:6F:C5:79:A4:BD"}}},"request":{"raw":"GET /wp-content/plugins/kk-star-ratings/src/core/public/svg/active.svg HTTP/1.1\r\nHost: happymodx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://happymodx.com/wp-content/plugins/kk-star-ratings/src/core/public/css/kk-star-ratings.min.css?ver=5.4.10.5\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=10368000\r\nexpires: Mon, 21 Dec 2026 08:58:44 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Thu, 09 Jul 2026 03:45:58 GMT\r\npriority: u=4,i\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=kPSI4fxVXZF6sR3305MION%2BJjB1HjjtTiaeVK2xrJhQLIIDvLByaI9LBhPSQtcVsuqv15H6pbcf43%2FZWZuRc1EVWSBrvB9%2FRbHnQh8BKBW%2B276i2t0e6lXEIU5CQ4%2BU8\"}]}\r\ndate: Sun, 23 Aug 2026 10:35:46 GMT\r\nserver: cloudflare\r\nplatform: hostinger\r\npanel: hpanel\r\ncontent-security-policy: upgrade-insecure-requests\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 5822\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a2f978f00ce0568a-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":246,"size_decoded":1045,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"0300557e1f71e36801b50d96f299f235","sha1":"4e6ae10512544899d1ae757c9b48bc647dfa9e84","sha256":"bed6cef3a2a83b0bfc42310907aa856549a86c15b7f3103d936c3d436bdd0655","sha512":"80e1f438e32411aa754da37ce0c6f40ffadbc4f78c42702d08a8e92c50a9168292ee7bed676b5d8069b0ac0f44b83589a9bb1e0d650278496d2fe68348ab6228","ssdeep":"","tlshash":"c2d097a4867e8492c7a58f223fb43d91282d28ba8180c14db10c2430270c5a6d813eb4","first_seen":"2023-04-18T20:24:51Z","last_seen":"2026-08-23T10:36:29.908728Z","times_seen":1261,"resource_available":false,"data":null}},"time_used":52,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":52,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-23","alert":"Sinkholed","trigger":"happymodx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"happymodx.com/wp-content/themes/generatepress/assets/js/menu.min.js?ver=3.6.1","fqdn":"happymodx.com","domain":"happymodx.com","tld":"com"},"ip":{"addr":"104.21.39.80","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://happymodx.com/fc-mobile-soccer/","date":"2026-08-23T10:35:45.983Z","timestamp":1787481345983,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"happymodx.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 28 Jul 2026 09:00:25 GMT","end":"Mon, 26 Oct 2026 10:00:20 GMT"},"fingerprint":{"sha1":"FE:29:9A:0F:BF:23:3E:7B:7B:09:E3:15:8C:DD:03:24:B2:44:F9:87","sha256":"D3:DC:55:AE:12:9C:AC:87:D1:C7:22:A0:4D:BA:D1:40:94:85:03:14:B3:02:E8:37:C8:78:61:6F:C5:79:A4:BD"}}},"request":{"raw":"GET /wp-content/themes/generatepress/assets/js/menu.min.js?ver=3.6.1 HTTP/1.1\r\nHost: happymodx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://happymodx.com/fc-mobile-soccer/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Sun, 30 Aug 2026 08:58:44 GMT\r\ncontent-type: application/x-javascript; charset=UTF-8\r\nlast-modified: Tue, 02 Dec 2025 00:09:57 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding,Accept-Encoding\r\nserver-timing: cfExtPri\r\ndate: Sun, 23 Aug 2026 10:35:46 GMT\r\nserver: cloudflare\r\nplatform: hostinger\r\npanel: hpanel\r\ncontent-security-policy: upgrade-insecure-requests\r\nx-turbo-charged-by: LiteSpeed\r\nage: 5821\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=qVHhvDtNn5C7pu5fzDzZM1LN2M8zqOMMt7JkjFHIyhkjXxoKiwh099K0xYsY0ZDqQl6yEtoTfYDuUohjqMTaVAOuM9rhrDN%2BIe4deppA1WP9TaqUdDeHyUxgi0%2FEGWD9\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: a2f978ec5c85568a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 1672\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":7333,"size_decoded":2601,"mime_type":"application/x-javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (7333), with no line terminators","md5":"67148b2ff82038d0faf6385f182c5644","sha1":"7452d643e468caf6db8ecf07618f1cb7ff3f7651","sha256":"5af760e4297b064a2150dcd5f63d748a06dfa8b618c9e9d43a87c4ac74fa3974","sha512":"24cb8e3c4f17abc7cf1ba96407ac1eda4e6c5d7c669ac213024a9b428e19cef574cefdb06c4dd28c013f1f8d3c775fb8f98c5a15c142783ba0f25b46f0c6e7ad","ssdeep":"192:iQqHlWQZgROnqWgpkgJMhqDi92FY+alT/fnGtxTbvm:bqHngROnvgJUqDi9cNYTnGvTbvm","tlshash":"6ee112fa964412bb04ef29ca74e6e5c07b7568fdea0184302579c84d1fe8dc202e6bf5","first_seen":"2024-08-31T11:00:29Z","last_seen":"2026-08-23T12:36:48.374361Z","times_seen":19765,"resource_available":true,"data":null}},"time_used":30,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":30,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-23","alert":"Sinkholed","trigger":"happymodx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"telegram.im/widget-button/widget-button.css.php","fqdn":"telegram.im","domain":"telegram.im","tld":"im"},"ip":{"addr":"65.108.253.105","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Finland","country_code":"FI"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://happymodx.com/fc-mobile-soccer/","date":"2026-08-23T10:35:46.839Z","timestamp":1787481346839,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"telegram.im","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 30 Jul 2026 11:44:26 GMT","end":"Wed, 28 Oct 2026 11:44:25 GMT"},"fingerprint":{"sha1":"37:3B:BC:19:2C:2A:AD:80:A3:3A:58:59:D5:92:AA:28:9F:20:A8:83","sha256":"A1:59:5B:02:C4:B6:94:0F:76:11:85:A9:E7:CD:C2:8B:40:62:6A:8B:85:DC:53:4A:DF:94:B6:DF:3C:DF:12:6B"}}},"request":{"raw":"GET /widget-button/widget-button.css.php HTTP/1.1\r\nHost: telegram.im\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://happymodx.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sun, 23 Aug 2026 10:35:46 GMT\r\nContent-Type: text/css;charset=UTF-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nStrict-Transport-Security: max-age=2592000\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2012,"size_decoded":817,"mime_type":"text/css; charset=UTF-8","magic":"HTML document, ASCII text, with CRLF line terminators","md5":"1f6609840f82506bee2b3c7afe9ccfc9","sha1":"a189cd816b48aa19ed1c4741905528d855bf08d0","sha256":"1c3a8aaa4b0a051f9ca1f0aef8c9e2cbb22a38d1ccfb0792df67519df883352c","sha512":"3bdc0481f39b89d472b04328be8881525c4441ec731362362383e4bbb6432c150f515e85ccff9f7073556de03656258fd36d96af1d62b839b1ec627fe06e7cf2","ssdeep":"","tlshash":"0741cf790a4505886236073697c69b12afba8033b907355639df84174fb7be4cbc7f28","first_seen":"2023-05-05T04:17:30Z","last_seen":"2026-08-23T10:36:29.911283Z","times_seen":449,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css2?family=Roboto:wght@100;300;400;500;700\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.106","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://happymodx.com/fc-mobile-soccer/","date":"2026-08-23T10:35:47.817Z","timestamp":1787481347817,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Wed, 05 Aug 2026 20:43:53 GMT","end":"Wed, 28 Oct 2026 20:43:52 GMT"},"fingerprint":{"sha1":"91:24:44:08:3E:65:60:72:3B:18:06:E2:82:7E:C0:8F:97:46:5D:B2","sha256":"71:59:B7:BB:3B:E8:E0:81:C8:B6:24:A3:57:11:62:47:10:A1:3D:E4:38:30:54:27:2E:19:C8:96:02:25:52:DD"}}},"request":{"raw":"GET /css2?family=Roboto:wght@100;300;400;500;700\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Sun, 23 Aug 2026 10:35:47 GMT\r\ndate: Sun, 23 Aug 2026 10:35:47 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":27925,"size_decoded":2503,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (1572)","md5":"b3aa47c04f634f874e9fe24da03e44c2","sha1":"d6233fb889991ce8ab543cf6a3dedfa597e8c8bd","sha256":"1c87a812c578a613533eee262e5564ff39d369f62a5d9d8f0cda4daf92755241","sha512":"930654c03131317f868a8b908537b51f208c654d835caa93d129f0371820222f21a88cca41646271d967b881c7b44a65f8b0b699555d51b43cb8e2f93b831b18","ssdeep":"768:DDZDCDHDHDY4DRLDuDWDyDS99YURRuWDyjooYhREHPM5svvYaR7AIWP2ZZYQRVKj:Xxyll3","tlshash":"2ec210a1041744009b838ce223cebf35fe1f52117142d0b5abfd9b6baddbca6526936d","first_seen":"2026-02-20T05:06:38.045053Z","last_seen":"2026-08-23T10:37:00.275348Z","times_seen":4266,"resource_available":false,"data":null}},"time_used":37,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":36,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"telegram.im/widget-button/WidgetTelegramButton.min.js","fqdn":"telegram.im","domain":"telegram.im","tld":"im"},"ip":{"addr":"65.108.253.105","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Finland","country_code":"FI"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://happymodx.com/fc-mobile-soccer/","date":"2026-08-23T10:35:46.842Z","timestamp":1787481346842,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"telegram.im","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 30 Jul 2026 11:44:26 GMT","end":"Wed, 28 Oct 2026 11:44:25 GMT"},"fingerprint":{"sha1":"37:3B:BC:19:2C:2A:AD:80:A3:3A:58:59:D5:92:AA:28:9F:20:A8:83","sha256":"A1:59:5B:02:C4:B6:94:0F:76:11:85:A9:E7:CD:C2:8B:40:62:6A:8B:85:DC:53:4A:DF:94:B6:DF:3C:DF:12:6B"}}},"request":{"raw":"GET /widget-button/WidgetTelegramButton.min.js HTTP/1.1\r\nHost: telegram.im\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://happymodx.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sun, 23 Aug 2026 10:35:46 GMT\r\nContent-Type: application/x-javascript\r\nLast-Modified: Sun, 26 Feb 2017 21:40:46 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"58b34b5e-c56c\"\r\nExpires: Sun, 30 Aug 2026 10:35:46 GMT\r\nCache-Control: max-age=604800\r\nStrict-Transport-Security: max-age=2592000\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":50540,"size_decoded":14896,"mime_type":"application/x-javascript","magic":"JavaScript source, ASCII text, with very long lines (11538), with CRLF line terminators","md5":"2af011bc87be69d9f58e4446f03cf0a0","sha1":"b7bc1469100c91981177e49cb6f90c3a67f8e696","sha256":"c87d9ded7d493e779fca78d1ff9b3fdd46c42487c9a78723e71b8557c79f0b3a","sha512":"3f66c185b4d6780beaba41337953b3e29788b77e3c90031643429ac692667a4e0a211b71bbcbec4bfbef4cd15fe806678854dde2910f958cd7bfe000ec05aed7","ssdeep":"768:HLziVQlONMhua9950ETdsO8WCrAJEbzobsrG4emO:HLznIGhualdstWCrAJ8MsC4emO","tlshash":"513351c83749215953be313b1e3ba3096931d4bdf8057444a8be48f629ecd81b877b7a","first_seen":"2023-03-07T12:27:09Z","last_seen":"2026-08-23T10:36:29.913595Z","times_seen":576,"resource_available":true,"data":null}},"time_used":44,"timings":{"blocked":-1,"dns":0,"connect":16,"send":0,"wait":32,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kettledroopingcontinuation.com/impr.gif?sid=H4sIAAAAAAAC_1xSO48cRRDuWVskBAhkI1lIMEgOQGLW837YmcUj8hmwkQNI-jG9bt_szHh6ZndvozOHCIgOiQCIZr-98yZgQUKGhPbIEEg3ERv4En4BAhGjPa84oKWuqu6v1F311ffxrDkhfTR09faNYqqyjF4J-rb5yh2Vi2Ksza3bpmP37WvmHZWH_jVzsjbV6Krj-X37VfOtlG8XV1zbsW3Hdsw3VZXKYnLlFIUqHzlJ0A_9vuPEfSdwMan-f6MbA5oaEKMT8hyU6J75Tb4PxZfIh9-8nurtuihfe2PYZLQuKozE4r18Oy_GOYZnoawMyHyxyUahO0I-76HIF5suUIwO1l2AqY70nn8Mli82pYKNDp9UyzKkOZh4GuPREml2BEWX4MUelDgmABfYuol8-HCrqMZ05wlK12hHzv_1B9S4I-cfX0A-fHQ9UxPzVpE1tSpyjYlsoSZLqMESZXOEetqDGh-B1x9CiV-I3XsR-fDwBm0qCiVWl_0kYCKgkcWo71i-7wqLhiK0Ej9mLg0FEwE_5UjJJag20Ky3MtDIHpqyh6FYmTSJJUtCnyapjKSwnYjTwPOSyA9cGfIADX8AJfbBq12U1S621WfHxuL40uzY__7Y-BJaGNA1wUi0hyLTrm4fikw3zNl4d-O9dl7Ugxk9LOpBmhPQah-VaA9UeV_vgdfn5lOpxbxYG8rqdk6ZaOdK1ATV_dVl26G2m3q2Jdw0tKIo5Fbshp5lUxoxLoXnRfRA6rr5TypPrCgNE4ty5llO7Me2L32fxfGsPCHProdiLPArttOVybl0eSp9L3alcDzupCKUUchs32EBD2xo1ULp3imTU9WRd766hFJ15OUPXgKjR9DZEbi6CNq8ADqe-2EMehehjWn-9V1aljvDQkz6vBhCFC3K-jzqHWOWnZAL83dvX__hVCGy_wVS_hPZLPCqRVm1uKd-JBhkD769WdZqqKZ0LZlbNa3Tp0BVR4xzn4Krjlz8c-9UvVcHv4OXu9DlP2_NM112RH53DbogYCVBpgiy9Owzylrof53ZWTzTH2FQGWCZMWdZRQ5YVmX70Gplxq5r29xxE5EEfuLFMg18J4rSwPHC1PYC1Lq798nPvb8DAAD__6dvsllDBAAA","fqdn":"kettledroopingcontinuation.com","domain":"kettledroopingcontinuation.com","tld":"com"},"ip":{"addr":"23.111.84.228","port":443,"asn":7979,"as":"SERVERS-COM","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://happymodx.com/fc-mobile-soccer/","date":"2026-08-23T10:35:46.903Z","timestamp":1787481346903,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"kettledroopingcontinuation.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 23 Aug 2026 00:02:23 GMT","end":"Sat, 21 Nov 2026 00:02:22 GMT"},"fingerprint":{"sha1":"45:C6:44:0A:42:17:85:94:0C:43:02:EA:82:14:8D:F8:D3:13:D9:E2","sha256":"8C:E7:C4:F5:8F:DB:E8:10:A8:55:E4:5C:85:CC:97:D0:7D:0A:FE:C9:6C:C4:4D:6A:FF:20:87:2C:BC:34:2D:F4"}}},"request":{"raw":"GET /impr.gif?sid=H4sIAAAAAAAC_1xSO48cRRDuWVskBAhkI1lIMEgOQGLW837YmcUj8hmwkQNI-jG9bt_szHh6ZndvozOHCIgOiQCIZr-98yZgQUKGhPbIEEg3ERv4En4BAhGjPa84oKWuqu6v1F311ffxrDkhfTR09faNYqqyjF4J-rb5yh2Vi2Ksza3bpmP37WvmHZWH_jVzsjbV6Krj-X37VfOtlG8XV1zbsW3Hdsw3VZXKYnLlFIUqHzlJ0A_9vuPEfSdwMan-f6MbA5oaEKMT8hyU6J75Tb4PxZfIh9-8nurtuihfe2PYZLQuKozE4r18Oy_GOYZnoawMyHyxyUahO0I-76HIF5suUIwO1l2AqY70nn8Mli82pYKNDp9UyzKkOZh4GuPREml2BEWX4MUelDgmABfYuol8-HCrqMZ05wlK12hHzv_1B9S4I-cfX0A-fHQ9UxPzVpE1tSpyjYlsoSZLqMESZXOEetqDGh-B1x9CiV-I3XsR-fDwBm0qCiVWl_0kYCKgkcWo71i-7wqLhiK0Ej9mLg0FEwE_5UjJJag20Ky3MtDIHpqyh6FYmTSJJUtCnyapjKSwnYjTwPOSyA9cGfIADX8AJfbBq12U1S621WfHxuL40uzY__7Y-BJaGNA1wUi0hyLTrm4fikw3zNl4d-O9dl7Ugxk9LOpBmhPQah-VaA9UeV_vgdfn5lOpxbxYG8rqdk6ZaOdK1ATV_dVl26G2m3q2Jdw0tKIo5Fbshp5lUxoxLoXnRfRA6rr5TypPrCgNE4ty5llO7Me2L32fxfGsPCHProdiLPArttOVybl0eSp9L3alcDzupCKUUchs32EBD2xo1ULp3imTU9WRd766hFJ15OUPXgKjR9DZEbi6CNq8ADqe-2EMehehjWn-9V1aljvDQkz6vBhCFC3K-jzqHWOWnZAL83dvX__hVCGy_wVS_hPZLPCqRVm1uKd-JBhkD769WdZqqKZ0LZlbNa3Tp0BVR4xzn4Krjlz8c-9UvVcHv4OXu9DlP2_NM112RH53DbogYCVBpgiy9Owzylrof53ZWTzTH2FQGWCZMWdZRQ5YVmX70Gplxq5r29xxE5EEfuLFMg18J4rSwPHC1PYC1Lq798nPvb8DAAD__6dvsllDBAAA HTTP/1.1\r\nHost: kettledroopingcontinuation.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: uid_id2=45f7fc2f-ad1e-4091-9c0e-b18d5e4a10df:3:1; ain=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.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.RnYQF76paCH96o53rLCvaa-rsLWl01ui6dzgog9SHqM; pdhtkv=true; uncs=1; pdhtkv27=true; uncs27=1; u_pl27763416=1; pdhtkv32=true; uncs32=1; u_pl27763365=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.30.2\r\nDate: Sun, 23 Aug 2026 10:35:46 GMT\r\nContent-Type: image/gif\r\nContent-Length: 7\r\nConnection: keep-alive\r\naccept-ch: Sec-Ch-Ua-Platform,X-Operamini-Phone-Ua,X-Ucbrowser-Device-Ua,User-Agent,Sec-Ch-Ua-Platform-Version,Sec-Ch-Ua,Sec-Ch-Ua-Platformuser-Agent,Sec-Ch-Ua-Model,Sec-Ch-Ua-Mobile,Device-Stock-Ua,X-Device-User-Agent,Sec-Ch-Ua-Full-Version-List,Sec-Ch-Ua-Full-Version\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: *\r\nset-cookie: iprc_c+acdfe8b1b13a65a680bb51363c8264c0=1438851; Path=/; Expires=Mon, 24 Aug 2026 10:35:46 GMT; Secure; SameSite=None\niprc_c-1438851=8; Path=/; Expires=Mon, 24 Aug 2026 10:35:46 GMT; Secure; SameSite=None\r\nvary: Origin\r\nx-envoy-upstream-service-time: 6\r\nHost: kettledroopingcontinuation.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: 712df0bb14269f908c61c389af660b67\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":[{"name":"iprc_c+acdfe8b1b13a65a680bb51363c8264c0","value":"1438851","quoted":false,"path":"/","expires":"2026-08-24T10:35:46Z","raw_expires":"Mon, 24 Aug 2026 10:35:46 GMT","secure":true,"http_only":false,"same_site":"None","partitioned":false,"raw":"iprc_c+acdfe8b1b13a65a680bb51363c8264c0=1438851; Path=/; Expires=Mon, 24 Aug 2026 10:35:46 GMT; Secure; SameSite=None"},{"name":"iprc_c-1438851","value":"8","quoted":false,"path":"/","expires":"2026-08-24T10:35:46Z","raw_expires":"Mon, 24 Aug 2026 10:35:46 GMT","secure":true,"http_only":false,"same_site":"None","partitioned":false,"raw":"iprc_c-1438851=8; Path=/; Expires=Mon, 24 Aug 2026 10:35:46 GMT; Secure; SameSite=None"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.30.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/gif","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-23T12:26:49.723432Z","times_seen":18055306,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-23","alert":"Sinkholed","trigger":"kettledroopingcontinuation.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-23","alert":"Sinkholed","trigger":"kettledroopingcontinuation.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-23","alert":"Sinkholed","trigger":"kettledroopingcontinuation.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kettledroopingcontinuation.com/pixel/ase","fqdn":"kettledroopingcontinuation.com","domain":"kettledroopingcontinuation.com","tld":"com"},"ip":{"addr":"23.111.84.228","port":443,"asn":7979,"as":"SERVERS-COM","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://happymodx.com/fc-mobile-soccer/","date":"2026-08-23T10:35:47.186Z","timestamp":1787481347186,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"kettledroopingcontinuation.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 23 Aug 2026 00:02:23 GMT","end":"Sat, 21 Nov 2026 00:02:22 GMT"},"fingerprint":{"sha1":"45:C6:44:0A:42:17:85:94:0C:43:02:EA:82:14:8D:F8:D3:13:D9:E2","sha256":"8C:E7:C4:F5:8F:DB:E8:10:A8:55:E4:5C:85:CC:97:D0:7D:0A:FE:C9:6C:C4:4D:6A:FF:20:87:2C:BC:34:2D:F4"}}},"request":{"raw":"OPTIONS /pixel/ase HTTP/1.1\r\nHost: kettledroopingcontinuation.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://happymodx.com/\r\nOrigin: https://happymodx.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/1.1 204 No Content\r\nServer: nginx/1.30.2\r\nDate: Sun, 23 Aug 2026 10:35:47 GMT\r\nConnection: keep-alive\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nCache-Control: no-cache\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Allow-Methods: GET, POST, OPTIONS\r\nAccess-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Upgrade-Insecure-Requests,C-High-Entropy-Values\r\nAccess-Control-Allow-Credentials: true\r\nAccess-Control-Max-Age: 1728000\r\nContent-Type: text/plain; charset=utf-8\r\nContent-Length: 0\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Nginx:1.30.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":552,"mime_type":"text/plain; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-23T12:26:49.723432Z","times_seen":18055306,"resource_available":true,"data":null}},"time_used":80,"timings":{"blocked":-1,"dns":0,"connect":19,"send":0,"wait":19,"receive":0,"ssl":43},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-23","alert":"Sinkholed","trigger":"kettledroopingcontinuation.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-23","alert":"Sinkholed","trigger":"kettledroopingcontinuation.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-23","alert":"Sinkholed","trigger":"kettledroopingcontinuation.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-ZKZB7TG472","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.178.72","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://happymodx.com/fc-mobile-soccer/","date":"2026-08-23T10:35:45.960Z","timestamp":1787481345960,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Wed, 05 Aug 2026 20:42:22 GMT","end":"Wed, 28 Oct 2026 20:42:21 GMT"},"fingerprint":{"sha1":"0C:36:58:3E:92:12:11:BD:3B:2C:77:32:B6:09:4D:99:02:12:5E:BB","sha256":"4C:2B:BB:AD:FE:07:99:6D:8E:58:81:DD:95:E6:E7:0B:1E:E2:BE:C1:0C:B5:DD:78:EB:1E:D6:2C:91:CE:30:0E"}}},"request":{"raw":"GET /gtag/js?id=G-ZKZB7TG472 HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://happymodx.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: zstd\r\nvary: Accept-Encoding\r\ndate: Sun, 23 Aug 2026 10:35:46 GMT\r\nexpires: Sun, 23 Aug 2026 10:35:46 GMT\r\ncache-control: private, max-age=900\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\nserver: Google Tag Manager\r\ncontent-length: 169369\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":496649,"size_decoded":169973,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (6662)","md5":"f915af4b023ea2d7dee921992f30a131","sha1":"db466189ad64363e5ea29863bd94a49df909165c","sha256":"ecadee919b3cdb96675aaad1d5043ea191dcaba701a0817205ac5343d5f6a42f","sha512":"324a58005038f4fc2873d9c43ecb98247cd283795e7e0b69cf02465b1097d51a5a77473b8ee74ac3093113ae2788c742641d692182ea882fb9396fde1345c483","ssdeep":"6144:5HoO9AY1iLZKHg0D70HtdZen0okfha5gcXsL3EQB3PDqlbzW0cHHNN1FG:RcdLZMvDwO0lokHPu","tlshash":"c6b4e7cdb3d674665396f078903f01cba57b28a2b45cc89af189cce42e7469a4127f7c","first_seen":"2026-08-23T10:36:29.915154Z","last_seen":"2026-08-23T10:37:00.281978Z","times_seen":2,"resource_available":true,"data":null}},"time_used":133,"timings":{"blocked":-1,"dns":2,"connect":15,"send":0,"wait":37,"receive":46,"ssl":33},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"happymodx.com/wp-content/plugins/polylang-pro/vendor/wpsyntex/polylang/flags/vn.png","fqdn":"happymodx.com","domain":"happymodx.com","tld":"com"},"ip":{"addr":"104.21.39.80","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://happymodx.com/fc-mobile-soccer/","date":"2026-08-23T10:35:46.020Z","timestamp":1787481346020,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"happymodx.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 28 Jul 2026 09:00:25 GMT","end":"Mon, 26 Oct 2026 10:00:20 GMT"},"fingerprint":{"sha1":"FE:29:9A:0F:BF:23:3E:7B:7B:09:E3:15:8C:DD:03:24:B2:44:F9:87","sha256":"D3:DC:55:AE:12:9C:AC:87:D1:C7:22:A0:4D:BA:D1:40:94:85:03:14:B3:02:E8:37:C8:78:61:6F:C5:79:A4:BD"}}},"request":{"raw":"GET /wp-content/plugins/polylang-pro/vendor/wpsyntex/polylang/flags/vn.png HTTP/1.1\r\nHost: happymodx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://happymodx.com/fc-mobile-soccer/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=10368000\r\nexpires: Mon, 21 Dec 2026 08:58:45 GMT\r\ncontent-type: image/png\r\nlast-modified: Sat, 17 Jan 2026 17:46:45 GMT\r\naccept-ranges: bytes\r\nserver-timing: cfExtPri\r\ndate: Sun, 23 Aug 2026 10:35:46 GMT\r\nserver: cloudflare\r\nplatform: hostinger\r\npanel: hpanel\r\ncontent-security-policy: upgrade-insecure-requests\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 5820\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=F23vWoTLyIRfRSOaM8%2FUJ3%2FEn3tR9ycXyc9gMVQ8piw95dCo%2BlC0u6tPbB5wzbDFTVr9rZIwGhz%2FgDvL26FCIRP2FXLU40UBON1xAmkzIzbC1e9VOFKj4HB3SBwjOGGs\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a2f978ec9c9f568a-OSL\r\ncontent-length: 238\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]}],"data":{"size":238,"size_decoded":1101,"mime_type":"image/png","magic":"PNG image data, 16 x 11, 8-bit colormap, non-interlaced","md5":"7fa35d36e6a63855ad2ba802b7a106dd","sha1":"8a5ccb8545f425df3a51f40ae4e66cdf8043a19c","sha256":"b4f555b567f7fe2ffb889522122a38bdb95ffe22bd10167a20eb2359d08249c1","sha512":"10d5452b8b6d3706bd20e08c771c92df37fa2a0965d22d0e349e036902e7853b37207e80c6d3d0e85a7b69ef4c82eb0186ee76695d353c544b659122c63c9bbe","ssdeep":"","tlshash":"5ed097c8d7a61e79e2e401f2c194b05acc50489a050b00127f8f9a97e102104c0b8d83","first_seen":"2023-08-10T21:26:20Z","last_seen":"2026-08-23T10:37:00.266541Z","times_seen":92,"resource_available":false,"data":null}},"time_used":54,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":54,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-23","alert":"Sinkholed","trigger":"happymodx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.storageimagedisplay.com/cti/12/1a/3a/121a3a168f14e179edc4cb245e4583dc/1781174157.jpg","fqdn":"cdn.storageimagedisplay.com","domain":"storageimagedisplay.com","tld":"com"},"ip":{"addr":"45.133.44.1","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://happymodx.com/fc-mobile-soccer/","date":"2026-08-23T10:35:46.902Z","timestamp":1787481346902,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.storageimagedisplay.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 05 Jul 2026 02:32:41 GMT","end":"Sat, 03 Oct 2026 02:32:40 GMT"},"fingerprint":{"sha1":"93:44:E1:27:F0:B8:DC:66:E6:9C:61:B4:0A:67:1A:15:C1:03:96:E0","sha256":"09:8F:8B:62:8F:36:FB:39:E7:E7:46:10:C8:84:35:9D:EC:3D:D1:F9:7A:9A:BA:A9:C2:94:41:1A:DF:D7:05:FC"}}},"request":{"raw":"GET /cti/12/1a/3a/121a3a168f14e179edc4cb245e4583dc/1781174157.jpg HTTP/1.1\r\nHost: cdn.storageimagedisplay.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 23 Aug 2026 10:35:46 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 29068\r\nserver: nginx/1.21.6\r\nlast-modified: Thu, 11 Jun 2026 10:35:57 GMT\r\netag: \"6a2a8f8d-718c\"\r\nexpires: Tue, 25 Aug 2026 10:35:46 GMT\r\ncache-control: max-age=172800\r\nx-cdn-host-id: AH0543\r\nx-proxy-cache: HIT\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":29068,"size_decoded":29416,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop 26.3 (Macintosh), datetime=2026:06:09 16:08:56], progressive, precision 8, 468x60, components 3","md5":"a0b7a430a93275f7a47faae787b0e7e5","sha1":"e5addd8cc6b85174530d242c1fcaa0bf96c3ce04","sha256":"54240d64f77ace204a9aadf2d5fd49b6562ceaacf9eaa1cb0c335ef8c91f75fb","sha512":"629631daff788486ebd2efcf872707d55b25d8abb7967779ebb51071f55af095090b995bcae11c6f5b75819c940f06ed802293c0d56f623c5d87145250dd6fb1","ssdeep":"384:LlLNYr+iS37lLNYrWnAKrlCIWQSYmPaM0jloMVBSZKVz0bGnqYrRWd4D:xhYSi0hYaA1IdC0jrBfFnqM0e","tlshash":"d4d2bf1c7ba2dd22f9d1437248a4c7e34b12bf9466b3a292bc9d764277346d2cd0e243","first_seen":"2026-06-24T18:59:57.078057Z","last_seen":"2026-08-23T10:36:29.917127Z","times_seen":214,"resource_available":false,"data":null}},"time_used":93,"timings":{"blocked":-1,"dns":3,"connect":19,"send":0,"wait":39,"receive":6,"ssl":25},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"happymodx.com/wp-includes/js/dist/hooks.min.js?ver=f0f188028580e8dc1255","fqdn":"happymodx.com","domain":"happymodx.com","tld":"com"},"ip":{"addr":"104.21.39.80","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://happymodx.com/fc-mobile-soccer/","date":"2026-08-23T10:35:45.974Z","timestamp":1787481345974,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"happymodx.