{"report_id":"93a4aee0-78c6-4f9c-ba86-0beeb1f2cc58","version":6,"status":"done","tags":[],"date":"2026-03-26T23:11:04Z","url":{"schema":"https","addr":"mdmacanada.cc/","fqdn":"mdmacanada.cc","domain":"mdmacanada.cc","tld":"cc"},"ip":{"addr":"172.67.132.54","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"mdmacanada.cc/","fqdn":"mdmacanada.cc","domain":"mdmacanada.cc","tld":"cc"},"title":"Buy Legal MDMA In Canada - Canada’s Most Trusted MDMA Online","dom":{"size":304034,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (42863)","md5":"148ac42333b2e73b91593f5bc036f97e","sha1":"02ddbf89aa658b7caa36ba4034b9e70442e44968","sha256":"d34110649edbbd2c306b4d15867ac4a95b3e329e7b0d4a94ba7afa7c66b98711","sha512":"31be5ab13409b72e0203935775bff5b226e4137e4a82db921e5601ad5699033457f135a1cbf4f1ba778af49f3cb05b4b1712208d1d509593ad69397ca87b3b3c","ssdeep":"6144:u5rL1Z6LAveLWlJZ9ATTawex50DoeEFGpUshdQe9leuQwwRNoXzWS6SQlo1r+:u5r/KN9leuQwwRNe2P","tlshash":"c954097751600125421342d2d2e96ea8762bd232d6910cdeb3fe195e8fc7edb326a70f","dom_hash":"domhasha2ab18f09422de559f831d1d86b0dae6","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"mdmacanada.cc/","fqdn":"mdmacanada.cc","domain":"mdmacanada.cc","tld":"cc"},"ip":{"addr":"172.67.132.54","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-04-30T23:11:04Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-26","alert":"Sinkholed","trigger":"mdmacanada.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"cdn.trustindex.io","ip":{"addr":"3.167.2.9","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"domain_registered":"2017-07-28","domain_rank":172330,"first_seen":"2020-06-02T09:13:27Z","last_seen":"2026-03-25T20:18:39.876699Z","alert_count":0,"request_count":17,"received_data":257199,"sent_data":7977,"comment":"","tags":null,"fingerprints":[{"name":"Apache HTTP Server:2.4.52","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}]},{"fqdn":"va.tawk.to","ip":{"addr":"172.66.161.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":51316,"first_seen":"2017-01-30T04:20:46Z","last_seen":"2026-03-23T08:35:22.773834Z","alert_count":0,"request_count":3,"received_data":5241,"sent_data":1541,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"static.klaviyo.com","ip":{"addr":"151.101.2.133","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"domain_registered":"2012-03-29","domain_rank":17868,"first_seen":"2018-04-18T09:49:37Z","last_seen":"2026-03-23T13:21:03.114887Z","alert_count":0,"request_count":7,"received_data":144585,"sent_data":3639,"comment":"","tags":null,"fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"a.klaviyo.com","ip":{"addr":"172.64.147.119","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2012-03-29","domain_rank":20004,"first_seen":"2013-06-03T10:57:12Z","last_seen":"2026-03-23T12:30:35.861053Z","alert_count":0,"request_count":1,"received_data":1040,"sent_data":446,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}]},{"fqdn":"embed.tawk.to","ip":{"addr":"172.66.161.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":52083,"first_seen":"2014-03-19T21:03:49Z","last_seen":"2026-03-23T03:51:07.565074Z","alert_count":0,"request_count":9,"received_data":680593,"sent_data":4203,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"lh3.googleusercontent.com","ip":{"addr":"142.250.178.65","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-11-17","domain_rank":303,"first_seen":"2012-05-22T07:35:05Z","last_seen":"2026-03-23T01:54:25.938074Z","alert_count":0,"request_count":3,"received_data":3905,"sent_data":1498,"comment":"","tags":null,"fingerprints":null},{"fqdn":"mdmacanada.cc","ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2023-08-10","domain_rank":0,"first_seen":"2026-03-26T23:11:08.28726Z","last_seen":"2026-03-26T23:11:08.28726Z","alert_count":53,"request_count":53,"received_data":2143615,"sent_data":47699,"comment":"","tags":null,"fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"PHP:7.4.33","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"WordPress:6.9.4","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]},{"name":"Google Analytics","description":"Google Analytics is a free web analytics service that tracks and reports website traffic.","website":"https://google.com/analytics","common_platform_enumeration":"","icon":"Google Analytics.svg","categories":["Analytics"]},{"name":"Klaviyo","description":"Klaviyo is an email and SMS marketing platform for online businesses.","website":"https://www.klaviyo.com/","common_platform_enumeration":"","icon":"Klaviyo.svg","categories":["Marketing automation"]}]},{"fqdn":"static-tracking.klaviyo.com","ip":{"addr":"151.101.66.133","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"domain_registered":"2012-03-29","domain_rank":20795,"first_seen":"2021-12-02T15:31:51Z","last_seen":"2026-03-23T12:34:34.76642Z","alert_count":0,"request_count":4,"received_data":59787,"sent_data":2441,"comment":"","tags":null,"fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}]},{"fqdn":"www.googletagmanager.com","ip":{"addr":"142.251.143.136","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2011-11-11","domain_rank":283,"first_seen":"2012-10-04T01:07:32Z","last_seen":"2026-03-22T22:23:33.61086Z","alert_count":0,"request_count":2,"received_data":931256,"sent_data":868,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"mdmacanada.cc/wp-content/cache/debloat/js/1e0055703ac9bbf762fdc8b4c370eb06.js","fqdn":"mdmacanada.cc","domain":"mdmacanada.cc","tld":"cc"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"abf4bb282c65836335fa88b6a680fb5c","sha1":"4ff37875342f9e9ab85cc6284fd5acfc06df7d18","sha256":"a41ecabfaa5a628b26a98234caa818e4d68e3edf6c48cee40b2a6f4c4fcafaba","sha512":"98a8eff66d0687b1032168ed55e3bb451fad16f1317da18768311c1058b8d8cb67fd827810298a70a831ec9d73d308d7133e2d21d022e46356d1295f8f645874","ssdeep":"48:0ncEupIbXbi5okOBRQJ8H6xJsnDpr6r75eGSqlw4Sd+uOujoKsPPF3cLR8p2o:0cEQw26a8EJWrO75ekw4klctsd85","tlshash":"0a81872774216d7322eb75ba2c9fe98014331639a8414501b50acf6c2b7e8ca7637f3e","size":4131,"data":"","first_seen":"2025-07-14T18:47:47.063472Z","last_seen":"2026-04-25T19:57:51.408176Z","times_seen":30357,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mdmacanada.cc/wp-content/cache/debloat/js/ef4e3253bdc98201cea6bd3dd2f0e6c8.js","fqdn":"mdmacanada.cc","domain":"mdmacanada.cc","tld":"cc"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"8c0498e2f1f7a684a8d2a3feb934b64b","sha1":"76099689ccaee466d4608da621c403b368dcae03","sha256":"ed5b5df9ceacfe76857ac51964972b0b417a215b2f50e837fd6b64bad7339c40","sha512":"5689b6b18071d6020a8a2733bb9e17c07960d9e65f4012ce93f21347fa24a24175509bca6920fe1b03d66fbc054d718671c23071af115b64000c01dfbea2e8dd","ssdeep":"","tlshash":"bd31308e7b5260440382c260e13e88ad773b687b700c0e897b30bcd93ee5e2c56519ad","size":1499,"data":"","first_seen":"2023-03-07T01:07:10Z","last_seen":"2026-04-25T20:55:37.479204Z","times_seen":67479,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"moz-extension","addr":"moz-extension://6143c2b4-ae7c-413d-82e7-db4c303cfd6c/lib/shim_messaging_helper.js","fqdn":"moz-extension","domain":"moz-extension","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"","is_inline":false,"md5":"865f01cbb34eb505834e826380d7dc2e","sha1":"c239ccc37191f1be78dfaa6bb3f1da5d314fdf9e","sha256":"30ed6392b8de4590bd974a4a797ee0b12b382f2141738115bfd2d692cfa6ec17","sha512":"9e37cd2e9fb9e4e926e2d1e1232c4c4ba3531d89b1d165293708849e0f88df6a40711d87c2b267ced9b6c4a27ac13079b5cb907334e2e297b588318df629b9ee","ssdeep":"","tlshash":"9e31ba1959fa0d1c0063b4a977673403722a90271149fe92bedcc3536f9652bc6f2bc8","size":1684,"data":"","first_seen":"2023-05-05T22:33:37Z","last_seen":"2026-04-25T21:02:43.522652Z","times_seen":161739,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-M9BQL00QVP","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.251.143.136","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"0a6e95cafb03f51d23561940d1a067f6","sha1":"0d9143e52edbefcb4719468a0c6bc0c8f190ab12","sha256":"4e54e8cf1aada9b28badca1264188650d1f2463092a865f5e1e34308bdd5cedb","sha512":"cd68ca7aaa5b15502fb676ae4b556a11e81c17a3397bbf35e4d0cbfca6e985c6b00d8e9199052b7d6c60e7c6e361383f5a451e55ae57fa641f168085dded1215","ssdeep":"6144:LCORjaFCE9VJlQGXHIzs8WVP1W+rwkQdqQtYTc0HdZgQ0:8CEfJlbIY8CmOp0","tlshash":"1aa409ceb3d674625296e478903f01cba57b29e2b44cc8a5f189cce42e7465a4277f3c","size":465034,"data":"","first_seen":"2026-03-26T23:11:11.825745Z","last_seen":"2026-03-26T23:11:11.825745Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static-tracking.klaviyo.com/onsite/js/build-preview/commit-a9008e2652932ce924ec514ff7f88d1dd460ca1b/fender_analytics.e5aba8b3a52dc623782c.js?cb=2","fqdn":"static-tracking.klaviyo.com","domain":"klaviyo.com","tld":"com"},"ip":{"addr":"151.101.66.133","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"dfd2613aee0622f5f85f1c1d57683aad","sha1":"0f770c9d4b50bc1524c8be712bf52d18cc24b100","sha256":"28faf9ece2b0697c7dbbdc937bbe18d61e881d9d31ac57bff483783f3229cce1","sha512":"77cbb91e138f914c0ccc44430b651fc74046cfdddb261972aea4c000402efee536144115cd27daac8e9d65d092963f974dd5c8cb14ce1c0d04a3821547492485","ssdeep":"768:meKYdHHSjJmG36Gc9dtR3vrCraJ3+Wmi8vJYcSz3YfUeWYCLxCXGLurL3WeSXiIs:BK0HIcdz/OViI1C51ASXOrP","tlshash":"a003c787b1d1a435079620edf53b1949f23c1448b94880bcf678c8db2deda4a6267bbd","size":38425,"data":"","first_seen":"2025-12-04T20:56:43.543714Z","last_seen":"2026-04-19T18:06:53.197042Z","times_seen":14520,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mdmacanada.cc/flatsome-js-js-extra","fqdn":"mdmacanada.cc","domain":"mdmacanada.cc","tld":"cc"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"b49581764ef71b68a9ec5dbca5c8380a","sha1":"a5e97514ee27a34053d99cc08981bf0300d03483","sha256":"fdc13c3a68505a45658fd59e59baaf578396690b6b8706134a9e360ece100173","sha512":"c15430b517bc909521e224cfbfc2609858c3c1659a7e5688cc38d5925822803792f650516d0339e639789f8ee8bf37649cbd0144bc5a2a03de92d85d0d348166","ssdeep":"","tlshash":"b761f979e31de12890d7c1b6df74bfad96263131d0847110eeff8d3981e686832aa21d","size":3339,"data":"","first_seen":"2026-03-26T23:11:11.849937Z","last_seen":"2026-03-27T01:49:53.395169Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mdmacanada.cc/wp-content/plugins/debloat/inc/delay-load/js/delay-load.min.js?ver=1.2.8","fqdn":"mdmacanada.cc","domain":"mdmacanada.cc","tld":"cc"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"00c83d508a60a93f2cdf6be175ab6f81","sha1":"59ffa1b5f8db3a5087db3db74ded69fc255b9946","sha256":"98b3f307a592154d8029581be6fa886f72839f6b918ef689581310ace8b6480c","sha512":"5f818ae4781941460a1d89ec894ba80fccbf1676593fe1c714d696acbce1edd5903ec1eced3909489cb6474ac53e6646cf10f3ccaa63c3879020257aaeea9500","ssdeep":"","tlshash":"e66175703b09b831125594ad61fe9b016a3063b23007d4a5a57cdce5bc54ee301abddb","size":3299,"data":"","first_seen":"2023-03-07T01:27:34Z","last_seen":"2026-04-25T11:57:38.03597Z","times_seen":403,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mdmacanada.cc/wp-content/cache/debloat/js/78bcfd28775b12953b1c8fb44323ef3d.js","fqdn":"mdmacanada.cc","domain":"mdmacanada.cc","tld":"cc"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"4d1dcc4e2de13a9409f3eaa70a893329","sha1":"bf1bdd680e501f3aeb55a993803598217827dbe7","sha256":"b3596eb1da16d207322afbd9cd14cd0bd389a68c92e50f9ab415d487d7ceeea9","sha512":"e94d92aed86299c6360e6992e7ab5d377cc485c4b5180619fbb92890e4004865cb8fd0e4186044f4ebb5e009291de99a7aba26ed16efe0bf5fef418e38acc9c2","ssdeep":"96:MkMIJdJXKCNaCXjYRErS8Hw/qu09VpakWVDmZzxZfZDHYk45BAUb0XYSE1PlXARz:MkMIJdJXPNfzYRErS8Qe9VpakWVqBxZ9","tlshash":"38c1a55c3229743e8ea1086b2dff964db6381d1524e9c48cd115f96068a5dcac33abbf","size":5753,"data":"","first_seen":"2024-10-13T01:26:01.164516Z","last_seen":"2026-04-25T09:32:57.821032Z","times_seen":365,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"data","addr":"data:text/javascript;base64,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","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"173564ace4c88be48b20d146837f5593","sha1":"eb143cd2ec61bd83a43765312937d3f4d712de25","sha256":"98c3e7d8706106ad59c63bf85e58497a094d7e64f45dfe56d71368ad7e0f45af","sha512":"e001a01e7b0958f441b126d38253f1aaec1b831696616bc86a3d84689c0eb7ad83c8ddfd029ec646d0a1e33cf97e7f24e59853a503c0a6ba867ab7675705bee8","ssdeep":"","tlshash":"2be02bc4e75c1355502a32199edf63d8336ed4f62700482126171c78a91402f451aadb","size":385,"data":"","first_seen":"2024-04-19T09:05:52Z","last_seen":"2026-04-25T14:58:16.401397Z","times_seen":1778,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/6562fe62ba9fcf18a80ef28f/1hg5b3cdr","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"172.66.161.