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 28 Jul 2026 09:00:25 GMT","end":"Mon, 26 Oct 2026 10:00:20 GMT"},"fingerprint":{"sha1":"FE:29:9A:0F:BF:23:3E:7B:7B:09:E3:15:8C:DD:03:24:B2:44:F9:87","sha256":"D3:DC:55:AE:12:9C:AC:87:D1:C7:22:A0:4D:BA:D1:40:94:85:03:14:B3:02:E8:37:C8:78:61:6F:C5:79:A4:BD"}}},"request":{"raw":"GET /wp-includes/js/dist/hooks.min.js?ver=f0f188028580e8dc1255 HTTP/1.1\r\nHost: happymodx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://happymodx.com/fc-mobile-soccer/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Sun, 30 Aug 2026 08:58:44 GMT\r\ncontent-type: application/x-javascript; charset=UTF-8\r\nlast-modified: Fri, 21 Aug 2026 02:21:28 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding,Accept-Encoding\r\nserver-timing: cfExtPri\r\ndate: Sun, 23 Aug 2026 10:35:45 GMT\r\nserver: cloudflare\r\nplatform: hostinger\r\npanel: hpanel\r\ncontent-security-policy: upgrade-insecure-requests\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 5821\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=DMkxuQhXwi06R2%2BAfJTiLrMYPAgARo5B6B9ajmCRd3P9D6sATv1izl1Zt8umuGfJZz5N66cnUtgLcwSpK%2FBug5X0Q0ZxclYivIh68e%2FW9w8CGfqq8r%2FHYRWvJdzyO0hG\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: a2f978ec4c7d568a-OSL\r\ncontent-length: 1758\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]}],"data":{"size":5107,"size_decoded":2691,"mime_type":"application/x-javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (5014)","md5":"140ad332a76e011554bcab096a37f4ac","sha1":"72c9da62a624a99da82f8b53ecd2ba8d8e1bca88","sha256":"fc774906082b59dedcfc55b8ef127783b6d056578ff4586a8ebbdb81bbe286f1","sha512":"ccf2833ab9908f740779b84bfd97903f96572aedf6eb0a37f08e51a88f0634e03408bd3e87e2e0586483835a6e09736848e44907848902ef11f8114a21029eca","ssdeep":"96:Fu/16WIHBLusBcADGDd/R5h2RTLlD3jMXY2yGy94E34sTY2CiB:FGIhNBcAD0NRv8XlD3wXY2yH+EoaY2B","tlshash":"4fb163c43542b830e2777027f0ab58d46175abe1a82d8446d59cd8f12da39cee0e7b3d","first_seen":"2026-08-19T23:17:42.247117Z","last_seen":"2026-08-23T13:23:37.172031Z","times_seen":912,"resource_available":true,"data":null}},"time_used":33,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":33,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-23","alert":"Sinkholed","trigger":"happymodx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/poppins/v24/pxiEyp8kv8JHgFVrJJfecg.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://happymodx.com/fc-mobile-soccer/","date":"2026-08-23T10:35:46.530Z","timestamp":1787481346530,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Wed, 05 Aug 2026 20:43:51 GMT","end":"Wed, 28 Oct 2026 20:43:50 GMT"},"fingerprint":{"sha1":"B9:F7:74:85:7B:1C:5F:E9:C2:86:5A:AA:63:0F:34:84:5F:79:D6:96","sha256":"BA:57:10:D4:7E:A5:7C:C6:22:90:71:24:65:31:49:39:40:E5:C8:EB:E4:74:F7:D9:0B:3E:17:36:DD:31:9D:EB"}}},"request":{"raw":"GET /s/poppins/v24/pxiEyp8kv8JHgFVrJJfecg.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://happymodx.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 7884\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 20 Aug 2026 02:57:17 GMT\r\nexpires: Fri, 20 Aug 2027 02:57:17 GMT\r\ncache-control: public, max-age=31536000\r\nage: 286709\r\nlast-modified: Mon, 15 Sep 2025 16:34:42 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":7884,"size_decoded":8696,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 7884, version 1.0","md5":"9212f6f9860f9fc6c69b02fedf6db8c3","sha1":"ac6d71b4d5fdd2b3dabc9a06ff6c001e4251da0b","sha256":"7d93459d86585bfcdbb7e0376056226adb25821ee54b96236fe2123e9560929f","sha512":"67317495f4b53e20a9f31c034e456e6c37f387dffb2c092caa5159bc441cfcadd02749ffe5bbed1d580d5300a59e48a767ef2c6d9978b474f84c1a2cd095c126","ssdeep":"192:xLFDbKO9E3rS3JWBRO/J601FSS5ZUbik3Zy2f0:pd9J5W501otlI","tlshash":"c3f1ae4eb3f2cd1be40982e53a0fc90b1c578272681fd772d067a22517893bc8db2c81","first_seen":"2023-04-05T15:35:34Z","last_seen":"2026-08-23T12:28:29.732116Z","times_seen":394406,"resource_available":false,"data":null}},"time_used":52,"timings":{"blocked":29,"dns":0,"connect":0,"send":0,"wait":22,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"happymodx.com/wp-content/uploads/2026/01/Untitled-design-2.png","fqdn":"happymodx.com","domain":"happymodx.com","tld":"com"},"ip":{"addr":"104.21.39.80","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://happymodx.com/fc-mobile-soccer/","date":"2026-08-23T10:35:46.004Z","timestamp":1787481346004,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"happymodx.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 28 Jul 2026 09:00:25 GMT","end":"Mon, 26 Oct 2026 10:00:20 GMT"},"fingerprint":{"sha1":"FE:29:9A:0F:BF:23:3E:7B:7B:09:E3:15:8C:DD:03:24:B2:44:F9:87","sha256":"D3:DC:55:AE:12:9C:AC:87:D1:C7:22:A0:4D:BA:D1:40:94:85:03:14:B3:02:E8:37:C8:78:61:6F:C5:79:A4:BD"}}},"request":{"raw":"GET /wp-content/uploads/2026/01/Untitled-design-2.png HTTP/1.1\r\nHost: happymodx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://happymodx.com/fc-mobile-soccer/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=10368000\r\nexpires: Mon, 21 Dec 2026 10:35:46 GMT\r\ncontent-type: image/png\r\nlast-modified: Wed, 21 Jan 2026 01:08:31 GMT\r\naccept-ranges: bytes\r\nserver-timing: cfExtPri\r\ndate: Sun, 23 Aug 2026 10:35:46 GMT\r\nserver: cloudflare\r\nplatform: hostinger\r\npanel: hpanel\r\ncontent-security-policy: upgrade-insecure-requests\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=XH4RuryJ9uD6CUq5vKnG8xmcn3S2bXXKFN7fMmKM3RC1d9Tlx0oKlwqax6h2iqrALC5xv29Uod4SHAn0gsC%2FEg6NUdxNyXCCY4fJ%2FACLtWikOzA0dlLAnOtkfODH%2Fcqy\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a2f978ec7c8f568a-OSL\r\ncontent-length: 12280\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":12280,"size_decoded":13133,"mime_type":"image/png","magic":"PNG image data, 160 x 40, 8-bit/color RGBA, non-interlaced","md5":"604457927ce176f3c4d9c9329bebcdd0","sha1":"f8a9d07a3b7313e3eadd2b4f3ea76b1161afa048","sha256":"936af594e76e784a625e17c7191c26ad5ec58d213d75daea774724acd66c05b0","sha512":"6d1fe17e1b6512ffe9a7272f8818319202bf285b585dfe9955ec414d2163a069a9fa421c21dee0c59b247b3d00d288bd2afdd43e188c73468334069951ed71f3","ssdeep":"192:VRWrdIIMtMKqWxxbCOTHk9KgUsRMXazjhYLjTmsaKX7AnBaGazYGDg4WeY21tl9T:VRWh4mK/xxeU0Kg9qqzjG3DD7An7azYC","tlshash":"1842bf3d4de20223e8070975cfdf51a1463b0e2eed01ba4ca9b1e5471ee5525c9eb2f2","first_seen":"2026-02-02T10:31:07.399772Z","last_seen":"2026-08-23T10:37:00.317165Z","times_seen":10,"resource_available":false,"data":null}},"time_used":976,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":954,"receive":22,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-23","alert":"Sinkholed","trigger":"happymodx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"happymodx.com/wp-content/plugins/polylang-pro/vendor/wpsyntex/polylang/flags/fr.png","fqdn":"happymodx.com","domain":"happymodx.com","tld":"com"},"ip":{"addr":"104.21.39.80","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://happymodx.com/fc-mobile-soccer/","date":"2026-08-23T10:35:46.015Z","timestamp":1787481346015,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"happymodx.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 28 Jul 2026 09:00:25 GMT","end":"Mon, 26 Oct 2026 10:00:20 GMT"},"fingerprint":{"sha1":"FE:29:9A:0F:BF:23:3E:7B:7B:09:E3:15:8C:DD:03:24:B2:44:F9:87","sha256":"D3:DC:55:AE:12:9C:AC:87:D1:C7:22:A0:4D:BA:D1:40:94:85:03:14:B3:02:E8:37:C8:78:61:6F:C5:79:A4:BD"}}},"request":{"raw":"GET /wp-content/plugins/polylang-pro/vendor/wpsyntex/polylang/flags/fr.png HTTP/1.1\r\nHost: happymodx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://happymodx.com/fc-mobile-soccer/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=10368000\r\nexpires: Mon, 21 Dec 2026 08:58:45 GMT\r\ncontent-type: image/png\r\nlast-modified: Sat, 17 Jan 2026 17:46:45 GMT\r\naccept-ranges: bytes\r\nserver-timing: cfExtPri\r\ndate: Sun, 23 Aug 2026 10:35:46 GMT\r\nserver: cloudflare\r\nplatform: hostinger\r\npanel: hpanel\r\ncontent-security-policy: upgrade-insecure-requests\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 5820\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=rosyvowMReOU6VgTB06v2ik4H%2Brmg6wCdx%2FhuZ%2B0u2E%2FpYK25mT3W%2BBkvloMXXKBTjYdnWYCkqY%2FNUiUIpVD8wB%2BXpK3w3zub3%2FkqXQMr6nuIE8y33Eve6B7qdqMS%2B8k\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a2f978ec9c98568a-OSL\r\ncontent-length: 271\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]}],"data":{"size":271,"size_decoded":1144,"mime_type":"image/png","magic":"PNG image data, 16 x 11, 8-bit colormap, non-interlaced","md5":"a4b69fc581f26f929bd30e23c0b6c5bb","sha1":"753551d08eafcc4f4c6eb05f45320160b4d48197","sha256":"b7d183dce188ef91df5ddcd9ff5378e1b64ce515ccb048ed2a1f32d4fd0a0a3e","sha512":"54f5ffc69268d6d6474b436ae5b272b05833946483cc1d6097ae3ae36d15b263c49a425ee91f2c9b282dc17aafc1e2390ca1346986f7453825c80f484fd3da71","ssdeep":"","tlshash":"c9d02b5102a05d7ea559953760952310b87522581ca8984f30a324089a6ed65d88a783","first_seen":"2023-06-06T05:51:24Z","last_seen":"2026-08-23T10:37:00.339092Z","times_seen":395,"resource_available":false,"data":null}},"time_used":69,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":69,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-23","alert":"Sinkholed","trigger":"happymodx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.storageimagedisplay.com/cti/3f/91/3e/3f913e98ca60f6860a4a994e0ffb9d6b/1784628408.jpg","fqdn":"cdn.storageimagedisplay.com","domain":"storageimagedisplay.com","tld":"com"},"ip":{"addr":"45.133.44.1","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://happymodx.com/fc-mobile-soccer/","date":"2026-08-23T10:35:47.821Z","timestamp":1787481347821,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.storageimagedisplay.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 05 Jul 2026 02:32:41 GMT","end":"Sat, 03 Oct 2026 02:32:40 GMT"},"fingerprint":{"sha1":"93:44:E1:27:F0:B8:DC:66:E6:9C:61:B4:0A:67:1A:15:C1:03:96:E0","sha256":"09:8F:8B:62:8F:36:FB:39:E7:E7:46:10:C8:84:35:9D:EC:3D:D1:F9:7A:9A:BA:A9:C2:94:41:1A:DF:D7:05:FC"}}},"request":{"raw":"GET /cti/3f/91/3e/3f913e98ca60f6860a4a994e0ffb9d6b/1784628408.jpg HTTP/1.1\r\nHost: cdn.storageimagedisplay.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 23 Aug 2026 10:35:47 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 2066\r\nserver: nginx/1.21.6\r\nlast-modified: Tue, 21 Jul 2026 10:06:48 GMT\r\netag: \"6a5f44b8-812\"\r\nexpires: Tue, 25 Aug 2026 10:35:47 GMT\r\ncache-control: max-age=172800\r\nx-cdn-host-id: AH0543\r\nx-proxy-cache: HIT\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2066,"size_decoded":2412,"mime_type":"image/jpeg","magic":"JPEG image data, progressive, precision 8, 149x149, components 3","md5":"fa410e41a8bf3012334c53eb381f38d1","sha1":"74f3051213aa6e459162848585e4b3500c8f7e1b","sha256":"1b65e71238d9ab462b8349874cf0102ed1425d6736b5e3d7ac93e8af6e1d3326","sha512":"7d97160375e0c9acb3c73aac111b0d3326d1b7e5846f43969ee1a2bedba2962313fdce1d94e75ec279822e7e902f5833ca83d055d8703db4d1aecd312abfa116","ssdeep":"","tlshash":"dd412a2a9b140c5df534a63a4398329f921a3bc1dc8baa2372c34d14127b0730bea7c5","first_seen":"2026-07-21T12:24:06.10225Z","last_seen":"2026-08-23T10:37:00.276158Z","times_seen":488,"resource_available":false,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"happymodx.com/wp-content/plugins/contact-form-7/includes/swv/js/index.js?ver=6.1.7","fqdn":"happymodx.com","domain":"happymodx.com","tld":"com"},"ip":{"addr":"104.21.39.80","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://happymodx.com/fc-mobile-soccer/","date":"2026-08-23T10:35:45.976Z","timestamp":1787481345976,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"happymodx.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 28 Jul 2026 09:00:25 GMT","end":"Mon, 26 Oct 2026 10:00:20 GMT"},"fingerprint":{"sha1":"FE:29:9A:0F:BF:23:3E:7B:7B:09:E3:15:8C:DD:03:24:B2:44:F9:87","sha256":"D3:DC:55:AE:12:9C:AC:87:D1:C7:22:A0:4D:BA:D1:40:94:85:03:14:B3:02:E8:37:C8:78:61:6F:C5:79:A4:BD"}}},"request":{"raw":"GET /wp-content/plugins/contact-form-7/includes/swv/js/index.js?ver=6.1.7 HTTP/1.1\r\nHost: happymodx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://happymodx.com/fc-mobile-soccer/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Sun, 30 Aug 2026 08:58:45 GMT\r\ncontent-type: application/x-javascript; charset=UTF-8\r\nlast-modified: Sat, 22 Aug 2026 15:34:59 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding,Accept-Encoding\r\nserver-timing: cfExtPri\r\ndate: Sun, 23 Aug 2026 10:35:45 GMT\r\nserver: cloudflare\r\nplatform: hostinger\r\npanel: hpanel\r\ncontent-security-policy: upgrade-insecure-requests\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 5820\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=jutU8%2FDLoHV25GK3FOh0w1ZEchfpd82kuNrpJq1m%2BSzJXFT0kJNWMC26OE5rMfPjl5KJEJyrfyqr7JqNza2YFLYJKv9%2FS636xESvAx4n0ZbdQGboI72JK%2FA2ShDBq55F\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: a2f978ec5c7f568a-OSL\r\ncontent-length: 3361\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]}],"data":{"size":12512,"size_decoded":4294,"mime_type":"application/x-javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (12512), with no line terminators","md5":"96e7dc3f0e8559e4a3f3ca40b17ab9c3","sha1":"d363d0291e92c233e828023583dcf6685f2da5a2","sha256":"29fdd17a7002a2e1bbd9b33adafc53457c64006b5aca8f6e4dbf907de35433ca","sha512":"851dcea59510a12dd72c8391a9ea6ffa96bcbe0f009037d7a0b6e27bae63a494709b6eee912b5ed8d25605fbb767a885f543915996f8a8aff34395992e3332dc","ssdeep":"384:wwuf8OQL0sARrAZcNWLq/+Ffm/hibLexa2VautyX2fsL3ZHO1O9H:wwuf8OQL0sAZAGNWmGcibLexa2Vau0XD","tlshash":"d34235e16197e0f0c7c338a48816c051f2bf866cb9898054fb5dcdd22d5de07626b77a","first_seen":"2025-03-11T19:47:45.42406Z","last_seen":"2026-08-23T12:29:55.626161Z","times_seen":230615,"resource_available":true,"data":null}},"time_used":30,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":30,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-23","alert":"Sinkholed","trigger":"happymodx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kettledroopingcontinuation.com/watch.534021516619.js?dev=e\u0026fstu=01a02e30-d2d4-72fd-ad1f-cde4d98b1c91\u0026key=8c87b8164b319ffbf2dc17605a4d3e1c\u0026kw=%5B%22ea%22%2C%22sports%22%2C%22fc%22%2C%22mobile%22%2C%2226%22%2C%22mod%22%2C%22apk%22%2C%22v27%22%2C%220%22%2C%2203%22%2C%22unlimited%22%2C%22money%22%2C%22menu%22%2C%22unlocked%22%5D\u0026ps1=1787481346\u0026rb=e\u0026refer=https%3A%2F%2Fhappymodx.com%2Ffc-mobile-soccer%2F\u0026res=14.1055\u0026rmtc=t\u0026sht=1_Omp_dZ_982O27tb6XnJm9GOVEWQrc_MtJZm-MVEF0\u0026shv=2\u0026st1=be4463a32637e07ceb71fc2102c2ef07\u0026tz=0\u0026uuid=45f7fc2f-ad1e-4091-9c0e-b18d5e4a10df%3A3%3A1","fqdn":"kettledroopingcontinuation.com","domain":"kettledroopingcontinuation.com","tld":"com"},"ip":{"addr":"23.111.84.228","port":443,"asn":7979,"as":"SERVERS-COM","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://happymodx.com/fc-mobile-soccer/","date":"2026-08-23T10:35:46.797Z","timestamp":1787481346797,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"kettledroopingcontinuation.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 23 Aug 2026 00:02:23 GMT","end":"Sat, 21 Nov 2026 00:02:22 GMT"},"fingerprint":{"sha1":"45:C6:44:0A:42:17:85:94:0C:43:02:EA:82:14:8D:F8:D3:13:D9:E2","sha256":"8C:E7:C4:F5:8F:DB:E8:10:A8:55:E4:5C:85:CC:97:D0:7D:0A:FE:C9:6C:C4:4D:6A:FF:20:87:2C:BC:34:2D:F4"}}},"request":{"raw":"GET /watch.534021516619.js?dev=e\u0026fstu=01a02e30-d2d4-72fd-ad1f-cde4d98b1c91\u0026key=8c87b8164b319ffbf2dc17605a4d3e1c\u0026kw=%5B%22ea%22%2C%22sports%22%2C%22fc%22%2C%22mobile%22%2C%2226%22%2C%22mod%22%2C%22apk%22%2C%22v27%22%2C%220%22%2C%2203%22%2C%22unlimited%22%2C%22money%22%2C%22menu%22%2C%22unlocked%22%5D\u0026ps1=1787481346\u0026rb=e\u0026refer=https%3A%2F%2Fhappymodx.com%2Ffc-mobile-soccer%2F\u0026res=14.1055\u0026rmtc=t\u0026sht=1_Omp_dZ_982O27tb6XnJm9GOVEWQrc_MtJZm-MVEF0\u0026shv=2\u0026st1=be4463a32637e07ceb71fc2102c2ef07\u0026tz=0\u0026uuid=45f7fc2f-ad1e-4091-9c0e-b18d5e4a10df%3A3%3A1 HTTP/1.1\r\nHost: kettledroopingcontinuation.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://happymodx.com\r\nReferer: https://happymodx.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: uid_id2=45f7fc2f-ad1e-4091-9c0e-b18d5e4a10df:3:1; ain=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.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.RnYQF76paCH96o53rLCvaa-rsLWl01ui6dzgog9SHqM\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.30.2\r\nDate: Sun, 23 Aug 2026 10:35:46 GMT\r\nContent-Type: text/html\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\naccept-ch: X-Device-User-Agent,X-Operamini-Phone-Ua,X-Ucbrowser-Device-Ua,User-Agent,Sec-Ch-Ua-Platform-Version,Sec-Ch-Ua-Model,Sec-Ch-Ua,Sec-Ch-Ua-Platformuser-Agent,Sec-Ch-Ua-Full-Version-List,Sec-Ch-Ua-Full-Version,Sec-Ch-Ua-Platform,Sec-Ch-Ua-Mobile,Device-Stock-Ua\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: https://happymodx.com\r\ncontent-encoding: zstd\r\nset-cookie: uid_id2=45f7fc2f-ad1e-4091-9c0e-b18d5e4a10df:3:1; Path=/; Expires=Sun, 30 Aug 2026 10:35:46 GMT; Secure; SameSite=None\npdhtkv=true; Path=/; Expires=Mon, 24 Aug 2026 10:35:46 GMT; Secure; SameSite=None\nuncs=1; Path=/; Expires=Mon, 24 Aug 2026 10:35:46 GMT; Secure; SameSite=None\npdhtkv32=true; Path=/; Expires=Mon, 24 Aug 2026 10:35:46 GMT; Secure; SameSite=None\nuncs32=1; Path=/; Expires=Mon, 24 Aug 2026 10:35:46 GMT; Secure; SameSite=None\nu_pl27763365=1; Path=/; Expires=Mon, 24 Aug 2026 10:35:46 GMT; Secure; SameSite=None\r\nvary: Accept-Encoding\r\nx-envoy-upstream-service-time: 16\r\nHost: kettledroopingcontinuation.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: 38c4694cb3f9e465087f25429e505054\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":[{"name":"uid_id2","value":"45f7fc2f-ad1e-4091-9c0e-b18d5e4a10df:3:1","quoted":false,"path":"/","expires":"2026-08-30T10:35:46Z","raw_expires":"Sun, 30 Aug 2026 10:35:46 GMT","secure":true,"http_only":false,"same_site":"None","partitioned":false,"raw":"uid_id2=45f7fc2f-ad1e-4091-9c0e-b18d5e4a10df:3:1; Path=/; Expires=Sun, 30 Aug 2026 10:35:46 GMT; Secure; SameSite=None"},{"name":"pdhtkv","value":"true","quoted":false,"path":"/","expires":"2026-08-24T10:35:46Z","raw_expires":"Mon, 24 Aug 2026 10:35:46 GMT","secure":true,"http_only":false,"same_site":"None","partitioned":false,"raw":"pdhtkv=true; Path=/; Expires=Mon, 24 Aug 2026 10:35:46 GMT; Secure; SameSite=None"},{"name":"uncs","value":"1","quoted":false,"path":"/","expires":"2026-08-24T10:35:46Z","raw_expires":"Mon, 24 Aug 2026 10:35:46 GMT","secure":true,"http_only":false,"same_site":"None","partitioned":false,"raw":"uncs=1; Path=/; Expires=Mon, 24 Aug 2026 10:35:46 GMT; Secure; SameSite=None"},{"name":"pdhtkv32","value":"true","quoted":false,"path":"/","expires":"2026-08-24T10:35:46Z","raw_expires":"Mon, 24 Aug 2026 10:35:46 GMT","secure":true,"http_only":false,"same_site":"None","partitioned":false,"raw":"pdhtkv32=true; Path=/; Expires=Mon, 24 Aug 2026 10:35:46 GMT; Secure; SameSite=None"},{"name":"uncs32","value":"1","quoted":false,"path":"/","expires":"2026-08-24T10:35:46Z","raw_expires":"Mon, 24 Aug 2026 10:35:46 GMT","secure":true,"http_only":false,"same_site":"None","partitioned":false,"raw":"uncs32=1; Path=/; Expires=Mon, 24 Aug 2026 10:35:46 GMT; Secure; SameSite=None"},{"name":"u_pl27763365","value":"1","quoted":false,"path":"/","expires":"2026-08-24T10:35:46Z","raw_expires":"Mon, 24 Aug 2026 10:35:46 GMT","secure":true,"http_only":false,"same_site":"None","partitioned":false,"raw":"u_pl27763365=1; Path=/; Expires=Mon, 24 Aug 2026 10:35:46 GMT; Secure; SameSite=None"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.30.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}],"data":{"size":4100,"size_decoded":4228,"mime_type":"text/html","magic":"JavaScript source, ASCII text, with very long lines (3224)","md5":"3c6fc9b649979746eff5dca95e25b6f9","sha1":"b10e2f4e26014886a86f440cfaeca8e9211b5ad3","sha256":"1b18f56a3b197f49b61b332f92355b0cd2791e33de8b6768a80c3c8ddeb472d4","sha512":"a3b81fd881a4702fad6b55905cc2711faf177ce3b103bd32c21c230f26ac7ae75220326c976dfde0f4f73ff02396d4d4f31880fe63caac1d218c77ba02548bf2","ssdeep":"96:AozfNpx6x4ZWami53X4k/MlNtvkrAOYcvE1ZDsCfMEDaH:Jzf5iiNok0jVsCkCaH","tlshash":"0f814cba9da571386813206f6c39a5682c74d6071d41db057c4dd9259f20bf04fbafec","first_seen":"2026-08-23T10:36:29.925269Z","last_seen":"2026-08-23T10:36:29.925269Z","times_seen":1,"resource_available":false,"data":null}},"time_used":41,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":41,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-23","alert":"Sinkholed","trigger":"kettledroopingcontinuation.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-23","alert":"Sinkholed","trigger":"kettledroopingcontinuation.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-23","alert":"Sinkholed","trigger":"kettledroopingcontinuation.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"happymodx.com/wp-content/plugins/kadence-blocks/dist/style-blocks-advancedbtn.css?ver=3.7.9.1","fqdn":"happymodx.com","domain":"happymodx.com","tld":"com"},"ip":{"addr":"104.21.39.80","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://happymodx.com/fc-mobile-soccer/","date":"2026-08-23T10:35:45.953Z","timestamp":1787481345953,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"happymodx.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 28 Jul 2026 09:00:25 GMT","end":"Mon, 26 Oct 2026 10:00:20 GMT"},"fingerprint":{"sha1":"FE:29:9A:0F:BF:23:3E:7B:7B:09:E3:15:8C:DD:03:24:B2:44:F9:87","sha256":"D3:DC:55:AE:12:9C:AC:87:D1:C7:22:A0:4D:BA:D1:40:94:85:03:14:B3:02:E8:37:C8:78:61:6F:C5:79:A4:BD"}}},"request":{"raw":"GET /wp-content/plugins/kadence-blocks/dist/style-blocks-advancedbtn.css?ver=3.7.9.1 HTTP/1.1\r\nHost: happymodx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://happymodx.com/fc-mobile-soccer/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=31536000\r\nexpires: Mon, 23 Aug 2027 08:58:40 GMT\r\ncontent-type: text/css; charset=UTF-8\r\nlast-modified: Mon, 17 Aug 2026 03:58:12 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding,Accept-Encoding\r\nserver-timing: cfExtPri\r\ndate: Sun, 23 Aug 2026 10:35:46 GMT\r\nserver: cloudflare\r\nplatform: hostinger\r\npanel: hpanel\r\ncontent-security-policy: upgrade-insecure-requests\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 5825\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=pChhjP8QEPK0fMr0yXbsup7YL1mcVO3NMlfvaMfMS%2BN%2Fx9zM%2BBPRUVWRE2SPSsqbFXBL86ek6%2B%2BU1BeQ5soR3U0O6u3F%2BhSK8AW1xr%2FQ8nu0vUhrXQZ6xqgO6LcjQjcE\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\ncf-ray: a2f978ec2c74568a-OSL\r\ncontent-length: 701\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2974,"size_decoded":1625,"mime_type":"text/css; charset=UTF-8","magic":"ASCII text, with very long lines (2973)","md5":"269a25e36685ed62df8264049036ed1c","sha1":"d741cf5da11d365a287002bd348fc48118e03b93","sha256":"c727b0e23570780c9bf62a0f92ad53e6c8ae377c78c8c1cd0f3c98dc9c073b49","sha512":"a23617f58bf0682615c5df0799526a65b05de56f9b769e73a5a545227dfdfb9e2f6b41ef33fa04cf697d54526bc2ed2ee4eb8f41b61a7154de56f2b5c9af973b","ssdeep":"","tlshash":"1c51f1e57360926c6f3e8bdcd21b516b6118f4c3e50e2a85b15fc5e0a2ce2e32dd2593","first_seen":"2025-08-16T12:12:58.728005Z","last_seen":"2026-08-23T11:17:22.865586Z","times_seen":3811,"resource_available":false,"data":null}},"time_used":68,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":68,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-23","alert":"Sinkholed","trigger":"happymodx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"happymodx.com/wp-content/plugins/polylang-pro/vendor/wpsyntex/polylang/flags/bd.png","fqdn":"happymodx.com","domain":"happymodx.com","tld":"com"},"ip":{"addr":"104.21.39.80","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://happymodx.com/fc-mobile-soccer/","date":"2026-08-23T10:35:46.013Z","timestamp":1787481346013,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"happymodx.