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"972e2fbde31ece567026d1ff5af69cc7","sha1":"6bce361f0209c6719db4d7480171149b8c1f3713","sha256":"9af85af596db11793dd39ca45f15b0d71ae0a9696a6f484d84fc588b5da268c8","sha512":"1b557e3f728a1c912837f4a51d2df6f91911fc1aa3fdf52fe34f62f23f89694276b155131a5b960ad1ff6789a03cbb29fc4e9c9b398c1f241d7c1abc4bd32942","ssdeep":"","tlshash":"9141caee5b4f1c56b22410d90ebef90ef47720f749da5892970c085272657ad2f8de38","size":2123,"data":"","first_seen":"2026-03-26T23:11:11.805098Z","last_seen":"2026-03-27T01:49:53.33404Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mdmacanada.cc/wc-add-to-cart-js-extra","fqdn":"mdmacanada.cc","domain":"mdmacanada.cc","tld":"cc"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"1aba17dea57dc759ad276222eca20dcd","sha1":"a7ef05e96bad1d73d4ff2c2794994d6322570747","sha256":"85b100b03b752d239d092453ae66e8d02cdc16d1e596e028f705c2c26d045bf7","sha512":"88b9ae3b97ac6ab6b3dbbf05c8f05f08f63fa944015903f38f999c03c62ffe0e8eca863300ba750ad6c2f1bd188304ff8ca008bd40f3b93b8d229b2bb3b855a2","ssdeep":"","tlshash":"75e072a9c2ca9c8362e26ef8200170e2b0e22003e69c88688dccbc8c1b10980ca0020f","size":401,"data":"","first_seen":"2026-03-26T23:11:11.851567Z","last_seen":"2026-03-27T01:49:53.42142Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mdmacanada.cc/cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js","fqdn":"mdmacanada.cc","domain":"mdmacanada.cc","tld":"cc"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"9e8f56e8e1806253ba01a95cfc3d392c","sha1":"a8af90d7482e1e99d03de6bf88fed2315c5dd728","sha256":"2595496fe48df6fcf9b1bc57c29a744c121eb4dd11566466bc13d2e52e6bbcc8","sha512":"63f0f6f94fbabadc3f774ccaa6a401696e8a7651a074bc077d214f91da080b36714fd799eb40fed64154972008e34fc733d6ee314ac675727b37b58ffbebebee","ssdeep":"","tlshash":"6021d5743a18107e226a0133e56f66cee1f23715fd17e440408ad89566e4fe5063fed9","size":1239,"data":"","first_seen":"2023-03-07T01:02:00Z","last_seen":"2026-04-25T21:02:12.457233Z","times_seen":312847,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mdmacanada.cc/wp-i18n-js-after","fqdn":"mdmacanada.cc","domain":"mdmacanada.cc","tld":"cc"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"0e7ed6306c77c9ed9831f7bc08ffa2f1","sha1":"937af3df937445eeacb1f5d9451eeda99600fb57","sha256":"8e8c68b92b642b2a41d1146918577116e2a3a619b72810c123a28648ec89790c","sha512":"a431873ec698e25c9f2fdb7458ee6f92886fe00a06346456720948bf1dcd11524b75725561b957e42e15475c81751458616d8ca727ff07c33b89a00fb4d19ce6","ssdeep":"","tlshash":"4dc0a78630972c40818ac3609a23bd004550148b425ec90425d49e60aa714c0f4c221f","size":192,"data":"","first_seen":"2025-12-03T02:37:44.204842Z","last_seen":"2026-04-25T06:36:35.604829Z","times_seen":196,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mdmacanada.cc/wp-content/cache/debloat/js/491679f822f0e064ead7fb5927c1b59a.js","fqdn":"mdmacanada.cc","domain":"mdmacanada.cc","tld":"cc"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"3a5838d1182eb0b11f5a58bfe26e2529","sha1":"920b2291e65d62eb55c1958911768540abaff5cf","sha256":"d4efe709c65438ae90dff385486421fea45762880f21fc4e0dca3fa96210f428","sha512":"bc41d50cd2e5c17c75ba737c303f2f498cc94e2c3fe402b2f15c5f10531e53633598093da98579b2dee65733dce0f763d77380ae35a9591d8bf91f975b7c6845","ssdeep":"96:L9emIWL7lnv93ssmAeGejQVnmggoC7arVCG0GXF730IQRDdlZq+SxSD3LmD:8mIWZVszMuinmg3rQ8Xd30DDdlZq+Sx3","tlshash":"2bb157dcb9d57022235121a0597fb409f3357d6470ebb8006ba9c4a47eb15cfb1a2fad","size":5314,"data":"","first_seen":"2025-10-27T08:47:54.280246Z","last_seen":"2026-04-25T21:03:07.701827Z","times_seen":132653,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mdmacanada.cc/wp-includes/js/wp-emoji-loader.min.js","fqdn":"mdmacanada.cc","domain":"mdmacanada.cc","tld":"cc"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"1db81a111c6573761f9a05e822ba4d2d","sha1":"185327cad8e27a66cee1adb5ef2e44c5383e9882","sha256":"10c82acb40149b33f99bf00b3ada239710fc7f997e5de6d6600940437480a594","sha512":"e1f2a0732182012a2e0e77c6adcc1234afb033f7de015955b25e3541635b90acb06e16234b55dab9465bc719722033ec6f567b1213a5289f078c3fd238e6a845","ssdeep":"96:8vcHtHRA5NTDXnM2E0+1lfYsPHgRhR3Sp:ZN0LE0+1lfYsvSQ","tlshash":"a8a1a69ae77a38cbb2f900f2697a0d47eb614435d6c8d438c9ada3141cf5893c274b46","size":5020,"data":"","first_seen":"2026-03-26T23:11:11.853506Z","last_seen":"2026-03-27T01:49:53.40224Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mdmacanada.cc/ays-pb-js-extra","fqdn":"mdmacanada.cc","domain":"mdmacanada.cc","tld":"cc"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"cbbf1a4577a8ba634a4b8fcc5687c8a9","sha1":"13d5ce05a61b7d5124287d8bebd481accceca55b","sha256":"266b56ec9a3c284e951d2ada8876554c293be5558adeb1882ca8034e2ae9a762","sha512":"120f7bae2d87c8163279a7ac5a88ffb5b47b9d12d19d5083ed764c679b87faa6f3b85975e36071c85bdbb663dacca9ca1782889ac68822b0069875281ef3019a","ssdeep":"","tlshash":"e131dd37c408cf1646674370de34ea7c20afb0ace8dd41744fbe4a50e2191a6a78af4c","size":1817,"data":"","first_seen":"2026-03-26T23:11:11.854977Z","last_seen":"2026-03-27T01:49:53.414436Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mdmacanada.cc/wp-content/cache/debloat/js/7457b5eb74a540f48cf35db3679d81ce.js","fqdn":"mdmacanada.cc","domain":"mdmacanada.cc","tld":"cc"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"ef56117d1bb5cc41aa6bd127a49c7640","sha1":"b9c2ed774177fc0fceba5cb58113024b23fe4fb7","sha256":"d151f8c0b2659cfb63704d68654ad8d9437ae9da4410536f63ddec21689a0620","sha512":"0ec9039dbb47470815ad8bf58fd206672717a146b3a99bcb12444687e8489698e06664e6c6cc38a5d2954fa919e5a6c3bc57e44f3be2655f92b801bac43ec763","ssdeep":"192:x9cCxjlRE8iST7TMcPvedRUtV7uLEUfHqo/gH5P5AxTov7fG3ex2NrMP:x9RjlRE8iSf4cPmgtV7uoOKIgxaxTovp","tlshash":"9f12e96831f3215780b7b1907cf7e38f73b2553c648798d1d0acd4692aacd7a2622f09","size":9636,"data":"","first_seen":"2023-08-09T05:33:46Z","last_seen":"2026-04-25T21:02:59.665937Z","times_seen":129152,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"data","addr":"data:text/javascript;base64,CnZhciBUYXdrX0FQSSA9IFRhd2tfQVBJIHx8IHt9Owp2YXIgVGF3a19Mb2FkU3RhcnQ9bmV3IERhdGUoKTsKKGZ1bmN0aW9uKCl7Cgl2YXIgczEgPSBkb2N1bWVudC5jcmVhdGVFbGVtZW50KCAnc2NyaXB0JyApLHMwPWRvY3VtZW50LmdldEVsZW1lbnRzQnlUYWdOYW1lKCAnc2NyaXB0JyApWzBdOwoJczEuYXN5bmMgPSB0cnVlOwoJczEuc3JjID0gJ2h0dHBzOi8vZW1iZWQudGF3ay50by82NTYyZmU2MmJhOWZjZjE4YTgwZWYyOGYvMWhnNWIzY2RyJzsKCXMxLmNoYXJzZXQgPSAnVVRGLTgnOwoJczEuc2V0QXR0cmlidXRlKCAnY3Jvc3NvcmlnaW4nLCcqJyApOwoJczAucGFyZW50Tm9kZS5pbnNlcnRCZWZvcmUoIHMxLCBzMCApOwp9KSgpOwo=","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"77ed8e740b15072bc73a756ba6416bd3","sha1":"1a599802fafbb9d1524697425ac99046a32d5f17","sha256":"7f61814269ab6584c7266e21b1923608721d39d0815a8104f1fdcd27d729f114","sha512":"b823c08039c9099ae2e56d966b034e0d8e47949edd446075ae134be3f5f4fe79e886f923dd18e1330fa8cac46380ab322acf07a62ec9231ec8f33bb66fbf47a8","ssdeep":"","tlshash":"47e0c0ae36412b30b32a825b0af1dd5830e23034288ddd10dc8dd80c5648ede0928f5c","size":365,"data":"","first_seen":"2026-03-26T23:11:11.856154Z","last_seen":"2026-03-27T01:49:53.400555Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mdmacanada.cc/wp-content/cache/debloat/js/432e9bdb9cfc3bd870ef8f6fe96c8309.js","fqdn":"mdmacanada.cc","domain":"mdmacanada.cc","tld":"cc"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"46a816ff38bdd095e2118365ad4c618b","sha1":"c58ae69eeea5bf2846b88a6c7cbaaa7728a2444d","sha256":"0eb862a5891526d089b727fdfa30222cca4b4d75b5835727bf57df17436256f6","sha512":"b6650185967270b09fed48ef9937d21ae45b37010aef6b6a6a4ce3efb295bd39d3734b1cce7535e126cb255b1a3b40c27dd97322f1b70ee0e1c67163e2539cf4","ssdeep":"","tlshash":"41418335b001a826c37782d997aba651b335662d760290dca19c8cb43a39c0b7972cbf","size":2439,"data":"","first_seen":"2026-02-05T17:32:11.552459Z","last_seen":"2026-04-25T19:57:51.283165Z","times_seen":12654,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mdmacanada.cc/wp-content/cache/debloat/js/9351e4978761082eba1a8753a98dbf13.js","fqdn":"mdmacanada.cc","domain":"mdmacanada.cc","tld":"cc"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"90e932bd9e62583fc494c00498cfe7f5","sha1":"4f57e11bff609f90f49174187a0b5a6ba847ad28","sha256":"87cee5f49ba0d3017efc409579fc58b91a717f8f14751f7d804447ac9bcbaf4b","sha512":"ed9c129faf972ddfa705f05c3207884e5e9cd175baa45d49ce9d42bc0d01e4e8f36e627731bdd97214b1e2400fdd5012262a42f9800cd4f5565dbf183ba58507","ssdeep":"96:wXDE/3s/0EBM6ZUUCRTH+zl4NsBjcEmDtrGV2C2yics6w1RfGdzsvqZTq:wzg3kBFZYH+zhjngRw2cLzw1RfGdzsvx","tlshash":"56c153847983b970b2337057f0ff48d561baeba575298081964ec4a05d7388ee0a7abd","size":5661,"data":"","first_seen":"2025-10-27T08:47:54.273294Z","last_seen":"2026-04-25T21:03:07.860129Z","times_seen":134249,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mdmacanada.cc/kl-identify-browser-js-extra","fqdn":"mdmacanada.cc","domain":"mdmacanada.cc","tld":"cc"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"769fb452e5e3a7af6543260b25cce546","sha1":"8fc3954a36936b49698b14d538cbb6c2a294cd9b","sha256":"a17a5ca947182f3a1c9973457c259b1a0e7618a74e32e9a7abb3ce6c6379f80b","sha512":"9febdb1db446841ab028598f74ea32843fb000a929b44aca1411255f77ad9ddbf6463461930ed8410eb77dd33b8b78971358b30fb65ef85453d5466551ef0793","ssdeep":"","tlshash":"34419b95c4e515d16db118f472a540f7e1c65241d5551d1d858f884d0e62e45d29d348","size":2140,"data":"","first_seen":"2026-03-26T23:11:11.857335Z","last_seen":"2026-03-27T01:49:53.416084Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.klaviyo.com/onsite/js/build-preview/commit-a9008e2652932ce924ec514ff7f88d1dd460ca1b/runtime.ec64feebd3991d563e19.js?cb=2","fqdn":"static.klaviyo.com","domain":"klaviyo.com","tld":"com"},"ip":{"addr":"151.101.2.133","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"4d3bb9c4c97fe6e54b5e62d21c989072","sha1":"c02300c36ceacaff01c133915e53bad39a85bd0a","sha256":"f26163935953bb759fe8b8a157edcfc6baa8b895d6ba2b6aefd113a7668f0bb2","sha512":"d7e368b1fa89cee68edaf6d1f0fac01e39ea0b751104bd23b5f5a561bd2266990f062bee9a922f898e217c552514845d5b9936cce198eab141fb19b85abe1ca2","ssdeep":"384:MbTLjg9uCGg9dz5zmNr6P1VR7DJ1n+kBkxcncBHFBUkBJBi9VC:L9v3dmNGzRvJ1n+qkuc5/UiLi9w","tlshash":"d4a22bed638ce8bc18111480fe1e9094becdb0312c4a96b2cfb571643865d6b5ef9b17","size":22064,"data":"","first_seen":"2026-03-26T15:38:39.48847Z","last_seen":"2026-03-27T15:24:05.260194Z","times_seen":273,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mdmacanada.cc/wp-includes/js/wp-emoji-release.min.js?ver=6.9.4","fqdn":"mdmacanada.cc","domain":"mdmacanada.cc","tld":"cc"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"f0cc9ba5cf46af0cd73d521803e3b07e","sha1":"7d2a74f87dc70a39eccce3bae1d4cc404cb134f4","sha256":"fd59b0ebf6282ed71647bf2f6e0d1925bbfd1f270865a832079ebb60259aabca","sha512":"7ec44f08676c195547a623504c7105ef3d0acea5839675599598043f3e0b5a3386452e3db6fbea90722f7be9e6effdae1b89c49e2b05b22b8c415616e07d471d","ssdeep":"384:WzevzApRZTbXU/3o//bEPhXgA5POkpJTX:Wsk9XU/3o//YpXgAs+hX","tlshash":"7fa2959ba33a4e8f343e3bd78d968f4dc9da555321c0e079dbefb6c169a00568274c80","size":22762,"data":"","first_seen":"2025-11-10T19:52:32.864936Z","last_seen":"2026-04-25T21:03:07.677556Z","times_seen":165089,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mdmacanada.cc/wc-cart-fragments-js-extra","fqdn":"mdmacanada.cc","domain":"mdmacanada.cc","tld":"cc"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"53cd96e33d08d4c73b81737569a14084","sha1":"74f1cd0c622d9494348c4f4e9eac80d9ed2e6054","sha256":"3e74e006ae0aeaa0838804b01da2a97486ac17c4d7aed8b3ad84e075912685df","sha512":"7c3af6247b3e93bc138da2d3628590654e80c22d34e85271c34c4c80aa0a0822c2d191dd627f91419c8edc609662013bf060cd496664f8051c1b7f3da95e8606","ssdeep":"","tlshash":"e5412653c6e98cd32ac81cb32214a5b3f1a03172fd688a42218958f41b21f82db42d2e","size":2349,"data":"","first_seen":"2026-03-26T23:11:11.858412Z","last_seen":"2026-03-27T01:49:53.397342Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"data","addr":"data:text/javascript;base64,KGZ1bmN0aW9uKGh0bWwpe2h0bWwuY2xhc3NOYW1lID0gaHRtbC5jbGFzc05hbWUucmVwbGFjZSgvXGJuby1qc1xiLywnanMnKX0pKGRvY3VtZW50LmRvY3VtZW50RWxlbWVudCk7","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"336b4b067dcb50351d5e2d7c92cf1631","sha1":"9709109f27eaad0c5a1e50facc142f8f197a11b6","sha256":"ef2f7f28db32250196ae2c8242611a7f7159c2a539dabd40b82071b1c07561c6","sha512":"43c83e5907dbc25a8620884fadba33a679e0668095a659e79e711c8b6d6331d778849aab0f19bef0131cfd5537e462f2ca238dc9134732ec6867ddd945ff5676","ssdeep":"","tlshash":"d3b012343c25b42d192b300c31df53643c3a4140fa016940d07e78441433f550b01f8c","size":102,"data":"","first_seen":"2023-03-07T01:02:19Z","last_seen":"2026-04-25T20:53:30.569104Z","times_seen":36598,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"data","addr":"data:text/javascript;base64,CgkJKGZ1bmN0aW9uICgpIHsKCQkJdmFyIGMgPSBkb2N1bWVudC5ib2R5LmNsYXNzTmFtZTsKCQkJYyA9IGMucmVwbGFjZSgvd29vY29tbWVyY2Utbm8tanMvLCAnd29vY29tbWVyY2UtanMnKTsKCQkJZG9jdW1lbnQuYm9keS5jbGFzc05hbWUgPSBjOwoJCX0pKCk7Cgk=","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"b8c40bf7c92768058d743847cccdb147","sha1":"4fbbbcb2dda4d05e2e58bf43330c559b4165fc0b","sha256":"7872ff233c7b2bfa962f491d0575e71f0b0b487bc63899ff4c72c7c9d5197688","sha512":"83bcb73fce5bffd29549aa2521980264568c23c98d508b254127f3bb9c69c9c2fdf3d6d541f2edf24dc73e1414e8a9fab6dafd4cc25d3cbaf6a73b7917c50d26","ssdeep":"","tlshash":"eec08c2b770c08e4120b38c00f9f22d53838e18876513c108caca805d490c8a2c02f8c","size":152,"data":"","first_seen":"2023-03-07T01:02:09Z","last_seen":"2026-04-25T20:52:30.745781Z","times_seen":138435,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mdmacanada.cc/wp-content/cache/debloat/js/89c9cd18dc38a87c0d34b7506289616b.js","fqdn":"mdmacanada.cc","domain":"mdmacanada.cc","tld":"cc"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"fc06080ebf979384eaf92a5f1cd7a50b","sha1":"1474b07026c758629a82df51a5e4fbb7abf531df","sha256":"c50a0b33030ba0ec063be642c297f48af94359e2222ff140817248d591faf837","sha512":"d6443028105566717f328c56d17a0694e13905aa008bd36ba744e76bc5181e854ab80563be1d3167d728bf5eba6c502d7e36aebf0ed74504c88e47125cc710aa","ssdeep":"384:1wNWSiRVRS4tdanZkYH5FL736ePkPakFX:qNdi7anPH5FL736ePkP/","tlshash":"fc62e945756050358aa511ac283b018f613adc3aa6f46834ef18e4ae387cede51fbb7d","size":15315,"data":"","first_seen":"2024-06-19T04:58:57Z","last_seen":"2026-04-25T21:02:59.578977Z","times_seen":107181,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mdmacanada.cc/wp-content/cache/debloat/js/5b195bfe11b57fc783f9d73ca6ccb2b6.js","fqdn":"mdmacanada.cc","domain":"mdmacanada.cc","tld":"cc"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"d6843fa9b6dfd1cae807f2c375830d09","sha1":"cc378797cb063f3981907698a6cc01e539eca654","sha256":"fca8dd4ee9c93f33dc3149e2c78aec8a28c54036faaf19c7b0ac9ca32293c070","sha512":"c9eb3dd5c84945d185f5ccccd954ef9546488e4979f9b3af5de54e107b2d0f8959e6c54509eee41f5ab67eb28488476e9a7751cd1a3fe671b618316cf944f3f0","ssdeep":"96:8mJQb8DHwbTtwqfDZa27MXi/NCa2St01Zyw6VfQ0GfV5VP:FKwWpwQFa2N/NCa2St01Zyw6VY9fV5VP","tlshash":"119173ceb121e4b693a22d82602fda850533383ff08694f8248aa6e51f359456577f3f","size":4350,"data":"","first_seen":"2025-11-27T20:47:57.43318Z","last_seen":"2026-04-25T19:57:51.254965Z","times_seen":20001,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mdmacanada.cc/wp-content/cache/debloat/js/7103de4985735031a1dc4b34d9c0befd.js","fqdn":"mdmacanada.cc","domain":"mdmacanada.cc","tld":"cc"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"120712943e35b657e97aab20af3d54bc","sha1":"08419f4281ffe39c81e7fab124c6732b422b798a","sha256":"6023c879c2b4a0f320b94f0418e720fb36937be1efb36bceabec9323c5b4ce00","sha512":"7cda92af9b818789f97d579603726d564451507b01f403aeafad8f1d671ffaa4db295c3e012797ab85414e2ae3105640463c02b2ad8d3bf387c22aebf96a13e6","ssdeep":"96:QCGue50Jc8QlBtVScsMJQSMJ/ZlM5JQVQfQ8ezqjpLRVFylaJ9Nv9Vp//iS3udlA:ZGuedRz7BsUMNZWBySyUNv9Vp/qS3qnW","tlshash":"6bc1c7c9f274edf412f610b1596a66c0fd74105af1d254c0aacdea88ab748cb1253bfe","size":5994,"data":"","first_seen":"2024-04-08T04:38:19Z","last_seen":"2026-04-23T18:42:46.692517Z","times_seen":93,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static-tracking.klaviyo.com/onsite/js/build-preview/commit-a9008e2652932ce924ec514ff7f88d1dd460ca1b/post_identification_sync.e290d099b5bfa48fdae0.js?cb=2","fqdn":"static-tracking.klaviyo.com","domain":"klaviyo.com","tld":"com"},"ip":{"addr":"151.101.66.133","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"7869fd8269efcec7dd1f9b02f377a851","sha1":"b24e503afc3ea9f90dc51e3b597a90877ccf654e","sha256":"8ee0426266bf888b4fbde32c2fbcb4ea01b8dc62c18a3d4efba487eb193cd36f","sha512":"8fe8a4623b88116e56789e160fc588841a2e2995a4d015b0bd6b6a8f9300814fea1622295ac753c1913db988f177e939d236347b5115b7c0025c2704513bb5b4","ssdeep":"","tlshash":"b381da5a75e6f0b40ef81dda55741114f9bc980cf91cc8a0f268cd4f956f856a33aa0f","size":4039,"data":"","first_seen":"2026-03-09T17:13:19.585377Z","last_seen":"2026-04-24T00:51:00.716985Z","times_seen":7327,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mdmacanada.cc/wp-content/cache/debloat/js/f46048a2b69512180d74023faa6c1924.js","fqdn":"mdmacanada.cc","domain":"mdmacanada.cc","tld":"cc"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"a60fe879cb5d491f47d6cbdf9f50b329","sha1":"59061fc832ed40aa35b9ffb263b6e050c74d3506","sha256":"bb3094f234df53b59c1e24084a009d82684c48f2b2d014693eb00d56af7a41df","sha512":"ba024c80d3978780a56c9f1c777a89075345f5d9909426c830a700eb3f3e69d9e7260cfcee9828a2dd8ebe57a893a6d00756b102671067ed2adb0bc8c7781d77","ssdeep":"","tlshash":"64113a66be81e0f194fa24a12b3b674eb3fd5325188045099165289e39a2f1bd20779a","size":902,"data":"","first_seen":"2023-10-18T16:18:54Z","last_seen":"2026-04-23T03:42:59.379525Z","times_seen":152,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mdmacanada.cc/wp-content/cache/debloat/js/a5c3be0e45a7c899ee0f12d2e5387d07.js","fqdn":"mdmacanada.cc","domain":"mdmacanada.cc","tld":"cc"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"80785ca1336add97de70eb47237201e9","sha1":"b4e353eaee00046f3da067be1d8120c0cedb0a29","sha256":"3b51cad83cb9da92cacdddcbf103f93d6021b9cd5799c928408fe770f2c2ac50","sha512":"9c9fd8d004c8cdf153d8dcfaf38a7d2a0ff3ed50189041167aec5c39b3adae9f5b8cd67cc0c58fa3e4d5c6a74a800fea540a56bd761fb33e0880c39ec2cad3c2","ssdeep":"384:s1ntfI5Ix+a1Yz00oz/mHY4gRbBNScnObZGNOj6osVB7hzqyy61RFfvz+WWxQcI8:WntfI5Ix+a1Yw0oz/GgRbBNScObZGIjx","tlshash":"68a2a32af37470ad41ba60b5b83b53a4727730797507809cb12a98d66c2ad5e2133f7e","size":21855,"data":"","first_seen":"2024-01-21T11:14:44Z","last_seen":"2026-04-25T15:55:07.471595Z","times_seen":596,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/69967ba6a3b/js/twk-runtime.js","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"172.66.161.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"0beffdc96a1a1b35b5ce2759d6d1d51a","sha1":"8d9d42c92a1d18382b66ee353d3b81b8641ced00","sha256":"e27dcd41e84265874a28c43fa5780e5ddabc8cae4fa0d010d0ca18360e704389","sha512":"6c5f688f184fa65416108e0f6af9947e741b70ccce5053b318e8ed64858d9ccd6e6b2f905103bb3871e540ecfb7a85efb0503c539bb4545d6975c34aa58dc090","ssdeep":"","tlshash":"7f4183d936e8f9b6434318a1043f9016f6352976097be4c0531dd4f5bc78849815afb6","size":2306,"data":"","first_seen":"2026-02-19T03:13:10.681687Z","last_seen":"2026-04-15T01:21:42.763559Z","times_seen":11136,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.trustindex.io/assets/js/richsnippet.js?d00c2d176917gb01","fqdn":"cdn.trustindex.io","domain":"trustindex.io","tld":"io"},"ip":{"addr":"3.167.2.9","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"1ffcd301e9fd02a60278f22591eaf3d7","sha1":"0bb8f30a5e3dc86b626685dd6dd5e2cd63b8149c","sha256":"b1a9acc879e900885a746a5dee612cb3207a80a85953c0cb6b1467532dbe928a","sha512":"ddb33b4fec36e9879559bd26ddbbf576f4eac9c7806be5bef7efd36480817c690b7b1640b8aa5ff52423da5c4e35f18535ffc285a4573f287a535f4fee213e4d","ssdeep":"","tlshash":"3f4164158351a57a4f8f21e169e3df047d2218a49441402df549f07bb879ccbc58dfda","size":1927,"data":"","first_seen":"2026-02-27T12:50:12.82299Z","last_seen":"2026-04-25T19:22:32.085104Z","times_seen":662,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.klaviyo.com/onsite/js/build-preview/commit-a9008e2652932ce924ec514ff7f88d1dd460ca1b/event_adapter.4f7be3f375ef0d59c121.js?cb=2","fqdn":"static.klaviyo.com","domain":"klaviyo.com","tld":"com"},"ip":{"addr":"151.101.2.133","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"9df1707497f448aa3ccd5404fe28e512","sha1":"9477f717089604ab571e0fbd45cf0952157e7162","sha256":"5781894c574f678af2c21bf733bb768e9157a46dca4b449d1a277b11bdee1168","sha512":"5ec561fddd9a4f87639ff2a24346398bed8c2bea64235cc8ca7818d2ca71d995618301d992db57cd1f06c4fd357d9ff62cd14c3d6d1bac9c3d83437e23775bdb","ssdeep":"","tlshash":"7401154e3ad2f613259f34f5d73c1a4533fc4647b9199550e5904c34249155d7392cde","size":710,"data":"","first_seen":"2026-03-09T17:13:19.482928Z","last_seen":"2026-04-24T00:51:00.702467Z","times_seen":7467,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mdmacanada.cc/woocommerce-google-analytics-integration-data-js-after","fqdn":"mdmacanada.cc","domain":"mdmacanada.cc","tld":"cc"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"4662141ac039ca046abfb28277b62a70","sha1":"f0145d3ed858b1259e7bac6ca6bcc8fb4b9275fb","sha256":"d671b04bcf07cfc1d556ae93fb82c3bdff5627bbc2b70e5fcdede36dd2e8c8d8","sha512":"5ae4aa3d3399733540ed77f8b331cb95adb75cf942cb5269f75545339329bafb9535605dc68526e17b04c9f58c807764c9535c9bf7208ec7f1f8c73f03035019","ssdeep":"","tlshash":"1351c04a3408ede9fea52e51de83ac5afcb6135762d62cb214f8de0d41c068c260567f","size":2865,"data":"","first_seen":"2026-03-26T23:11:11.860628Z","last_seen":"2026-03-27T01:49:53.412119Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.klaviyo.com/onsite/js/vendors~Render~ClientStore~~~onsite-back-in-stock.7d7b5b811b79d6bdfaae.js","fqdn":"static.klaviyo.com","domain":"klaviyo.com","tld":"com"},"ip":{"addr":"151.101.2.133","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"a31dcdb463713e4e8c3b85dfee5d64d9","sha1":"414beb7de6357039eecee87a3949a8ef286988dc","sha256":"f495ded85de4f334970eb7ad13e8f860e9aff8f38e8b5d73e4bcfffa75088f24","sha512":"2f1e136a0a68128846d257a7975c1f5b8ea9f3a46c8d3947caae150ce943af21907915300357efde5cb3c7dcbb76794805fb4728ad8938b38aef239ede90806e","ssdeep":"96:K8hjdQawKRWzDLrOaVa3IboRjdWHXRSZgMbh9Xquvb8/T8isbl:K8h+HLrj4Rj+QOMbzXz8r8iSl","tlshash":"38b1a7c872f7f4b562e738a4809f2046f23e5915a20cd404a3e2c5dd7c7a587d633d99","size":5101,"data":"","first_seen":"2026-02-26T13:42:08.339165Z","last_seen":"2026-04-25T20:46:10.837742Z","times_seen":10825,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.klaviyo.com/onsite/js/build-preview/commit-a9008e2652932ce924ec514ff7f88d1dd460ca1b/sharedUtils.759bb25d37e06b71196b.js?cb=2","fqdn":"static.klaviyo.com","domain":"klaviyo.com","tld":"com"},"ip":{"addr":"151.101.2.133","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"e6add62c63d252f8c87fff507a8eb0d0","sha1":"74c1c5ec10ec66c4fce37911dee5d1eb9209de11","sha256":"7bc1f831a4ea4be20d54d8908f54518d8977a184d0f21ae93ce8aa999294b43e","sha512":"51f9169cc20d755034bac39c43ac5d54bee0668e08f99e67345b9847a76a671c25bc475d84817bbeb1084c840510b20b0bbd444c04aa147d21952459f8145562","ssdeep":"768:0hDq/UA2+Ofvr055DQY26YCv28hDVqsUuOqGQiVhUCHrj8kRMijbg2BXofUq6aMR:jArB6vcX3jW6fkKpE7h4QdSgg","tlshash":"4663b68dfec1b0a10773a566d27f941ab2ba1a55b40f88d0d16fc0d1ac7898f9133e6d","size":67133,"data":"","first_seen":"2026-03-26T15:38:39.542495Z","last_seen":"2026-03-27T15:24:05.232834Z","times_seen":273,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mdmacanada.cc/wp-content/cache/debloat/js/713f5653d35bb4cba9796ad60bfae7b6.js","fqdn":"mdmacanada.cc","domain":"mdmacanada.cc","tld":"cc"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"691a1e43450e7cda541a3bd6f10fd5db","sha1":"d3a78cb77ccec297c9d32fee99a2a4761f604a8c","sha256":"8b083f64f2e9e8ac445c730dfce7013cc6449ce155fd1c2f42b60edba4ecb4b1","sha512":"a32ebe942e704da64381e392ffc20ed4f9d8daf71227a06f2dc0ca5c037675ab67e5b5a5ddf9bcb77b1872308daa780cc0e6ec5a2469bcd51444ece4f3b3de0d","ssdeep":"","tlshash":"c031b6d93095a8da06071490463f1207f2f91e27eecd98906264e8f50ab077a01ebf6b","size":1720,"data":"","first_seen":"2024-03-20T13:06:17Z","last_seen":"2026-04-25T21:02:59.676654Z","times_seen":109610,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mdmacanada.cc/wp-content/cache/debloat/js/bd8b66ff466ff045cb9e39bf4094ad87.js","fqdn":"mdmacanada.cc","domain":"mdmacanada.cc","tld":"cc"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"ae52867db002b2f95a21b85b3b518a04","sha1":"4b1615786f2e5240bec4229c7dc5c6f865c92ebe","sha256":"592acc60b8eea94fc366110175d8406604a609201d6debe5eb008a6debfbdc3b","sha512":"cb641d54680e78ff8f575ca1746319f42acba15c3422bb40f011421545ac0647cad018635834fc9ed553c7a61e0789d329c18a774d1dcd5fdb52d207e69768cd","ssdeep":"","tlshash":"7551321fb0208e9618b3187e613a719622329d69f2098670a015dca42eece4b1777dcf","size":2939,"data":"","first_seen":"2023-08-09T19:51:14Z","last_seen":"2026-04-25T20:48:17.883659Z","times_seen":44884,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static-tracking.klaviyo.com/onsite/js/build-preview/commit-a9008e2652932ce924ec514ff7f88d1dd460ca1b/vendors~static~in_app_forms~signup_forms~post_identification_sync~web_personalization~client_identity~reviews~telemetry~customerHubRoot~renderFavoritesButton~renderFavoritesIconButton~FavoritesButtonElement~renderFaqWidget~.2cc0e8eaac59e1064c76.js?cb=2","fqdn":"static-tracking.klaviyo.com","domain":"klaviyo.com","tld":"com"},"ip":{"addr":"151.101.66.133","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"46ff458dba5a46b49add2560daf873aa","sha1":"fa5a88ceb71f7583c8149581501373051641cd78","sha256":"7480f7417756fd082fca5534a1e178e4e5eca31e3b469cf0ef8e52d018894a58","sha512":"f33b64ba054373050aa4feea48d2d86655fbd804f6b1b1fb833856620af043267e0d02080f0e200fcffd6a711509ca058e655fffeaa22230951365276d2bce06","ssdeep":"384:GpBPOB47dGdl2h7H3BRLBq9ZX0QiFpQJevya:gP/Ydl2h7XTLB4kQUWa","tlshash":"4c4265c9f5d2f05653977c6581af140ff2bd6a68b28ed088e2b5d5e4ac7910f8023f1a","size":12742,"data":"","first_seen":"2026-03-09T17:13:19.532232Z","last_seen":"2026-04-24T00:51:00.721122Z","times_seen":7468,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mdmacanada.cc/wp-content/cache/debloat/js/ca37ef15447bf1422396697306d12017.js","fqdn":"mdmacanada.cc","domain":"mdmacanada.cc","tld":"cc"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"0f13719c0342913a1990f6ffff131bc5","sha1":"1bfdb4055f5960d97decdf88f16a250f5568173f","sha256":"1ce97f1528f3d41dff547488d8d57c66637423dafb1bca9fe5c48861b2739725","sha512":"b060a6ca9f4f4bec1f9e169b3c03bd2af3789c112ce63aa279d218d5d9258dd20d3ba723fe3e251dcd520612aacf3a35ffaa93bc65694e3273227cf8fd1021d5","ssdeep":"1536:c9wJq+5+Q8kNSBEpeLMEXmoEtZccPhtUaD3o1xj:qAzwLlgP4aDI","tlshash":"cb33d819b25070fe01ff61a7f13fa32432376525b0174054b52d98fa2d6ae5e22a3f7a","size":53856,"data":"","first_seen":"2024-04-05T15:17:42Z","last_seen":"2026-04-25T18:22:29.522233Z","times_seen":1602,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/69967ba6a3b/js/twk-chunk-vendors.js","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"172.66.161.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"b057293b718ae7060a9acc593ff83f67","sha1":"991ec4ae783d59b4ae91113a0ecb5e6b21d19d45","sha256":"39d3bf235a12d663f4c2564a4d0311e4c902370219bdf1c4b81d2d1698dae888","sha512":"61865e60d018bd21ca9c737aeb975e8f52b0d0fa74128720cd03fb59f7766362efc8d84b06def39558f302b15d1bb39e44dde7cf0a840d62cdcaec6932df4f52","ssdeep":"3072:NTX1gABPVhOj6y1ekyYadM/9LJQMoZmVodXsJ5Ar6VKkOPmx/:FGABPVhO5wdKJCMo4VJ5Ar6kOx/","tlshash":"11644bc8f183b0b606e7a1a5009f5207737a151968ed8498f574dee968e8e5c633bf3c","size":324696,"data":"","first_seen":"2026-02-19T03:13:10.628072Z","last_seen":"2026-04-21T03:41:36.073067Z","times_seen":12668,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mdmacanada.cc/wfco-utm-tracking-js-extra","fqdn":"mdmacanada.cc","domain":"mdmacanada.cc","tld":"cc"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"d266b977454aba162bc7cf0afd1613f1","sha1":"9743f78719e82646125864806b6eb8a668346b77","sha256":"0821c837bde3c367f01c3db443149c5bb80d2c2d2cde8d235ffb3ddc3392c9dc","sha512":"b007b731169c08c4a6cb6300b060ca14cdefe1843f1133058f1b372b858e340281161af33b0c90d30d54603fce941e072c942ba37c07f6752649c961a3433f3e","ssdeep":"","tlshash":"0cf06033c1dc4ce218311cf9f4f83c5661ef208ce24af06a8db8ca410e71022f22024e","size":466,"data":"","first_seen":"2026-03-26T23:11:11.861759Z","last_seen":"2026-03-27T01:49:53.404156Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.klaviyo.com/onsite/js/klaviyo.js?company_id=X8dkN5\u0026ver=3.3.5","fqdn":"static.klaviyo.com","domain":"klaviyo.com","tld":"com"},"ip":{"addr":"151.101.2.133","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"9fe5e06847ad5c1a490d5cfaa23e049d","sha1":"f19a16a147da3224ace857a7757bbbc6f23736bd","sha256":"2b726ec2f8e94e56e43810d5b24a3aae575b64bfcfbe43873e0b3d990a2d651d","sha512":"283fbbb0f9eccc099467539897d59bb0e93bea6ce5b06dc8e8ed7ae14ddc7a6a6f8c8f2e7dbf637ccc0192fedb3d953ec671a424f3e2751162d539a7269ab350","ssdeep":"192:rCfnAeNY88RYKwCgwWwpMoMKMoM2wpwOWMoM2MkK4wCpwSwzwpMaMpMaMZwpwzws:rcAeNY88v+3uDFDdu9WDdHK43bCu9G9S","tlshash":"950234be5ac1c0bf1f0370da8e37be2cb86ac71cdd8655a5d352945415e38b4ee2a284","size":8668,"data":"","first_seen":"2026-03-26T23:11:11.819376Z","last_seen":"2026-03-27T01:49:53.3194Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mdmacanada.cc/wp-content/cache/debloat/js/4addc29de1119df20103d3c995cf8b92.js","fqdn":"mdmacanada.cc","domain":"mdmacanada.cc","tld":"cc"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"826eb77e86b02ab7724fe3d0141ff87c","sha1":"79cd3587d565afe290076a8d36c31c305a573d18","sha256":"cb6f2d32c49d1c2b25e9ffc9aaafa3f83075346c01bcd4ae6eb187392a4292cf","sha512":"fc79fdb76763025dc39fac045a215ff155ef2f492a0e9640079d6f089fa6218af2b3ab7c6eaf636827dee9294e6939a95ab24554e870c976679c25567ad6374c","ssdeep":"1536:0RUX9uDgwxcy2KVBNwchN6SLaHEk2BSrBESp+a/IEk4aAocVi8SMBQ47GKO:sHNwcv9VBQpLl88SMBQ47GKO","tlshash":"7483f8df77ca702247ab30b9006f550bf276199d684d4400f159d8e9bcb8a4a827bf7e","size":87553,"data":"","first_seen":"2023-11-03T09:26:43Z","last_seen":"2026-04-25T21:03:19.202004Z","times_seen":741274,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/69967ba6a3b/js/twk-app.js","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"172.66.161.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"e736e189edb5d0d9d5b8e7f23dd9114a","sha1":"bcabee193f13756fa9154fc492fe420c47140343","sha256":"13cf82e6f9d48221cd55f8b3c3d206f7bdb83f291034b478e484ccfef7d500dd","sha512":"ea972884c185633ea238bdacea6ac9da0e0e92f88588cd85c214514c3597bc7d811c4dc4cd35b671dd2db97179bedceb38bd5d200abb9653fbcaeac2ca6ec7b5","ssdeep":"","tlshash":"a0c080ac1496fc9c1674154a8377f54a5cd510108055141015d851a11311546560c54d","size":151,"data":"","first_seen":"2023-03-07T01:02:46Z","last_seen":"2026-04-25T21:03:03.501784Z","times_seen":78105,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mdmacanada.cc/","fqdn":"mdmacanada.cc","domain":"mdmacanada.cc","tld":"cc"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"a3793ea6034de77c0c71c5fbf54cdf89","sha1":"5423e6c1103a958392c76c10768b8c530e83368a","sha256":"5df8879b78e986cc5558bbc588d8e08f8a3a312e8a1cb463dc9aa5d30912bdf4","sha512":"7c87e11403e02c0d9a0e5c515d07af735b9c9b8a4bc5c12757424c4256f0c935b3cd6cd23d3a18bf01e2f2bf9593b7d7de6e5e6578aeacbd20c8f4111f3c99dc","ssdeep":"","tlshash":"e4e0603381dc4ce218311ce9f4b83c5661ef208ca24af06a8db8ca410e71022b22014e","size":367,"data":"","first_seen":"2026-03-26T23:11:11.862855Z","last_seen":"2026-03-27T01:49:53.417669Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mdmacanada.cc/wp-content/cache/debloat/js/99c439278c9233f6710ad5b378a685cf.js","fqdn":"mdmacanada.cc","domain":"mdmacanada.cc","tld":"cc"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"84b8202dcbaa8bd47d62a4332f743856","sha1":"2150d9d487e93cc871475a5d2439082643298257","sha256":"fddaa60597e1d22d8ca9529bab0ae12193fcea87401511283924f116ea1028a3","sha512":"09c7095f97fb383b02552fa1444df735ce5bcad8bbbc3d4734ed48ecfe1531a5cd35ef70d5edcd4e2de828c491d0e2c46b299772b5934859fe368a9e53274ec5","ssdeep":"384:71yd4Sk6FCT6IZ9bAstA3fVipSfUeGey4of:70iSk2RIZ9MsmNqVl","tlshash":"7c62b644b2416772d3df60adc89b050ea9bbba186d05289c763bc9c98d74f0c70bfa75","size":14885,"data":"","first_seen":"2023-03-10T20:00:21Z","last_seen":"2026-04-25T10:01:17.62374Z","times_seen":459,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.klaviyo.com/onsite/js/vendors~in_app_forms~signup_forms~client_identity~telemetry~onsite-triggering-v2~onsite-triggering~.00140035a0ee1bdef5e1.js","fqdn":"static.klaviyo.com","domain":"klaviyo.com","tld":"com"},"ip":{"addr":"151.101.2.133","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"8895a9cf40ff6c641b2aaee1fd291b40","sha1":"0d7b93411bb3c7a5b97bc2cf5b5df9b5ee72c9e7","