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 28 Jul 2026 09:00:25 GMT","end":"Mon, 26 Oct 2026 10:00:20 GMT"},"fingerprint":{"sha1":"FE:29:9A:0F:BF:23:3E:7B:7B:09:E3:15:8C:DD:03:24:B2:44:F9:87","sha256":"D3:DC:55:AE:12:9C:AC:87:D1:C7:22:A0:4D:BA:D1:40:94:85:03:14:B3:02:E8:37:C8:78:61:6F:C5:79:A4:BD"}}},"request":{"raw":"GET /wp-content/plugins/polylang-pro/vendor/wpsyntex/polylang/flags/bd.png HTTP/1.1\r\nHost: happymodx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://happymodx.com/fc-mobile-soccer/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=10368000\r\nexpires: Mon, 21 Dec 2026 08:58:45 GMT\r\ncontent-type: image/png\r\nlast-modified: Sat, 17 Jan 2026 17:46:45 GMT\r\naccept-ranges: bytes\r\nserver-timing: cfExtPri\r\ndate: Sun, 23 Aug 2026 10:35:46 GMT\r\nserver: cloudflare\r\nplatform: hostinger\r\npanel: hpanel\r\ncontent-security-policy: upgrade-insecure-requests\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 5820\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=HmiQMqToSm2alKynWHcXv%2B8PKKkselOpizAm6JzxLe1iY652NkMam2Cjx%2FWu8h9SyeFEdkLPo2b7powfEIm8FZzw79H1DKpKcy1eo0MslDyGQPul4WooOMVVUhyzfOD5\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a2f978ec8c96568a-OSL\r\ncontent-length: 251\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":251,"size_decoded":1110,"mime_type":"image/png","magic":"PNG image data, 16 x 11, 8-bit colormap, non-interlaced","md5":"f10d1c2ece635aa3685e9ab871a5a7a9","sha1":"ba78e5f0452289f9e29cc4c196faedac79df4b25","sha256":"f23da66f2f113185fddafadd91acfd124cf6f313315d7f36dbc798abfe208589","sha512":"dd902dd2d16aabe2e3ba546b29eb33e0a7289103d65f3648d5fdf3f82b2d59a19504783d14199a609a09a2724b4b167462a1b433e0073f938b4f957b6352ba00","ssdeep":"","tlshash":"23d095cbdb315e2cd4b103b3be18d000d412882d580f4d435a17d61d5301745c5ca543","first_seen":"2023-11-27T09:13:26Z","last_seen":"2026-08-23T10:37:00.315246Z","times_seen":18,"resource_available":false,"data":null}},"time_used":71,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":71,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-23","alert":"Sinkholed","trigger":"happymodx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"happymodx.com/wp-content/uploads/2025/12/Crazy-Kick.webp","fqdn":"happymodx.com","domain":"happymodx.com","tld":"com"},"ip":{"addr":"104.21.39.80","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://happymodx.com/fc-mobile-soccer/","date":"2026-08-23T10:35:46.027Z","timestamp":1787481346027,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"happymodx.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 28 Jul 2026 09:00:25 GMT","end":"Mon, 26 Oct 2026 10:00:20 GMT"},"fingerprint":{"sha1":"FE:29:9A:0F:BF:23:3E:7B:7B:09:E3:15:8C:DD:03:24:B2:44:F9:87","sha256":"D3:DC:55:AE:12:9C:AC:87:D1:C7:22:A0:4D:BA:D1:40:94:85:03:14:B3:02:E8:37:C8:78:61:6F:C5:79:A4:BD"}}},"request":{"raw":"GET /wp-content/uploads/2025/12/Crazy-Kick.webp HTTP/1.1\r\nHost: happymodx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://happymodx.com/fc-mobile-soccer/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=10368000\r\nexpires: Mon, 21 Dec 2026 10:35:46 GMT\r\ncontent-type: image/webp\r\nlast-modified: Thu, 18 Dec 2025 09:11:16 GMT\r\naccept-ranges: bytes\r\nserver-timing: cfExtPri\r\ndate: Sun, 23 Aug 2026 10:35:46 GMT\r\nserver: cloudflare\r\nplatform: hostinger\r\npanel: hpanel\r\ncontent-security-policy: upgrade-insecure-requests\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=oG3pci04QH%2BwoHGIkR%2B4DQsT%2F3ywD%2FSvsmV3jtyIwMPZ5KcML6qzN2VrrKoXZdDF0OLHurFLn2qR9NYe6n2hRzmoDy2lI6gEvmOq1%2FwgOGQhXLrhOCLZ2C%2Bq57S7ll9Y\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a2f978ecaca6568a-OSL\r\ncontent-length: 6568\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":6568,"size_decoded":7427,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"ee0c5b57a6bec930ab5e03db01c13c2f","sha1":"ac94511249a6426a9a4069503a588496835f6abd","sha256":"67068abe8bbe506b2cf325c476744ba1a64a2282e710685a88ef5614c3f32ab2","sha512":"c9ec2f55b3ddc8bab02213c1129e66a9b763bad23ad720290a27171ad74df2f7445e1bf3c6c3e212e4dc8070570551bbadd7568689978494ce667bf829e930c2","ssdeep":"192:1wAQsbM1ac2wt6jcLwID+L8uN9zG2Q0Wmcvow6jrmq:1wjXESw9nrz60Mv0Oq","tlshash":"1cd17d101171537ff0706f7f446227aba595b52adfe4af21a27f0245ab08bd1283d4be","first_seen":"2026-08-23T10:36:29.930199Z","last_seen":"2026-08-23T10:36:29.930199Z","times_seen":1,"resource_available":false,"data":null}},"time_used":963,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":954,"receive":9,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-23","alert":"Sinkholed","trigger":"happymodx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.redgarto.com/sb/ssp/interstitial/bottom_banner/1/css/animate.css","fqdn":"cdn.redgarto.com","domain":"redgarto.com","tld":"com"},"ip":{"addr":"104.21.80.164","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://happymodx.com/fc-mobile-soccer/","date":"2026-08-23T10:35:47.707Z","timestamp":1787481347707,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"redgarto.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 07 Aug 2026 14:01:04 GMT","end":"Thu, 05 Nov 2026 15:00:52 GMT"},"fingerprint":{"sha1":"7C:BC:79:D9:68:83:B8:37:9E:CC:BA:8F:27:B7:E6:30:D0:CC:5C:D7","sha256":"C7:1A:1B:B8:98:AD:22:5C:50:DD:66:BC:40:9A:82:01:4C:2B:75:DE:91:17:5D:48:DB:0C:B0:5A:69:6E:4E:9E"}}},"request":{"raw":"GET /sb/ssp/interstitial/bottom_banner/1/css/animate.css HTTP/1.1\r\nHost: cdn.redgarto.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://happymodx.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://happymodx.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 23 Aug 2026 10:35:51 GMT\r\ncontent-type: text/css\r\nlast-modified: Fri, 19 Jan 2024 14:19:45 GMT\r\nvary: accept-encoding\r\npriority: u=3,i=?0\r\netag: W/\"65aa8501-13361\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: public, max-age=315360000\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: Date\r\ncontent-encoding: gzip\r\nage: 2\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=BnzRmv9waZ0%2FO7nitVI6KnXUSXyfH2ZzkDFGNhl7cKpVLoPebbiUzp4yzUew7fbJAlEP1Ny5evu%2FziFplJ6R8DZe4ip%2Bu7yjJyefBW6sRdit8InRyrmfR89WLHSc1S0ebtF0\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a2f9790c08f332fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":78689,"size_decoded":5680,"mime_type":"text/css","magic":"ASCII text","md5":"3d4123dbfb33d27a5cfdfcfa91df6783","sha1":"e7d0eeeec54b848f0bc3da8685fa3bc88429d660","sha256":"cb7d1393b65701b2f97d8da244c2c6023e9cbc3463ecb0136b915cfc775c6887","sha512":"75c8a48dc207595e201b50b87ff68782112a21aded9f15f14185c07d40f0151d6afe74a2b278aa575caf12ac422e8166316296ed7b6573ea24e667cca4af51dd","ssdeep":"384:jvuAuF81dghu3ublZlX/m/Gu7uNUtrL4VrbZJgBhLYNKwZiMUL6Vpaj7F:jvuAu21dghu3uLu7uNKwZiMUL6Vpaj7F","tlshash":"22731bad399115845263861d83df9e68273ce5731826acef73c2488bcf8bf9867c9147","first_seen":"2024-01-20T06:37:31Z","last_seen":"2026-08-23T10:37:00.326713Z","times_seen":13559,"resource_available":false,"data":null}},"time_used":3350,"timings":{"blocked":-1,"dns":3,"connect":1,"send":0,"wait":7,"receive":1,"ssl":3336},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.redgarto.com/sb/ssp/interstitial/bottom_banner/1/img/close.svg","fqdn":"cdn.redgarto.com","domain":"redgarto.com","tld":"com"},"ip":{"addr":"104.21.80.164","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://happymodx.com/fc-mobile-soccer/","date":"2026-08-23T10:35:47.820Z","timestamp":1787481347820,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"redgarto.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 07 Aug 2026 14:01:04 GMT","end":"Thu, 05 Nov 2026 15:00:52 GMT"},"fingerprint":{"sha1":"7C:BC:79:D9:68:83:B8:37:9E:CC:BA:8F:27:B7:E6:30:D0:CC:5C:D7","sha256":"C7:1A:1B:B8:98:AD:22:5C:50:DD:66:BC:40:9A:82:01:4C:2B:75:DE:91:17:5D:48:DB:0C:B0:5A:69:6E:4E:9E"}}},"request":{"raw":"GET /sb/ssp/interstitial/bottom_banner/1/img/close.svg HTTP/1.1\r\nHost: cdn.redgarto.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 23 Aug 2026 10:35:47 GMT\r\ncontent-type: image/svg+xml\r\nserver-timing: cfExtPri\r\nlast-modified: Fri, 19 Jan 2024 14:19:45 GMT\r\npriority: u=5,i\r\netag: \"65aa8501-4ff\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: public, max-age=315360000\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: Date\r\naccept-ranges: bytes\r\nage: 1938883\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=foq8kNodQSC4B1CYdE3EOcc2uir6xJKcM8P4ml08hmWAcJuyrdZEPaceaYNYOgAi2QSvFwBYAGFVIdhGc0mnH6S6Dj7627BP5VTzKhlYdOMq6f0sdeTZrIsEjB0HKOPQ18kZ\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a2f978f7eb9456b7-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 1279\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1279,"size_decoded":2096,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"369850b9873659adf0951d845f57dba1","sha1":"a64257186daa33b6b318943a457b6cf8d80b26b6","sha256":"9630c142a8c074cc1809ebf4109538cf29cc0baeb6c27726191f1cf5376e2e21","sha512":"6441b40e85c86e21362c7061a6b9610f52a5c801b274b246711546ad45c68c3e7f2f242f1621b90967eaeebf52709545d06283c2015d6b9ad7f6f7d37fb14a88","ssdeep":"","tlshash":"6821d8dc958f223ef324ff6189b316606ba423f6bb18c5bcb199a8157e1cb910c48e14","first_seen":"2023-04-07T22:39:47Z","last_seen":"2026-08-23T10:37:00.337692Z","times_seen":10473,"resource_available":false,"data":null}},"time_used":63,"timings":{"blocked":-1,"dns":0,"connect":9,"send":0,"wait":53,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.redgarto.com/sb/ssp/interstitial/bottom_banner/1/js/jquery.min.js","fqdn":"cdn.redgarto.com","domain":"redgarto.com","tld":"com"},"ip":{"addr":"104.21.80.164","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://happymodx.com/fc-mobile-soccer/","date":"2026-08-23T10:35:47.821Z","timestamp":1787481347821,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"redgarto.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 07 Aug 2026 14:01:04 GMT","end":"Thu, 05 Nov 2026 15:00:52 GMT"},"fingerprint":{"sha1":"7C:BC:79:D9:68:83:B8:37:9E:CC:BA:8F:27:B7:E6:30:D0:CC:5C:D7","sha256":"C7:1A:1B:B8:98:AD:22:5C:50:DD:66:BC:40:9A:82:01:4C:2B:75:DE:91:17:5D:48:DB:0C:B0:5A:69:6E:4E:9E"}}},"request":{"raw":"GET /sb/ssp/interstitial/bottom_banner/1/js/jquery.min.js HTTP/1.1\r\nHost: cdn.redgarto.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 23 Aug 2026 10:35:47 GMT\r\ncontent-type: application/javascript\r\nserver-timing: cfExtPri\r\nlast-modified: Fri, 19 Jan 2024 14:19:45 GMT\r\npriority: u=3,i=?0\r\netag: \"65aa8501-15d94\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: public, max-age=315360000\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: Date\r\naccept-ranges: bytes\r\nage: 2076465\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9%2FRiyBZDEMRgbHW6m4cPu%2BgzA8RoyIf%2FB%2Faqzz4gD6PnDP4reW4LFiv6UM7y0EVUiW1XTVZA%2B6CkFwLJoaWaMOt6aMaDPyTsUgbCo7EcMHdAOv3Q%2F5BUErUl%2FSfN%2BrILiUJj\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a2f978f7eb9556b7-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 89492\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":89492,"size_decoded":90340,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65451)","md5":"561acb3e541133bbdd2c0c19f8ee35a1","sha1":"ffd1353cf3f77d25f801c84d8208613eb0d3d548","sha256":"9fde6da568db31801e29243a903bf24f342256b41e3c01e7d018ff7c566ce7fc","sha512":"8a647ed6f56b4da93c7a034609060991cc8080350f057f4f2af2c369f18af066db3b4e77701fc017027fd774264a6d0f84927239d7d2f693edc6f7d6a0917be3","ssdeep":"1536:YjExXUqrnxDjoXEZxkMV4SYSt0zvDD6ip3h5cApwEjOPrBeU6QLiTFbc0QlQvakV:YYh8eip3hXuf6IidlrvakdtQ47GKl","tlshash":"f993f9ddb2c6702257a720ba007f510bf236199d6c4d8450f265d8e9bcb8a4e827bf7d","first_seen":"2023-03-07T01:04:00Z","last_seen":"2026-08-23T10:37:00.30618Z","times_seen":8033,"resource_available":true,"data":null}},"time_used":29,"timings":{"blocked":7,"dns":0,"connect":0,"send":0,"wait":12,"receive":10,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"happymodx.com/wp-content/uploads/2025/11/resized_image_1-1.webp","fqdn":"happymodx.com","domain":"happymodx.com","tld":"com"},"ip":{"addr":"104.21.39.80","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://happymodx.com/fc-mobile-soccer/","date":"2026-08-23T10:35:45.969Z","timestamp":1787481345969,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"happymodx.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 28 Jul 2026 09:00:25 GMT","end":"Mon, 26 Oct 2026 10:00:20 GMT"},"fingerprint":{"sha1":"FE:29:9A:0F:BF:23:3E:7B:7B:09:E3:15:8C:DD:03:24:B2:44:F9:87","sha256":"D3:DC:55:AE:12:9C:AC:87:D1:C7:22:A0:4D:BA:D1:40:94:85:03:14:B3:02:E8:37:C8:78:61:6F:C5:79:A4:BD"}}},"request":{"raw":"GET /wp-content/uploads/2025/11/resized_image_1-1.webp HTTP/1.1\r\nHost: happymodx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://happymodx.com/fc-mobile-soccer/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=10368000\r\nexpires: Mon, 21 Dec 2026 10:35:46 GMT\r\ncontent-type: image/webp\r\nlast-modified: Thu, 09 Jul 2026 02:37:15 GMT\r\naccept-ranges: bytes\r\nserver-timing: cfExtPri\r\ndate: Sun, 23 Aug 2026 10:35:46 GMT\r\nserver: cloudflare\r\nplatform: hostinger\r\npanel: hpanel\r\ncontent-security-policy: upgrade-insecure-requests\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7Ake3BodPBnTySs9FAfYrh%2BF%2FQkSAzUVPdg0clFbO8m5%2B2%2BA%2F9R4GMnYiKYWaRs3DovLgf6ZB1I5QoTR%2FswefMmIfEqgJO%2FSJaLtd%2FFpuW0qFQ%2FmAoAny3htYX5hLpqc\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i\r\ncf-ray: a2f978ec4c7b568a-OSL\r\ncontent-length: 13050\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]}],"data":{"size":13050,"size_decoded":13916,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"474c93e9c75e6f58eed744629d0d44c5","sha1":"0cfcbf6db7d87ea526f67bd410ddda4116b65488","sha256":"cb702bf30255ffb41b80fdfa2f3bd6cc98fb54437c1f76dfb878ff2d0393ab47","sha512":"832cee03c173b4324f60f01b75faad40fd81de9ea5a583224d2f6c4f7e76fdc1570d284260a283906efe1362b71e8a6971ab5c6c66c999d217dd66ae84859cb3","ssdeep":"384:mw3p0YrgCsbFTxPb7JFwkHd7U7rJCvwkefZ+r:fiYrcJTxztFV9m1CvwzfZ4","tlshash":"b242b06ebc849eacc85459b440e43e930350b4ea12a97915bd328dfd0f4c79ad62f583","first_seen":"2026-08-23T10:36:29.945187Z","last_seen":"2026-08-23T10:36:29.945187Z","times_seen":1,"resource_available":false,"data":null}},"time_used":741,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":722,"receive":19,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-23","alert":"Sinkholed","trigger":"happymodx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"happymodx.com/wp-content/plugins/polylang-pro/vendor/wpsyntex/polylang/flags/de.png","fqdn":"happymodx.com","domain":"happymodx.com","tld":"com"},"ip":{"addr":"104.21.39.80","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://happymodx.com/fc-mobile-soccer/","date":"2026-08-23T10:35:46.014Z","timestamp":1787481346014,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"happymodx.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 28 Jul 2026 09:00:25 GMT","end":"Mon, 26 Oct 2026 10:00:20 GMT"},"fingerprint":{"sha1":"FE:29:9A:0F:BF:23:3E:7B:7B:09:E3:15:8C:DD:03:24:B2:44:F9:87","sha256":"D3:DC:55:AE:12:9C:AC:87:D1:C7:22:A0:4D:BA:D1:40:94:85:03:14:B3:02:E8:37:C8:78:61:6F:C5:79:A4:BD"}}},"request":{"raw":"GET /wp-content/plugins/polylang-pro/vendor/wpsyntex/polylang/flags/de.png HTTP/1.1\r\nHost: happymodx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://happymodx.com/fc-mobile-soccer/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=10368000\r\nexpires: Mon, 21 Dec 2026 08:58:45 GMT\r\ncontent-type: image/png\r\nlast-modified: Sat, 17 Jan 2026 17:46:45 GMT\r\naccept-ranges: bytes\r\nserver-timing: cfExtPri\r\ndate: Sun, 23 Aug 2026 10:35:46 GMT\r\nserver: cloudflare\r\nplatform: hostinger\r\npanel: hpanel\r\ncontent-security-policy: upgrade-insecure-requests\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 5820\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=fBhJ84UFG0fRdL4aRvuN1WfycHR%2BZw9Ctc7IvcC7rKmWeMObRtFogDuLUH1dPk7IChYWsqUVqQg1wKJMdTN4wo3VpnxJkeLe65iuCVhCE63ugtfPoGU7uockSPBc8C%2FZ\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a2f978ec9c97568a-OSL\r\ncontent-length: 357\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]}],"data":{"size":357,"size_decoded":1216,"mime_type":"image/png","magic":"PNG image data, 16 x 11, 8-bit/color RGB, non-interlaced","md5":"c8366d209d63b7cda8314d4258c36807","sha1":"6adb58ed9c1803599601de3f3645b0181c23709c","sha256":"6434052af0ddf6b0203fc314c95448d2148edc35dab8973128a46430fd6152c2","sha512":"9a78f5c6c4d95d2e73ee6a8b3e623660592a00713ba8461d5f772f689d6f0e6baf1aa0ce2b651e401dfb75ec3fa73e3784e0a0c0caf03f8e17657e1ef9843a30","ssdeep":"","tlshash":"7be0c0d01560ed29e2815af9449e4181d07b24be40ca16871c16cda90a4ad7b82523ad","first_seen":"2023-05-14T23:27:01Z","last_seen":"2026-08-23T10:37:00.289046Z","times_seen":516,"resource_available":false,"data":null}},"time_used":66,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":66,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-23","alert":"Sinkholed","trigger":"happymodx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"happymodx.com/wp-content/plugins/polylang-pro/vendor/wpsyntex/polylang/flags/th.png","fqdn":"happymodx.com","domain":"happymodx.com","tld":"com"},"ip":{"addr":"104.21.39.80","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://happymodx.com/fc-mobile-soccer/","date":"2026-08-23T10:35:46.018Z","timestamp":1787481346018,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"happymodx.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 28 Jul 2026 09:00:25 GMT","end":"Mon, 26 Oct 2026 10:00:20 GMT"},"fingerprint":{"sha1":"FE:29:9A:0F:BF:23:3E:7B:7B:09:E3:15:8C:DD:03:24:B2:44:F9:87","sha256":"D3:DC:55:AE:12:9C:AC:87:D1:C7:22:A0:4D:BA:D1:40:94:85:03:14:B3:02:E8:37:C8:78:61:6F:C5:79:A4:BD"}}},"request":{"raw":"GET /wp-content/plugins/polylang-pro/vendor/wpsyntex/polylang/flags/th.png HTTP/1.1\r\nHost: happymodx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://happymodx.com/fc-mobile-soccer/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=10368000\r\nexpires: Mon, 21 Dec 2026 08:58:45 GMT\r\ncontent-type: image/png\r\nlast-modified: Sat, 17 Jan 2026 17:46:45 GMT\r\naccept-ranges: bytes\r\nserver-timing: cfExtPri\r\ndate: Sun, 23 Aug 2026 10:35:46 GMT\r\nserver: cloudflare\r\nplatform: hostinger\r\npanel: hpanel\r\ncontent-security-policy: upgrade-insecure-requests\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 5820\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=f9BOsR%2FHPqIzriKv48AyvF9udml8xNJRO6eaAst7G2cm5gj1VCOHdXPYHbRaxK5bDwiEoF7prT8318L8MTG1MtgyJKDEp52nYFYecF8Beeszym%2FP7wtHOYnwjEQlO0a%2B\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a2f978ec9c9a568a-OSL\r\ncontent-length: 252\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":252,"size_decoded":1113,"mime_type":"image/png","magic":"PNG image data, 16 x 11, 8-bit colormap, non-interlaced","md5":"d5a566bc0794ede05a2dbc745f6aa2d0","sha1":"286c5cd2254a4e9c90c5006d6d0200f16297cfc9","sha256":"922f919f902c4038dadb953b8c55718cb67338d7d3595a0f2847b66ed7c04435","sha512":"e5c6bf287c269e8a3101487651053576bbef4ca2e91c4110307d1e3e1d3d87514286f00b4744d942b0c00f00c8daec77f090350a5fe7bead77ca777be6b1819d","ssdeep":"","tlshash":"a7d0956a23c1bcf8c4f40631c414c89fd09809d90de0d8125af348b72e5514dc778560","first_seen":"2023-07-19T08:45:18Z","last_seen":"2026-08-23T10:37:00.341571Z","times_seen":32,"resource_available":false,"data":null}},"time_used":51,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":51,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-23","alert":"Sinkholed","trigger":"happymodx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"telegram.im/widget-button/index.php?id=@happymodx_com","fqdn":"telegram.im","domain":"telegram.im","tld":"im"},"ip":{"addr":"65.108.253.105","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Finland","country_code":"FI"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://happymodx.com/fc-mobile-soccer/","date":"2026-08-23T10:35:46.549Z","timestamp":1787481346549,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"telegram.im","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 30 Jul 2026 11:44:26 GMT","end":"Wed, 28 Oct 2026 11:44:25 GMT"},"fingerprint":{"sha1":"37:3B:BC:19:2C:2A:AD:80:A3:3A:58:59:D5:92:AA:28:9F:20:A8:83","sha256":"A1:59:5B:02:C4:B6:94:0F:76:11:85:A9:E7:CD:C2:8B:40:62:6A:8B:85:DC:53:4A:DF:94:B6:DF:3C:DF:12:6B"}}},"request":{"raw":"GET /widget-button/index.php?id=@happymodx_com HTTP/1.1\r\nHost: telegram.im\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://happymodx.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sun, 23 Aug 2026 10:35:46 GMT\r\nContent-Type: text/javascript; charset=utf-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nExpires: Mon, 26 Jul 1997 05:00:00 GMT\r\nLast-Modified: Sun, 23 Aug 2026 10:35:46 GMT\r\nCache-Control: no-cache, must-revalidate\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=2592000\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3856,"size_decoded":1486,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (587), with CRLF line terminators","md5":"89b19094b50e5f48cfde93017e9b1955","sha1":"9362f00425461f12682365f4c9de9c3606e4acf0","sha256":"db1f461314ae65f94583f6c4c7953c8e8aaa4db12372c6b0a8e95d22ae170114","sha512":"651c7ef8a6aeea0c87b1c2b57c8291cf4203bc792d946fdc2f82460a340e27dc0298364e4f319d46725a7d5d6165147035b598afee44123af0a70c64dfce68e6","ssdeep":"","tlshash":"6e81d1585f0c022566b735be9e62a208f872e13fe010b9017ccd85f66fb4b9064b7e5e","first_seen":"2023-03-07T12:27:10Z","last_seen":"2026-08-23T10:36:29.949655Z","times_seen":586,"resource_available":true,"data":null}},"time_used":88,"timings":{"blocked":0,"dns":24,"connect":14,"send":0,"wait":17,"receive":0,"ssl":33},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"telegram.im/widget-button/fonts.css","fqdn":"telegram.im","domain":"telegram.im","tld":"im"},"ip":{"addr":"65.108.253.105","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Finland","country_code":"FI"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://happymodx.com/fc-mobile-soccer/","date":"2026-08-23T10:35:46.840Z","timestamp":1787481346840,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"telegram.im","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 30 Jul 2026 11:44:26 GMT","end":"Wed, 28 Oct 2026 11:44:25 GMT"},"fingerprint":{"sha1":"37:3B:BC:19:2C:2A:AD:80:A3:3A:58:59:D5:92:AA:28:9F:20:A8:83","sha256":"A1:59:5B:02:C4:B6:94:0F:76:11:85:A9:E7:CD:C2:8B:40:62:6A:8B:85:DC:53:4A:DF:94:B6:DF:3C:DF:12:6B"}}},"request":{"raw":"GET /widget-button/fonts.css HTTP/1.1\r\nHost: telegram.im\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://happymodx.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx\r\nDate: Sun, 23 Aug 2026 10:35:46 GMT\r\nContent-Type: text/css\r\nLast-Modified: Sun, 26 Feb 2017 09:05:17 GMT\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\nVary: Accept-Encoding\r\nETag: W/\"58b29a4d-f47\"\r\nExpires: Sun, 30 Aug 2026 10:35:46 GMT\r\nCache-Control: max-age=604800\r\nStrict-Transport-Security: max-age=2592000\r\nContent-Encoding: gzip\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3911,"size_decoded":1369,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"762b7f4711acd40fe01af0d580356f13","sha1":"5b0f90badebb444e562f5cecda7ca1b09dffcadf","sha256":"29d1a4d4ff04f4985edac2ff2f76c900d7dd6727fbb9e2f4b8256c2f47d41c77","sha512":"de93223b3b7fc16f232aec7e7976596c63e489173167fa580c2ec1bfd4bb49a74d40e402fa844beecb40b71eb567edc2c8f0971597314733e282fe68b53e1724","ssdeep":"","tlshash":"1281a18c5b400041f7368f3bb7c5eb58399ce0a7ac25798937a5482fd7d2e9802b5f99","first_seen":"2023-05-05T04:17:30Z","last_seen":"2026-08-23T10:36:29.951139Z","times_seen":430,"resource_available":false,"data":null}},"time_used":51,"timings":{"blocked":-1,"dns":0,"connect":15,"send":0,"wait":15,"receive":0,"ssl":21},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.redgarto.com/sb/ssp/interstitial/bottom_banner/1/js/script.js","fqdn":"cdn.redgarto.com","domain":"redgarto.com","tld":"com"},"ip":{"addr":"104.21.80.164","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://happymodx.com/fc-mobile-soccer/","date":"2026-08-23T10:35:47.877Z","timestamp":1787481347877,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"redgarto.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 07 Aug 2026 14:01:04 GMT","end":"Thu, 05 Nov 2026 15:00:52 GMT"},"fingerprint":{"sha1":"7C:BC:79:D9:68:83:B8:37:9E:CC:BA:8F:27:B7:E6:30:D0:CC:5C:D7","sha256":"C7:1A:1B:B8:98:AD:22:5C:50:DD:66:BC:40:9A:82:01:4C:2B:75:DE:91:17:5D:48:DB:0C:B0:5A:69:6E:4E:9E"}}},"request":{"raw":"GET /sb/ssp/interstitial/bottom_banner/1/js/script.js HTTP/1.1\r\nHost: cdn.redgarto.