sha256":"9d510ffe6a19c8fd8ccc5be20ed1e6916db53f74e4b43fffa6db830de2d3f690","sha512":"1eaa44f046ff3682d82532e4865468d63f19bc3271d4d684df8a4526b8baa418fc8a59a9360d0a140abc86fc9206278b22ea608cbcfd786720bfce5283d40eb6","ssdeep":"192:yrZ2ZVjGa09TmXgiToFpo7MSC4PJCFYJ/IL4Mx2mItg5Z7:yrZ2ZVjGaKTmXfToHo7MSC4PJCWJzotB","tlshash":"c7f1a5e833ce706157b7207816af9042b0790926240c947df15ad4a83c34c6967bfeed","size":8121,"data":"","first_seen":"2026-03-02T22:50:38.010267Z","last_seen":"2026-04-25T20:46:10.780154Z","times_seen":10541,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.trustindex.io/loader.js?32df3fa309ab228f8576e3f730a","fqdn":"cdn.trustindex.io","domain":"trustindex.io","tld":"io"},"ip":{"addr":"3.167.2.9","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"e0482d46de5f43f7cab955a0a7ea74f4","sha1":"617db8b16ebc9ed530cac268fca97961a4416b07","sha256":"3777638f6db06aee60ac76004fc6207392915c69bfb2e7f76cfde176bce16eef","sha512":"0d3c5bf8c257a4f8c41f998dc68cc871d47f2830d1ee147a21e709c61409e3954c7ba0a6838c5e8e846044f2e1e37a3fd8c0da4d9c44728d56e05e283bc7df44","ssdeep":"1536:CzQkY8MgXaXzOuAl1KTQB3JwgrJv1dRxeHSaRaVdU4Rer3:UQkY8MgXaXzO1ywrN1dRxeyq4Rer3","tlshash":"9d83b731a324683306ae41ea94a97661e70275dee5424c2dfd7cfcda5898cc234f9bf1","size":85398,"data":"","first_seen":"2026-03-20T14:21:23.924637Z","last_seen":"2026-04-12T16:17:37.667593Z","times_seen":540,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static-tracking.klaviyo.com/onsite/js/build-preview/commit-a9008e2652932ce924ec514ff7f88d1dd460ca1b/static.05920b16793f2a456e22.js?cb=2","fqdn":"static-tracking.klaviyo.com","domain":"klaviyo.com","tld":"com"},"ip":{"addr":"151.101.66.133","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"0c095a3158e5872bf223abd432da2d3f","sha1":"56c40a52e907453dd7133e990799ecf3dbba8cd0","sha256":"4670fc97a26af996504582be0c2bb3cec58b8f10c872e8e4a8f73996739668c7","sha512":"405deb634603ecd98de121cf5d8b9f3ce5e283a77319a1a87febde5bd2dc9cce226e59012755e0b2b44ea40426ec97d17f3a81de02714e8733e1060c668b6288","ssdeep":"","tlshash":"ca11ef5f7bd0f5650f5e1cc0267b243cbcfd9282352d84a3e61498cc17606662315d8d","size":993,"data":"","first_seen":"2026-03-09T17:13:19.535307Z","last_seen":"2026-04-24T00:51:00.723095Z","times_seen":7454,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.klaviyo.com/onsite/js/1011.1f31096a902efe86fbac.js","fqdn":"static.klaviyo.com","domain":"klaviyo.com","tld":"com"},"ip":{"addr":"151.101.2.133","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"20ced6aaae1a6ec076e837981c8d71b3","sha1":"783d5cc9e849c95c23223c5c840c30451adc4709","sha256":"59cf35004ea9e24ba70e6e29f71ffc3b425e71d5b89bc38fc216322fbd25b932","sha512":"142037006d3a9c11b4718bfc14d92f9f571a78443c287fb51be6a664e2e59f677d891e65c0a68cdea1951741c93783bce004b7e518ece3cd0a69baef4f796397","ssdeep":"768:17PhTyri8FHT6SHW/Jzs6RiddNQXcbk456SDrnEVs4SqxJQuHtfx2AxD8tB8leN0:NTSDte","tlshash":"47c23bc6bbd5f13016e994f6507a2252b36c298b380c4060f2798c8e7d45a8b7377bb9","size":26380,"data":"","first_seen":"2026-03-12T21:18:00.81401Z","last_seen":"2026-04-19T03:09:40.720579Z","times_seen":1746,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/69967ba6a3b/js/twk-main.js","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"172.66.161.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"da5bb1dc647470204df0e49f5afac2de","sha1":"f5cbf596ca5e4fe208e4c55af6e45b71f9febbe8","sha256":"705186becc9e0a306a6b4867ae2768aa9dd3b8c12393d9f9c52029e9a6fcf31c","sha512":"d9c0eda8c93df421f8147960ff4b00f8eacd8791b8386b020f04d0478c6b7a4328767a82b52b8cfbb7c3a44cb55cec488c2d1008670bee709d67d8bdbd887c39","ssdeep":"","tlshash":"d4b09b6c1057f86955e8064ed3b7f65d1d961050811104301658a1753321143c61c55b","size":121,"data":"","first_seen":"2023-03-07T01:02:45Z","last_seen":"2026-04-25T21:03:03.457234Z","times_seen":78064,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mdmacanada.cc/wp-content/cache/debloat/js/2545442f1561769556e410b5df2fbdf5.js","fqdn":"mdmacanada.cc","domain":"mdmacanada.cc","tld":"cc"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"7e3f80ea8102136b40dc7f8cce5e5777","sha1":"376d0ef3d51cce4da3a43634a0ad33779ed3146f","sha256":"eb423dbd2d4b71fbd8094591b0f47a5e8dc2202a2aed4bfa0fa7bb32b1ee5dfe","sha512":"6df8b5d97bb4d2207e17f5aa2fe1b35b0472387734d5c07f79c8676ca0baefb6c849a82ac0ec5476fd14855ce6f53c3101cde0c0636f0620c3ad5deef5c34f59","ssdeep":"","tlshash":"3931f7d8e135e6f6a1f63263949202c17ce63db947a60411a69f72601ee4ccd623f73b","size":1506,"data":"","first_seen":"2026-03-26T23:11:11.836781Z","last_seen":"2026-03-27T01:49:53.332747Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mdmacanada.cc/wp-content/cache/debloat/js/66a8ebba57d6dc27e95e3bc4a88406c5.js","fqdn":"mdmacanada.cc","domain":"mdmacanada.cc","tld":"cc"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"ef746e2ce5c655e6ed3fac45df824824","sha1":"87b2a281583619589d8a1f589b1a9dbf626d6c70","sha256":"4c0cf189bb3b0c52d35a0b3a93a7b76034ee98b2bec64f1f65ad5fe81d13fb55","sha512":"02ec89c6a1baad01db184d7460b848f9550ff829cfe1f7fd011838c8964e4d488a2a39bbd033d2aea7408b34b98adaae14d381e1f888a8524f1e9a2dfd510185","ssdeep":"96:BRfsr5RftJhTBUvKJMn8AzLKyPWlnl+kSLRGNQXLwFctWlQy52euF8S:BiZjhTBgWMn8Azuf14kqIQXLwF2QQy5Y","tlshash":"aec12e74722923a664bf61e7287771c16573bc79880ac148702b56b64c7ecdea30be1f","size":5997,"data":"","first_seen":"2023-11-18T17:08:31Z","last_seen":"2026-04-20T22:33:25.761782Z","times_seen":211,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mdmacanada.cc/wp-content/cache/debloat/js/288f435a0bebd5d533c675a8c98b8ba6.js","fqdn":"mdmacanada.cc","domain":"mdmacanada.cc","tld":"cc"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"9ffeb32e2d9efbf8f70caabded242267","sha1":"3ad0c10e501ac2a9bfa18f9cd7e700219b378738","sha256":"5274f11e6fb32ae0cf2dfb9f8043272865c397a7c4223b4cfa7d50ea52fbde89","sha512":"8d6be545508a1c38278b8ad780c3758ae48a25e4e12eee443375aa56031d9b356f8c90f22d4f251140fa3f65603af40523165e33cae2e2d62fc78ec106e3d731","ssdeep":"192:5rprDN+sag6ifKIUpQI99P1tLm9kdgyq1+J3aCJQ+h4MPLORq:5rprxaefKI0LP19m4q1WW+h4Mjp","tlshash":"9952c8adb56679724eb721b8f03bd24f71b205de560d8940d19cc4f6282dc6e812bf78","size":13577,"data":"","first_seen":"2023-05-09T19:21:05Z","last_seen":"2026-04-25T21:03:19.203045Z","times_seen":687965,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/69967ba6a3b/js/twk-vendor.js","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"172.66.161.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"3b341e35b39f6195793ecaf5db7c1d63","sha1":"3ef56ed9ac8bfbf5347dc4592653703f59763083","sha256":"548669d6434f5204dca25b9a6f8a02f63301b8c1b58a717b91fec8b6c2918305","sha512":"6b222121b74ffeabd4de7b69f354ad25283d0989376e8e3f6d97f829e28175291eab0a535ca77c22d3f65595250ad9ad3909525c2eb74bf9783f4955c3d7cde2","ssdeep":"768:kURUFvX9zXAfE4dm9+fuDosXRfMySUHM1ONdYO31hY6d/o6cyO4fefHvSAW64F:kURUZXGfzd1uU+8ODY6JORfHBWJF","tlshash":"b483e6dcb295b57117ab20b5417f050bf33a7815a80ac0a4f266f4da7c7848ea06bf7d","size":82913,"data":"","first_seen":"2024-03-08T05:46:53Z","last_seen":"2026-04-25T21:03:03.450305Z","times_seen":51590,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mdmacanada.cc/wc-order-attribution-js-extra","fqdn":"mdmacanada.cc","domain":"mdmacanada.cc","tld":"cc"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"7e0629bc6ed10b5df307b36545c3a325","sha1":"1341cc39fe21152b6f05bcfba2f7edb887411a11","sha256":"44905d44db9bb4727ae849a47fc4f89262da31bd8b097fa6c6c5eb4ac399bf23","sha512":"2b94103c19246da0ab9baa5646f344763ab023b9e5cd5948050fb70ae02ef793e58b544a686e5330a7a9bdbf66b19d1677bd7eb9d72f59eb924ada6e0744994e","ssdeep":"","tlshash":"48518911ee0468b5e3c2803291a87bfd32b333b6f4c0001dc39c4b5d926d780e1d260e","size":2814,"data":"","first_seen":"2026-03-26T23:11:11.86409Z","last_seen":"2026-03-27T01:49:53.410555Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mdmacanada.cc/woocommerce-google-analytics-integration-gtag-js-after","fqdn":"mdmacanada.cc","domain":"mdmacanada.cc","tld":"cc"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"06c2f7d439282965ad20c1d126615b08","sha1":"864172a860e317ec9eab8b4d3beca4ece285d3b5","sha256":"fb165629b2b50e3873875ec02d1edf844abe2e0b507ec11fc0ef993c46da0955","sha512":"edab337974876fb1fb890bd00f7eda00d094c8dd04835a5c96d99b63631c0700909896c9aaeff5976c5e0ecff6de0750d2fb2c43520f159c25eb30b9f39e6373","ssdeep":"","tlshash":"5a11e345a2982c7083e739613e7b7644b63d137925b39c94fcda0d0c12bd35552dbd85","size":910,"data":"","first_seen":"2026-03-26T23:11:11.865167Z","last_seen":"2026-03-27T01:49:53.408182Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mdmacanada.cc/wp-content/cache/debloat/js/8b29d3723ac1a821f35090f73a6b0fce.js","fqdn":"mdmacanada.cc","domain":"mdmacanada.cc","tld":"cc"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"8f123f78b78f7704c1d44a4bae8a5cd1","sha1":"2d9adeb6560c14ce88bd483d47e7581116475b79","sha256":"d1cb2202dc83db6c5654a73b73842caef98a666c7471e693d4b757d8aadb649d","sha512":"1e9377371d8473f574a0f34402e4bc08a1d944daed0551bde5b19da8acfec2226ee36c947428aedac328fc6d7afa1009c8048d7eecd1c7ca016b12cad6d459e7","ssdeep":"192:nt8jSsGSOaK+SG7nhlGUSumLCROLXfIz6GxlG6rF5Qmf6ksI6XgVRdgV:nt8vGC3GIKCUXwz6GxlG6rFGA6a6XSe","tlshash":"00322f70e660732046fbf47ba0d709943d35a532ab02bd33759dc6b48ac21416b3bd6e","size":11094,"data":"","first_seen":"2024-05-27T00:50:20Z","last_seen":"2026-03-27T01:49:53.318739Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"connect.facebook.net/en_US/sdk.js#xfbml=1\u0026version=v19.0","fqdn":"connect.facebook.net","domain":"facebook.net","tld":"net"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"b938e0b835c600209bdaae9d8ccda6d7","sha1":"d5ee79d277057e05f002a18381722b5eb75d3883","sha256":"d1b95aeb57c3285042e1e24c00cc56a8560d16daf7ee5cdfd5c75296b21ac91b","sha512":"f519d10ba250add8cdb46a82b3cddc68e01735c6c80b24d4af37aa0ca108340b59a21bd2cc19bcd4753f66ff5a5dc17f6e3500e91be6436fdd90c954a6ed3800","ssdeep":"384:Ps5FfMCDA9SQM/Psw1A9uW1HVMJDXMlS3RpU9JCo4wiLF:kU9SVjoHqXMA3CJCodiLF","tlshash":"1672b51e46f31232456370766b4b72047235d0473a0afe993f9c87542f8aa6e86f27ec","size":16896,"data":"","first_seen":"2023-05-05T22:33:37Z","last_seen":"2026-04-25T21:00:13.875926Z","times_seen":156528,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/69967ba6a3b/js/twk-chunk-common.js","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"172.66.161.