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://happymodx.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://happymodx.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 23 Aug 2026 10:35:48 GMT\r\ncontent-type: application/javascript\r\nserver-timing: cfExtPri\r\nlast-modified: Fri, 19 Jan 2024 14:19:45 GMT\r\npriority: u=3,i=?0\r\netag: \"65aa8501-3bd\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: public, max-age=315360000\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: Date\r\naccept-ranges: bytes\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=dVpALKNKyRw87rrt%2BLXLni7ex9%2B20daYY5wBBpEtrBhxtRy4n6ORj9W%2Fm6p8tVGW%2F90Q%2FQ5pVAH3qLO4c7JZOJ2rxDlYb4dqjvJDRK486f8N%2Bod%2FH38orX%2BgPYLIVrvX7Z1B\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a2f978f83e9632fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 957\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"application/javascript","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-23T12:26:49.723432Z","times_seen":18055306,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zoologyfibre.com/pixel/sbls?bv=\u0026tmpl=482\u0026u=https%3A%2F%2Fcdn.redgarto.com%2Fsb%2Fssp%2Finterstitial%2Fbottom_banner%2F1%2Fcss%2Fanimate.css\u0026l=78689\u0026fd=3354","fqdn":"zoologyfibre.com","domain":"zoologyfibre.com","tld":"com"},"ip":{"addr":"23.111.84.124","port":443,"asn":7979,"as":"SERVERS-COM","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://happymodx.com/fc-mobile-soccer/","date":"2026-08-23T10:35:51.065Z","timestamp":1787481351065,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"zoologyfibre.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 27 Jun 2026 03:57:55 GMT","end":"Fri, 25 Sep 2026 03:57:54 GMT"},"fingerprint":{"sha1":"21:E1:0C:F0:3C:47:B6:51:43:59:A6:9C:7F:45:F3:83:AF:8E:E8:1C","sha256":"8C:62:F5:05:48:06:52:25:19:4D:0F:3D:B5:18:63:0E:57:03:24:EE:E2:B9:FB:E5:24:00:E5:7B:9C:AE:94:CB"}}},"request":{"raw":"GET /pixel/sbls?bv=\u0026tmpl=482\u0026u=https%3A%2F%2Fcdn.redgarto.com%2Fsb%2Fssp%2Finterstitial%2Fbottom_banner%2F1%2Fcss%2Fanimate.css\u0026l=78689\u0026fd=3354 HTTP/1.1\r\nHost: zoologyfibre.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://happymodx.com/\r\nCookie: uid_id2=45f7fc2f-ad1e-4091-9c0e-b18d5e4a10df:3:1; ain=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.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.rD8lnIlgN_MXbDR-XfeCHTcB5ZDvbXg0XIRp7IoGSLU; pdhtkv=true; uncs=2; pdhtkv27=true; uncs27=1; u_pl27763416=1; iprc_c+713dfa2da62b5b8f41671024dfebcde0=1438851; iprc_c-1438851=8; pdhtkv29=true; uncs29=1; u_pl28373961=1; slecf0582dcc2dc78c0d7cc66bdcca52b3ab=[6790251]; iprc_l+62c00e081848502b2ca624859a62f716=6790251; iprc_l-6790251=1; iprc_a+26a5db848368211502063a0bcb42a52e=756511; iprc_a-756511=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.30.2\r\nDate: Sun, 23 Aug 2026 10:35:51 GMT\r\nContent-Length: 0\r\nConnection: keep-alive\r\nAccept-Ch: Sec-Ch-Ua-Platform, Sec-Ch-Ua-Model, X-Ucbrowser-Device-Ua, User-Agent, Sec-Ch-Ua-Platform-Version, Sec-Ch-Ua, Sec-Ch-Ua-Platformuser-Agent, Sec-Ch-Ua-Full-Version-List, Sec-Ch-Ua-Mobile, Device-Stock-Ua, X-Device-User-Agent, X-Operamini-Phone-Ua, Sec-Ch-Ua-Full-Version\r\nHost: zoologyfibre.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nCache-Control: no-cache\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Allow-Methods: GET, POST, OPTIONS\r\nAccess-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Upgrade-Insecure-Requests,C-High-Entropy-Values\r\nAccess-Control-Expose-Headers: Content-Length,Content-Range\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.30.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":798,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-23T12:26:49.723432Z","times_seen":18055306,"resource_available":true,"data":null}},"time_used":27,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":27,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-22","alert":"Sinkholed","trigger":"zoologyfibre.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"happymodx.com/wp-content/plugins/gp-premium/menu-plus/functions/css/navigation-branding-flex.min.css?ver=2.5.6","fqdn":"happymodx.com","domain":"happymodx.com","tld":"com"},"ip":{"addr":"104.21.39.80","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://happymodx.com/fc-mobile-soccer/","date":"2026-08-23T10:35:45.956Z","timestamp":1787481345956,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"happymodx.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 28 Jul 2026 09:00:25 GMT","end":"Mon, 26 Oct 2026 10:00:20 GMT"},"fingerprint":{"sha1":"FE:29:9A:0F:BF:23:3E:7B:7B:09:E3:15:8C:DD:03:24:B2:44:F9:87","sha256":"D3:DC:55:AE:12:9C:AC:87:D1:C7:22:A0:4D:BA:D1:40:94:85:03:14:B3:02:E8:37:C8:78:61:6F:C5:79:A4:BD"}}},"request":{"raw":"GET /wp-content/plugins/gp-premium/menu-plus/functions/css/navigation-branding-flex.min.css?ver=2.5.6 HTTP/1.1\r\nHost: happymodx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://happymodx.com/fc-mobile-soccer/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=31536000\r\nexpires: Mon, 23 Aug 2027 08:58:40 GMT\r\ncontent-type: text/css; charset=UTF-8\r\nlast-modified: Mon, 15 Jun 2026 12:22:12 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding,Accept-Encoding\r\nserver-timing: cfExtPri\r\ndate: Sun, 23 Aug 2026 10:35:46 GMT\r\nserver: cloudflare\r\nplatform: hostinger\r\npanel: hpanel\r\ncontent-security-policy: upgrade-insecure-requests\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 5825\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ehUblkD1JQLp%2Fbl0K8o3bCGS5Tb3BYggWIRaDlvzNJYct%2B3K%2BkZbsCRZ37C%2BIvVomkX9B9s689XTQC4eYciSXWWeJFPzuJRApK8NCFvmY5ej68QToE9m7ZSLETsAVzKh\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\ncf-ray: a2f978ec3c76568a-OSL\r\ncontent-length: 544\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]}],"data":{"size":2566,"size_decoded":1462,"mime_type":"text/css; charset=UTF-8","magic":"ASCII text, with very long lines (2566), with no line terminators","md5":"ebc4817d78928435ca7eed8216d49e5b","sha1":"8e120ea34776bca556b3c6bccb361c45f0a7f964","sha256":"7c8eb7fd8354e29e58e77290872b6e05a65404a4d16fe26996b72b6f2f606281","sha512":"cbcc6cc2e06303e3e0fae560253b7f9438fef8a83f6a5dbf84d0b6f24ca9f4b8855e55e979dc55b41517a21ddb5e789f16957efa1e470978ad3b4a12110f8360","ssdeep":"","tlshash":"f8514bd9d1b8248640f34b2ff7d6865438f3a41452977a82a0db671548efe4607a3fbc","first_seen":"2023-04-06T22:42:41Z","last_seen":"2026-08-23T12:53:02.698982Z","times_seen":5883,"resource_available":false,"data":null}},"time_used":67,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":67,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-23","alert":"Sinkholed","trigger":"happymodx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"happymodx.com/wp-content/plugins/kk-star-ratings/src/core/public/js/kk-star-ratings.min.js?ver=5.4.10.5","fqdn":"happymodx.com","domain":"happymodx.com","tld":"com"},"ip":{"addr":"104.21.39.80","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://happymodx.com/fc-mobile-soccer/","date":"2026-08-23T10:35:45.981Z","timestamp":1787481345981,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"happymodx.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 28 Jul 2026 09:00:25 GMT","end":"Mon, 26 Oct 2026 10:00:20 GMT"},"fingerprint":{"sha1":"FE:29:9A:0F:BF:23:3E:7B:7B:09:E3:15:8C:DD:03:24:B2:44:F9:87","sha256":"D3:DC:55:AE:12:9C:AC:87:D1:C7:22:A0:4D:BA:D1:40:94:85:03:14:B3:02:E8:37:C8:78:61:6F:C5:79:A4:BD"}}},"request":{"raw":"GET /wp-content/plugins/kk-star-ratings/src/core/public/js/kk-star-ratings.min.js?ver=5.4.10.5 HTTP/1.1\r\nHost: happymodx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://happymodx.com/fc-mobile-soccer/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Sun, 30 Aug 2026 08:58:45 GMT\r\ncontent-type: application/x-javascript; charset=UTF-8\r\nlast-modified: Thu, 09 Jul 2026 03:45:58 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding,Accept-Encoding\r\nserver-timing: cfExtPri\r\ndate: Sun, 23 Aug 2026 10:35:46 GMT\r\nserver: cloudflare\r\nplatform: hostinger\r\npanel: hpanel\r\ncontent-security-policy: upgrade-insecure-requests\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 5820\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2F1fMCROuxrTkqcdqbB%2BCBhqkGqd4hewWkVqqzaSlMpsHiwRr1BbFnSYSZOIqkL%2BlTE3Hw0zEPBKfv6AAmwG3EVBA4tTnYE0WBtnxjAzpi28G74vsgkQm%2FKQGHDDVzuPa\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: a2f978ec5c83568a-OSL\r\ncontent-length: 631\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1359,"size_decoded":1563,"mime_type":"application/x-javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (1278)","md5":"f5e63bd61d061e63482b1d4df3768ee4","sha1":"91df0bce4537e6b65fe380f4f6db9ed9dbe95a41","sha256":"acdebf935ded5cb063dcca7c46be5bbc503af5e76e295f6d0b7093c4514ed256","sha512":"ea99e35812f3abac9b598aed7b608f8a78b342d04922fcdc775390e87fa238891728f7bfd6b8e210580fdd332786fb7fde91f0f10bacaed872bb00610e315a6e","ssdeep":"","tlshash":"8c2175dc7a0878354fcbb2b8a26f968d72751326754b4809122df4919dfdfa80322f4c","first_seen":"2023-03-07T01:02:48Z","last_seen":"2026-08-23T10:37:00.303556Z","times_seen":3179,"resource_available":true,"data":null}},"time_used":67,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":67,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-23","alert":"Sinkholed","trigger":"happymodx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"happymodx.com/wp-content/plugins/real-time-auto-find-and-replace/assets/js/rtafar.local.js?ver=1.9.5","fqdn":"happymodx.com","domain":"happymodx.com","tld":"com"},"ip":{"addr":"104.21.39.80","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://happymodx.com/fc-mobile-soccer/","date":"2026-08-23T10:35:45.982Z","timestamp":1787481345982,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"happymodx.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 28 Jul 2026 09:00:25 GMT","end":"Mon, 26 Oct 2026 10:00:20 GMT"},"fingerprint":{"sha1":"FE:29:9A:0F:BF:23:3E:7B:7B:09:E3:15:8C:DD:03:24:B2:44:F9:87","sha256":"D3:DC:55:AE:12:9C:AC:87:D1:C7:22:A0:4D:BA:D1:40:94:85:03:14:B3:02:E8:37:C8:78:61:6F:C5:79:A4:BD"}}},"request":{"raw":"GET /wp-content/plugins/real-time-auto-find-and-replace/assets/js/rtafar.local.js?ver=1.9.5 HTTP/1.1\r\nHost: happymodx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://happymodx.com/fc-mobile-soccer/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Sun, 30 Aug 2026 08:58:44 GMT\r\ncontent-type: application/x-javascript; charset=UTF-8\r\nlast-modified: Sat, 22 Aug 2026 15:34:31 GMT\r\naccept-ranges: bytes\r\nserver-timing: cfExtPri\r\ndate: Sun, 23 Aug 2026 10:35:46 GMT\r\nserver: cloudflare\r\nplatform: hostinger\r\npanel: hpanel\r\ncontent-security-policy: upgrade-insecure-requests\r\nvary: Accept-Encoding\r\nx-turbo-charged-by: LiteSpeed\r\nage: 5821\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=LCaMTIKAJUpYcXsK7eIU0LYVCNEqU8JKkC7xTxohjJ0WkGzLrXtzQQH4iLLKSbSU6rTCyKM2aKMG7HjE5frXQ4nzR0nbGMAAk0ZMccId4xXR1V7BVy8OAN3K%2FCzSV1HC\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: a2f978ec5c84568a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 19\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":19,"size_decoded":906,"mime_type":"application/x-javascript; charset=UTF-8","magic":"ASCII text, with no line terminators","md5":"8102dc9eee0565de28649497220d8d17","sha1":"a32963be36656f3dd149892540138913bc88de6c","sha256":"51ff2b4b46acab057eba32dc5fbd0bcf410f0ad2bb75d7a92b230bc627d930d6","sha512":"3dcd2d1084b5903e84ebf14fa18fea644d77a7b5b140563fa7eff43f3029b1c32bae0431746e86a26ecc4de8f2341f0cb1f74fc92cc9c92a408ea87556c5412e","ssdeep":"","tlshash":"657000232200083000328282080a000aaa0c8282800822000820308020a0200000882a","first_seen":"2023-03-07T12:08:00Z","last_seen":"2026-08-23T11:06:12.517966Z","times_seen":3192,"resource_available":true,"data":null}},"time_used":26,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":26,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-23","alert":"Sinkholed","trigger":"happymodx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"happymodx.com/wp-content/plugins/polylang-pro/vendor/wpsyntex/polylang/flags/ru.png","fqdn":"happymodx.com","domain":"happymodx.com","tld":"com"},"ip":{"addr":"104.21.39.80","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://happymodx.com/fc-mobile-soccer/","date":"2026-08-23T10:35:46.010Z","timestamp":1787481346010,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"happymodx.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 28 Jul 2026 09:00:25 GMT","end":"Mon, 26 Oct 2026 10:00:20 GMT"},"fingerprint":{"sha1":"FE:29:9A:0F:BF:23:3E:7B:7B:09:E3:15:8C:DD:03:24:B2:44:F9:87","sha256":"D3:DC:55:AE:12:9C:AC:87:D1:C7:22:A0:4D:BA:D1:40:94:85:03:14:B3:02:E8:37:C8:78:61:6F:C5:79:A4:BD"}}},"request":{"raw":"GET /wp-content/plugins/polylang-pro/vendor/wpsyntex/polylang/flags/ru.png HTTP/1.1\r\nHost: happymodx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://happymodx.com/fc-mobile-soccer/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=10368000\r\nexpires: Mon, 21 Dec 2026 08:58:45 GMT\r\ncontent-type: image/png\r\nlast-modified: Sat, 17 Jan 2026 17:46:45 GMT\r\naccept-ranges: bytes\r\nserver-timing: cfExtPri\r\ndate: Sun, 23 Aug 2026 10:35:46 GMT\r\nserver: cloudflare\r\nplatform: hostinger\r\npanel: hpanel\r\ncontent-security-policy: upgrade-insecure-requests\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 5820\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=YY0T416Jbjz8iAPU%2F0DO4Na71OA2tOF40H307dbVh8wKAcHL%2FXGLhix2QHBAY2zwORjZMqG7TAeCKd16Y1%2FID2HfdYMwFXinWLCVb9mcNKOzAOfwEgj39KggVzMiyhAV\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a2f978ec8c94568a-OSL\r\ncontent-length: 265\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":265,"size_decoded":1126,"mime_type":"image/png","magic":"PNG image data, 16 x 11, 8-bit colormap, non-interlaced","md5":"8333cff217d9f84df4e251776bd0521b","sha1":"478b32eb299004e26093a98288748bbea24c2e71","sha256":"9bf6bf3dcc07223416fc8bbb8f49bff57d21c1c6dffd76f38f8c11e7d054c340","sha512":"0621e13aa6bbf460a0b4ef38652c7e9f812075c1fadab42858cbfd7d6cb86f0c2dfb696ffa5e65190e55aa0ee656e5bcf4350992a5099cc90abfce5381bc54b0","ssdeep":"","tlshash":"bed02bd15b762c29f99b023f1514c568d4602854cd94c61a54568c257d2593dd8645a3","first_seen":"2023-05-22T13:48:49Z","last_seen":"2026-08-23T10:37:00.327699Z","times_seen":207,"resource_available":false,"data":null}},"time_used":71,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":71,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-23","alert":"Sinkholed","trigger":"happymodx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"happymodx.com/wp-content/plugins/polylang-pro/vendor/wpsyntex/polylang/flags/pl.png","fqdn":"happymodx.com","domain":"happymodx.com","tld":"com"},"ip":{"addr":"104.21.39.80","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://happymodx.com/fc-mobile-soccer/","date":"2026-08-23T10:35:46.021Z","timestamp":1787481346021,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"happymodx.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 28 Jul 2026 09:00:25 GMT","end":"Mon, 26 Oct 2026 10:00:20 GMT"},"fingerprint":{"sha1":"FE:29:9A:0F:BF:23:3E:7B:7B:09:E3:15:8C:DD:03:24:B2:44:F9:87","sha256":"D3:DC:55:AE:12:9C:AC:87:D1:C7:22:A0:4D:BA:D1:40:94:85:03:14:B3:02:E8:37:C8:78:61:6F:C5:79:A4:BD"}}},"request":{"raw":"GET /wp-content/plugins/polylang-pro/vendor/wpsyntex/polylang/flags/pl.png HTTP/1.1\r\nHost: happymodx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://happymodx.com/fc-mobile-soccer/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=10368000\r\nexpires: Mon, 21 Dec 2026 08:58:45 GMT\r\ncontent-type: image/png\r\nlast-modified: Sat, 17 Jan 2026 17:46:45 GMT\r\naccept-ranges: bytes\r\nserver-timing: cfExtPri\r\ndate: Sun, 23 Aug 2026 10:35:46 GMT\r\nserver: cloudflare\r\nplatform: hostinger\r\npanel: hpanel\r\ncontent-security-policy: upgrade-insecure-requests\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 5820\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=tLHqii2qx88UK2JwzAOkPlhEHAxbTbIILDhPnz9D5Rwhs%2FJTT66Y9q4upTeRDmwHl8jmb7P4Q5EFGYQ1FXKipQllLeWlpM5%2BYrA7HPZTqQ86z%2BkBA6Lmo2%2BrZglFa0xM\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a2f978ec9ca2568a-OSL\r\ncontent-length: 194\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":194,"size_decoded":1057,"mime_type":"image/png","magic":"PNG image data, 16 x 11, 8-bit colormap, non-interlaced","md5":"89959bb5a1ec3058559ed2f7d02b1850","sha1":"9dc7ad0349dd3afedabb62a763960eae56168c14","sha256":"0b8e6a0503148db0c445d26d7aef6a8de1d31b68a30f212ab47b6d4e7400f6bb","sha512":"a1631d2b3f673f18465fa516aeb0251621d148a8c5a8698cb4dfa72437bb257685971c6e4b159dbcedeb30fc9e187c86a31381d1d5db8400913f2837906cde5c","ssdeep":"","tlshash":"5bc022a3a2702d38d81641bb7908934cd85028209e2af14a890684fa9826514d8e8283","first_seen":"2023-07-06T09:52:10Z","last_seen":"2026-08-23T10:37:00.267325Z","times_seen":245,"resource_available":false,"data":null}},"time_used":55,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":55,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-23","alert":"Sinkholed","trigger":"happymodx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/poppins/v24/pxiByp8kv8JHgFVrLEj6Z1xlFQ.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://happymodx.com/fc-mobile-soccer/","date":"2026-08-23T10:35:46.558Z","timestamp":1787481346558,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Wed, 05 Aug 2026 20:43:51 GMT","end":"Wed, 28 Oct 2026 20:43:50 GMT"},"fingerprint":{"sha1":"B9:F7:74:85:7B:1C:5F:E9:C2:86:5A:AA:63:0F:34:84:5F:79:D6:96","sha256":"BA:57:10:D4:7E:A5:7C:C6:22:90:71:24:65:31:49:39:40:E5:C8:EB:E4:74:F7:D9:0B:3E:17:36:DD:31:9D:EB"}}},"request":{"raw":"GET /s/poppins/v24/pxiByp8kv8JHgFVrLEj6Z1xlFQ.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://happymodx.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 8000\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Wed, 19 Aug 2026 13:10:21 GMT\r\nexpires: Thu, 19 Aug 2027 13:10:21 GMT\r\ncache-control: public, max-age=31536000\r\nage: 336325\r\nlast-modified: Mon, 15 Sep 2025 16:33:57 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":8000,"size_decoded":8812,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 8000, version 1.0","md5":"72993dddf88a63e8f226656f7de88e57","sha1":"179f97ec0275f09603a8db94d4380eb584d81cd5","sha256":"f4e80d9dfd374d02989b87a27b5ed4cb78fbb177c27f1478e9a8b0afb7513149","sha512":"7c20165f9d22a86341e841fd58526209017dcde2afe2d0d2a89fe853d95dc69f658d25cf798c71f452dab09843fc808c1ae87a60b1284134163abf5a1d93e50a","ssdeep":"192:GDonmfrEdXT8WrxzRXwyQo3zGEOM7Y2hOMgWnsfYSjv4ENFGwrlKJ:8onPxTzjgyQSzLPXOTIYHJAJ","tlshash":"08f1b0ffa92456c4df692475a5044f27623652b4dd35cb2f496f3e12d2d74224bcc4c1","first_seen":"2023-04-05T18:53:14Z","last_seen":"2026-08-23T12:27:02.93803Z","times_seen":296946,"resource_available":false,"data":null}},"time_used":20,"timings":{"blocked":2,"dns":0,"connect":0,"send":0,"wait":16,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kettledroopingcontinuation.com/watch.1379401047695.js?key=ccf2cef4382fd13c1ed6f76b041b5c50\u0026kw=%5B%22ea%22%2C%22sports%22%2C%22fc%22%2C%22mobile%22%2C%2226%22%2C%22mod%22%2C%22apk%22%2C%22v27%22%2C%220%22%2C%2203%22%2C%22unlimited%22%2C%22money%22%2C%22menu%22%2C%22unlocked%22%5D\u0026refer=https%3A%2F%2Fhappymodx.com%2Ffc-mobile-soccer%2F\u0026tz=0\u0026dev=e\u0026res=14.1055\u0026rb=e\u0026uuid=495bd5a7-ba41-442d-a6d6-948b2a6dbd5c%3A1%3A1","fqdn":"kettledroopingcontinuation.com","domain":"kettledroopingcontinuation.com","tld":"com"},"ip":{"addr":"23.111.84.228","port":443,"asn":7979,"as":"SERVERS-COM","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://happymodx.com/fc-mobile-soccer/","date":"2026-08-23T10:35:46.667Z","timestamp":1787481346667,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"kettledroopingcontinuation.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 23 Aug 2026 00:02:23 GMT","end":"Sat, 21 Nov 2026 00:02:22 GMT"},"fingerprint":{"sha1":"45:C6:44:0A:42:17:85:94:0C:43:02:EA:82:14:8D:F8:D3:13:D9:E2","sha256":"8C:E7:C4:F5:8F:DB:E8:10:A8:55:E4:5C:85:CC:97:D0:7D:0A:FE:C9:6C:C4:4D:6A:FF:20:87:2C:BC:34:2D:F4"}}},"request":{"raw":"GET /watch.1379401047695.js?key=ccf2cef4382fd13c1ed6f76b041b5c50\u0026kw=%5B%22ea%22%2C%22sports%22%2C%22fc%22%2C%22mobile%22%2C%2226%22%2C%22mod%22%2C%22apk%22%2C%22v27%22%2C%220%22%2C%2203%22%2C%22unlimited%22%2C%22money%22%2C%22menu%22%2C%22unlocked%22%5D\u0026refer=https%3A%2F%2Fhappymodx.com%2Ffc-mobile-soccer%2F\u0026tz=0\u0026dev=e\u0026res=14.1055\u0026rb=e\u0026uuid=495bd5a7-ba41-442d-a6d6-948b2a6dbd5c%3A1%3A1 HTTP/1.1\r\nHost: kettledroopingcontinuation.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://happymodx.com\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://happymodx.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 307 Temporary Redirect\r\nServer: nginx/1.30.2\r\nDate: Sun, 23 Aug 2026 10:35:46 GMT\r\nContent-Type: text/html\r\nContent-Length: 0\r\nConnection: keep-alive\r\naccept-ch: X-Device-User-Agent,Sec-Ch-Ua-Platform-Version,Sec-Ch-Ua-Platformuser-Agent,Sec-Ch-Ua-Mobile,X-Operamini-Phone-Ua,X-Ucbrowser-Device-Ua,User-Agent,Sec-Ch-Ua,Sec-Ch-Ua-Full-Version-List,Sec-Ch-Ua-Full-Version,Sec-Ch-Ua-Platform,Sec-Ch-Ua-Model,Device-Stock-Ua\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: https://happymodx.com\r\nlocation: https://kettledroopingcontinuation.com/watch.1379401047695.js?dev=e\u0026fstu=01a02e30-d2c9-7e69-acb3-184804f44b88\u0026key=ccf2cef4382fd13c1ed6f76b041b5c50\u0026kw=%5B%22ea%22%2C%22sports%22%2C%22fc%22%2C%22mobile%22%2C%2226%22%2C%22mod%22%2C%22apk%22%2C%22v27%22%2C%220%22%2C%2203%22%2C%22unlimited%22%2C%22money%22%2C%22menu%22%2C%22unlocked%22%5D\u0026ps1=1787481346\u0026rb=e\u0026refer=https%3A%2F%2Fhappymodx.com%2Ffc-mobile-soccer%2F\u0026res=14.1055\u0026rmtc=t\u0026sht=Dlt5iNZ98KX87eSJKEn2E1sXgLPMzUXGe9-pxMlai2M\u0026shv=2\u0026st1=cb8c7baca70a10cd97a868208976742d\u0026tz=0\u0026uuid=495bd5a7-ba41-442d-a6d6-948b2a6dbd5c%3A1%3A1\r\nset-cookie: uid_id2=495bd5a7-ba41-442d-a6d6-948b2a6dbd5c:1:1; Path=/; Expires=Sun, 30 Aug 2026 10:35:46 GMT; Secure; SameSite=None\nain=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.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.rD8lnIlgN_MXbDR-XfeCHTcB5ZDvbXg0XIRp7IoGSLU; Path=/; Expires=Sun, 23 Aug 2026 10:36:46 GMT; Secure; SameSite=None\r\nvary: Accept-Encoding\r\nx-envoy-upstream-service-time: 4\r\nHost: kettledroopingcontinuation.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: d7afd98c9165a53920d1cf3cca6558be\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":[{"name":"uid_id2","value":"495bd5a7-ba41-442d-a6d6-948b2a6dbd5c:1:1","quoted":false,"path":"/","expires":"2026-08-30T10:35:46Z","raw_expires":"Sun, 30 Aug 2026 10:35:46 GMT","secure":true,"http_only":false,"same_site":"None","partitioned":false,"raw":"uid_id2=495bd5a7-ba41-442d-a6d6-948b2a6dbd5c:1:1; Path=/; Expires=Sun, 30 Aug 2026 10:35:46 GMT; Secure; SameSite=None"},{"name":"ain","value":"eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.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.rD8lnIlgN_MXbDR-XfeCHTcB5ZDvbXg0XIRp7IoGSLU","quoted":false,"path":"/","expires":"2026-08-23T10:36:46Z","raw_expires":"Sun, 23 Aug 2026 10:36:46 GMT","secure":true,"http_only":false,"same_site":"None","partitioned":false,"raw":"ain=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.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.rD8lnIlgN_MXbDR-XfeCHTcB5ZDvbXg0XIRp7IoGSLU; Path=/; Expires=Sun, 23 Aug 2026 10:36:46 GMT; Secure; SameSite=None"}],"status_code":"307","status_text":"Temporary Redirect","fingerprints":[{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.30.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-23T12:26:49.723432Z","times_seen":18055306,"resource_available":true,"data":null}},"time_used":109,"timings":{"blocked":-1,"dns":3,"connect":19,"send":0,"wait":27,"receive":0,"ssl":61},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-23","alert":"Sinkholed","trigger":"kettledroopingcontinuation.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-23","alert":"Sinkholed","trigger":"kettledroopingcontinuation.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-23","alert":"Sinkholed","trigger":"kettledroopingcontinuation.