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"d9deabdd1848c34f3ab46722f446c153","sha1":"ca3efc8a6fe26ae3556374b113dda96032edd201","sha256":"6a583970080e55cee4ced2fc7d5e5de94283f0e6eea428a50219b8e343ff0890","sha512":"d260841afedfa06bc864b92b64cf3bd1a323b2de447ce38cb1499cc6fccfab0da309a76814b6cfb20fae85fb5707fc72fec9996b64bfa31703445d6a933daa3c","ssdeep":"3072:I4MYggYqWzhT9dyWFW1Wn+fM4fOrcErQYIMPdLMz9o115:kyWFW1W+fM4fFkBLMz9215","tlshash":"7e34c69df186b47606a37130501f320af23a685ab45ac494f636d8e1bd789cea133f7d","size":240941,"data":"","first_seen":"2026-02-19T03:13:10.643204Z","last_seen":"2026-04-15T01:21:42.632515Z","times_seen":11130,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mdmacanada.cc/woocommerce-js-extra","fqdn":"mdmacanada.cc","domain":"mdmacanada.cc","tld":"cc"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"b9419d113d2f98e6d5fb3c1b5775dc5b","sha1":"88b94cab15aad39466e543363c2eb7bf9ff63a31","sha256":"a333309f1441a4762d1982358e9faade4b573c8aa4f648c658304c370033187c","sha512":"8b75af633cbc136daf187f7ffdbac108344468d7b4628d1e03fcbec4cae40d5613d00ab9e987f44d9afe6e77bb2401b1dc6c61f224a7253bdf80258df3f18a9b","ssdeep":"","tlshash":"ad415e96c5d92dc362e8aef41054287339f0a217f6a109152b5dea6d363adc2de5028b","size":2225,"data":"","first_seen":"2026-03-26T23:11:11.866885Z","last_seen":"2026-03-27T01:49:53.406276Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mdmacanada.cc/","fqdn":"mdmacanada.cc","domain":"mdmacanada.cc","tld":"cc"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"fd53478bc7fd4ac55657286c9e8d1324","sha1":"00560041709d4e4fd15b91196964656e3829da39","sha256":"3126e6fbe80cb1d5d3d58920a79f265fb6d2f4fb716e47d060b2fe785d9a0de5","sha512":"1c1c9dd15b100bbb54a56a72a6566dfacab75e708e5bb727a33bd8548daee4ced04726e161f5f98b445b0b86bff46c60f7a818264f728a2d2695d563766935c1","ssdeep":"","tlshash":"5f31ed37c408cf168a674350de34ee7c20afb0ac68dd41744fbe4a50e2191a7a78af4c","size":1711,"data":"","first_seen":"2026-03-26T23:11:11.867977Z","last_seen":"2026-03-27T01:49:53.424961Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null},"http":[{"url":{"schema":"https","addr":"mdmacanada.cc/wp-content/cache/debloat/js/8b29d3723ac1a821f35090f73a6b0fce.js","fqdn":"mdmacanada.cc","domain":"mdmacanada.cc","tld":"cc"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://mdmacanada.cc/","date":"2026-03-26T23:10:45.369Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mdmacanada.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 29 Jan 2026 00:46:51 GMT","end":"Wed, 29 Apr 2026 01:45:19 GMT"},"fingerprint":{"sha1":"B7:47:48:08:4D:35:A4:0D:8D:CE:D7:71:A9:FA:22:B1:5B:A1:AC:40","sha256":"AE:86:CA:6D:76:85:1D:C6:34:96:AE:04:62:0C:A6:24:0A:DD:10:3E:9E:C3:97:21:29:1A:84:BA:B3:91:6A:6F"}}},"request":{"raw":"GET /wp-content/cache/debloat/js/8b29d3723ac1a821f35090f73a6b0fce.js HTTP/1.1\r\nHost: mdmacanada.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mdmacanada.cc/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 26 Mar 2026 23:10:45 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 2685\r\ncache-control: public, max-age=604800\r\nexpires: Thu, 02 Apr 2026 23:10:45 GMT\r\nlast-modified: Sat, 25 May 2024 01:50:07 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nstrict-transport-security: max-age=63072000; includeSubDomains\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\netag: \r\ncf-cache-status: REVALIDATED\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=wq9z5sIxFoZZmheu0XMKPaTJK6RbVORmlynYVietKlpA8xYeuEifc38IF1N7kY4nq7BYfymKgkVRbqnx77x0IDeAl7MGrqiIhOw5kOnvFQP7T7NYVP2AERnK93X%2BmrV6\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e29d49d7eb13181-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":11094,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (1250)","md5":"8f123f78b78f7704c1d44a4bae8a5cd1","sha1":"2d9adeb6560c14ce88bd483d47e7581116475b79","sha256":"d1cb2202dc83db6c5654a73b73842caef98a666c7471e693d4b757d8aadb649d","sha512":"1e9377371d8473f574a0f34402e4bc08a1d944daed0551bde5b19da8acfec2226ee36c947428aedac328fc6d7afa1009c8048d7eecd1c7ca016b12cad6d459e7","ssdeep":"192:nt8jSsGSOaK+SG7nhlGUSumLCROLXfIz6GxlG6rF5Qmf6ksI6XgVRdgV:nt8vGC3GIKCUXwz6GxlG6rFGA6a6XSe","tlshash":"00322f70e660732046fbf47ba0d709943d35a532ab02bd33759dc6b48ac21416b3bd6e","first_seen":"2024-05-27T00:50:20Z","last_seen":"2026-03-27T01:49:53.318739Z","times_seen":4,"resource_available":true,"data":null}},"time_used":374,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":374,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-26","alert":"Sinkholed","trigger":"mdmacanada.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mdmacanada.cc/wp-content/cache/debloat/js/ef4e3253bdc98201cea6bd3dd2f0e6c8.js","fqdn":"mdmacanada.cc","domain":"mdmacanada.cc","tld":"cc"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://mdmacanada.cc/","date":"2026-03-26T23:10:45.423Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mdmacanada.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 29 Jan 2026 00:46:51 GMT","end":"Wed, 29 Apr 2026 01:45:19 GMT"},"fingerprint":{"sha1":"B7:47:48:08:4D:35:A4:0D:8D:CE:D7:71:A9:FA:22:B1:5B:A1:AC:40","sha256":"AE:86:CA:6D:76:85:1D:C6:34:96:AE:04:62:0C:A6:24:0A:DD:10:3E:9E:C3:97:21:29:1A:84:BA:B3:91:6A:6F"}}},"request":{"raw":"GET /wp-content/cache/debloat/js/ef4e3253bdc98201cea6bd3dd2f0e6c8.js HTTP/1.1\r\nHost: mdmacanada.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mdmacanada.cc/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 26 Mar 2026 23:10:45 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 668\r\ncache-control: public, max-age=604800\r\nexpires: Thu, 02 Apr 2026 23:10:45 GMT\r\nlast-modified: Sat, 25 May 2024 01:50:07 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nstrict-transport-security: max-age=63072000; includeSubDomains\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\netag: \r\ncf-cache-status: REVALIDATED\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=fmHPlCIogNvtWnh1Ty7vb%2BDbF5E2DDmIFD39oPN8Ng7eunDEf43T9ncIB1HykP822MaizPtivF%2FVTaUwSrhC8CFPkIoiQ5pZ%2F%2BDgKPGKV78Goh5%2BZC10hD3oeN0sAzsp\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e29d49dcf433181-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":1499,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (1464)","md5":"8c0498e2f1f7a684a8d2a3feb934b64b","sha1":"76099689ccaee466d4608da621c403b368dcae03","sha256":"ed5b5df9ceacfe76857ac51964972b0b417a215b2f50e837fd6b64bad7339c40","sha512":"5689b6b18071d6020a8a2733bb9e17c07960d9e65f4012ce93f21347fa24a24175509bca6920fe1b03d66fbc054d718671c23071af115b64000c01dfbea2e8dd","ssdeep":"","tlshash":"bd31308e7b5260440382c260e13e88ad773b687b700c0e897b30bcd93ee5e2c56519ad","first_seen":"2023-03-07T01:07:10Z","last_seen":"2026-04-25T20:55:37.479204Z","times_seen":67479,"resource_available":true,"data":null}},"time_used":394,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":394,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-26","alert":"Sinkholed","trigger":"mdmacanada.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mdmacanada.cc/wp-content/cache/debloat/js/f46048a2b69512180d74023faa6c1924.js","fqdn":"mdmacanada.cc","domain":"mdmacanada.cc","tld":"cc"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://mdmacanada.cc/","date":"2026-03-26T23:10:45.427Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mdmacanada.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 29 Jan 2026 00:46:51 GMT","end":"Wed, 29 Apr 2026 01:45:19 GMT"},"fingerprint":{"sha1":"B7:47:48:08:4D:35:A4:0D:8D:CE:D7:71:A9:FA:22:B1:5B:A1:AC:40","sha256":"AE:86:CA:6D:76:85:1D:C6:34:96:AE:04:62:0C:A6:24:0A:DD:10:3E:9E:C3:97:21:29:1A:84:BA:B3:91:6A:6F"}}},"request":{"raw":"GET /wp-content/cache/debloat/js/f46048a2b69512180d74023faa6c1924.js HTTP/1.1\r\nHost: mdmacanada.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mdmacanada.cc/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 26 Mar 2026 23:10:45 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 362\r\ncache-control: public, max-age=604800\r\nexpires: Thu, 02 Apr 2026 23:10:45 GMT\r\nlast-modified: Sat, 25 May 2024 01:50:07 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nstrict-transport-security: max-age=63072000; includeSubDomains\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=He1uQVWGuhyegJFapHF3OYOe45xlC3m8re6NS7Aevx4rmhluUjtKn1E7D4U8HuWc2J9ztgJnYQoIW6Zh1nlFUQyotXsDtcqu2%2F5VSNo0uOFgCxOibOEQglL6DqddBkKA\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e29d49ddf513181-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":902,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (646)","md5":"a60fe879cb5d491f47d6cbdf9f50b329","sha1":"59061fc832ed40aa35b9ffb263b6e050c74d3506","sha256":"bb3094f234df53b59c1e24084a009d82684c48f2b2d014693eb00d56af7a41df","sha512":"ba024c80d3978780a56c9f1c777a89075345f5d9909426c830a700eb3f3e69d9e7260cfcee9828a2dd8ebe57a893a6d00756b102671067ed2adb0bc8c7781d77","ssdeep":"","tlshash":"64113a66be81e0f194fa24a12b3b674eb3fd5325188045099165289e39a2f1bd20779a","first_seen":"2023-10-18T16:18:54Z","last_seen":"2026-04-23T03:42:59.379525Z","times_seen":152,"resource_available":true,"data":null}},"time_used":389,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":389,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-26","alert":"Sinkholed","trigger":"mdmacanada.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.trustindex.io/assets/platform/Trustindex/logo.svg","fqdn":"cdn.trustindex.io","domain":"trustindex.io","tld":"io"},"ip":{"addr":"3.167.2.9","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://mdmacanada.cc/","date":"2026-03-26T23:10:45.689Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.trustindex.io","organization":""},"issuer":{"commonName":"GoGetSSL RSA DV CA","organization":"GoGetSSL"},"validity":{"start":"Fri, 23 May 2025 00:00:00 GMT","end":"Tue, 23 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"4B:EB:D9:98:03:6A:DB:BE:49:BA:B2:3E:3A:B2:F6:D9:D7:62:B5:B7","sha256":"F8:20:DB:3C:4B:D6:B3:4C:28:EC:90:B0:25:20:9C:38:18:7C:FF:7B:DF:24:B2:C8:77:4C:33:96:D4:28:B7:B3"}}},"request":{"raw":"GET /assets/platform/Trustindex/logo.svg HTTP/1.1\r\nHost: cdn.trustindex.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mdmacanada.cc/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/svg+xml\r\ndate: Mon, 19 Jan 2026 06:33:33 GMT\r\nserver: Apache/2.4.52 (Ubuntu)\r\ncache-control: public, max-age=31536000, immutable\r\nlast-modified: Wed, 18 Oct 2023 08:47:47 GMT\r\ncontent-encoding: br\r\ncontent-security-policy: frame-ancestors 'self' *;\r\nreferrer-policy: origin\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: origin, x-requested-with, content-type\r\naccess-control-allow-methods: GET\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-embedder-policy: require-corp\r\netag: W/\"10a3-607f9b194acf8\"\r\nvary: accept-encoding\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 50c588fd3255d023d9b9021263f5fa0a.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P2\r\nx-amz-cf-id: qosLqIdMFCnbuniRJIK6_3zdxZd98HIUu8PhNnhKG7OGJBZuTSpOvg==\r\nage: 5762232\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server:2.4.52","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":4259,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"50106b6b88faa1bad22e4883b6a02d3e","sha1":"f178d500f9ee5fff75af478e910874efb2bd8ff5","sha256":"e382cf286f479d31e4e1f881e9f2f964aebd5f6884a8915a9845fb61f93250b1","sha512":"64384e91f6cd934b789649ec2c806bcd3acbac26b87e500619fd01ab4a6354e7173012f2306d5b5d5eb3505c25701200c1e69f434b27293a3aa18ff763c05307","ssdeep":"96:alJ/7NYbEYg3f9IpQQ0q2j+sZXmVZcBHk5e8WjBe+ovlm9MP3zs:alJDNYAnIpdn2+f8rJte++lm9Mbs","tlshash":"689113295368cb3da6534458de3c2582369890c7d395f1ecf5bfa913ab066f08074e78","first_seen":"2024-09-19T21:28:57.879693Z","last_seen":"2026-04-25T15:22:18.490758Z","times_seen":279,"resource_available":false,"data":null}},"time_used":1,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static-tracking.klaviyo.com/onsite/js/build-preview/commit-a9008e2652932ce924ec514ff7f88d1dd460ca1b/vendors~static~in_app_forms~signup_forms~post_identification_sync~web_personalization~client_identity~reviews~telemetry~customerHubRoot~renderFavoritesButton~renderFavoritesIconButton~FavoritesButtonElement~renderFaqWidget~.2cc0e8eaac59e1064c76.js?cb=2","fqdn":"static-tracking.klaviyo.com","domain":"klaviyo.com","tld":"com"},"ip":{"addr":"151.101.66.133","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://mdmacanada.cc/","date":"2026-03-26T23:10:45.761Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"static-tracking.klaviyo.