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"yastatic.net/partner-code-bundles/1306332/da613ad6370840ac.js","fqdn":"yastatic.net","domain":"yastatic.net","tld":"net"},"ip":{"addr":"37.9.64.225","port":443,"asn":13238,"as":"YANDEX LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://happymodx.com/fc-mobile-soccer/","date":"2026-08-23T10:35:47.381Z","timestamp":1787481347381,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.yastatic-net.ru","organization":""},"issuer":{"commonName":"GlobalSign RSA OV SSL CA 2018","organization":"GlobalSign nv-sa"},"validity":{"start":"Thu, 30 Apr 2026 11:34:07 GMT","end":"Wed, 28 Oct 2026 20:59:59 GMT"},"fingerprint":{"sha1":"14:F1:2A:10:FA:A0:C8:25:E4:FA:ED:1B:89:69:12:33:27:F7:15:83","sha256":"C4:5F:F3:D1:06:B5:27:D4:9D:32:12:86:B3:BF:A1:45:D4:C3:D0:F7:8C:1D:83:41:1D:52:97:A1:9F:EE:A2:79"}}},"request":{"raw":"GET /partner-code-bundles/1306332/da613ad6370840ac.js HTTP/1.1\r\nHost: yastatic.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://happymodx.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://happymodx.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 23 Aug 2026 10:35:47 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ncontent-length: 28075\r\nexpires: Tue, 22 Aug 2056 16:54:39 GMT\r\ncache-control: public, max-age=946708560\r\nnel: {\"report_to\": \"network-errors\", \"max_age\": 7200, \"success_fraction\": 0.001, \"failure_fraction\": 0.01}\r\netag: \"0c4e5b732aeae50637fdd5a1d1adc74e\"\r\nreport-to: { \"group\": \"network-errors\", \"max_age\": 7200, \"endpoints\": [ { \"url\": \"https://dr.yandex.net/nel\"}]}\r\nstrict-transport-security: max-age=43200000; includeSubDomains;\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nx-robots-tag: noindex, noarchive, nofollow\r\ntiming-allow-origin: *\r\nlast-modified: Fri, 21 Aug 2026 17:58:17 GMT\r\naccess-control-allow-origin: *\r\nx-strm-log-split: 4\r\nx-request-id: 46b0c62182721193\r\ncache-host: cloudcdn-rad-11.cdn.yandex.net\r\ncache-status: HIT\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":305380,"size_decoded":28970,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65495)","md5":"dfb93abc80432e0516b19950c755c26a","sha1":"8059b21a7b7df06d2b9bade4ea047dc7dae9ba36","sha256":"21207f84466f742940ff78df447c64bd01494388f6cbf09750e352ced68c246e","sha512":"e17657ac52818bfb9fa8ae646baf744cea6386d031206899c357b3dc67f65cc1ec769b41f6832c1e9835b039a539a1ff4599eb4839fb9c01cd1507d49035a2a5","ssdeep":"1536:321aRXkNtwZ1df1QUiYnfcsIWerYkN+nF0bNe/mdC6kH9zf6:ZN1dfXIQkN+nF/JH9zf6","tlshash":"0d5475c5da79182d2a903185ea36ff9d0c50a846d60dc3364fbc26cbee54385d3a2bdd","first_seen":"2026-08-21T19:08:41.86942Z","last_seen":"2026-08-23T13:06:25.368647Z","times_seen":34,"resource_available":true,"data":null}},"time_used":56,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":28,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"portalfluently.com/sfp.js","fqdn":"portalfluently.com","domain":"portalfluently.com","tld":"com"},"ip":{"addr":"23.111.84.220","port":443,"asn":7979,"as":"SERVERS-COM","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://happymodx.com/fc-mobile-soccer/","date":"2026-08-23T10:35:46.686Z","timestamp":1787481346686,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"portalfluently.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 17 Aug 2026 23:40:44 GMT","end":"Sun, 15 Nov 2026 23:40:43 GMT"},"fingerprint":{"sha1":"04:7E:87:1C:D4:BF:C8:7A:47:9E:4C:FB:2A:44:D1:25:8D:83:7F:1A","sha256":"0B:F1:DB:9B:8C:77:3E:61:8B:03:C2:BF:97:81:32:72:FC:3C:87:CC:8E:6E:6B:D5:93:EF:4F:11:1C:B6:E2:06"}}},"request":{"raw":"GET /sfp.js HTTP/1.1\r\nHost: portalfluently.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://happymodx.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.30.2\r\nDate: Sun, 23 Aug 2026 10:35:46 GMT\r\nContent-Type: application/javascript; charset=utf-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\naccess-control-allow-origin: *\r\ncontent-encoding: zstd\r\nvary: Accept-Encoding\r\nx-envoy-upstream-service-time: 2\r\nHost: portalfluently.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: 3aebf7d56c13768051d04d38c767cf73\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.30.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":85379,"size_decoded":31089,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65529), with no line terminators","md5":"b3a5ba94d627e64a77c0e11eaffc96ed","sha1":"f7358693b31e44211dd98b5aa0dc2a3f423286aa","sha256":"600f01dd96f043e58e0e70a82afbba6ffe0923d836f6293c1e6fc1cb5b074d34","sha512":"64800bcce3e1a65638dfedfe22f205b51725865db3332be95a142e39e4cb40f57358d0c4c01ebb366b8da56aa978b6c7ee992e2c27563bac76c3998014c3d64b","ssdeep":"1536:nPncLBSUBULrSVvTfMtfj3FkdFcE5PnoRC:nPncLBSUBULGVTfGpucE5foM","tlshash":"488395807ac06488d3979b7bb73bf4eaf65a299f38c4044bd100fc48b69562af9f5534","first_seen":"2025-11-18T17:36:30.149277Z","last_seen":"2026-08-23T10:52:27.81712Z","times_seen":27125,"resource_available":true,"data":null}},"time_used":62,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":25,"receive":37,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-22","alert":"Sinkholed","trigger":"portalfluently.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.redgarto.com/sb/ssp/interstitial/bottom_banner/1/js/script.js","fqdn":"cdn.redgarto.com","domain":"redgarto.com","tld":"com"},"ip":{"addr":"104.21.80.164","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://happymodx.com/fc-mobile-soccer/","date":"2026-08-23T10:35:47.881Z","timestamp":1787481347881,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"redgarto.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 07 Aug 2026 14:01:04 GMT","end":"Thu, 05 Nov 2026 15:00:52 GMT"},"fingerprint":{"sha1":"7C:BC:79:D9:68:83:B8:37:9E:CC:BA:8F:27:B7:E6:30:D0:CC:5C:D7","sha256":"C7:1A:1B:B8:98:AD:22:5C:50:DD:66:BC:40:9A:82:01:4C:2B:75:DE:91:17:5D:48:DB:0C:B0:5A:69:6E:4E:9E"}}},"request":{"raw":"GET /sb/ssp/interstitial/bottom_banner/1/js/script.js HTTP/1.1\r\nHost: cdn.redgarto.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://happymodx.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://happymodx.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 23 Aug 2026 10:35:48 GMT\r\ncontent-type: application/javascript\r\nserver-timing: cfExtPri\r\nlast-modified: Fri, 19 Jan 2024 14:19:45 GMT\r\npriority: u=3,i=?0\r\netag: \"65aa8501-3bd\"\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: public, max-age=315360000\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: Date\r\naccept-ranges: bytes\r\nage: 0\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=KgawiH8gBqntbXn8yCMzYNrKwUBtV%2Ffmcaah6cKYBUSJcVB1Z6HLRKo8MDeJeu0m809zB9Lnd1u0uVzv4BZJqts%2B6qGLCv6aiyjFCkvqDinrOnPKSsQtx%2BNLnxF8tdKKzGTv\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: a2f978f83e9b32fa-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 957\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"application/javascript","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-23T12:26:49.723432Z","times_seen":18055306,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"happymodx.com/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.4.1","fqdn":"happymodx.com","domain":"happymodx.com","tld":"com"},"ip":{"addr":"104.21.39.80","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://happymodx.com/fc-mobile-soccer/","date":"2026-08-23T10:35:45.959Z","timestamp":1787481345959,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"happymodx.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 28 Jul 2026 09:00:25 GMT","end":"Mon, 26 Oct 2026 10:00:20 GMT"},"fingerprint":{"sha1":"FE:29:9A:0F:BF:23:3E:7B:7B:09:E3:15:8C:DD:03:24:B2:44:F9:87","sha256":"D3:DC:55:AE:12:9C:AC:87:D1:C7:22:A0:4D:BA:D1:40:94:85:03:14:B3:02:E8:37:C8:78:61:6F:C5:79:A4:BD"}}},"request":{"raw":"GET /wp-includes/js/jquery/jquery-migrate.min.js?ver=3.4.1 HTTP/1.1\r\nHost: happymodx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://happymodx.com/fc-mobile-soccer/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Sun, 30 Aug 2026 08:58:40 GMT\r\ncontent-type: application/x-javascript; charset=UTF-8\r\nlast-modified: Fri, 31 Oct 2025 00:47:28 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding,Accept-Encoding\r\nserver-timing: cfExtPri\r\ndate: Sun, 23 Aug 2026 10:35:45 GMT\r\nserver: cloudflare\r\nplatform: hostinger\r\npanel: hpanel\r\ncontent-security-policy: upgrade-insecure-requests\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 5825\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2FVLQNVOiy2zOQw8l%2FEXRWRc9WmyU2KaBMd90PhXN82EXKbFlvW72lhyEnm0jOKfXg8jpTo9k7Cpyx%2ByvyAZhdBVJaN0fsVpst60rVaXNzHuZraZ7lbS1yr25uhSjhp1j\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\ncf-ray: a2f978ec3c79568a-OSL\r\ncontent-length: 4671\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":13577,"size_decoded":5602,"mime_type":"application/x-javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (13479)","md5":"9ffeb32e2d9efbf8f70caabded242267","sha1":"3ad0c10e501ac2a9bfa18f9cd7e700219b378738","sha256":"5274f11e6fb32ae0cf2dfb9f8043272865c397a7c4223b4cfa7d50ea52fbde89","sha512":"8d6be545508a1c38278b8ad780c3758ae48a25e4e12eee443375aa56031d9b356f8c90f22d4f251140fa3f65603af40523165e33cae2e2d62fc78ec106e3d731","ssdeep":"192:5rprDN+sag6ifKIUpQI99P1tLm9kdgyq1+J3aCJQ+h4MPLORq:5rprxaefKI0LP19m4q1WW+h4Mjp","tlshash":"9952c8adb56679724eb721b8f03bd24f71b205de560d8940d19cc4f6282dc6e812bf78","first_seen":"2023-05-09T19:21:05Z","last_seen":"2026-08-23T12:26:44.466041Z","times_seen":943340,"resource_available":true,"data":null}},"time_used":28,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":28,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-23","alert":"Sinkholed","trigger":"happymodx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"happymodx.com/wp-content/plugins/gp-premium/general/js/smooth-scroll.min.js?ver=2.5.6","fqdn":"happymodx.com","domain":"happymodx.com","tld":"com"},"ip":{"addr":"104.21.39.80","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://happymodx.com/fc-mobile-soccer/","date":"2026-08-23T10:35:45.980Z","timestamp":1787481345980,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"happymodx.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 28 Jul 2026 09:00:25 GMT","end":"Mon, 26 Oct 2026 10:00:20 GMT"},"fingerprint":{"sha1":"FE:29:9A:0F:BF:23:3E:7B:7B:09:E3:15:8C:DD:03:24:B2:44:F9:87","sha256":"D3:DC:55:AE:12:9C:AC:87:D1:C7:22:A0:4D:BA:D1:40:94:85:03:14:B3:02:E8:37:C8:78:61:6F:C5:79:A4:BD"}}},"request":{"raw":"GET /wp-content/plugins/gp-premium/general/js/smooth-scroll.min.js?ver=2.5.6 HTTP/1.1\r\nHost: happymodx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://happymodx.com/fc-mobile-soccer/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Sun, 30 Aug 2026 08:58:45 GMT\r\ncontent-type: application/x-javascript; charset=UTF-8\r\nlast-modified: Mon, 15 Jun 2026 12:22:12 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding,Accept-Encoding\r\nserver-timing: cfExtPri\r\ndate: Sun, 23 Aug 2026 10:35:45 GMT\r\nserver: cloudflare\r\nplatform: hostinger\r\npanel: hpanel\r\ncontent-security-policy: upgrade-insecure-requests\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 5820\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2F4b8fO6oc9XCl1ZmqQiCW95wfdbzu1W9MHyRM8GT3dkexycxkWzr9kKb%2F3JCmpfRftSADLPfCya1x9grvBKd3vtGsMHHq0gUCrABnOEibVBPL0GAJx9J4XQE%2BQ7dAz2U\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: a2f978ec5c82568a-OSL\r\ncontent-length: 2549\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6883,"size_decoded":3480,"mime_type":"application/x-javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (6883), with no line terminators","md5":"ca1e68e1ae2dbb2206d21481576bbb45","sha1":"eecac929830764dba8b0734241090f2403671fa8","sha256":"ce43697d26defc72fa5aa7e3d7f1296cd19ba9a67cad0e2557aacc7702454f4d","sha512":"1544aed0f5def1ef73206a17cf7f540ad8b4d58a5e9b84d0c16639d8a4500b534c940184c310ecc9d4d458edbfa933ed1d0f542c7dc2ee67446029c7e48b21cd","ssdeep":"96:99BBG3KIUhniQscmPS8qeBxJmSjfijAzpFnIFW6fI2WsnSSORdgAL:NB7p6dmiFN61WsnSSqn","tlshash":"5ae1a6ea35607473caeb42b6a22f534677301163344b2054a36ddcdc39b5aa6835bfb8","first_seen":"2023-11-19T10:25:22Z","last_seen":"2026-08-23T12:36:48.402582Z","times_seen":3048,"resource_available":true,"data":null}},"time_used":27,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":27,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-23","alert":"Sinkholed","trigger":"happymodx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zoologyfibre.com/watch.963416567598.js?key=ccf2cef4382fd13c1ed6f76b041b5c50\u0026kw=%5B%22ea%22%2C%22sports%22%2C%22fc%22%2C%22mobile%22%2C%2226%22%2C%22mod%22%2C%22apk%22%2C%22v27%22%2C%220%22%2C%2203%22%2C%22unlimited%22%2C%22money%22%2C%22menu%22%2C%22unlocked%22%5D\u0026refer=https%3A%2F%2Fhappymodx.com%2Ffc-mobile-soccer%2F\u0026tz=0\u0026dev=e\u0026res=14.1055\u0026rb=e\u0026uuid=45f7fc2f-ad1e-4091-9c0e-b18d5e4a10df%3A3%3A1","fqdn":"zoologyfibre.com","domain":"zoologyfibre.com","tld":"com"},"ip":{"addr":"23.111.84.124","port":443,"asn":7979,"as":"SERVERS-COM","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://happymodx.com/fc-mobile-soccer/","date":"2026-08-23T10:35:46.803Z","timestamp":1787481346803,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"zoologyfibre.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 27 Jun 2026 03:57:55 GMT","end":"Fri, 25 Sep 2026 03:57:54 GMT"},"fingerprint":{"sha1":"21:E1:0C:F0:3C:47:B6:51:43:59:A6:9C:7F:45:F3:83:AF:8E:E8:1C","sha256":"8C:62:F5:05:48:06:52:25:19:4D:0F:3D:B5:18:63:0E:57:03:24:EE:E2:B9:FB:E5:24:00:E5:7B:9C:AE:94:CB"}}},"request":{"raw":"GET /watch.963416567598.js?key=ccf2cef4382fd13c1ed6f76b041b5c50\u0026kw=%5B%22ea%22%2C%22sports%22%2C%22fc%22%2C%22mobile%22%2C%2226%22%2C%22mod%22%2C%22apk%22%2C%22v27%22%2C%220%22%2C%2203%22%2C%22unlimited%22%2C%22money%22%2C%22menu%22%2C%22unlocked%22%5D\u0026refer=https%3A%2F%2Fhappymodx.com%2Ffc-mobile-soccer%2F\u0026tz=0\u0026dev=e\u0026res=14.1055\u0026rb=e\u0026uuid=45f7fc2f-ad1e-4091-9c0e-b18d5e4a10df%3A3%3A1 HTTP/1.1\r\nHost: zoologyfibre.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://happymodx.com\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://happymodx.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 307 Temporary Redirect\r\nServer: nginx/1.30.2\r\nDate: Sun, 23 Aug 2026 10:35:46 GMT\r\nContent-Type: text/html\r\nContent-Length: 0\r\nConnection: keep-alive\r\naccept-ch: Device-Stock-Ua,X-Device-User-Agent,X-Operamini-Phone-Ua,X-Ucbrowser-Device-Ua,User-Agent,Sec-Ch-Ua-Platformuser-Agent,Sec-Ch-Ua-Full-Version-List,Sec-Ch-Ua-Full-Version,Sec-Ch-Ua-Platform,Sec-Ch-Ua-Model,Sec-Ch-Ua-Mobile,Sec-Ch-Ua-Platform-Version,Sec-Ch-Ua\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: https://happymodx.com\r\nlocation: https://zoologyfibre.com/watch.963416567598.js?dev=e\u0026fstu=01a02e30-d35b-756b-b351-5ab70ddb72dc\u0026key=ccf2cef4382fd13c1ed6f76b041b5c50\u0026kw=%5B%22ea%22%2C%22sports%22%2C%22fc%22%2C%22mobile%22%2C%2226%22%2C%22mod%22%2C%22apk%22%2C%22v27%22%2C%220%22%2C%2203%22%2C%22unlimited%22%2C%22money%22%2C%22menu%22%2C%22unlocked%22%5D\u0026ps1=1787481346\u0026rb=e\u0026refer=https%3A%2F%2Fhappymodx.com%2Ffc-mobile-soccer%2F\u0026res=14.1055\u0026rmtc=t\u0026sht=isCClSdh8XBnTVLQIvacB_Bejr6G3ZFMRuRqDCi4CGg\u0026shv=2\u0026st1=9613ac947ad2090602887b32aefc0889\u0026tz=0\u0026uuid=45f7fc2f-ad1e-4091-9c0e-b18d5e4a10df%3A3%3A1\r\nset-cookie: uid_id2=45f7fc2f-ad1e-4091-9c0e-b18d5e4a10df:3:1; Path=/; Expires=Sun, 30 Aug 2026 10:35:46 GMT; Secure; SameSite=None\nain=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.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.rD8lnIlgN_MXbDR-XfeCHTcB5ZDvbXg0XIRp7IoGSLU; Path=/; Expires=Sun, 23 Aug 2026 10:36:46 GMT; Secure; SameSite=None\r\nvary: Accept-Encoding\r\nx-envoy-upstream-service-time: 1\r\nHost: zoologyfibre.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: 504672c727d9c13d6f12c5e99ed53790\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":[{"name":"uid_id2","value":"45f7fc2f-ad1e-4091-9c0e-b18d5e4a10df:3:1","quoted":false,"path":"/","expires":"2026-08-30T10:35:46Z","raw_expires":"Sun, 30 Aug 2026 10:35:46 GMT","secure":true,"http_only":false,"same_site":"None","partitioned":false,"raw":"uid_id2=45f7fc2f-ad1e-4091-9c0e-b18d5e4a10df:3:1; Path=/; Expires=Sun, 30 Aug 2026 10:35:46 GMT; Secure; SameSite=None"},{"name":"ain","value":"eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.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.rD8lnIlgN_MXbDR-XfeCHTcB5ZDvbXg0XIRp7IoGSLU","quoted":false,"path":"/","expires":"2026-08-23T10:36:46Z","raw_expires":"Sun, 23 Aug 2026 10:36:46 GMT","secure":true,"http_only":false,"same_site":"None","partitioned":false,"raw":"ain=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.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.rD8lnIlgN_MXbDR-XfeCHTcB5ZDvbXg0XIRp7IoGSLU; Path=/; Expires=Sun, 23 Aug 2026 10:36:46 GMT; Secure; SameSite=None"}],"status_code":"307","status_text":"Temporary Redirect","fingerprints":[{"name":"Nginx:1.30.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-23T12:26:49.723432Z","times_seen":18055306,"resource_available":true,"data":null}},"time_used":123,"timings":{"blocked":0,"dns":2,"connect":22,"send":0,"wait":32,"receive":0,"ssl":67},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-22","alert":"Sinkholed","trigger":"zoologyfibre.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kettledroopingcontinuation.com/pixel/ase","fqdn":"kettledroopingcontinuation.com","domain":"kettledroopingcontinuation.com","tld":"com"},"ip":{"addr":"23.111.84.228","port":443,"asn":7979,"as":"SERVERS-COM","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://happymodx.com/fc-mobile-soccer/","date":"2026-08-23T10:35:47.184Z","timestamp":1787481347184,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"kettledroopingcontinuation.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 23 Aug 2026 00:02:23 GMT","end":"Sat, 21 Nov 2026 00:02:22 GMT"},"fingerprint":{"sha1":"45:C6:44:0A:42:17:85:94:0C:43:02:EA:82:14:8D:F8:D3:13:D9:E2","sha256":"8C:E7:C4:F5:8F:DB:E8:10:A8:55:E4:5C:85:CC:97:D0:7D:0A:FE:C9:6C:C4:4D:6A:FF:20:87:2C:BC:34:2D:F4"}}},"request":{"raw":"POST /pixel/ase HTTP/1.1\r\nHost: kettledroopingcontinuation.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://happymodx.com/\r\nContent-Type: application/json\r\nContent-Length: 220\r\nOrigin: https://happymodx.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":220,"data":"[{\"placement_key\":\"f0582dcc2dc78c0d7cc66bdcca52b3ab\",\"template_body\":\"body_social-bar_pl_general\",\"event_name\":\"base.render_pixel.success\",\"id_frontend_invoke\":\"01a02e30-d1c6-7e33-9130-1fe2ba5b50da\",\"script_version\":\"\"}]"}},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.30.2\r\nDate: Sun, 23 Aug 2026 10:35:47 GMT\r\nContent-Length: 0\r\nConnection: keep-alive\r\nAccept-Ch: Sec-Ch-Ua-Platformuser-Agent, Sec-Ch-Ua-Full-Version-List, Sec-Ch-Ua-Mobile, X-Device-User-Agent, X-Ucbrowser-Device-Ua, Sec-Ch-Ua-Platform-Version, Sec-Ch-Ua-Full-Version, Sec-Ch-Ua-Platform, Sec-Ch-Ua-Model, Device-Stock-Ua, X-Operamini-Phone-Ua, User-Agent, Sec-Ch-Ua\r\nHost: kettledroopingcontinuation.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nCache-Control: no-cache\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Allow-Methods: GET, POST, OPTIONS\r\nAccess-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Upgrade-Insecure-Requests,C-High-Entropy-Values\r\nAccess-Control-Expose-Headers: Content-Length,Content-Range\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.30.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":1564,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-23T12:26:49.723432Z","times_seen":18055306,"resource_available":true,"data":null}},"time_used":21,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-23","alert":"Sinkholed","trigger":"kettledroopingcontinuation.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-23","alert":"Sinkholed","trigger":"kettledroopingcontinuation.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-23","alert":"Sinkholed","trigger":"kettledroopingcontinuation.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"happymodx.com/wp-content/themes/generatepress/assets/css/main.min.css?ver=3.6.1","fqdn":"happymodx.com","domain":"happymodx.com","tld":"com"},"ip":{"addr":"104.21.39.80","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://happymodx.com/fc-mobile-soccer/","date":"2026-08-23T10:35:45.780Z","timestamp":1787481345780,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"happymodx.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 28 Jul 2026 09:00:25 GMT","end":"Mon, 26 Oct 2026 10:00:20 GMT"},"fingerprint":{"sha1":"FE:29:9A:0F:BF:23:3E:7B:7B:09:E3:15:8C:DD:03:24:B2:44:F9:87","sha256":"D3:DC:55:AE:12:9C:AC:87:D1:C7:22:A0:4D:BA:D1:40:94:85:03:14:B3:02:E8:37:C8:78:61:6F:C5:79:A4:BD"}}},"request":{"raw":"GET /wp-content/themes/generatepress/assets/css/main.min.css?ver=3.6.1 HTTP/1.1\r\nHost: happymodx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://happymodx.com/fc-mobile-soccer/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=31536000\r\nexpires: Mon, 23 Aug 2027 08:58:40 GMT\r\ncontent-type: text/css; charset=UTF-8\r\nlast-modified: Tue, 02 Dec 2025 00:09:57 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding,Accept-Encoding\r\nserver-timing: cfExtPri\r\ndate: Sun, 23 Aug 2026 10:35:45 GMT\r\nserver: cloudflare\r\nplatform: hostinger\r\npanel: hpanel\r\ncontent-security-policy: upgrade-insecure-requests\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 5824\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=cR%2B3How5kQuXwvdywPXv8V31nhOQiA5ceduh3lR4NyAqWFb85IXnHLFxpDlEcncaee0UfPfEcspc2YVTKXHOMZdnEHy6BVOj2MOAmHBxCDfrUeMG6TM6WKLHyG0caxWs\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\ncf-ray: a2f978eb1c59568a-OSL\r\ncontent-length: 4348\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":19512,"size_decoded":5261,"mime_type":"text/css; charset=UTF-8","magic":"ASCII text, with very long lines (19512), with no line terminators","md5":"b7e067012db6249774c29e4c56b4f2c0","sha1":"7523574074e98d492a8da515f0daf7446cc504e0","sha256":"c839222ec3a5037179749a843610820436bf575a591a3e0b45404f1970a2cc56","sha512":"c77b609b39ddf4ab8b6a89aba1b8daa2e8824312b1032eed8270c82167794dd438ec9878dc5e5e19853565f3f95c24315e3f164b5919cbed8c772e84f7078bba","ssdeep":"384:sk1JAWvwWZ34igipTh3dGr5PL3NatuylxQp9svaQW4M+ght5NsKa4TqSD6CE:hAWvwWZ34igipTh3dGr5PL3NatuylxQo","tlshash":"3f9209a2aaf1242cb177831ffbd0e16c3565d522d30b95dab897d700c9cab67026379c","first_seen":"2024-08-28T15:41:57Z","last_seen":"2026-08-23T12:53:02.689411Z","times_seen":17989,"resource_available":false,"data":null}},"time_used":27,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":27,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-23","alert":"Sinkholed","trigger":"happymodx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"happymodx.com/wp-content/plugins/real-time-auto-find-and-replace/assets/js/rtafar.app.min.js?ver=1.9.5","fqdn":"happymodx.com","domain":"happymodx.com","tld":"com"},"ip":{"addr":"104.21.39.80","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://happymodx.com/fc-mobile-soccer/","date":"2026-08-23T10:35:45.986Z","timestamp":1787481345986,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"happymodx.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 28 Jul 2026 09:00:25 GMT","end":"Mon, 26 Oct 2026 10:00:20 GMT"},"fingerprint":{"sha1":"FE:29:9A:0F:BF:23:3E:7B:7B:09:E3:15:8C:DD:03:24:B2:44:F9:87","sha256":"D3:DC:55:AE:12:9C:AC:87:D1:C7:22:A0:4D:BA:D1:40:94:85:03:14:B3:02:E8:37:C8:78:61:6F:C5:79:A4:BD"}}},"request":{"raw":"GET /wp-content/plugins/real-time-auto-find-and-replace/assets/js/rtafar.app.min.js?ver=1.9.5 HTTP/1.1\r\nHost: happymodx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://happymodx.com/fc-mobile-soccer/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Sun, 30 Aug 2026 08:58:45 GMT\r\ncontent-type: application/x-javascript; charset=UTF-8\r\nlast-modified: Sat, 22 Aug 2026 15:34:31 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding,Accept-Encoding\r\nserver-timing: cfExtPri\r\ndate: Sun, 23 Aug 2026 10:35:46 GMT\r\nserver: cloudflare\r\nplatform: hostinger\r\npanel: hpanel\r\ncontent-security-policy: upgrade-insecure-requests\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 5820\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Z1ss7KBr%2FCpAgRMjx%2F5oEAm7jEGdc0mB5ncrqWKPwAAeG2hut4hYRd9YTK5fPAvredpeulnp2yXtZB9z7XjFXxG7acfu%2FU2HXpQ3rkPs1rCA6QcVoyNNBx%2F%2BpxU27qk0\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: a2f978ec6c89568a-OSL\r\ncontent-length: 29652\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":87478,"size_decoded":30588,"mime_type":"application/x-javascript; charset=UTF-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65534), with no line terminators","md5":"4031117922153771ac02e7215eba5074","sha1":"65d06636dfc4c918ae149ff2ece13099f9921857","sha256":"2e6b64b2e155135d29959ec0d024b9a629863c378863a6ece4b54c7d9effc1e4","sha512":"6f52e59abc459efa5ffc448411fbe07d59e2db37c13724a116a711a736f7b9a7814446744f7207104dabc9c5471c1c683a9fe1d5e8432b24d88b78d835ae282e","ssdeep":"1536:X+zo1GZGM+xTWaxsZs0JTKzvzokaggU6ExcJBXvtS9Zt8yFpVHyzxgKZZuMg:XutK3omIHtS97zEgKjuMg","tlshash":"1b83f9ddb2cab02247a771b9007f550bf2361999280dc410f159e8e9bc78a4e927bf7d","first_seen":"2025-01-28T17:58:38.93127Z","last_seen":"2026-08-23T11:06:12.556261Z","times_seen":2493,"resource_available":true,"data":null}},"time_used":28,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":28,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-23","alert":"Sinkholed","trigger":"happymodx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"happymodx.com/wp-content/plugins/polylang-pro/vendor/wpsyntex/polylang/flags/it.png","fqdn":"happymodx.com","domain":"happymodx.com","tld":"com"},"ip":{"addr":"104.21.39.80","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://happymodx.com/fc-mobile-soccer/","date":"2026-08-23T10:35:46.017Z","timestamp":1787481346017,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"happymodx.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 28 Jul 2026 09:00:25 GMT","end":"Mon, 26 Oct 2026 10:00:20 GMT"},"fingerprint":{"sha1":"FE:29:9A:0F:BF:23:3E:7B:7B:09:E3:15:8C:DD:03:24:B2:44:F9:87","sha256":"D3:DC:55:AE:12:9C:AC:87:D1:C7:22:A0:4D:BA:D1:40:94:85:03:14:B3:02:E8:37:C8:78:61:6F:C5:79:A4:BD"}}},"request":{"raw":"GET /wp-content/plugins/polylang-pro/vendor/wpsyntex/polylang/flags/it.png HTTP/1.1\r\nHost: happymodx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://happymodx.com/fc-mobile-soccer/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=10368000\r\nexpires: Mon, 21 Dec 2026 08:58:45 GMT\r\ncontent-type: image/png\r\nlast-modified: Sat, 17 Jan 2026 17:46:45 GMT\r\naccept-ranges: bytes\r\nserver-timing: cfExtPri\r\ndate: Sun, 23 Aug 2026 10:35:46 GMT\r\nserver: cloudflare\r\nplatform: hostinger\r\npanel: hpanel\r\ncontent-security-policy: upgrade-insecure-requests\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 5820\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=TpkGUUUSNBenLR16y2wY3A7KRo3kPjKok2knNH1xt0C1k7K8zsR4PUYiRS2VvsOG0Mkc6ZvL5o0eTjV%2BYOSmcOs71UeSa3pTOSUQtJcTCYsB%2BAJ07LyhdBLfgjkLJc%2B7\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a2f978ec9c99568a-OSL\r\ncontent-length: 234\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":234,"size_decoded":1095,"mime_type":"image/png","magic":"PNG image data, 16 x 11, 8-bit colormap, non-interlaced","md5":"e81ea8ac981f01e75d14135b5e78fd21","sha1":"8d17aab009617fecee8ec80d366c1bee6e4ebbb6","sha256":"5486d67c53956813c2ab1fdef773516ee85aff7adae4ae0186cf09e398c1e28f","sha512":"ba35e4133e221ddf3075de08ff95b0dcfd649f8ff10129c61fd21483f230bfd58a46c51a86a53de95e09261d0f82cc9aa581e7b7262efb8961e58e717ec7281b","ssdeep":"","tlshash":"bed097d55f712c38a185102320ac6d2048121b20cf88f0d31ac1563e3d26a00c0f88f3","first_seen":"2023-05-24T16:15:36Z","last_seen":"2026-08-23T10:37:00.289576Z","times_seen":270,"resource_available":false,"data":null}},"time_used":67,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":67,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-23","alert":"Sinkholed","trigger":"happymodx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"protrafficinspector.com/stats","fqdn":"protrafficinspector.com","domain":"protrafficinspector.com","tld":"com"},"ip":{"addr":"18.196.51.86","port":443,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://happymodx.com/fc-mobile-soccer/","date":"2026-08-23T10:35:46.562Z","timestamp":1787481346562,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"protrafficinspector.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Fri, 26 Jun 2026 00:00:00 GMT","end":"Sat, 09 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"A5:A0:EB:57:26:41:24:03:DD:F3:2D:91:FB:6B:49:B6:53:8B:5F:86","sha256":"82:7E:C7:50:5F:EC:61:E0:5F:7F:ED:2E:10:87:9B:31:A9:8F:4B:DF:E8:99:CC:2E:A1:13:31:E7:45:CE:89:25"}}},"request":{"raw":"GET /stats HTTP/1.1\r\nHost: protrafficinspector.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://happymodx.com\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://happymodx.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 23 Aug 2026 10:35:46 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-length: 40\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: https://happymodx.com\r\nset-cookie: uid_id2=495bd5a7-ba41-442d-a6d6-948b2a6dbd5c:1:1; Path=/; Expires=Wed, 20 Aug 2036 10:35:46 GMT; Secure; SameSite=None\r\nvary: Origin\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":[{"name":"uid_id2","value":"495bd5a7-ba41-442d-a6d6-948b2a6dbd5c:1:1","quoted":false,"path":"/","expires":"2036-08-20T10:35:46Z","raw_expires":"Wed, 20 Aug 2036 10:35:46 GMT","secure":true,"http_only":false,"same_site":"None","partitioned":false,"raw":"uid_id2=495bd5a7-ba41-442d-a6d6-948b2a6dbd5c:1:1; Path=/; Expires=Wed, 20 Aug 2036 10:35:46 GMT; Secure; SameSite=None"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":40,"size_decoded":516,"mime_type":"text/html; charset=UTF-8","magic":"ASCII text, with no line terminators","md5":"5a27b22702df094cdc829425bf7b5f3e","sha1":"f4371fe74d3c1dce53534facd0293c0847e8a68b","sha256":"1cc5670f5061c425f32a82761801f31401337f449b3f4e3b691423b2ecd7fd34","sha512":"d211379798317f3b988811eab5f4ee539c60405bb9e1de330fd4a9da07da097db46ef44d96a4858455fb475a6a56ed400d8707982198fd904d6d218fe3ba3db5","ssdeep":"","tlshash":"53900403171f1504001fc31047f043f71f1404443d35d1045430413104150051df5051","first_seen":"2026-08-23T10:36:29.966072Z","last_seen":"2026-08-23T10:36:29.966072Z","times_seen":1,"resource_available":false,"data":null}},"time_used":32,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zoologyfibre.com/watch.963416567598.js?dev=e\u0026fstu=01a02e30-d35b-756b-b351-5ab70ddb72dc\u0026key=ccf2cef4382fd13c1ed6f76b041b5c50\u0026kw=%5B%22ea%22%2C%22sports%22%2C%22fc%22%2C%22mobile%22%2C%2226%22%2C%22mod%22%2C%22apk%22%2C%22v27%22%2C%220%22%2C%2203%22%2C%22unlimited%22%2C%22money%22%2C%22menu%22%2C%22unlocked%22%5D\u0026ps1=1787481346\u0026rb=e\u0026refer=https%3A%2F%2Fhappymodx.com%2Ffc-mobile-soccer%2F\u0026res=14.1055\u0026rmtc=t\u0026sht=isCClSdh8XBnTVLQIvacB_Bejr6G3ZFMRuRqDCi4CGg\u0026shv=2\u0026st1=9613ac947ad2090602887b32aefc0889\u0026tz=0\u0026uuid=45f7fc2f-ad1e-4091-9c0e-b18d5e4a10df%3A3%3A1","fqdn":"zoologyfibre.com","domain":"zoologyfibre.com","tld":"com"},"ip":{"addr":"23.111.84.124","port":443,"asn":7979,"as":"SERVERS-COM","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://happymodx.com/fc-mobile-soccer/","date":"2026-08-23T10:35:46.966Z","timestamp":1787481346966,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"zoologyfibre.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 27 Jun 2026 03:57:55 GMT","end":"Fri, 25 Sep 2026 03:57:54 GMT"},"fingerprint":{"sha1":"21:E1:0C:F0:3C:47:B6:51:43:59:A6:9C:7F:45:F3:83:AF:8E:E8:1C","sha256":"8C:62:F5:05:48:06:52:25:19:4D:0F:3D:B5:18:63:0E:57:03:24:EE:E2:B9:FB:E5:24:00:E5:7B:9C:AE:94:CB"}}},"request":{"raw":"GET /watch.963416567598.js?dev=e\u0026fstu=01a02e30-d35b-756b-b351-5ab70ddb72dc\u0026key=ccf2cef4382fd13c1ed6f76b041b5c50\u0026kw=%5B%22ea%22%2C%22sports%22%2C%22fc%22%2C%22mobile%22%2C%2226%22%2C%22mod%22%2C%22apk%22%2C%22v27%22%2C%220%22%2C%2203%22%2C%22unlimited%22%2C%22money%22%2C%22menu%22%2C%22unlocked%22%5D\u0026ps1=1787481346\u0026rb=e\u0026refer=https%3A%2F%2Fhappymodx.com%2Ffc-mobile-soccer%2F\u0026res=14.1055\u0026rmtc=t\u0026sht=isCClSdh8XBnTVLQIvacB_Bejr6G3ZFMRuRqDCi4CGg\u0026shv=2\u0026st1=9613ac947ad2090602887b32aefc0889\u0026tz=0\u0026uuid=45f7fc2f-ad1e-4091-9c0e-b18d5e4a10df%3A3%3A1 HTTP/1.1\r\nHost: zoologyfibre.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://happymodx.com\r\nReferer: https://happymodx.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nCookie: uid_id2=45f7fc2f-ad1e-4091-9c0e-b18d5e4a10df:3:1; ain=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.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.rD8lnIlgN_MXbDR-XfeCHTcB5ZDvbXg0XIRp7IoGSLU\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.30.2\r\nDate: Sun, 23 Aug 2026 10:35:46 GMT\r\nContent-Type: text/html\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\naccept-ch: Device-Stock-Ua,X-Device-User-Agent,X-Operamini-Phone-Ua,X-Ucbrowser-Device-Ua,User-Agent,Sec-Ch-Ua-Platformuser-Agent,Sec-Ch-Ua-Full-Version-List,Sec-Ch-Ua-Full-Version,Sec-Ch-Ua-Platform,Sec-Ch-Ua-Model,Sec-Ch-Ua-Mobile,Sec-Ch-Ua-Platform-Version,Sec-Ch-Ua\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: https://happymodx.com\r\ncontent-encoding: zstd\r\nset-cookie: uid_id2=45f7fc2f-ad1e-4091-9c0e-b18d5e4a10df:3:1; Path=/; Expires=Sun, 30 Aug 2026 10:35:46 GMT; Secure; SameSite=None\npdhtkv=true; Path=/; Expires=Mon, 24 Aug 2026 10:35:46 GMT; Secure; SameSite=None\nuncs=1; Path=/; Expires=Mon, 24 Aug 2026 10:35:46 GMT; Secure; SameSite=None\npdhtkv27=true; Path=/; Expires=Mon, 24 Aug 2026 10:35:46 GMT; Secure; SameSite=None\nuncs27=1; Path=/; Expires=Mon, 24 Aug 2026 10:35:46 GMT; Secure; SameSite=None\nu_pl27763416=1; Path=/; Expires=Mon, 24 Aug 2026 10:35:46 GMT; Secure; SameSite=None\r\nvary: Accept-Encoding\r\nx-envoy-upstream-service-time: 8\r\nHost: zoologyfibre.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: 7a0418d09438549dc4001e2f97e746ae\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":[{"name":"uid_id2","value":"45f7fc2f-ad1e-4091-9c0e-b18d5e4a10df:3:1","quoted":false,"path":"/","expires":"2026-08-30T10:35:46Z","raw_expires":"Sun, 30 Aug 2026 10:35:46 GMT","secure":true,"http_only":false,"same_site":"None","partitioned":false,"raw":"uid_id2=45f7fc2f-ad1e-4091-9c0e-b18d5e4a10df:3:1; Path=/; Expires=Sun, 30 Aug 2026 10:35:46 GMT; Secure; SameSite=None"},{"name":"pdhtkv","value":"true","quoted":false,"path":"/","expires":"2026-08-24T10:35:46Z","raw_expires":"Mon, 24 Aug 2026 10:35:46 GMT","secure":true,"http_only":false,"same_site":"None","partitioned":false,"raw":"pdhtkv=true; Path=/; Expires=Mon, 24 Aug 2026 10:35:46 GMT; Secure; SameSite=None"},{"name":"uncs","value":"1","quoted":false,"path":"/","expires":"2026-08-24T10:35:46Z","raw_expires":"Mon, 24 Aug 2026 10:35:46 GMT","secure":true,"http_only":false,"same_site":"None","partitioned":false,"raw":"uncs=1; Path=/; Expires=Mon, 24 Aug 2026 10:35:46 GMT; Secure; SameSite=None"},{"name":"pdhtkv27","value":"true","quoted":false,"path":"/","expires":"2026-08-24T10:35:46Z","raw_expires":"Mon, 24 Aug 2026 10:35:46 GMT","secure":true,"http_only":false,"same_site":"None","partitioned":false,"raw":"pdhtkv27=true; Path=/; Expires=Mon, 24 Aug 2026 10:35:46 GMT; Secure; SameSite=None"},{"name":"uncs27","value":"1","quoted":false,"path":"/","expires":"2026-08-24T10:35:46Z","raw_expires":"Mon, 24 Aug 2026 10:35:46 GMT","secure":true,"http_only":false,"same_site":"None","partitioned":false,"raw":"uncs27=1; Path=/; Expires=Mon, 24 Aug 2026 10:35:46 GMT; Secure; SameSite=None"},{"name":"u_pl27763416","value":"1","quoted":false,"path":"/","expires":"2026-08-24T10:35:46Z","raw_expires":"Mon, 24 Aug 2026 10:35:46 GMT","secure":true,"http_only":false,"same_site":"None","partitioned":false,"raw":"u_pl27763416=1; Path=/; Expires=Mon, 24 Aug 2026 10:35:46 GMT; Secure; SameSite=None"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.30.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}],"data":{"size":4096,"size_decoded":4110,"mime_type":"text/html","magic":"JavaScript source, ASCII text, with very long lines (3220)","md5":"1b56dbde4e25937221c4abe445925b2f","sha1":"cb3d8264233c0e638a7c988b0d930a5ed37a7e72","sha256":"9490ce28fc421a98e51710e0bd8effc9fd7242ec3456ab19ba180a8442ad7d95","sha512":"60cf7f78557d8ca8170e8e21ac27e7e22fb119db73eb3f8ab4639c74bf22eaa9c26a05a094de784bbc36f860db828fc5c05455682e3c0400ca6a697d513fe7de","ssdeep":"","tlshash":"09813cbe7eea41715816b13f237ba6093d65900f6201de497c9cd6142fa9bb00e1fac8","first_seen":"2026-08-23T10:36:29.967795Z","last_seen":"2026-08-23T10:36:29.967795Z","times_seen":1,"resource_available":false,"data":null}},"time_used":37,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":37,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-22","alert":"Sinkholed","trigger":"zoologyfibre.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.show-sb.com/sb/au/78/74/fd/7874fd62186fc577273fa59756d17076/1744381737.html","fqdn":"cdn.show-sb.com","domain":"show-sb.com","tld":"com"},"ip":{"addr":"104.21.95.140","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://happymodx.com/fc-mobile-soccer/","date":"2026-08-23T10:35:47.398Z","timestamp":1787481347398,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"show-sb.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 31 Jul 2026 08:49:29 GMT","end":"Thu, 29 Oct 2026 09:49:07 GMT"},"fingerprint":{"sha1":"C6:C1:39:5B:4A:88:46:B1:12:EF:0B:E1:32:AA:4B:26:BC:E9:04:3C","sha256":"97:94:F6:6E:AE:28:3E:4B:61:23:FE:FD:3B:D0:CD:67:8D:82:40:5B:11:AA:57:9E:36:73:2D:B8:75:67:B9:3C"}}},"request":{"raw":"GET /sb/au/78/74/fd/7874fd62186fc577273fa59756d17076/1744381737.html HTTP/1.1\r\nHost: cdn.show-sb.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://happymodx.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://happymodx.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver: cloudflare\r\ndate: Sun, 23 Aug 2026 10:35:47 GMT\r\ncontent-type: text/html\r\nlast-modified: Fri, 11 Apr 2025 14:28:57 GMT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=X%2Fbs9qMesoZlnAstZvrC67oVOL9nw0RqDWCfRaSX1oW3B%2F1gvNufVziqc5RtLUuQAEfkOOCepJCNgMNagjhnciSvzsUkCAcBQrUke0uHZz1E9UQM%2F%2F%2BQ6PLb%2FTdbdrO3wJU%3D\"}]}\r\npriority: u=3,i=?0\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: public, max-age=315360000\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: Date\r\nvary: accept-encoding\r\nage: 0\r\ncf-cache-status: HIT\r\ncontent-encoding: zstd\r\ncf-ray: a2f978f53e55b51d-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]}],"data":{"size":1544,"size_decoded":1348,"mime_type":"text/html","magic":"HTML document, ASCII text","md5":"972f68410d9349904f897739b33e12cc","sha1":"e41130dbad60e81ad2665bb7407a50888aae8150","sha256":"90c062931018d386488b555fd261405457f9744db31512ff5780d49769d7b0d0","sha512":"905ef97b48b163e2ff2d28316f462ab1db0bdc05df312811c5e24ecb8614424d74f64a88fe31849fc9dd3515bf1d681b136df27aac8b27fc61c07cbda05dd12e","ssdeep":"","tlshash":"eb31f4251df9c9720182a0957b312f2baa91ea47cc8b560133fc4e948feaed9cd5310b","first_seen":"2023-12-18T02:06:40Z","last_seen":"2026-08-23T10:37:00.284876Z","times_seen":2242,"resource_available":false,"data":null}},"time_used":282,"timings":{"blocked":2,"dns":0,"connect":0,"send":0,"wait":280,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-22","alert":"Sinkholed","trigger":"cdn.show-sb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-22","alert":"Sinkholed","trigger":"cdn.show-sb.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"zoologyfibre.com/pixel/ase","fqdn":"zoologyfibre.com","domain":"zoologyfibre.com","tld":"com"},"ip":{"addr":"23.111.84.124","port":443,"asn":7979,"as":"SERVERS-COM","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://happymodx.com/fc-mobile-soccer/","date":"2026-08-23T10:35:47.399Z","timestamp":1787481347399,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"zoologyfibre.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Sat, 27 Jun 2026 03:57:55 GMT","end":"Fri, 25 Sep 2026 03:57:54 GMT"},"fingerprint":{"sha1":"21:E1:0C:F0:3C:47:B6:51:43:59:A6:9C:7F:45:F3:83:AF:8E:E8:1C","sha256":"8C:62:F5:05:48:06:52:25:19:4D:0F:3D:B5:18:63:0E:57:03:24:EE:E2:B9:FB:E5:24:00:E5:7B:9C:AE:94:CB"}}},"request":{"raw":"POST /pixel/ase HTTP/1.1\r\nHost: zoologyfibre.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://happymodx.com/\r\nContent-Type: application/json\r\nContent-Length: 220\r\nOrigin: https://happymodx.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":220,"data":"[{\"placement_key\":\"f0582dcc2dc78c0d7cc66bdcca52b3ab\",\"template_body\":\"body_social-bar_pl_general\",\"event_name\":\"base.render_pixel.success\",\"id_frontend_invoke\":\"01a02e30-d27c-7c18-9dbc-1e3d9a6b3289\",\"script_version\":\"\"}]"}},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.30.2\r\nDate: Sun, 23 Aug 2026 10:35:47 GMT\r\nContent-Length: 0\r\nConnection: keep-alive\r\nAccept-Ch: Device-Stock-Ua, X-Device-User-Agent, X-Operamini-Phone-Ua, User-Agent, Sec-Ch-Ua-Platformuser-Agent, Sec-Ch-Ua-Full-Version, Sec-Ch-Ua-Platform, Sec-Ch-Ua-Mobile, X-Ucbrowser-Device-Ua, Sec-Ch-Ua-Platform-Version, Sec-Ch-Ua, Sec-Ch-Ua-Full-Version-List, Sec-Ch-Ua-Model\r\nHost: zoologyfibre.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nCache-Control: no-cache\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Allow-Methods: GET, POST, OPTIONS\r\nAccess-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Upgrade-Insecure-Requests,C-High-Entropy-Values\r\nAccess-Control-Expose-Headers: Content-Length,Content-Range\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.30.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":1536,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-23T12:26:49.723432Z","times_seen":18055306,"resource_available":true,"data":null}},"time_used":28,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":28,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-22","alert":"Sinkholed","trigger":"zoologyfibre.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"you.developzilla.com/issue/attachment","fqdn":"you.developzilla.com","domain":"developzilla.com","tld":"com"},"ip":{"addr":"23.109.84.164","port":443,"asn":7979,"as":"SERVERS-COM","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://happymodx.com/fc-mobile-soccer/","date":"2026-08-23T10:35:47.988Z","timestamp":1787481347988,"http_version":"HTTP/2","security_state":"","security_info":null,"request":{"raw":"GET /issue/attachment HTTP/1.1\r\nHost: you.developzilla.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.25.5\r\ndate: Sun, 23 Aug 2026 10:35:47 GMT\r\ncontent-type: text/html\r\ncontent-length: 1294\r\naccess-control-expose-headers: Location, X-Version\r\nx-xss-protection: 1; mode=block\r\ncontent-security-policy: frame-ancestors 'self' you.developzilla.com you.developzilla.com:8112 www.getpostman.com localhost:8080 techserv2.adsterratech.com:8112 127.0.0.1:8112 10.1.1.51 tp.developzilla.com wiki.developzilla.com:8112 stage:8112 localhost:8112 209.200.46.90:8112 66.207.43.229:8112 maven.developzilla.com:8112 techserv:8112 tn04.trafserv.com:8112 city.developzilla.com you hub.developzilla.com 10.1.1.51:8112 np.kirilldrozdov.developzilla.com np.adsterra.com script.google.com repo.developzilla.com;\r\nx-frame-options: SAMEORIGIN\r\nreferrer-policy: same-origin\r\nlast-modified: Sat, 08 Aug 2026 02:33:08 GMT\r\ncache-control: no-cache, no-store, no-transform, must-revalidate\r\nvary: Accept-Encoding, User-Agent\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=86400; includeSubDomains; preload;\r\nx-content-type-options: nosniff, nosniff\r\nx-robots-tag: none\r\nx-download-options: noopen\r\nx-permitted-cross-domain-policies: none\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.25.5","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-23T12:26:49.723432Z","times_seen":18055306,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"happymodx.com/wp-includes/js/jquery/jquery.min.js?ver=3.7.1","fqdn":"happymodx.com","domain":"happymodx.com","tld":"com"},"ip":{"addr":"104.21.39.80","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://happymodx.com/fc-mobile-soccer/","date":"2026-08-23T10:35:45.957Z","timestamp":1787481345957,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"happymodx.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 28 Jul 2026 09:00:25 GMT","end":"Mon, 26 Oct 2026 10:00:20 GMT"},"fingerprint":{"sha1":"FE:29:9A:0F:BF:23:3E:7B:7B:09:E3:15:8C:DD:03:24:B2:44:F9:87","sha256":"D3:DC:55:AE:12:9C:AC:87:D1:C7:22:A0:4D:BA:D1:40:94:85:03:14:B3:02:E8:37:C8:78:61:6F:C5:79:A4:BD"}}},"request":{"raw":"GET /wp-includes/js/jquery/jquery.min.js?ver=3.7.1 HTTP/1.1\r\nHost: happymodx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://happymodx.com/fc-mobile-soccer/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Sun, 30 Aug 2026 08:58:40 GMT\r\ncontent-type: application/x-javascript; charset=UTF-8\r\nlast-modified: Fri, 31 Oct 2025 00:47:28 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding,Accept-Encoding\r\nserver-timing: cfExtPri\r\ndate: Sun, 23 Aug 2026 10:35:45 GMT\r\nserver: cloudflare\r\nplatform: hostinger\r\npanel: hpanel\r\ncontent-security-policy: upgrade-insecure-requests\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 5825\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Ml0IBJejb59buwUpiJjplniFWvRNxqKkwQQU974fBrKrFaCO9X8VraorbBIjTcuYcKEA0Sxe0BuUccIZwJdj81iCoMLmCVvz0HNteHaZkUEvfRBbKcY2EtT52itj%2Frk8\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\ncf-ray: a2f978ec3c78568a-OSL\r\ncontent-length: 29531\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":87553,"size_decoded":30459,"mime_type":"application/x-javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (65447)","md5":"826eb77e86b02ab7724fe3d0141ff87c","sha1":"79cd3587d565afe290076a8d36c31c305a573d18","sha256":"cb6f2d32c49d1c2b25e9ffc9aaafa3f83075346c01bcd4ae6eb187392a4292cf","sha512":"fc79fdb76763025dc39fac045a215ff155ef2f492a0e9640079d6f089fa6218af2b3ab7c6eaf636827dee9294e6939a95ab24554e870c976679c25567ad6374c","ssdeep":"1536:0RUX9uDgwxcy2KVBNwchN6SLaHEk2BSrBESp+a/IEk4aAocVi8SMBQ47GKO:sHNwcv9VBQpLl88SMBQ47GKO","tlshash":"7483f8df77ca702247ab30b9006f550bf276199d684d4400f159d8e9bcb8a4a827bf7e","first_seen":"2023-11-03T09:26:43Z","last_seen":"2026-08-23T12:26:44.497155Z","times_seen":1030476,"resource_available":true,"data":null}},"time_used":29,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":29,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-23","alert":"Sinkholed","trigger":"happymodx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/poppins/v24/pxiByp8kv8JHgFVrLGT9Z1xlFQ.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://happymodx.com/fc-mobile-soccer/","date":"2026-08-23T10:35:46.529Z","timestamp":1787481346529,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Wed, 05 Aug 2026 20:43:51 GMT","end":"Wed, 28 Oct 2026 20:43:50 GMT"},"fingerprint":{"sha1":"B9:F7:74:85:7B:1C:5F:E9:C2:86:5A:AA:63:0F:34:84:5F:79:D6:96","sha256":"BA:57:10:D4:7E:A5:7C:C6:22:90:71:24:65:31:49:39:40:E5:C8:EB:E4:74:F7:D9:0B:3E:17:36:DD:31:9D:EB"}}},"request":{"raw":"GET /s/poppins/v24/pxiByp8kv8JHgFVrLGT9Z1xlFQ.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://happymodx.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 7748\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 20 Aug 2026 03:06:02 GMT\r\nexpires: Fri, 20 Aug 2027 03:06:02 GMT\r\ncache-control: public, max-age=31536000\r\nage: 286184\r\nlast-modified: Mon, 15 Sep 2025 16:36:26 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":7748,"size_decoded":8560,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 7748, version 1.0","md5":"a09f2fccfee35b7247b08a1a266f0328","sha1":"0da2d17e738f46d2a09e6fb7969da451719a9820","sha256":"cd36de204aca2d5fa263a731f7c20009b5e3d754ba1f1e03c33e93a48f3e7446","sha512":"5e3f9a298003b84250ec6801e08ad2a4ff8845d4c3e13ea61bec37da24d26ede13b436257882124cc0c27e9a323ba92e7d23c6ad3f48a7b75535f5ed98813a0e","ssdeep":"96:0g6vAF/FXh6MmoI56TEwosGU/DbVF/QBT1gaHEYT6u/w3hXLbJPAS772+6haAftj:zp6x6TYpoDYBJg8TRkbJPAS/2+CzQa7","tlshash":"f3f19de65d1e5e8980f0102f6f6efce767950d88141dadf9a9e72f884c6ba1b04c90cd","first_seen":"2023-04-05T13:48:05Z","last_seen":"2026-08-23T12:28:29.73263Z","times_seen":280681,"resource_available":false,"data":null}},"time_used":52,"timings":{"blocked":-1,"dns":0,"connect":30,"send":0,"wait":19,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"kettledroopingcontinuation.com/watch.534021516619.js?key=8c87b8164b319ffbf2dc17605a4d3e1c\u0026kw=%5B%22ea%22%2C%22sports%22%2C%22fc%22%2C%22mobile%22%2C%2226%22%2C%22mod%22%2C%22apk%22%2C%22v27%22%2C%220%22%2C%2203%22%2C%22unlimited%22%2C%22money%22%2C%22menu%22%2C%22unlocked%22%5D\u0026refer=https%3A%2F%2Fhappymodx.com%2Ffc-mobile-soccer%2F\u0026tz=0\u0026dev=e\u0026res=14.1055\u0026rb=e\u0026uuid=45f7fc2f-ad1e-4091-9c0e-b18d5e4a10df%3A3%3A1","fqdn":"kettledroopingcontinuation.com","domain":"kettledroopingcontinuation.com","tld":"com"},"ip":{"addr":"23.111.84.228","port":443,"asn":7979,"as":"SERVERS-COM","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://happymodx.com/fc-mobile-soccer/","date":"2026-08-23T10:35:46.674Z","timestamp":1787481346674,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"kettledroopingcontinuation.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 23 Aug 2026 00:02:23 GMT","end":"Sat, 21 Nov 2026 00:02:22 GMT"},"fingerprint":{"sha1":"45:C6:44:0A:42:17:85:94:0C:43:02:EA:82:14:8D:F8:D3:13:D9:E2","sha256":"8C:E7:C4:F5:8F:DB:E8:10:A8:55:E4:5C:85:CC:97:D0:7D:0A:FE:C9:6C:C4:4D:6A:FF:20:87:2C:BC:34:2D:F4"}}},"request":{"raw":"GET /watch.534021516619.js?key=8c87b8164b319ffbf2dc17605a4d3e1c\u0026kw=%5B%22ea%22%2C%22sports%22%2C%22fc%22%2C%22mobile%22%2C%2226%22%2C%22mod%22%2C%22apk%22%2C%22v27%22%2C%220%22%2C%2203%22%2C%22unlimited%22%2C%22money%22%2C%22menu%22%2C%22unlocked%22%5D\u0026refer=https%3A%2F%2Fhappymodx.com%2Ffc-mobile-soccer%2F\u0026tz=0\u0026dev=e\u0026res=14.1055\u0026rb=e\u0026uuid=45f7fc2f-ad1e-4091-9c0e-b18d5e4a10df%3A3%3A1 HTTP/1.1\r\nHost: kettledroopingcontinuation.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://happymodx.com\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://happymodx.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 307 Temporary Redirect\r\nServer: nginx/1.30.2\r\nDate: Sun, 23 Aug 2026 10:35:46 GMT\r\nContent-Type: text/html\r\nContent-Length: 0\r\nConnection: keep-alive\r\naccept-ch: Sec-Ch-Ua,Sec-Ch-Ua-Platformuser-Agent,Sec-Ch-Ua-Full-Version,Sec-Ch-Ua-Model,Device-Stock-Ua,X-Operamini-Phone-Ua,X-Ucbrowser-Device-Ua,User-Agent,Sec-Ch-Ua-Full-Version-List,Sec-Ch-Ua-Platform,Sec-Ch-Ua-Mobile,X-Device-User-Agent,Sec-Ch-Ua-Platform-Version\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: https://happymodx.com\r\nlocation: https://kettledroopingcontinuation.com/watch.534021516619.js?dev=e\u0026fstu=01a02e30-d2d4-72fd-ad1f-cde4d98b1c91\u0026key=8c87b8164b319ffbf2dc17605a4d3e1c\u0026kw=%5B%22ea%22%2C%22sports%22%2C%22fc%22%2C%22mobile%22%2C%2226%22%2C%22mod%22%2C%22apk%22%2C%22v27%22%2C%220%22%2C%2203%22%2C%22unlimited%22%2C%22money%22%2C%22menu%22%2C%22unlocked%22%5D\u0026ps1=1787481346\u0026rb=e\u0026refer=https%3A%2F%2Fhappymodx.com%2Ffc-mobile-soccer%2F\u0026res=14.1055\u0026rmtc=t\u0026sht=1_Omp_dZ_982O27tb6XnJm9GOVEWQrc_MtJZm-MVEF0\u0026shv=2\u0026st1=be4463a32637e07ceb71fc2102c2ef07\u0026tz=0\u0026uuid=45f7fc2f-ad1e-4091-9c0e-b18d5e4a10df%3A3%3A1\r\nset-cookie: uid_id2=45f7fc2f-ad1e-4091-9c0e-b18d5e4a10df:3:1; Path=/; Expires=Sun, 30 Aug 2026 10:35:46 GMT; Secure; SameSite=None\nain=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.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.RnYQF76paCH96o53rLCvaa-rsLWl01ui6dzgog9SHqM; Path=/; Expires=Sun, 23 Aug 2026 10:36:46 GMT; Secure; SameSite=None\r\nvary: Accept-Encoding\r\nx-envoy-upstream-service-time: 4\r\nHost: kettledroopingcontinuation.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: 222711093b4e45c0794a1cdfe1699663\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":[{"name":"uid_id2","value":"45f7fc2f-ad1e-4091-9c0e-b18d5e4a10df:3:1","quoted":false,"path":"/","expires":"2026-08-30T10:35:46Z","raw_expires":"Sun, 30 Aug 2026 10:35:46 GMT","secure":true,"http_only":false,"same_site":"None","partitioned":false,"raw":"uid_id2=45f7fc2f-ad1e-4091-9c0e-b18d5e4a10df:3:1; Path=/; Expires=Sun, 30 Aug 2026 10:35:46 GMT; Secure; SameSite=None"},{"name":"ain","value":"eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJwIjp7ImlkIjoyNzc2MzM2NSwiayI6IjhjODdiODE2NGIzMTlmZmJmMmRjMTc2MDVhNGQzZTFjIiwic2lkIjoiIiwiaXNpZCI6MiwiYXNpZCI6MSwiemlkIjo1MzUyNDczLCJwaWQiOjIxODYyNzEsImFuIjp0cnVlLCJsYW4iOnRydWUsImNpZCI6MjEsImFpZCI6MzIsInB0Ijo0LCJwayI6Imt3ZHdmOTJweGEiLCJjcGtzIjp7IjI4IjoiY2MzMWY3MGQ4YzRmM2YyNjgzNmMxYmY0MTcyNzAzYTEifSwidCI6MX0sInUiOnsidSI6MSwiYXUiOjEsImQiOnsiaWQiOjI2NjU2MTExNSwiaWRzIjoiIiwiaWMiOmZhbHNlLCJuIjoiRGVza3RvcCxFbXVsYXRvciIsInYiOiJVbmtub3duIiwibSI6IlVua25vd24iLCJmIjoxLCJmbiI6IkRlc2t0b3AiLCJvaWQiOjM4OTE0LCJvbiI6IldpbmRvd3MiLCJvdiI6IjEwLjAiLCJiaWQiOjEzNjkyNSwiYm4iOiJGaXJlZm94IiwiYnYiOiIxMzQuMCIsInd2IjpmYWxzZSwiZSI6dHJ1ZSwiYWIiOmZhbHNlfSwiYyI6eyJpZCI6MTYyLCJjIjoiTk8iLCJuIjoiTm9yd2F5In0sImN0Ijp7ImlkIjozMTQ2MjcwLCJuIjoiTWF1cmEifSwicmciOnsiaWQiOjMyNzEsIm4iOiJWaWtlbiJ9LCJhIjpmYWxzZSwiY3IiOnsibiI6IkJsaXggU29sdXRpb25zIn0sInhmIjoiIiwiaXhmIjpmYWxzZSwiaWd4ZiI6ZmFsc2UsIml3ZiI6dHJ1ZSwidXAiOnRydWUsInIiOiJodHRwczovL2hhcHB5bW9keC5jb20vZmMtbW9iaWxlLXNvY2Nlci8iLCJ0eiI6MiwiaWR1YyI6MCwiYXIiOltdfX0.RnYQF76paCH96o53rLCvaa-rsLWl01ui6dzgog9SHqM","quoted":false,"path":"/","expires":"2026-08-23T10:36:46Z","raw_expires":"Sun, 23 Aug 2026 10:36:46 GMT","secure":true,"http_only":false,"same_site":"None","partitioned":false,"raw":"ain=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.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.RnYQF76paCH96o53rLCvaa-rsLWl01ui6dzgog9SHqM; Path=/; Expires=Sun, 23 Aug 2026 10:36:46 GMT; Secure; SameSite=None"}],"status_code":"307","status_text":"Temporary Redirect","fingerprints":[{"name":"Nginx:1.30.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-23T12:26:49.723432Z","times_seen":18055306,"resource_available":true,"data":null}},"time_used":116,"timings":{"blocked":-1,"dns":0,"connect":22,"send":0,"wait":28,"receive":0,"ssl":67},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-23","alert":"Sinkholed","trigger":"kettledroopingcontinuation.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-23","alert":"Sinkholed","trigger":"kettledroopingcontinuation.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-23","alert":"Sinkholed","trigger":"kettledroopingcontinuation.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kettledroopingcontinuation.com/ren.gif?sid=H4sIAAAAAAAC_1xSP4gcVRx-s7kuhSgxYGGyQgoFdzN_d3ZMEQhRscjFM5EUCvLm_dl72dmZybyZ3b1tTIyKGISzs7CY_XbvTiWG2KVT9mzkUHAKYYtcY2FhIwQEsZHdW4w4xe83fN_3432_974Px8UhaaKg89cvJSMVRfSs1zTrz19TMU8Gur5-tW6ZTfNc_ZqKW-65-nBRsv5LluM2zRfqrwrWTc7apmWalmnVX1GZkMnw7JKFSu9ZgddsuU3Lajctz8Yw-z-iixo0NcD7h-QpKF498at8C4rNEPfuXxS6myfpiy_3iojmSYY-33sz7sbJIEbv8a_MDMh4b6VGoitCPqshifdWWyDpTxdbIFQVqZ18iDDeW1lF2N85chtGEDFCfhyD_gwimkHRGVhyG4r_TADGsX4ZcW93PckGdOuIpQu2Imt_PoIaVGTt4QnEvXsXIjWsX0miIldJrDGUJdRwBtWZIS32kY9qUIN9sPw9KP4TMWunEPd2LtEio1B8fsb1pC-ZLRuUW6LhmoHVCJgpGqHV5p5wqWVyubwjJWeg-hgKbaBQBgpZQ5HW0OPzOg3aMgxaLg2E9CU3LZ9Rz3EC3_Vs2WIeCnYLim-DZR_tFjHTjj227hbvpJHt-y3HaXljazflm3m3P82zQkwXmrH1xRFk-0twOWj7_x10rda_KsdeqpBmN9FV29C8Bp1XxNh4F31e7vBI27rc5ZEuQmvV7VV3ykmSd8Z0J8k7Iiag2TYyXk5VekPfBsuPTUZS80myKDTMywkNeTlRPCfIbszPmBY1beGYDe5w2vAp8xtBm3kNm9m-aLkB931rKnVelOP0kDy5eEbj_qMf0BXzujS9ts0Zsznz28zkPmOtVsgZo54dOjSEViWUroFqAyNVkY27zyBVFXnu7dMI6T50tA-mngYtngUdlKCbJUbx15s0Tbd6CR82WdIDT0qk-RryLWMcHZITkzeuXvhuGafO510IdnD-ry___i26cxEsK5FmJa6r7wk60a1vLqe56qkRXeTrSk5zsQaqKnL8zmkwVZGTX8XLqJ9rvAaW3oROD84fPtj4_YNTDyaRTisiPvkFOiEIUwORIojEAVl9oGEJLR4fHoqDb_844sb6fXQyA2FkTMIoM6ZhlEWfHvnVal43uSssFlDPl8LzvNBzbSZlaPq2dBy7HSDX1fWPfzz2TwAAAP__VdUao3UEAAA=","fqdn":"kettledroopingcontinuation.com","domain":"kettledroopingcontinuation.com","tld":"com"},"ip":{"addr":"23.111.84.228","port":443,"asn":7979,"as":"SERVERS-COM","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://happymodx.com/fc-mobile-soccer/","date":"2026-08-23T10:35:47.188Z","timestamp":1787481347188,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"kettledroopingcontinuation.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 23 Aug 2026 00:02:23 GMT","end":"Sat, 21 Nov 2026 00:02:22 GMT"},"fingerprint":{"sha1":"45:C6:44:0A:42:17:85:94:0C:43:02:EA:82:14:8D:F8:D3:13:D9:E2","sha256":"8C:E7:C4:F5:8F:DB:E8:10:A8:55:E4:5C:85:CC:97:D0:7D:0A:FE:C9:6C:C4:4D:6A:FF:20:87:2C:BC:34:2D:F4"}}},"request":{"raw":"GET /ren.gif?sid=H4sIAAAAAAAC_1xSP4gcVRx-s7kuhSgxYGGyQgoFdzN_d3ZMEQhRscjFM5EUCvLm_dl72dmZybyZ3b1tTIyKGISzs7CY_XbvTiWG2KVT9mzkUHAKYYtcY2FhIwQEsZHdW4w4xe83fN_3432_974Px8UhaaKg89cvJSMVRfSs1zTrz19TMU8Gur5-tW6ZTfNc_ZqKW-65-nBRsv5LluM2zRfqrwrWTc7apmWalmnVX1GZkMnw7JKFSu9ZgddsuU3Lajctz8Yw-z-iixo0NcD7h-QpKF498at8C4rNEPfuXxS6myfpiy_3iojmSYY-33sz7sbJIEbv8a_MDMh4b6VGoitCPqshifdWWyDpTxdbIFQVqZ18iDDeW1lF2N85chtGEDFCfhyD_gwimkHRGVhyG4r_TADGsX4ZcW93PckGdOuIpQu2Imt_PoIaVGTt4QnEvXsXIjWsX0miIldJrDGUJdRwBtWZIS32kY9qUIN9sPw9KP4TMWunEPd2LtEio1B8fsb1pC-ZLRuUW6LhmoHVCJgpGqHV5p5wqWVyubwjJWeg-hgKbaBQBgpZQ5HW0OPzOg3aMgxaLg2E9CU3LZ9Rz3EC3_Vs2WIeCnYLim-DZR_tFjHTjj227hbvpJHt-y3HaXljazflm3m3P82zQkwXmrH1xRFk-0twOWj7_x10rda_KsdeqpBmN9FV29C8Bp1XxNh4F31e7vBI27rc5ZEuQmvV7VV3ykmSd8Z0J8k7Iiag2TYyXk5VekPfBsuPTUZS80myKDTMywkNeTlRPCfIbszPmBY1beGYDe5w2vAp8xtBm3kNm9m-aLkB931rKnVelOP0kDy5eEbj_qMf0BXzujS9ts0Zsznz28zkPmOtVsgZo54dOjSEViWUroFqAyNVkY27zyBVFXnu7dMI6T50tA-mngYtngUdlKCbJUbx15s0Tbd6CR82WdIDT0qk-RryLWMcHZITkzeuXvhuGafO510IdnD-ry___i26cxEsK5FmJa6r7wk60a1vLqe56qkRXeTrSk5zsQaqKnL8zmkwVZGTX8XLqJ9rvAaW3oROD84fPtj4_YNTDyaRTisiPvkFOiEIUwORIojEAVl9oGEJLR4fHoqDb_844sb6fXQyA2FkTMIoM6ZhlEWfHvnVal43uSssFlDPl8LzvNBzbSZlaPq2dBy7HSDX1fWPfzz2TwAAAP__VdUao3UEAAA= HTTP/1.1\r\nHost: kettledroopingcontinuation.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://happymodx.com/\r\nCookie: uid_id2=45f7fc2f-ad1e-4091-9c0e-b18d5e4a10df:3:1; ain=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.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.RnYQF76paCH96o53rLCvaa-rsLWl01ui6dzgog9SHqM; pdhtkv=true; uncs=2; pdhtkv27=true; uncs27=1; u_pl27763416=1; pdhtkv32=true; uncs32=1; u_pl27763365=1; iprc_c+acdfe8b1b13a65a680bb51363c8264c0=1438851; iprc_c-1438851=8; pdhtkv29=true; uncs29=1; u_pl28373961=1; slecf0582dcc2dc78c0d7cc66bdcca52b3ab=[6790251]\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.30.2\r\nDate: Sun, 23 Aug 2026 10:35:47 GMT\r\nContent-Type: image/gif\r\nContent-Length: 7\r\nConnection: keep-alive\r\naccept-ch: Sec-Ch-Ua,Sec-Ch-Ua-Platformuser-Agent,Sec-Ch-Ua-Full-Version,Sec-Ch-Ua-Model,Device-Stock-Ua,X-Operamini-Phone-Ua,X-Ucbrowser-Device-Ua,User-Agent,Sec-Ch-Ua-Full-Version-List,Sec-Ch-Ua-Platform,Sec-Ch-Ua-Mobile,X-Device-User-Agent,Sec-Ch-Ua-Platform-Version\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: *\r\nvary: Origin\r\nx-envoy-upstream-service-time: 3\r\nHost: kettledroopingcontinuation.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: 461eeffb12643855d43b3608837bb7cd\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.30.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/gif","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-23T12:26:49.723432Z","times_seen":18055306,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-23","alert":"Sinkholed","trigger":"kettledroopingcontinuation.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-23","alert":"Sinkholed","trigger":"kettledroopingcontinuation.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-23","alert":"Sinkholed","trigger":"kettledroopingcontinuation.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"yandex.ru/ads/meta/17756523?target-ref=https%3A%2F%2Fhappymodx.com%2Ffc-mobile-soccer%2F\u0026pcode-version=1306332\u0026pcodever=1306332\u0026comboblock-unencoded-vast=1\u0026ad-session-id=3382061787481347391\u0026target-id=34683078\u0026pcode-test-ids=1387855%2C0%2C65%3B1669378%2C0%2C11%3B1607509%2C0%2C59%3B1471934%2C0%2C81%3B1534006%2C0%2C68%3B1654556%2C0%2C34%3B1660428%2C0%2C54%3B1638659%2C0%2C78%3B1584245%2C0%2C28%3B1642965%2C0%2C33%3B1645868%2C0%2C63%3B1639952%2C0%2C31%3B1513550%2C0%2C97%3B912280%2C0%2C49\u0026pcode-uid=6559404621787481347\u0026pcode-flags-map=eJzNWFtzosoa%2FS2bmVMVZ0IiV8EXqwOf2hWk2d1g4omZLqIkcqJiKTEnM85%2FP9VgLjiJ7j375byogL1Y3%2Brv2j%2BkAWIBC9GZB32gUvPqh7SOpw%2BJ1JSUE1tTThTdVkzpWMqTVY7H4rZpWoqqSD%2Bvj6U%2BYrxczPtAGSZ%2BFUGrK6ZVXa3pDd2witUuZsVSF1hIyYDDZQjURx53KKAQ94Ejl0cMKHc8woBDH%2Fyw8oLkv4sKuK7basOQfh4f%2BIv6wp6Cgzwn8lAInMKfEbCQ9yDsEpe3CeUXFAUBUB5Rb%2F%2BLjbqhGwUqcl2Oe6gDvIM8D%2BiAY5%2F7EFEiDMUdfz%2BQpdh1%2FRkI%2Bx0uvkJMhC4BoqgHIVBWkHMxCyk%2Bi8Jd3X8FNW3b2i%2BL%2BEv5XvCLXQkonGGXuxF294Ibdcu2S9MjBpwJEf0QI497BLliCwVXdo4DHpJz2M%2FUUDTNqr%2FsTlvYy8UW%2BC7vYxcIZx4JeUi4S3r7kTRd0awXWiGiHQg5hXYpnccDh7hwGKKxB6KP2GEAswDogA8UeZyFFIXQGfALHHY5CZCDw0EF5DaeTm%2Fi0T3P5tOnKpyuKIpdwLXxJb%2FAvksuuE9IIMD3M9GNhll6vQfIbRPaY7yPPOwKxw%2B6xD8ghW40dHvrlm1yyZGLgvAvBIZhmrZRJosAUQal7Bz7bcKxH5JtZDjEb%2BMO7%2BsVsDxe3iV5Fa%2FRsLfhW%2BKxLsX%2BOReCMPxv4IxE1DlgzCsGikISeMiBHvghx36fnANHXsgd5HlnyDnfD2QZ6hvXF95xRiK%2FCFvHwwKSghMW7iIeBoQejFWzrlsN620gVjk6yOkCd7pwgJupaLqiv0TSFstFrFvQaWOvR5hDAhHo5HJwAMvW7TIqsS%2FSj0OJSG1FQvI8dMmh3QZnf242VbOh2e%2Bo7hA%2FFN%2B%2BcAwXQnAOi6QpVqM0rh15HnMogM8Zo7wLyD0QC6am2Kb1oowogNvcAn4H%2ByAuEDoAoWpqKQhDbSjT1DsV0LKrq0zbLGOB9RAN%2BZ8RRFCmSTbwHU7hAlEX9udbU2s0FHN3YzFiHPcCCkxw4H2MRHYqiO1H0xXF0Aq0My8CT8SS2B5Owd8V8urHUJpmozhPs%2FlQag6lb5M8X6yaw%2BFweFp8PD4%2Biu%2BTxTJej%2BPi5%2FKheHLUas6Tx1Xxu9Y6uorl79dfa%2BUj8Tn%2BWpOLu3XZlp%2BftI5aBXjr6tun6y81cfnp5Eut9XkoHQ%2Blm2k2ui94UBnJil5XFUvTZbUxFJXuENXp3fcKv3iZp6NpshEst7y2dP71e3zqmmWrWkNW9Y%2F5tN7R7i5dzZI8yd6ye5HuqNV8TOJ8kiw38zh%2FWCab1ShN5qNkM0niaT7ZrLJRmuRPm%2Fghz7ZmtP5YxHfJlvrp5nNts0ri5Wjy9s5imazT5PHtrXiRvrmsXX07bX26%2FvrM4qr16foj00WxUC1ZqZt%2FaSeeDV%2FGs5tpstzxmnE22yyWW1u2O8LlLZHSc%2BS33Fpvyf3yrtUo%2Fehdd%2FH4%2ByTJn4oLw1QapqYZ8n18nz3J8Xy8zNKxfP%2BwSHN5PUtWeSbPs3V2l8npYpLNE1lpJLIpP4zj0WT%2BNJHX8TKN53m2%2FvuO09Ablq2a8h6%2FeWPRs2u8Z9Lfleufszlq%2FXGbzuP5KPmI0%2Fd4NUnzuEwExf6O8my5uY1n6fRps128uU%2Fn2Waa3hb%2BvVktsmW%2ByZfxOpluHpPkPpmPa%2F8%2FRifPqe5XMrNknMbPyhy1mvFDPsmWmzy%2Bq1WCa4fzb5O93knuqmWVBadss4quTQxWHhqQKOQMvHeq7U2WT6o4hvVcbl%2BKxDuzzG28TkfZfGdYrOumvdN4Io8Ccge8jX3MuuDyToTogapn1i1deadOiea3svLHUErv5tkyGUrNq9dEe1pkrW8np6WsJ7UvrxXgqNVsbotQobYQf%2FO5Voj98fqdRP17IFWf%2BT2Mx2wWz%2F8RQj5J1lk6Smbx3SGc6%2BOhNMoe5vlQaio%2Fd%2FbIUNSyHS67%2FP1HA6am6LsHC4ZZuployn49j6jLim5r9s4iW6v2yyykgHrblu4CzghT64rF%2B1oFbZRPd2e1er1sq4Ax8B3gPXKGPeBtxjto71rT0A3DfC%2FO%2BkBD7IhZuAy4Nr7cj2TWdbW0hrGAkx52eRt5DMQ8cajj1yzTsF%2B7dHFi0EVBgH1gjLOI9mHAsbPbWs%2By%2F6Q7U42u6q9TDXLDyAde9vzc6SLsY79zoKlUbbNECDuEA6LsvdlHNaqLDGvblvtwwT3SwQ5%2FPZwphjvEGITl4QfpA%2FXQYL%2Bamm0b5aDnsqA8gyDtNoPqpHJ7w4367jGEYYj%2B%2Fuf%2FAG9Wu4E%3D\u0026pcode-icookie=RtKg8kZC%2BBdAhabXMadASulR7U0HcD%2BKrxh3nt%2FVksLEBfecv6oSEwrrPUid17wkyMD3Z23PLRKviqbv3NKYqCL8XAE%3D\u0026disable-base64=1\u0026imp-id=1\u0026banner-lang=en-US\u0026ecma-version=es2017\u0026same-node-hit-number=0\u0026test-tag=201210627883010\u0026tga-with-creatives=1\u0026top-ancestor=https%3A%2F%2Fhappymodx.com\u0026top-ancestor-undetermined=0\u0026layout-config=%7B%22win_width%22%3A1280%2C%22win_height%22%3A1024%2C%22pixel_ratio%22%3A1%2C%22bandwidth%22%3A-1%2C%22isInIframe%22%3Afalse%2C%22w%22%3A1280%2C%22h%22%3A0%2C%22width%22%3A1280%2C%22height%22%3A0%2C%22visible%22%3A1%2C%22fullscreenHeaderHeight%22%3A80%2C%22left%22%3A0%2C%22top%22%3A0%2C%22ad_no%22%3A0%2C%22safeArea%22%3A%7B%22top%22%3A0%2C%22bottom%22%3A0%2C%22left%22%3A0%2C%22right%22%3A0%7D%2C%22req_no%22%3A0%7D\u0026grab-orig-len=5120\u0026grab=eyJncmFiX3ZlcnNpb24iOjJ9CjKkJI0jx20C6kdhRdw71WrbNE28UvKmaSMRTiT1tgk5wca_7bpduu3j_dNGBZadncGbnMCawZpBm7HZv-kU3bRhqjCRO0vaHmW3m2HDZjvjGFHTsXGM2ixsnFiiXrExsDqKkuWYOjpmB5-dotdOiNfBg4PcsdAA2xmE0DlEHCKCDjxYVS9aidU6V7XS2cMbfFUldr9otpGqBRwOO9CFo9XYutq0CizXqsmWixJLVrndzmqsagSWC6nGLr9zeo8Z4IAGVIpNjp2eJblnRLVrofGUbbvKHcjLnLiOWKLReQ0BHJAALHaDEnj5Tjgd2SipH4DRqN18452Z5QOYo9N0vTObmno7_9gduahmWlJ623YvVqveM5PLxsZhh7I6-Y3ZeksJWC6i4qYzl_QmdyWn6MaqKXqL1bUqs0l67CuyPQxwdzkPv2K5LBYhkSjxhrUW3eNDtZps9VNkSylmzdWzmRewqjnVcuWalKymwqgreRxr1TWrWuWTplwshdaL1szqNiczqru9VJlaQi-mejrtF-HC79lGorva0dBlnpMoX9Xm6EcfJ0fD5fPtaj5erOocM2pjuE7VM6JIcqpK257dRaRW3mbqQVQgSa_M2C05K9bRyDXe3BG9tijJF_Pt2fG442LjNLEuT-VaVVcOtMYK6mVCKoqrFxWJi41yoJ7FYr7isBs2zrsU2RgtuY78Kr0mXXur7sWK2Tb1BvfTpSsX04h9-UzRj0H36aGlniQnyAbuKUo2Eob-IqjxzVlFILeoW2ceFaZ8ZBGKTsWFxlNokYp_OgmT_1t27MEq-yLD-YknxZhVbJykNBUb45lbkoHDHkBx2KJY4MBnKukiFX3QLDEHlydeL6LwYGpx0QUg3UhXqk82vlR2gKx2JJPY2tlG0S25qnwZPDwYg2tID740GKZ1LNZm2l6-WPZWOWBlpb2UxXglntQU4pgtSU2nkEKTgABCJ-eE2uzXhFwqP67Q9EYnLYhStMcGyX5RjB93lcll5mnJpeLGuEmnSbAlXeAOeBQAOnT8KQCWosBXAYz9-M0kTQxXKozXppEuLJgnQO4YVonUYiCKtX1V0AskGb6UXzw8OCOAEXAG-f-s52bBhylwutXB_FWPQolEL8sVyqOOQkiMU2q8CjfODSFGSuyCYkzxg4v9ryc_f8rr7jQgjXtYi_SX-9-jEvZybjsiXnh_j5rtylMw_2U66zE6DSiXxRVbumcp9mPZ8xjnPJ5yHKOAZr-zP0RyFcnZb-0ULnFRLrgwQ9IctRX9zlyN8j3ThnSW6W4KrqGozKJuU3f4WdfFupG9j2-TSpDKNffNWe9IvSP2PkXAoPeVnsV069mft8GiEp9NzIWV9Wqw_A6vMjWmA2E0hFFE8QMUXUmxXkbLXYC42Kh1vYJO716m389iSWaHFg3iTkj0FlvsRLhQiXB703DYCtyTH--khQHP9y2x6tWUf_Qa6OCAO186Ge3-gCetSHp6ix3o_LwDm2DC7CFERYrIY5RE1_hc0ryQkDZDZfePNHMRCSl9fksf9wHI8QczuwcQRpCPWeFS0nyxpTchKOEWVZjUJPmT6BEgK4YA7-QCgGiFBL_ncFV_hx2fw2LD6G4HnsXqjPufBFynZqfw10VI7N1ZT0PF4GLDtkEOONrkXQnbm8b0UbsdvinF-Kf3_9j7vbgpHauP6Do0G-eclv7K8yGhC6t99i5dU_xiJ-IhrOxM6IpBT5cdiqRZLXgwiLpeHnXphx7vExIHEAACx5OHISAbs5g_pNtoa7Yf-FqxB_4gibdbU5SzamJjxSiXH_qnpZe-HWdR84Z8-63oiZI_e-gNdH4ud6BeE4EVAshKxgbCv-6u1c9_gXZ_K2Qc0IfOAgSNSBY0Fge3g4dCxglyZdzAVUSSFsCPVAgYmMio4ICCiNmxUJFRwhNSMINUVZlGvMczGyG8gxVOQmC850CEG96BdDXV257FIscJHodoEn8sOD5LtkdBtkcytohEYfVTrWKk6DpR_cep3qLkCpOT5v0e0cL4pTKSQZRKPA6LQ8SCVSrxQd4kyL4a-QGh5dMeCvZwv20cglBb_0B86aISd3OttanPA2i__XaEViRNtH3SQ2OCpOkpd6d2yU_-320IjXYLYNhlxP_wY2oPfaQRD2x5I_7sOR29nOgs_f8NOkhflOpTeb86pDo3Q07drIX5zO3BNupDYelYVv4D30Y0Ptq1hlTnHZ8D6hnEXy4Hjh9OyKVGRT4HHVGJ2QZduCSlhKnpUIr7qYkZdu3f26HKeZFnNk2dWh1PLQ5ab07VudjGR1pIeN6KIN3bKPJ5gLuMkoojzi0EGXPJc4ovBlr9xFm8sUQSEOTnW8IA9SMuVbVrR10PjS4iUrBSOjjVfS65kDKpQAZoOiSEW4eYd8AxOE2tqTs3xvtIevzkuPi6YtHlPVg5sNQaAdxaW6X6A9p6vmwSYDxC6B15Tax36eMXvamw1CM-3HpEFdwH2tR2aga-RdvokOnqp4mdYKlPGHDrE2zaSm8OWjfENwRvUIYnhLgjm9nsCktt4sGlmkGjFBxa6BYza5p0Q43uQpbLvilETZHvArXw5rDWGXS4dQZgfxMA_W2gfCzq1qAQ3CcYgJP1hCBABqGoxQORa19WIPN62xcauM_k7cu3x59Ecdza5-jtzbULnkGL9BWUHZwz1f4YT3uWb_cee8dPFdqBOcUdl3a_tkM7zAXEiX4lK4Mqem2mVFdxdLkWfKLXZ3W09UEnGsJwJu4QWodQzEbcoUjqg-GWXpsewWKgY3VMo2nK6nY9D3HtwDf0g5fyDqKPNoQFjZiIiEj8yM6UsxbEd4bMHhEt_2P49g0BjP3j8Q1Z1q3UnWKau6Q8FonXFW0JSyRZH6-_Ho_XG-OLZUtK7msE_I--mwuHHbz12JCVa8Ct1d_M2ufuLyN8w7umd6aeEQ-wVPbooyFnyTxiHymPyK7TbpIfR0Bm-oCPH7Xof7w_EU_HZ_EqV9dQXnzFHJ9RIu_XeDx4qNeZp1UZE_e0Cqblsd1blVlHL8HpUKrdpFTDvnzUVX3VkgKX9ParNmz5lq2n5OiZ1cvFb0V1EzIi5kGcUP8LI_kqCaEZfOJ5gYBHhC8iMd9L8jQyG-PAB9chgsckGIw7UvltC5aRtdqjIYpzdM9SOuex4YLVJV6_mF-vwSoSJ36WMhr3pR3m5JatS1sjqB1DHqsMmNb0U0XcwVywSKkDrZYsE0_LYIpsFr0zXgXIBUikoUj7NzJ3S7Wu57hN5-fyMS8pArYnrsfY2ZgWAh5mR5ZXX8ZP_kd7VY22P3meRV7Qubr3vXZT2r_5h-y9_1G77KXH4aOF5zYrP2h3FIm5OQFzotXEgeP_CxpAb-P7qAkU3yuXHegzI3zGiWqx3rQsqUPMWvChp7Heb_LPJlmm9plLygm0fOaH_w74Ifbm-zGrCCgWaG5yoHwqg1ieu3IFjFQmdn7k9JO0KbLh8xE8ljNloiC0cM-QxL6FL2OA2shYa74XX5EU6b_SW9b2gBvepm-iKvWXeY9C3HkOOXUzrznsy6zWakHt4Dc0j9u1L8Nv236DvW_JIX5PzknblzOfusmXWyjpkVMf89zJTbZSSB8tyxXmlJwGll7A8N65B0HvdenAnH43ZneBTTkFjTnU3d_Hct0zy-qjOHwXVc9bL0U56n9s-9D_hYWjCsHPoYFS99SAQelYMbYjAiV5WOr9Hl21_z_qo4C4382q4YCmuCHTlRIn1fZJqQv9H5NX5dCf06ejDeEbDttJImsc80832KfoPCXpCcw_j4Ded4LtgS86eGutlv0f0W1M9Jxt2ZKv75cUWrpnlXT7EPjMkFdb2MSNKDY9mpctGp9efyiz-YJeUQ5WiLNu6Bwo1vnTLCnVLm029cnn8EHpAtAcUwjSQWLj09laZ6uO6miOe9LZNv5yVTVHdT-INxsXqVZlGhD0fNWijBsQttrhix4sn2nIslQ9hW8YjebIgv573ZZdB8q3eHdNVPmlkH1yZerVjsHXegckPqWo2ZqHD6jkud8osD7w_hFe4fQl-vdP4tYO-LJO7LfvpsAzSKTdzE1_T3bVqyM3MWPhNA3TaozTptpgddA1VLAj_o43hiuTeeyeqPtLq0ja5ma8d1YuVv1J03rLU-FwUbKkuruT-zTanaALzqcwQPYO2b_pL__-dryswGzheYlmx_nAlVoPUi11IXP7KogXfX52PY3yFpHmRYOuOEmzj_XJ0OPrzGYobJxT6FXX1Vb1m5HmFE_GnrXWQBVN0iizj4Qt54OPzJKDL_Ugnlh1jfnRnq4d31LhqzP9vM3ilF8tBafzDd5UtPXlAb0FaMi2aDIJYPsFo5jK1jTXOQ86LuTlJ71s2VncN7KIT6eao3VLnKksWIjrFz-HlTxaiNH-vY8Fqb7PgDQavtMoOAZi4cCWQaoxgA3N4TKFmUGtSxTD9pkVML5yTt2QtcesSn8jEB_J4lC2vlwWCK8L3M-rFq2cA4J-UjvNeBSOdDAkx7BEtZaWUfWHOCDP_QSdNCpVJ7tQgMpUgC91BQPyKC2Cv9pyvi-1Ir56Wd7tdhenfMdaYqjZIhGcLva4PHwd7LDc09Fp7877dCEKvuCZ3tz_XexjbOaeuCfviRTN97A0dtRqyhax755qq_QKOhytNp_7IdGENTGL3gf5gHlICxVU12HV4HtbwufTLCEmT6kT9P1zuWNIeJXH7zrUZktMe-7xn_cNkwazL8RcWpifyhiIT8YWfTLRQNFu4e8kv_0WdnC9VIeSEfXdu0E3MCojEUQtL1nhpn0-phDUPS-tIBt5AuT_9cctGcQU22A_PIzTZ5G50ANpKxmLZmLuftodoUxQhzUdwNV76P00pp8ozZpdXfauZMk76KV2qd64vrve7UVjiyrYDVqYLZM7jCTsm8lXxJvOVIxpOvZxIMHUFnODd3wLRtyyRCcrqH3Fg6dRhb4w5JV7_q2mHzW8d2w31x7eY0WHSNIEG3v-OgsYnbEJb9qkMSaEKahW5jrQMHGCIRnAOouFHwvywNXRrlfLDB6cj0dFChZqG6_11oRQMwe2akgfan2ihzJNBhbfdNwa4N25RHgEeA5utReaNSFfYCC1\u0026uniformat=true\u0026callback=Ya%5B8740873179181%5D","fqdn":"yandex.ru","domain":"yandex.ru","tld":"ru"},"ip":{"addr":"77.88.44.55","port":443,"asn":13238,"as":"YANDEX LLC","country":"Russia","country_code":"RU"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://happymodx.com/fc-mobile-soccer/","date":"2026-08-23T10:35:47.531Z","timestamp":1787481347531,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.yandex.tr","organization":""},"issuer":{"commonName":"GlobalSign ECC OV SSL CA 2018","organization":"GlobalSign nv-sa"},"validity":{"start":"Wed, 01 Jul 2026 14:54:10 GMT","end":"Tue, 29 Dec 2026 20:59:59 GMT"},"fingerprint":{"sha1":"60:7C:47:C1:A1:47:57:5C:A6:D4:FB:E0:69:2F:D1:39:21:9E:ED:B4","sha256":"90:1D:C7:78:76:60:68:8E:E5:99:3B:2E:44:EC:9E:FE:80:A1:92:DF:93:12:E3:69:F6:DC:19:38:73:E2:AB:1A"}}},"request":{"raw":"GET /ads/meta/17756523?target-ref=https%3A%2F%2Fhappymodx.com%2Ffc-mobile-soccer%2F\u0026pcode-version=1306332\u0026pcodever=1306332\u0026comboblock-unencoded-vast=1\u0026ad-session-id=3382061787481347391\u0026target-id=34683078\u0026pcode-test-ids=1387855%2C0%2C65%3B1669378%2C0%2C11%3B1607509%2C0%2C59%3B1471934%2C0%2C81%3B1534006%2C0%2C68%3B1654556%2C0%2C34%3B1660428%2C0%2C54%3B1638659%2C0%2C78%3B1584245%2C0%2C28%3B1642965%2C0%2C33%3B1645868%2C0%2C63%3B1639952%2C0%2C31%3B1513550%2C0%2C97%3B912280%2C0%2C49\u0026pcode-uid=6559404621787481347\u0026pcode-flags-map=eJzNWFtzosoa%2FS2bmVMVZ0IiV8EXqwOf2hWk2d1g4omZLqIkcqJiKTEnM85%2FP9VgLjiJ7j375byogL1Y3%2Brv2j%2BkAWIBC9GZB32gUvPqh7SOpw%2BJ1JSUE1tTThTdVkzpWMqTVY7H4rZpWoqqSD%2Bvj6U%2BYrxczPtAGSZ%2BFUGrK6ZVXa3pDd2witUuZsVSF1hIyYDDZQjURx53KKAQ94Ejl0cMKHc8woBDH%2Fyw8oLkv4sKuK7basOQfh4f%2BIv6wp6Cgzwn8lAInMKfEbCQ9yDsEpe3CeUXFAUBUB5Rb%2F%2BLjbqhGwUqcl2Oe6gDvIM8D%2BiAY5%2F7EFEiDMUdfz%2BQpdh1%2FRkI%2Bx0uvkJMhC4BoqgHIVBWkHMxCyk%2Bi8Jd3X8FNW3b2i%2BL%2BEv5XvCLXQkonGGXuxF294Ibdcu2S9MjBpwJEf0QI497BLliCwVXdo4DHpJz2M%2FUUDTNqr%2FsTlvYy8UW%2BC7vYxcIZx4JeUi4S3r7kTRd0awXWiGiHQg5hXYpnccDh7hwGKKxB6KP2GEAswDogA8UeZyFFIXQGfALHHY5CZCDw0EF5DaeTm%2Fi0T3P5tOnKpyuKIpdwLXxJb%2FAvksuuE9IIMD3M9GNhll6vQfIbRPaY7yPPOwKxw%2B6xD8ghW40dHvrlm1yyZGLgvAvBIZhmrZRJosAUQal7Bz7bcKxH5JtZDjEb%2BMO7%2BsVsDxe3iV5Fa%2FRsLfhW%2BKxLsX%2BOReCMPxv4IxE1DlgzCsGikISeMiBHvghx36fnANHXsgd5HlnyDnfD2QZ6hvXF95xRiK%2FCFvHwwKSghMW7iIeBoQejFWzrlsN620gVjk6yOkCd7pwgJupaLqiv0TSFstFrFvQaWOvR5hDAhHo5HJwAMvW7TIqsS%2FSj0OJSG1FQvI8dMmh3QZnf242VbOh2e%2Bo7hA%2FFN%2B%2BcAwXQnAOi6QpVqM0rh15HnMogM8Zo7wLyD0QC6am2Kb1oowogNvcAn4H%2ByAuEDoAoWpqKQhDbSjT1DsV0LKrq0zbLGOB9RAN%2BZ8RRFCmSTbwHU7hAlEX9udbU2s0FHN3YzFiHPcCCkxw4H2MRHYqiO1H0xXF0Aq0My8CT8SS2B5Owd8V8urHUJpmozhPs%2FlQag6lb5M8X6yaw%2BFweFp8PD4%2Biu%2BTxTJej%2BPi5%2FKheHLUas6Tx1Xxu9Y6uorl79dfa%2BUj8Tn%2BWpOLu3XZlp%2BftI5aBXjr6tun6y81cfnp5Eut9XkoHQ%2Blm2k2ui94UBnJil5XFUvTZbUxFJXuENXp3fcKv3iZp6NpshEst7y2dP71e3zqmmWrWkNW9Y%2F5tN7R7i5dzZI8yd6ye5HuqNV8TOJ8kiw38zh%2FWCab1ShN5qNkM0niaT7ZrLJRmuRPm%2Fghz7ZmtP5YxHfJlvrp5nNts0ri5Wjy9s5imazT5PHtrXiRvrmsXX07bX26%2FvrM4qr16foj00WxUC1ZqZt%2FaSeeDV%2FGs5tpstzxmnE22yyWW1u2O8LlLZHSc%2BS33Fpvyf3yrtUo%2Fehdd%2FH4%2ByTJn4oLw1QapqYZ8n18nz3J8Xy8zNKxfP%2BwSHN5PUtWeSbPs3V2l8npYpLNE1lpJLIpP4zj0WT%2BNJHX8TKN53m2%2FvuO09Ablq2a8h6%2FeWPRs2u8Z9Lfleufszlq%2FXGbzuP5KPmI0%2Fd4NUnzuEwExf6O8my5uY1n6fRps128uU%2Fn2Waa3hb%2BvVktsmW%2ByZfxOpluHpPkPpmPa%2F8%2FRifPqe5XMrNknMbPyhy1mvFDPsmWmzy%2Bq1WCa4fzb5O93knuqmWVBadss4quTQxWHhqQKOQMvHeq7U2WT6o4hvVcbl%2BKxDuzzG28TkfZfGdYrOumvdN4Io8Ccge8jX3MuuDyToTogapn1i1deadOiea3svLHUErv5tkyGUrNq9dEe1pkrW8np6WsJ7UvrxXgqNVsbotQobYQf%2FO5Voj98fqdRP17IFWf%2BT2Mx2wWz%2F8RQj5J1lk6Smbx3SGc6%2BOhNMoe5vlQaio%2Fd%2FbIUNSyHS67%2FP1HA6am6LsHC4ZZuployn49j6jLim5r9s4iW6v2yyykgHrblu4CzghT64rF%2B1oFbZRPd2e1er1sq4Ax8B3gPXKGPeBtxjto71rT0A3DfC%2FO%2BkBD7IhZuAy4Nr7cj2TWdbW0hrGAkx52eRt5DMQ8cajj1yzTsF%2B7dHFi0EVBgH1gjLOI9mHAsbPbWs%2By%2F6Q7U42u6q9TDXLDyAde9vzc6SLsY79zoKlUbbNECDuEA6LsvdlHNaqLDGvblvtwwT3SwQ5%2FPZwphjvEGITl4QfpA%2FXQYL%2Bamm0b5aDnsqA8gyDtNoPqpHJ7w4367jGEYYj%2B%2Fuf%2FAG9Wu4E%3D\u0026pcode-icookie=RtKg8kZC%2BBdAhabXMadASulR7U0HcD%2BKrxh3nt%2FVksLEBfecv6oSEwrrPUid17wkyMD3Z23PLRKviqbv3NKYqCL8XAE%3D\u0026disable-base64=1\u0026imp-id=1\u0026banner-lang=en-US\u0026ecma-version=es2017\u0026same-node-hit-number=0\u0026test-tag=201210627883010\u0026tga-with-creatives=1\u0026top-ancestor=https%3A%2F%2Fhappymodx.com\u0026top-ancestor-undetermined=0\u0026layout-config=%7B%22win_width%22%3A1280%2C%22win_height%22%3A1024%2C%22pixel_ratio%22%3A1%2C%22bandwidth%22%3A-1%2C%22isInIframe%22%3Afalse%2C%22w%22%3A1280%2C%22h%22%3A0%2C%22width%22%3A1280%2C%22height%22%3A0%2C%22visible%22%3A1%2C%22fullscreenHeaderHeight%22%3A80%2C%22left%22%3A0%2C%22top%22%3A0%2C%22ad_no%22%3A0%2C%22safeArea%22%3A%7B%22top%22%3A0%2C%22bottom%22%3A0%2C%22left%22%3A0%2C%22right%22%3A0%7D%2C%22req_no%22%3A0%7D\u0026grab-orig-len=5120\u0026grab=eyJncmFiX3ZlcnNpb24iOjJ9CjKkJI0jx20C6kdhRdw71WrbNE28UvKmaSMRTiT1tgk5wca_7bpduu3j_dNGBZadncGbnMCawZpBm7