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 10 Mar 2026 18:32:35 GMT","end":"Mon, 08 Jun 2026 18:32:34 GMT"},"fingerprint":{"sha1":"67:8B:C3:D0:ED:A5:30:2B:01:C2:00:BE:98:CB:EB:8B:10:29:07:77","sha256":"41:4B:FC:4B:5F:DF:5A:99:DF:7E:97:0B:FE:A9:EC:22:03:5C:8E:FC:FD:92:1D:47:5A:D8:78:1A:4A:13:F8:FB"}}},"request":{"raw":"GET /onsite/js/build-preview/commit-a9008e2652932ce924ec514ff7f88d1dd460ca1b/vendors~static~in_app_forms~signup_forms~post_identification_sync~web_personalization~client_identity~reviews~telemetry~customerHubRoot~renderFavoritesButton~renderFavoritesIconButton~FavoritesButtonElement~renderFaqWidget~.2cc0e8eaac59e1064c76.js?cb=2 HTTP/1.1\r\nHost: static-tracking.klaviyo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://mdmacanada.cc\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mdmacanada.cc/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nx-amz-id-2: Fjiaw4YRqZBms293/Md7Q590L+clZYgWGrqQQKcWK96GyUzNlch6uMgJO6n46UlIyUBSTap4alcAYwVmM4WHdwr69eV3CLet\r\nx-amz-request-id: FSGEFMM9PNZQEYWT\r\nlast-modified: Thu, 26 Mar 2026 15:03:48 GMT\r\netag: \"46ff458dba5a46b49add2560daf873aa\"\r\nx-amz-server-side-encryption: AES256\r\nx-amz-meta-entrypoints-hash: \r\ncache-control: max-age=2592000,stale-while-revalidate=10800\r\nx-amz-meta-surrogate-control: max-age=31536000\r\nx-amz-meta-surrogate-key: fender-asset-build-preview\r\nx-amz-version-id: nT3cvTy1mZvUSYSfFqED97mBQ.sAUI6u\r\ncontent-type: text/javascript\r\nserver: AmazonS3\r\ncontent-encoding: br\r\nvia: 1.1 varnish, 1.1 varnish\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ndate: Thu, 26 Mar 2026 23:10:45 GMT\r\nage: 209\r\nx-served-by: cache-lga21968-LGA, cache-hel1410028-HEL\r\nx-cache: HIT, HIT\r\nx-cache-hits: 65, 53\r\nvary: Accept-Encoding\r\ncontent-length: 4181\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}],"data":{"size":12742,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (12742), with no line terminators","md5":"46ff458dba5a46b49add2560daf873aa","sha1":"fa5a88ceb71f7583c8149581501373051641cd78","sha256":"7480f7417756fd082fca5534a1e178e4e5eca31e3b469cf0ef8e52d018894a58","sha512":"f33b64ba054373050aa4feea48d2d86655fbd804f6b1b1fb833856620af043267e0d02080f0e200fcffd6a711509ca058e655fffeaa22230951365276d2bce06","ssdeep":"384:GpBPOB47dGdl2h7H3BRLBq9ZX0QiFpQJevya:gP/Ydl2h7XTLB4kQUWa","tlshash":"4c4265c9f5d2f05653977c6581af140ff2bd6a68b28ed088e2b5d5e4ac7910f8023f1a","first_seen":"2026-03-09T17:13:19.532232Z","last_seen":"2026-04-24T00:51:00.721122Z","times_seen":7468,"resource_available":true,"data":null}},"time_used":239,"timings":{"blocked":104,"dns":36,"connect":26,"send":0,"wait":14,"receive":1,"ssl":55},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.trustindex.io/companies/d0/d00c2d176917gb01/richsnippet.json","fqdn":"cdn.trustindex.io","domain":"trustindex.io","tld":"io"},"ip":{"addr":"3.167.2.9","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://mdmacanada.cc/","date":"2026-03-26T23:10:45.768Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.trustindex.io","organization":""},"issuer":{"commonName":"GoGetSSL RSA DV CA","organization":"GoGetSSL"},"validity":{"start":"Fri, 23 May 2025 00:00:00 GMT","end":"Tue, 23 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"4B:EB:D9:98:03:6A:DB:BE:49:BA:B2:3E:3A:B2:F6:D9:D7:62:B5:B7","sha256":"F8:20:DB:3C:4B:D6:B3:4C:28:EC:90:B0:25:20:9C:38:18:7C:FF:7B:DF:24:B2:C8:77:4C:33:96:D4:28:B7:B3"}}},"request":{"raw":"GET /companies/d0/d00c2d176917gb01/richsnippet.json HTTP/1.1\r\nHost: cdn.trustindex.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://mdmacanada.cc\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mdmacanada.cc/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/json\r\ndate: Thu, 26 Mar 2026 06:12:04 GMT\r\nserver: Apache/2.4.52 (Ubuntu)\r\ncache-control: max-age=604800, public\r\netag: W/\"31d5-63efa554a8e57\"\r\nlast-modified: Wed, 17 Sep 2025 07:39:13 GMT\r\ncontent-encoding: br\r\nreferrer-policy: origin\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: origin, x-requested-with, content-type\r\naccess-control-allow-methods: GET\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-embedder-policy: require-corp\r\ncontent-security-policy: frame-ancestors 'self' *;\r\nvary: Accept-Encoding\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 7a83657ba338d5960d8d5abdbe0a3136.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P2\r\nx-amz-cf-id: jfOvwdZUkApPpUiP80KY4L1N0t4uIoj7SiSY4OctTH5cDx0PPL3Pzg==\r\nage: 61121\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Apache HTTP Server:2.4.52","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":12757,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"97d96e6cc064dbb4bf08eaf4ce72ee0c","sha1":"3e91dc351a4381bbe4e01e19320d20ac5a3b0524","sha256":"bb6a381a215737a58469562c1ac4aa051d76402be5acc3091d5493a6459da774","sha512":"0085d0dcc6320dfa66373d321d0032d50f2c188c2569630b168dc94baca29c907317981f96576b13c16902bf380d5752446891ddfcbdd6967d24faa257fdc745","ssdeep":"192:DEp3prp/jXYSjSQg8NZYy+rNvX4Khct3Rra/1A4xGs0P0vr8KV0WuWq+Xeh+YAx:op3prp0Wa7x","tlshash":"f0420216422151b78b8430e1bcf35ad673526155b3e4198e6cfeae3e90cf89b232b74d","first_seen":"2026-03-26T23:11:11.766961Z","last_seen":"2026-03-27T01:49:53.299591Z","times_seen":2,"resource_available":false,"data":null}},"time_used":25,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":25,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mdmacanada.cc/wp-content/plugins/ays-popup-box/public/css/animate.css?ver=4.4.0","fqdn":"mdmacanada.cc","domain":"mdmacanada.cc","tld":"cc"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://mdmacanada.cc/","date":"2026-03-26T23:10:47.422Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mdmacanada.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 29 Jan 2026 00:46:51 GMT","end":"Wed, 29 Apr 2026 01:45:19 GMT"},"fingerprint":{"sha1":"B7:47:48:08:4D:35:A4:0D:8D:CE:D7:71:A9:FA:22:B1:5B:A1:AC:40","sha256":"AE:86:CA:6D:76:85:1D:C6:34:96:AE:04:62:0C:A6:24:0A:DD:10:3E:9E:C3:97:21:29:1A:84:BA:B3:91:6A:6F"}}},"request":{"raw":"GET /wp-content/plugins/ays-popup-box/public/css/animate.css?ver=4.4.0 HTTP/1.1\r\nHost: mdmacanada.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mdmacanada.cc/\r\nCookie: wffn_flt=2026-3-26 23:10:45; wffn_timezone=UTC; wffn_is_mobile=false; wffn_browser=Firefox; wffn_referrer=; wffn_fl_url=/; sbjs_migrations=1418474375998%3D1; sbjs_current_add=fd%3D2026-03-26%2023%3A10%3A45%7C%7C%7Cep%3Dhttps%3A%2F%2Fmdmacanada.cc%2F%7C%7C%7Crf%3D%28none%29; sbjs_first_add=fd%3D2026-03-26%2023%3A10%3A45%7C%7C%7Cep%3Dhttps%3A%2F%2Fmdmacanada.cc%2F%7C%7C%7Crf%3D%28none%29; sbjs_current=typ%3Dtypein%7C%7C%7Csrc%3D%28direct%29%7C%7C%7Cmdm%3D%28none%29%7C%7C%7Ccmp%3D%28none%29%7C%7C%7Ccnt%3D%28none%29%7C%7C%7Ctrm%3D%28none%29%7C%7C%7Cid%3D%28none%29%7C%7C%7Cplt%3D%28none%29%7C%7C%7Cfmt%3D%28none%29%7C%7C%7Ctct%3D%28none%29; sbjs_first=typ%3Dtypein%7C%7C%7Csrc%3D%28direct%29%7C%7C%7Cmdm%3D%28none%29%7C%7C%7Ccmp%3D%28none%29%7C%7C%7Ccnt%3D%28none%29%7C%7C%7Ctrm%3D%28none%29%7C%7C%7Cid%3D%28none%29%7C%7C%7Cplt%3D%28none%29%7C%7C%7Cfmt%3D%28none%29%7C%7C%7Ctct%3D%28none%29; sbjs_udata=vst%3D1%7C%7C%7Cuip%3D%28none%29%7C%7C%7Cuag%3DMozilla%2F5.0%20%28Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0%29%20Gecko%2F20100101%20Firefox%2F134.0; sbjs_session=pgs%3D1%7C%7C%7Ccpg%3Dhttps%3A%2F%2Fmdmacanada.cc%2F; __kla_id=eyJjaWQiOiJOek5pTVRaaE1UQXRaakUxWXkwME5UaG1MVGt5WlRRdFpHVXpZelUwWmpFeU9HUm0ifQ==; fkcart_cart_qty=0; fkcart_cart_total=%3Cspan%20class%3D%22woocommerce-Price-amount%20amount%22%3E%3Cbdi%3E%3Cspan%20class%3D%22woocommerce-Price-currencySymbol%22%3E%26%2336%3B%3C%2Fspan%3E0.00%3C%2Fbdi%3E%3C%2Fspan%3E\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 26 Mar 2026 23:10:47 GMT\r\ncontent-type: text/css\r\ncontent-length: 3846\r\ncache-control: public, max-age=604800\r\nexpires: Thu, 02 Apr 2026 23:10:47 GMT\r\nlast-modified: Sat, 25 May 2024 01:48:48 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nstrict-transport-security: max-age=63072000; includeSubDomains\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=sA6i8vDGG3ua28UZaW%2BVIAzrNOxfWRT7ONQP91NSG%2BqlHA6%2ByaMNjrVAoHcDPa%2FOJV4AaY69pkEGtKYyOE%2FfTHK5eNzCstS94jNrBuaA6ndXZ%2FiqgusDeMb0Sg7KlyEL\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e29d4aa6ed33181-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":58023,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (57833)","md5":"37e40fb2401e9d466c5588da228b2394","sha1":"49641a74b404ae91e24d8a1c97fb3666b5d6e3af","sha256":"1e0311c1f09f8970cfee705d565137363e612ffdfbe8d02398fa4d473ba25a92","sha512":"bb3f1be0892ceca6aec51a3bf92e7be8e6f2dee23cd94075026f353ed957b9586686a27f8e381db80f9073d8690be5244851adcb762e05c276e6ca0e670004d7","ssdeep":"768:ekZbIJImb9IpIDPYwe1uA5kGDj3Cyg5lrce20qTIsFs1:ekZaPYwe1uA5kGDj3Cyg5lrce20qTo","tlshash":"f543f7af5891128991264ba6c7cc4e68473dc67314621cde73826c4b8f87faf33da647","first_seen":"2023-04-05T15:58:59Z","last_seen":"2026-04-25T20:03:35.156216Z","times_seen":1683,"resource_available":false,"data":null}},"time_used":349,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":348,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-26","alert":"Sinkholed","trigger":"mdmacanada.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"va.tawk.to/v1/widget-settings?propertyId=6562fe62ba9fcf18a80ef28f\u0026widgetId=1hg5b3cdr\u0026sv=null","fqdn":"va.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"172.66.161.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://mdmacanada.cc/","date":"2026-03-26T23:10:48.041Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tawk.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 06 Mar 2026 09:33:33 GMT","end":"Thu, 04 Jun 2026 10:33:27 GMT"},"fingerprint":{"sha1":"F0:6C:DC:32:63:CD:34:E3:15:CD:7F:77:F5:A3:64:E0:9B:36:95:83","sha256":"B6:7F:6E:A3:69:3E:0D:3B:04:3E:8B:65:86:7E:1D:5F:82:84:18:16:8D:AD:72:D5:51:E3:46:BC:BD:CD:BC:38"}}},"request":{"raw":"GET /v1/widget-settings?propertyId=6562fe62ba9fcf18a80ef28f\u0026widgetId=1hg5b3cdr\u0026sv=null HTTP/1.1\r\nHost: va.tawk.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://mdmacanada.cc/\r\nOrigin: https://mdmacanada.cc\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nx-served-by: visitor-application-preemptive-2lhl\r\naccess-control-allow-origin: *\r\naccess-control-max-age: 3600\r\naccess-control-allow-methods: GET,OPTIONS\r\naccess-control-allow-headers: content-type,x-tawk-token\r\ncache-control: public, max-age=7200, s-maxage=1800\r\netag: W/\"2-15-0\"\r\ncontent-type: application/json\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ndate: Thu, 26 Mar 2026 23:10:48 GMT\r\npriority: u=4,i=?0\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=0; includeSubDomains; preload\r\ncf-cache-status: MISS\r\nserver: cloudflare\r\ncf-ray: 9e29d4ae6b7ac272-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3142,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"41cb36a7f0717983c76429382f9d0c39","sha1":"d25a0890d215bc075397a7e01864688d2499e1f6","sha256":"87ccba22a9e3183f630feff2f4b6356b00f4c86c95822add6d0c484cdb3b04da","sha512":"5456666588e2c62a7bf6f3b2fed77b78acddf1b5a1a909907f3c407a6e96940e9da275b5f6e353ca2733c68ce43531db18ea515e3e218572afba94f8d5378348","ssdeep":"","tlshash":"495145294906dd39a3c9d25765de7623a83dd063e384190de198ad2cc3ebacd221174f","first_seen":"2026-03-26T23:11:11.768692Z","last_seen":"2026-03-27T01:49:53.337536Z","times_seen":2,"resource_available":false,"data":null}},"time_used":506,"timings":{"blocked":18,"dns":0,"connect":0,"send":0,"wait":488,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mdmacanada.cc/wp-content/cache/debloat/js/713f5653d35bb4cba9796ad60bfae7b6.js","fqdn":"mdmacanada.cc","domain":"mdmacanada.cc","tld":"cc"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://mdmacanada.cc/","date":"2026-03-26T23:10:45.373Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mdmacanada.