HZv-kU3bRhqjCRO0vaHmW3m2HDZjvjGFHTsXGM2ixsnFiiXrExsDqKkuWYOjpmB5-dotdOiNfBg4PcsdAA2xmE0DlEHCKCDjxYVS9aidU6V7XS2cMbfFUldr9otpGqBRwOO9CFo9XYutq0CizXqsmWixJLVrndzmqsagSWC6nGLr9zeo8Z4IAGVIpNjp2eJblnRLVrofGUbbvKHcjLnLiOWKLReQ0BHJAALHaDEnj5Tjgd2SipH4DRqN18452Z5QOYo9N0vTObmno7_9gduahmWlJ623YvVqveM5PLxsZhh7I6-Y3ZeksJWC6i4qYzl_QmdyWn6MaqKXqL1bUqs0l67CuyPQxwdzkPv2K5LBYhkSjxhrUW3eNDtZps9VNkSylmzdWzmRewqjnVcuWalKymwqgreRxr1TWrWuWTplwshdaL1szqNiczqru9VJlaQi-mejrtF-HC79lGorva0dBlnpMoX9Xm6EcfJ0fD5fPtaj5erOocM2pjuE7VM6JIcqpK257dRaRW3mbqQVQgSa_M2C05K9bRyDXe3BG9tijJF_Pt2fG442LjNLEuT-VaVVcOtMYK6mVCKoqrFxWJi41yoJ7FYr7isBs2zrsU2RgtuY78Kr0mXXur7sWK2Tb1BvfTpSsX04h9-UzRj0H36aGlniQnyAbuKUo2Eob-IqjxzVlFILeoW2ceFaZ8ZBGKTsWFxlNokYp_OgmT_1t27MEq-yLD-YknxZhVbJykNBUb45lbkoHDHkBx2KJY4MBnKukiFX3QLDEHlydeL6LwYGpx0QUg3UhXqk82vlR2gKx2JJPY2tlG0S25qnwZPDwYg2tID740GKZ1LNZm2l6-WPZWOWBlpb2UxXglntQU4pgtSU2nkEKTgABCJ-eE2uzXhFwqP67Q9EYnLYhStMcGyX5RjB93lcll5mnJpeLGuEmnSbAlXeAOeBQAOnT8KQCWosBXAYz9-M0kTQxXKozXppEuLJgnQO4YVonUYiCKtX1V0AskGb6UXzw8OCOAEXAG-f-s52bBhylwutXB_FWPQolEL8sVyqOOQkiMU2q8CjfODSFGSuyCYkzxg4v9ryc_f8rr7jQgjXtYi_SX-9-jEvZybjsiXnh_j5rtylMw_2U66zE6DSiXxRVbumcp9mPZ8xjnPJ5yHKOAZr-zP0RyFcnZb-0ULnFRLrgwQ9IctRX9zlyN8j3ThnSW6W4KrqGozKJuU3f4WdfFupG9j2-TSpDKNffNWe9IvSP2PkXAoPeVnsV069mft8GiEp9NzIWV9Wqw_A6vMjWmA2E0hFFE8QMUXUmxXkbLXYC42Kh1vYJO716m389iSWaHFg3iTkj0FlvsRLhQiXB703DYCtyTH--khQHP9y2x6tWUf_Qa6OCAO186Ge3-gCetSHp6ix3o_LwDm2DC7CFERYrIY5RE1_hc0ryQkDZDZfePNHMRCSl9fksf9wHI8QczuwcQRpCPWeFS0nyxpTchKOEWVZjUJPmT6BEgK4YA7-QCgGiFBL_ncFV_hx2fw2LD6G4HnsXqjPufBFynZqfw10VI7N1ZT0PF4GLDtkEOONrkXQnbm8b0UbsdvinF-Kf3_9j7vbgpHauP6Do0G-eclv7K8yGhC6t99i5dU_xiJ-IhrOxM6IpBT5cdiqRZLXgwiLpeHnXphx7vExIHEAACx5OHISAbs5g_pNtoa7Yf-FqxB_4gibdbU5SzamJjxSiXH_qnpZe-HWdR84Z8-63oiZI_e-gNdH4ud6BeE4EVAshKxgbCv-6u1c9_gXZ_K2Qc0IfOAgSNSBY0Fge3g4dCxglyZdzAVUSSFsCPVAgYmMio4ICCiNmxUJFRwhNSMINUVZlGvMczGyG8gxVOQmC850CEG96BdDXV257FIscJHodoEn8sOD5LtkdBtkcytohEYfVTrWKk6DpR_cep3qLkCpOT5v0e0cL4pTKSQZRKPA6LQ8SCVSrxQd4kyL4a-QGh5dMeCvZwv20cglBb_0B86aISd3OttanPA2i__XaEViRNtH3SQ2OCpOkpd6d2yU_-320IjXYLYNhlxP_wY2oPfaQRD2x5I_7sOR29nOgs_f8NOkhflOpTeb86pDo3Q07drIX5zO3BNupDYelYVv4D30Y0Ptq1hlTnHZ8D6hnEXy4Hjh9OyKVGRT4HHVGJ2QZduCSlhKnpUIr7qYkZdu3f26HKeZFnNk2dWh1PLQ5ab07VudjGR1pIeN6KIN3bKPJ5gLuMkoojzi0EGXPJc4ovBlr9xFm8sUQSEOTnW8IA9SMuVbVrR10PjS4iUrBSOjjVfS65kDKpQAZoOiSEW4eYd8AxOE2tqTs3xvtIevzkuPi6YtHlPVg5sNQaAdxaW6X6A9p6vmwSYDxC6B15Tax36eMXvamw1CM-3HpEFdwH2tR2aga-RdvokOnqp4mdYKlPGHDrE2zaSm8OWjfENwRvUIYnhLgjm9nsCktt4sGlmkGjFBxa6BYza5p0Q43uQpbLvilETZHvArXw5rDWGXS4dQZgfxMA_W2gfCzq1qAQ3CcYgJP1hCBABqGoxQORa19WIPN62xcauM_k7cu3x59Ecdza5-jtzbULnkGL9BWUHZwz1f4YT3uWb_cee8dPFdqBOcUdl3a_tkM7zAXEiX4lK4Mqem2mVFdxdLkWfKLXZ3W09UEnGsJwJu4QWodQzEbcoUjqg-GWXpsewWKgY3VMo2nK6nY9D3HtwDf0g5fyDqKPNoQFjZiIiEj8yM6UsxbEd4bMHhEt_2P49g0BjP3j8Q1Z1q3UnWKau6Q8FonXFW0JSyRZH6-_Ho_XG-OLZUtK7msE_I--mwuHHbz12JCVa8Ct1d_M2ufuLyN8w7umd6aeEQ-wVPbooyFnyTxiHymPyK7TbpIfR0Bm-oCPH7Xof7w_EU_HZ_EqV9dQXnzFHJ9RIu_XeDx4qNeZp1UZE_e0Cqblsd1blVlHL8HpUKrdpFTDvnzUVX3VkgKX9ParNmz5lq2n5OiZ1cvFb0V1EzIi5kGcUP8LI_kqCaEZfOJ5gYBHhC8iMd9L8jQyG-PAB9chgsckGIw7UvltC5aRtdqjIYpzdM9SOuex4YLVJV6_mF-vwSoSJ36WMhr3pR3m5JatS1sjqB1DHqsMmNb0U0XcwVywSKkDrZYsE0_LYIpsFr0zXgXIBUikoUj7NzJ3S7Wu57hN5-fyMS8pArYnrsfY2ZgWAh5mR5ZXX8ZP_kd7VY22P3meRV7Qubr3vXZT2r_5h-y9_1G77KXH4aOF5zYrP2h3FIm5OQFzotXEgeP_CxpAb-P7qAkU3yuXHegzI3zGiWqx3rQsqUPMWvChp7Heb_LPJlmm9plLygm0fOaH_w74Ifbm-zGrCCgWaG5yoHwqg1ieu3IFjFQmdn7k9JO0KbLh8xE8ljNloiC0cM-QxL6FL2OA2shYa74XX5EU6b_SW9b2gBvepm-iKvWXeY9C3HkOOXUzrznsy6zWakHt4Dc0j9u1L8Nv236DvW_JIX5PzknblzOfusmXWyjpkVMf89zJTbZSSB8tyxXmlJwGll7A8N65B0HvdenAnH43ZneBTTkFjTnU3d_Hct0zy-qjOHwXVc9bL0U56n9s-9D_hYWjCsHPoYFS99SAQelYMbYjAiV5WOr9Hl21_z_qo4C4382q4YCmuCHTlRIn1fZJqQv9H5NX5dCf06ejDeEbDttJImsc80832KfoPCXpCcw_j4Ded4LtgS86eGutlv0f0W1M9Jxt2ZKv75cUWrpnlXT7EPjMkFdb2MSNKDY9mpctGp9efyiz-YJeUQ5WiLNu6Bwo1vnTLCnVLm029cnn8EHpAtAcUwjSQWLj09laZ6uO6miOe9LZNv5yVTVHdT-INxsXqVZlGhD0fNWijBsQttrhix4sn2nIslQ9hW8YjebIgv573ZZdB8q3eHdNVPmlkH1yZerVjsHXegckPqWo2ZqHD6jkud8osD7w_hFe4fQl-vdP4tYO-LJO7LfvpsAzSKTdzE1_T3bVqyM3MWPhNA3TaozTptpgddA1VLAj_o43hiuTeeyeqPtLq0ja5ma8d1YuVv1J03rLU-FwUbKkuruT-zTanaALzqcwQPYO2b_pL__-dryswGzheYlmx_nAlVoPUi11IXP7KogXfX52PY3yFpHmRYOuOEmzj_XJ0OPrzGYobJxT6FXX1Vb1m5HmFE_GnrXWQBVN0iizj4Qt54OPzJKDL_Ugnlh1jfnRnq4d31LhqzP9vM3ilF8tBafzDd5UtPXlAb0FaMi2aDIJYPsFo5jK1jTXOQ86LuTlJ71s2VncN7KIT6eao3VLnKksWIjrFz-HlTxaiNH-vY8Fqb7PgDQavtMoOAZi4cCWQaoxgA3N4TKFmUGtSxTD9pkVML5yTt2QtcesSn8jEB_J4lC2vlwWCK8L3M-rFq2cA4J-UjvNeBSOdDAkx7BEtZaWUfWHOCDP_QSdNCpVJ7tQgMpUgC91BQPyKC2Cv9pyvi-1Ir56Wd7tdhenfMdaYqjZIhGcLva4PHwd7LDc09Fp7877dCEKvuCZ3tz_XexjbOaeuCfviRTN97A0dtRqyhax755qq_QKOhytNp_7IdGENTGL3gf5gHlICxVU12HV4HtbwufTLCEmT6kT9P1zuWNIeJXH7zrUZktMe-7xn_cNkwazL8RcWpifyhiIT8YWfTLRQNFu4e8kv_0WdnC9VIeSEfXdu0E3MCojEUQtL1nhpn0-phDUPS-tIBt5AuT_9cctGcQU22A_PIzTZ5G50ANpKxmLZmLuftodoUxQhzUdwNV76P00pp8ozZpdXfauZMk76KV2qd64vrve7UVjiyrYDVqYLZM7jCTsm8lXxJvOVIxpOvZxIMHUFnODd3wLRtyyRCcrqH3Fg6dRhb4w5JV7_q2mHzW8d2w31x7eY0WHSNIEG3v-OgsYnbEJb9qkMSaEKahW5jrQMHGCIRnAOouFHwvywNXRrlfLDB6cj0dFChZqG6_11oRQMwe2akgfan2ihzJNBhbfdNwa4N25RHgEeA5utReaNSFfYCC1\u0026uniformat=true\u0026callback=Ya%5B8740873179181%5D HTTP/1.1\r\nHost: yandex.ru\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/x-www-form-urlencoded\r\nOrigin: https://happymodx.com\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://happymodx.com/\r\nCookie: pu=6559404621787481347; pi=yY70HAi+Xkg8QdkWMya/qU4H1ox0dnDWQcmnbPdXcX6EjBo7C+Cz8e5bHrsMXG50I7/EEOMP+4ZbJrtErnI3kGbd8D8=; i=d0qmDGWCIfvIempdRPiASdabQJ3SMQmTg4Jh7UeHcp3eUXmaPTKMtxOcB5iaQwbQXdnfx50O1eHYb2ZcuEB9oI6BJgc=; yandexuid=9297801601787481347; yashr=3313935191787481347; bh=YIOaq9QGahfcyuH/CJLYobEDn8/14QzlyPCOA5S2Ag==\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 \r\naccess-control-allow-credentials: true\r\nexpires: Sun, 23 Aug 2026 10:35:47 GMT\r\nreport-to: { \"group\": \"network-errors\", \"max_age\": 100, \"endpoints\": [{\"url\": \"https://dr.yandex.net/nel\", \"priority\": 1}, {\"url\": \"https://dr2.yandex.net/nel\", \"priority\": 2}]}\r\nx-xss-protection: 1; mode=block\r\naccess-control-allow-origin: https://happymodx.com\r\ndate: Sun, 23 Aug 2026 10:35:47 GMT\r\ncache-control: private, no-cache, no-store, must-revalidate, max-age=0\r\ntiming-allow-origin: *\r\naccept-ch: Sec-CH-UA-Platform-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA, Sec-CH-UA-Full-Version-List, Sec-CH-UA-WoW64, Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Platform, Sec-CH-UA-Full-Version, Sec-CH-Viewport-Width, Viewport-Width, DPR, Device-Memory, RTT, Downlink, ECT, Width, Sec-Ch-Viewport-Height\r\npragma: no-cache\r\nx-yandex-req-id: 1787481347542056-10752936860261703187-balancer-l7leveler-kubr-yp-klg-13-BAL\r\nlast-modified: Sun, 23 Aug 2026 10:35:47 GMT\r\nnel: {\"report_to\": \"network-errors\", \"max_age\": 100, \"success_fraction\": 0.001, \"failure_fraction\": 0.1}\r\ncontent-type: text/html; charset=windows-1251\r\ncontent-encoding: gzip\r\nx-content-type-options: nosniff\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":null,"data":{"size":31,"size_decoded":1251,"mime_type":"text/html; charset=windows-1251","magic":"exported SGML document, ASCII text, with no line terminators","md5":"1c9adbca21b40d6097a7d201021f25d0","sha1":"701d88095d93dc8abd1b11c0c37dc5260fa1208d","sha256":"39be68853f5d5594222af3312160eb3a2f42980c5fdd7c3ceeb096d1f92250d5","sha512":"a490a1c1ae293e6fd5503f74e4419937ca4f528704311d47f57ed7d0d5be1d5cfd3ffef1f16a2dc157e927f290a0f5e5999902b7639ccf8fd8cd803d16239ba5","ssdeep":"","tlshash":"0680003c3c202220a800ca28b000820faaf0880b08c220a000282c8caa0e0208080a30","first_seen":"2025-12-06T17:52:34.921709Z","last_seen":"2026-08-23T10:37:00.332946Z","times_seen":11,"resource_available":false,"data":null}},"time_used":58,"timings":{"blocked":2,"dns":0,"connect":0,"send":0,"wait":56,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"zoologyfibre.com/pixel/sbls?bv=\u0026tmpl=482\u0026u=https%3A%2F%2Fcdn.redgarto.com%2Fsb%2Fssp%2Finterstitial%2Fbottom_banner%2F1%2Fcss%2Fanimate.css\u0026l=78689\u0026fd=481","fqdn":"zoologyfibre.com","domain":"zoologyfibre.com","tld":"com"},"ip":{"addr":"23.111.84.124","port":443,"asn":7979,"as":"SERVERS-COM","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://happymodx.com/fc-mobile-soccer/","date":"2026-08-23T10:35:48.312Z","timestamp":1787481348312,"http_version":"HTTP/1.1","security_state":"","security_info":null,"request":{"raw":"GET /pixel/sbls?bv=\u0026tmpl=482\u0026u=https%3A%2F%2Fcdn.redgarto.com%2Fsb%2Fssp%2Finterstitial%2Fbottom_banner%2F1%2Fcss%2Fanimate.css\u0026l=78689\u0026fd=481 HTTP/1.1\r\nHost: zoologyfibre.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://happymodx.com/\r\nCookie: uid_id2=45f7fc2f-ad1e-4091-9c0e-b18d5e4a10df:3:1; ain=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.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.rD8lnIlgN_MXbDR-XfeCHTcB5ZDvbXg0XIRp7IoGSLU; pdhtkv=true; uncs=2; pdhtkv27=true; uncs27=1; u_pl27763416=1; iprc_c+713dfa2da62b5b8f41671024dfebcde0=1438851; iprc_c-1438851=8; pdhtkv29=true; uncs29=1; u_pl28373961=1; slecf0582dcc2dc78c0d7cc66bdcca52b3ab=[6790251]\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.30.2\r\nDate: Sun, 23 Aug 2026 10:35:48 GMT\r\nContent-Length: 0\r\nConnection: keep-alive\r\nAccept-Ch: Sec-Ch-Ua-Platformuser-Agent, Sec-Ch-Ua-Full-Version-List, Sec-Ch-Ua-Mobile, Device-Stock-Ua, X-Operamini-Phone-Ua, User-Agent, Sec-Ch-Ua-Platform-Version, Sec-Ch-Ua-Full-Version, Sec-Ch-Ua-Platform, Sec-Ch-Ua-Model, X-Device-User-Agent, X-Ucbrowser-Device-Ua, Sec-Ch-Ua\r\nHost: zoologyfibre.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nCache-Control: no-cache\r\nAccess-Control-Allow-Origin: *\r\nAccess-Control-Allow-Methods: GET, POST, OPTIONS\r\nAccess-Control-Allow-Headers: DNT,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-Type,Range,Upgrade-Insecure-Requests,C-High-Entropy-Values\r\nAccess-Control-Expose-Headers: Content-Length,Content-Range\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.30.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-23T12:26:49.723432Z","times_seen":18055306,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-22","alert":"Sinkholed","trigger":"zoologyfibre.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"happymodx.com/wp-content/plugins/gp-premium/menu-plus/functions/js/sticky.min.js?ver=2.5.6","fqdn":"happymodx.com","domain":"happymodx.com","tld":"com"},"ip":{"addr":"104.21.39.80","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://happymodx.com/fc-mobile-soccer/","date":"2026-08-23T10:35:45.973Z","timestamp":1787481345973,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"happymodx.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 28 Jul 2026 09:00:25 GMT","end":"Mon, 26 Oct 2026 10:00:20 GMT"},"fingerprint":{"sha1":"FE:29:9A:0F:BF:23:3E:7B:7B:09:E3:15:8C:DD:03:24:B2:44:F9:87","sha256":"D3:DC:55:AE:12:9C:AC:87:D1:C7:22:A0:4D:BA:D1:40:94:85:03:14:B3:02:E8:37:C8:78:61:6F:C5:79:A4:BD"}}},"request":{"raw":"GET /wp-content/plugins/gp-premium/menu-plus/functions/js/sticky.min.js?ver=2.5.6 HTTP/1.1\r\nHost: happymodx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://happymodx.com/fc-mobile-soccer/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Sun, 30 Aug 2026 08:58:44 GMT\r\ncontent-type: application/x-javascript; charset=UTF-8\r\nlast-modified: Mon, 15 Jun 2026 12:22:12 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding,Accept-Encoding\r\nserver-timing: cfExtPri\r\ndate: Sun, 23 Aug 2026 10:35:45 GMT\r\nserver: cloudflare\r\nplatform: hostinger\r\npanel: hpanel\r\ncontent-security-policy: upgrade-insecure-requests\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 5821\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2BVDgYDvg%2FD1au915BZ6%2FeHChM67tOLgHY7tEDdEVFsTfKh3l%2Bc5uw%2BtNZGb3RSGOfBTDBNUIGxm5bFlS5xL9qwUYNN%2FSWwsm6YKguPjiRzxrik46T3PgolQm75wApR7a\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: a2f978ec4c7c568a-OSL\r\ncontent-length: 2663\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":8524,"size_decoded":3600,"mime_type":"application/x-javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (8524), with no line terminators","md5":"b4054cf702149de2ebe6578b6c5e21d4","sha1":"898f2ff50a92069b4d5886ee0b378f36e8f0c906","sha256":"57d35f39158ef6990a75261c466b5c93e3f441b5b05426a35975fc3f31c19c45","sha512":"54fe82d5c65f91daa1cacfad3d996709098622731ed79e37b780f5ef8c07b30b92c9b66b7ec0c8c0c052085caa2fb281492bc125101b6e3086a6346ac8b36ff1","ssdeep":"96:BiLzZp1jH2BKyAWjjp9+1YYE7Aq5l0ok7yyAMGrrAU9gEuqOxVTHjiQzBSw6MCnk:B6jH2cK5IKD0Y3vm17iQz8VBAn06kY","tlshash":"f602d88cf71034b548bfc69e81dba500d1bbc92596439086f69d8c4e1949f6813e7fdd","first_seen":"2023-03-29T21:09:46Z","last_seen":"2026-08-23T10:37:00.322454Z","times_seen":4374,"resource_available":true,"data":null}},"time_used":28,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":28,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-23","alert":"Sinkholed","trigger":"happymodx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"happymodx.com/wp-content/plugins/polylang-pro/vendor/wpsyntex/polylang/flags/us.png","fqdn":"happymodx.com","domain":"happymodx.com","tld":"com"},"ip":{"addr":"104.21.39.80","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://happymodx.com/fc-mobile-soccer/","date":"2026-08-23T10:35:46.005Z","timestamp":1787481346005,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"happymodx.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 28 Jul 2026 09:00:25 GMT","end":"Mon, 26 Oct 2026 10:00:20 GMT"},"fingerprint":{"sha1":"FE:29:9A:0F:BF:23:3E:7B:7B:09:E3:15:8C:DD:03:24:B2:44:F9:87","sha256":"D3:DC:55:AE:12:9C:AC:87:D1:C7:22:A0:4D:BA:D1:40:94:85:03:14:B3:02:E8:37:C8:78:61:6F:C5:79:A4:BD"}}},"request":{"raw":"GET /wp-content/plugins/polylang-pro/vendor/wpsyntex/polylang/flags/us.png HTTP/1.1\r\nHost: happymodx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://happymodx.com/fc-mobile-soccer/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=10368000\r\nexpires: Mon, 21 Dec 2026 08:58:44 GMT\r\ncontent-type: image/png\r\nlast-modified: Sat, 17 Jan 2026 17:46:45 GMT\r\naccept-ranges: bytes\r\nserver-timing: cfExtPri\r\ndate: Sun, 23 Aug 2026 10:35:46 GMT\r\nserver: cloudflare\r\nplatform: hostinger\r\npanel: hpanel\r\ncontent-security-policy: upgrade-insecure-requests\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 5821\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=e3A%2BlC%2BgHj8s108qVcP0p1t9ZkL0J3qecfoHb4aoGULzjru19OM9PlAvduncDiIQqodFcyenZH5LN0pHuCD0grPlxOswbtJHzu6NcUcuNiOqaP7t5%2Bcf3WFCX7RMSWRh\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a2f978ec8c90568a-OSL\r\ncontent-length: 350\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":350,"size_decoded":1211,"mime_type":"image/png","magic":"PNG image data, 16 x 11, 8-bit colormap, non-interlaced","md5":"d090a14ba53d52439ad53c855e731246","sha1":"8330526cdcb51bfaf1b5c196c00e4efeb5785eb1","sha256":"7bdc4fd1b52f88617553782da88299fc8551f6921d5a30c5a29b96cb8b4c3eae","sha512":"3fbc2ea1529f4b856213d96e48b4074a98addcb32567b95da13a69c103e5bae220e8f9ef173209dcb0717a34fdf88b7d8fccde6d00aa72032a3b8a9f23ef2a8b","ssdeep":"","tlshash":"69e0c01a29d73d2c95ad83630b1e4974c865c5205b55d53f1547b523135606149b8041","first_seen":"2023-05-14T23:27:01Z","last_seen":"2026-08-23T10:37:00.34614Z","times_seen":787,"resource_available":false,"data":null}},"time_used":69,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":69,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-23","alert":"Sinkholed","trigger":"happymodx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"happymodx.com/wp-content/plugins/polylang-pro/vendor/wpsyntex/polylang/flags/tr.png","fqdn":"happymodx.com","domain":"happymodx.com","tld":"com"},"ip":{"addr":"104.21.39.80","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://happymodx.com/fc-mobile-soccer/","date":"2026-08-23T10:35:46.019Z","timestamp":1787481346019,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"happymodx.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 28 Jul 2026 09:00:25 GMT","end":"Mon, 26 Oct 2026 10:00:20 GMT"},"fingerprint":{"sha1":"FE:29:9A:0F:BF:23:3E:7B:7B:09:E3:15:8C:DD:03:24:B2:44:F9:87","sha256":"D3:DC:55:AE:12:9C:AC:87:D1:C7:22:A0:4D:BA:D1:40:94:85:03:14:B3:02:E8:37:C8:78:61:6F:C5:79:A4:BD"}}},"request":{"raw":"GET /wp-content/plugins/polylang-pro/vendor/wpsyntex/polylang/flags/tr.png HTTP/1.1\r\nHost: happymodx.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://happymodx.com/fc-mobile-soccer/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=10368000\r\nexpires: Mon, 21 Dec 2026 08:58:45 GMT\r\ncontent-type: image/png\r\nlast-modified: Sat, 17 Jan 2026 17:46:45 GMT\r\naccept-ranges: bytes\r\nserver-timing: cfExtPri\r\ndate: Sun, 23 Aug 2026 10:35:46 GMT\r\nserver: cloudflare\r\nplatform: hostinger\r\npanel: hpanel\r\ncontent-security-policy: upgrade-insecure-requests\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 5820\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=tF2aW0jcyhMInWUV%2FC%2F0bqCA3B4hj8R72QQQs8T%2FRHlJpP47%2Fbok7KS94dS2oaRiTp%2B2kFpNvBhBVVRCpvIpdFCZO%2Bn4Fwa34RsRS3yhGVP9vgcUwBQYe%2BEbArVtX7M6\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=5,i\r\ncf-ray: a2f978ec9c9c568a-OSL\r\ncontent-length: 236\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Hostinger","description":"Hostinger is an employee-owned Web hosting provider and internet domain registrar.","website":"https://www.hostinger.com","common_platform_enumeration":"","icon":"Hostinger.svg","categories":["Hosting"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":236,"size_decoded":1105,"mime_type":"image/png","magic":"PNG image data, 16 x 11, 8-bit colormap, non-interlaced","md5":"6632066326ed52ed1b2ebd965cd0f4ae","sha1":"f9391bc0b5540b6ec7c287d0074a26834a8f0200","sha256":"868599246b1db45b8e840be750bff93550178aedbb1534d01f665a55913a4c74","sha512":"35c21adc8713359c27fb70948a005ecc3c6e35f3819234d1fd31d1cba16ea1dd3899725664e1d04a7271f7d9871450f98f50d255b91d87307aa727f6209830b4","ssdeep":"","tlshash":"8cd097f512823d1ae88543770401a114ca0102788860280e0864c928c7623e099f06b4","first_seen":"2023-07-24T06:13:04Z","last_seen":"2026-08-23T10:37:00.335134Z","times_seen":207,"resource_available":false,"data":null}},"time_used":79,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":79,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-23","alert":"Sinkholed","trigger":"happymodx.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"kettledroopingcontinuation.com/sbar.json?key=f0582dcc2dc78c0d7cc66bdcca52b3ab\u0026uuid=44c15d2c-d5e6-43af-a356-38d3041510be%3A1%3A1","fqdn":"kettledroopingcontinuation.com","domain":"kettledroopingcontinuation.com","tld":"com"},"ip":{"addr":"23.111.84.228","port":443,"asn":7979,"as":"SERVERS-COM","country":"The Netherlands","country_code":"NL"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://happymodx.com/fc-mobile-soccer/","date":"2026-08-23T10:35:47.023Z","timestamp":1787481347023,"http_version":"HTTP/1.1","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"kettledroopingcontinuation.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sun, 23 Aug 2026 00:02:23 GMT","end":"Sat, 21 Nov 2026 00:02:22 GMT"},"fingerprint":{"sha1":"45:C6:44:0A:42:17:85:94:0C:43:02:EA:82:14:8D:F8:D3:13:D9:E2","sha256":"8C:E7:C4:F5:8F:DB:E8:10:A8:55:E4:5C:85:CC:97:D0:7D:0A:FE:C9:6C:C4:4D:6A:FF:20:87:2C:BC:34:2D:F4"}}},"request":{"raw":"GET /sbar.json?key=f0582dcc2dc78c0d7cc66bdcca52b3ab\u0026uuid=44c15d2c-d5e6-43af-a356-38d3041510be%3A1%3A1 HTTP/1.1\r\nHost: kettledroopingcontinuation.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://happymodx.com\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://happymodx.com/\r\nCookie: uid_id2=45f7fc2f-ad1e-4091-9c0e-b18d5e4a10df:3:1; ain=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.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.RnYQF76paCH96o53rLCvaa-rsLWl01ui6dzgog9SHqM; pdhtkv=true; uncs=1; pdhtkv27=true; uncs27=1; u_pl27763416=1; pdhtkv32=true; uncs32=1; u_pl27763365=1; iprc_c+acdfe8b1b13a65a680bb51363c8264c0=1438851; iprc_c-1438851=8\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.30.2\r\nDate: Sun, 23 Aug 2026 10:35:47 GMT\r\nContent-Type: text/plain; charset=utf-8\r\nTransfer-Encoding: chunked\r\nConnection: keep-alive\r\naccept-ch: User-Agent,Sec-Ch-Ua-Platformuser-Agent,Sec-Ch-Ua-Full-Version-List,Sec-Ch-Ua-Full-Version,Sec-Ch-Ua-Platform,Sec-Ch-Ua-Model,X-Device-User-Agent,X-Operamini-Phone-Ua,X-Ucbrowser-Device-Ua,Sec-Ch-Ua-Platform-Version,Sec-Ch-Ua,Sec-Ch-Ua-Mobile,Device-Stock-Ua\r\naccess-control-allow-credentials: true\r\naccess-control-allow-origin: https://happymodx.com\r\ncontent-encoding: zstd\r\nset-cookie: uid_id2=45f7fc2f-ad1e-4091-9c0e-b18d5e4a10df:3:1; Path=/; Expires=Sun, 30 Aug 2026 10:35:47 GMT; Secure; SameSite=None\nuncs=2; Path=/; Expires=Mon, 24 Aug 2026 10:35:47 GMT; Secure; SameSite=None\npdhtkv29=true; Path=/; Expires=Mon, 24 Aug 2026 10:35:47 GMT; Secure; SameSite=None\nuncs29=1; Path=/; Expires=Mon, 24 Aug 2026 10:35:47 GMT; Secure; SameSite=None\nu_pl28373961=1; Path=/; Expires=Mon, 24 Aug 2026 10:35:47 GMT; Secure; SameSite=None\nslecf0582dcc2dc78c0d7cc66bdcca52b3ab=[6790251]; Path=/; Expires=Sun, 23 Aug 2026 10:35:52 GMT; Secure; SameSite=None\r\nvary: Accept-Encoding\r\nx-envoy-upstream-service-time: 130\r\nHost: kettledroopingcontinuation.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: f1bbfb504ff7b3ceb418e4d3e550c253\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":[{"name":"uid_id2","value":"45f7fc2f-ad1e-4091-9c0e-b18d5e4a10df:3:1","quoted":false,"path":"/","expires":"2026-08-30T10:35:47Z","raw_expires":"Sun, 30 Aug 2026 10:35:47 GMT","secure":true,"http_only":false,"same_site":"None","partitioned":false,"raw":"uid_id2=45f7fc2f-ad1e-4091-9c0e-b18d5e4a10df:3:1; Path=/; Expires=Sun, 30 Aug 2026 10:35:47 GMT; Secure; SameSite=None"},{"name":"uncs","value":"2","quoted":false,"path":"/","expires":"2026-08-24T10:35:47Z","raw_expires":"Mon, 24 Aug 2026 10:35:47 GMT","secure":true,"http_only":false,"same_site":"None","partitioned":false,"raw":"uncs=2; Path=/; Expires=Mon, 24 Aug 2026 10:35:47 GMT; Secure; SameSite=None"},{"name":"pdhtkv29","value":"true","quoted":false,"path":"/","expires":"2026-08-24T10:35:47Z","raw_expires":"Mon, 24 Aug 2026 10:35:47 GMT","secure":true,"http_only":false,"same_site":"None","partitioned":false,"raw":"pdhtkv29=true; Path=/; Expires=Mon, 24 Aug 2026 10:35:47 GMT; Secure; SameSite=None"},{"name":"uncs29","value":"1","quoted":false,"path":"/","expires":"2026-08-24T10:35:47Z","raw_expires":"Mon, 24 Aug 2026 10:35:47 GMT","secure":true,"http_only":false,"same_site":"None","partitioned":false,"raw":"uncs29=1; Path=/; Expires=Mon, 24 Aug 2026 10:35:47 GMT; Secure; SameSite=None"},{"name":"u_pl28373961","value":"1","quoted":false,"path":"/","expires":"2026-08-24T10:35:47Z","raw_expires":"Mon, 24 Aug 2026 10:35:47 GMT","secure":true,"http_only":false,"same_site":"None","partitioned":false,"raw":"u_pl28373961=1; Path=/; Expires=Mon, 24 Aug 2026 10:35:47 GMT; Secure; SameSite=None"},{"name":"slecf0582dcc2dc78c0d7cc66bdcca52b3ab","value":"[6790251]","quoted":false,"path":"/","expires":"2026-08-23T10:35:52Z","raw_expires":"Sun, 23 Aug 2026 10:35:52 GMT","secure":true,"http_only":false,"same_site":"None","partitioned":false,"raw":"slecf0582dcc2dc78c0d7cc66bdcca52b3ab=[6790251]; Path=/; Expires=Sun, 23 Aug 2026 10:35:52 GMT; Secure; SameSite=None"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.30.2","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}],"data":{"size":6246,"size_decoded":6082,"mime_type":"text/plain; charset=utf-8","magic":"JSON text data","md5":"1cf82c1369a3478e06466123961bae79","sha1":"9dcdd57f079f0e5b4f450cd2d808f532942cd384","sha256":"b3f49d84b94e76816fcb9ae6f7400428b80a3f977590c05c7fbdafc167a21303","sha512":"266f4285cbf06206cfbb7c3264d6b88709c8b5cd691db365e09dd7dea501f26940964534f7dc712aadd612554242cacc1165ad5fdea50cad7df5139456a2c6b4","ssdeep":"192:9zffusSclAlJltp1Z32nQB6dBYbf+icMnFZo:9zffEclAlvFx2nQBEgfJ5nFe","tlshash":"12d17c78129a364653974d1d70d03eed8c93ed1bd2a9781cc02bfedf8627e3a0214279","first_seen":"2026-08-23T10:36:29.978979Z","last_seen":"2026-08-23T10:36:29.978979Z","times_seen":1,"resource_available":false,"data":null}},"time_used":156,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":156,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-08-23","alert":"Sinkholed","trigger":"kettledroopingcontinuation.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-08-23","alert":"Sinkholed","trigger":"kettledroopingcontinuation.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-08-23","alert":"Sinkholed","trigger":"kettledroopingcontinuation.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}