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 29 Jan 2026 00:46:51 GMT","end":"Wed, 29 Apr 2026 01:45:19 GMT"},"fingerprint":{"sha1":"B7:47:48:08:4D:35:A4:0D:8D:CE:D7:71:A9:FA:22:B1:5B:A1:AC:40","sha256":"AE:86:CA:6D:76:85:1D:C6:34:96:AE:04:62:0C:A6:24:0A:DD:10:3E:9E:C3:97:21:29:1A:84:BA:B3:91:6A:6F"}}},"request":{"raw":"GET /wp-content/cache/debloat/js/713f5653d35bb4cba9796ad60bfae7b6.js HTTP/1.1\r\nHost: mdmacanada.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mdmacanada.cc/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 26 Mar 2026 23:10:45 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 760\r\ncache-control: public, max-age=604800\r\nexpires: Thu, 02 Apr 2026 23:10:45 GMT\r\nlast-modified: Fri, 13 Mar 2026 11:37:08 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nstrict-transport-security: max-age=63072000; includeSubDomains\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5XU7cN5AYiwAJWAxOwqO8a5iZA9HsJ%2B%2Fh1lTSOMCb%2BOUk%2FenuYkyl0jaa5Q%2BWM64vT3oxfxPUz8v5zuEPKV7C3tB26HibTZCkg3PLhd1LKuPeaFgCCmFlNoqjtZ%2F4eEf\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e29d49d8eb83181-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":1720,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (1690)","md5":"691a1e43450e7cda541a3bd6f10fd5db","sha1":"d3a78cb77ccec297c9d32fee99a2a4761f604a8c","sha256":"8b083f64f2e9e8ac445c730dfce7013cc6449ce155fd1c2f42b60edba4ecb4b1","sha512":"a32ebe942e704da64381e392ffc20ed4f9d8daf71227a06f2dc0ca5c037675ab67e5b5a5ddf9bcb77b1872308daa780cc0e6ec5a2469bcd51444ece4f3b3de0d","ssdeep":"","tlshash":"c031b6d93095a8da06071490463f1207f2f91e27eecd98906264e8f50ab077a01ebf6b","first_seen":"2024-03-20T13:06:17Z","last_seen":"2026-04-25T21:02:59.676654Z","times_seen":109610,"resource_available":true,"data":null}},"time_used":384,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":384,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-26","alert":"Sinkholed","trigger":"mdmacanada.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mdmacanada.cc/wp-content/uploads/2023/08/yellow-crystal-bk-300x300.png","fqdn":"mdmacanada.cc","domain":"mdmacanada.cc","tld":"cc"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://mdmacanada.cc/","date":"2026-03-26T23:10:45.514Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mdmacanada.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 29 Jan 2026 00:46:51 GMT","end":"Wed, 29 Apr 2026 01:45:19 GMT"},"fingerprint":{"sha1":"B7:47:48:08:4D:35:A4:0D:8D:CE:D7:71:A9:FA:22:B1:5B:A1:AC:40","sha256":"AE:86:CA:6D:76:85:1D:C6:34:96:AE:04:62:0C:A6:24:0A:DD:10:3E:9E:C3:97:21:29:1A:84:BA:B3:91:6A:6F"}}},"request":{"raw":"GET /wp-content/uploads/2023/08/yellow-crystal-bk-300x300.png HTTP/1.1\r\nHost: mdmacanada.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mdmacanada.cc/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 26 Mar 2026 23:10:45 GMT\r\ncontent-type: image/png\r\ncontent-length: 106958\r\ncache-control: public, max-age=604800\r\nexpires: Thu, 02 Apr 2026 23:10:45 GMT\r\nlast-modified: Sat, 25 May 2024 01:49:06 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nstrict-transport-security: max-age=63072000; includeSubDomains\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=RKfcEllcaYgOKqS8quwgXdQ55OgYjl43kQqOMLOv8AxYPeuY1E6fE6dkC0CpfMOn8%2BzQa35Z1AgSSrvTGAmE9vN%2FB7nhSokLBZcf0aBewEusOlOuC2Um3rTwWrClr%2FwV\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e29d49e68673181-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":106958,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 300 x 300, 8-bit/color RGB, non-interlaced","md5":"3602044ad1394efa1dfa9bbc70420a0d","sha1":"cbc43c605997959ccf2b19366b0641f2cfcb3438","sha256":"327e6fa82852a0721b3f9f2b570c2dfa652a7e9d7d34e32a14866ab1b6cf0ecc","sha512":"dd9df64804a03cfa3d28f6ddc5e8f8cadee6b160c09b78d84f7d2089ada51b74a60340a03f3212364d9d211d3368110cee02210e1d12cd24fb95c5ed2e5b71db","ssdeep":"1536:R+2O+fZRmrSQMUNxv5gjTtlGEhGOd7bVDnOSTF0njM1889kbUDZWk3bva295kS:fO+lUfWllGEhnBlnSvPbUDH3LaYX","tlshash":"4ea312bd23633fb2b2f78fa3ce56a2e6ad4ceda40c5b0bd369cca52932584514657005","first_seen":"2026-03-26T23:11:11.770301Z","last_seen":"2026-03-27T01:49:53.32066Z","times_seen":2,"resource_available":false,"data":null}},"time_used":677,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":456,"receive":221,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-26","alert":"Sinkholed","trigger":"mdmacanada.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.trustindex.io/assets/platform/Trustindex/icon.svg","fqdn":"cdn.trustindex.io","domain":"trustindex.io","tld":"io"},"ip":{"addr":"3.167.2.9","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://mdmacanada.cc/","date":"2026-03-26T23:10:45.692Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.trustindex.io","organization":""},"issuer":{"commonName":"GoGetSSL RSA DV CA","organization":"GoGetSSL"},"validity":{"start":"Fri, 23 May 2025 00:00:00 GMT","end":"Tue, 23 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"4B:EB:D9:98:03:6A:DB:BE:49:BA:B2:3E:3A:B2:F6:D9:D7:62:B5:B7","sha256":"F8:20:DB:3C:4B:D6:B3:4C:28:EC:90:B0:25:20:9C:38:18:7C:FF:7B:DF:24:B2:C8:77:4C:33:96:D4:28:B7:B3"}}},"request":{"raw":"GET /assets/platform/Trustindex/icon.svg HTTP/1.1\r\nHost: cdn.trustindex.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mdmacanada.cc/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/svg+xml\r\ncontent-length: 864\r\ndate: Fri, 19 Sep 2025 22:06:33 GMT\r\nserver: Apache/2.4.52 (Ubuntu)\r\ncache-control: max-age=31536000, public\r\nlast-modified: Wed, 18 Oct 2023 08:47:47 GMT\r\netag: \"360-607f9b194acf8\"\r\naccept-ranges: bytes\r\nreferrer-policy: origin\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: origin, x-requested-with, content-type\r\naccess-control-allow-methods: GET\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-embedder-policy: require-corp\r\ncontent-security-policy: frame-ancestors 'self' *;\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 50c588fd3255d023d9b9021263f5fa0a.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P2\r\nx-amz-cf-id: -WOds1L9TZHvtd75vg1wsTMRBCWsDb3f5eXkniqmcieqBEKIU9phZg==\r\nage: 16247052\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Apache HTTP Server:2.4.52","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":864,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"e3d4870ddf0c2de2deb0ff0682a970d5","sha1":"5a7b031302a7ec68d49cdf2d30db917925aca77c","sha256":"a45051a62b9d23d581e01520f2c65cb32788a9e9859c990b2f5bb71ab27da9ce","sha512":"478b867464cf7c93aba06c095613d8d3abe945cd858835d652c0417a09ab2b56b96fcaec699c9e48cb7346f4f1b19ac1b3d0423b784848534e43a5610369714a","ssdeep":"","tlshash":"b711ef05434954ad20694538ab6c12c22371f5cb918518d8e7eb7e2deaac0f8970d3f4","first_seen":"2023-07-05T03:34:25Z","last_seen":"2026-04-25T15:22:18.552633Z","times_seen":267,"resource_available":false,"data":null}},"time_used":1,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.trustindex.io/assets/default-avatar/noprofile-07.svg","fqdn":"cdn.trustindex.io","domain":"trustindex.io","tld":"io"},"ip":{"addr":"3.167.2.9","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://mdmacanada.cc/","date":"2026-03-26T23:10:45.722Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.trustindex.io","organization":""},"issuer":{"commonName":"GoGetSSL RSA DV CA","organization":"GoGetSSL"},"validity":{"start":"Fri, 23 May 2025 00:00:00 GMT","end":"Tue, 23 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"4B:EB:D9:98:03:6A:DB:BE:49:BA:B2:3E:3A:B2:F6:D9:D7:62:B5:B7","sha256":"F8:20:DB:3C:4B:D6:B3:4C:28:EC:90:B0:25:20:9C:38:18:7C:FF:7B:DF:24:B2:C8:77:4C:33:96:D4:28:B7:B3"}}},"request":{"raw":"GET /assets/default-avatar/noprofile-07.svg HTTP/1.1\r\nHost: cdn.trustindex.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mdmacanada.cc/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/svg+xml\r\ncontent-length: 815\r\ndate: Thu, 08 Jan 2026 11:40:46 GMT\r\nserver: Apache/2.4.52 (Ubuntu)\r\ncache-control: public, max-age=31536000, immutable\r\nlast-modified: Wed, 11 Oct 2023 15:10:56 GMT\r\netag: \"32f-607723ae86b32\"\r\naccept-ranges: bytes\r\nreferrer-policy: origin\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: origin, x-requested-with, content-type\r\naccess-control-allow-methods: GET\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-embedder-policy: require-corp\r\ncontent-security-policy: frame-ancestors 'self' *;\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 50c588fd3255d023d9b9021263f5fa0a.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P2\r\nx-amz-cf-id: -Hbp35nw0zoX0DyajNm2L4FrRTPsF408K3GZzz21ws3ezi1uLvJ2dQ==\r\nage: 6694199\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Apache HTTP Server:2.4.52","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":815,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"32b3b259f25306c8de26f0f248bdda1c","sha1":"6851df7b9f6110bea424f8bbffa0eb18c343ef4c","sha256":"1043988e891a229f3a2f016c8a0dc56f3f4b5d6aba81744c8f5e4a248ee4e7a1","sha512":"25cca919df063a22c41c065490eecdb5848982fa0313ba4f4777d4c750f0d572d474a136cbb20c762a76427ad3ffaee2b9549ea5aae6b2e52ca21856ea6a9f3a","ssdeep":"","tlshash":"f0011288c248992a8030c378a2f5b5d2411702978a019f4ed5d13b3bd53d4f77a443ef","first_seen":"2023-06-30T07:04:00Z","last_seen":"2026-04-25T15:22:18.627348Z","times_seen":84,"resource_available":false,"data":null}},"time_used":1,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.klaviyo.com/onsite/js/build-preview/commit-a9008e2652932ce924ec514ff7f88d1dd460ca1b/runtime.ec64feebd3991d563e19.js?cb=2","fqdn":"static.klaviyo.com","domain":"klaviyo.com","tld":"com"},"ip":{"addr":"151.101.2.133","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://mdmacanada.cc/","date":"2026-03-26T23:10:45.762Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"static.klaviyo.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 02 Mar 2026 22:32:36 GMT","end":"Sun, 31 May 2026 22:32:35 GMT"},"fingerprint":{"sha1":"36:11:62:1C:62:9E:7B:97:05:37:F9:A2:98:8F:68:41:2E:6B:D7:B5","sha256":"05:31:1A:E8:28:B5:E9:56:9C:39:CF:3B:A4:17:62:2A:BD:15:10:60:75:8E:D0:BA:D6:B8:02:1F:E1:A0:20:F8"}}},"request":{"raw":"GET /onsite/js/build-preview/commit-a9008e2652932ce924ec514ff7f88d1dd460ca1b/runtime.ec64feebd3991d563e19.js?cb=2 HTTP/1.1\r\nHost: static.klaviyo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://mdmacanada.cc\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mdmacanada.cc/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nx-amz-id-2: s8uIDirX46hC3ZUKpzE9MI2jNk0pJEKfrWc5Up8bB81NqGlnASTAWLtot1yRu0z+eAXpPfC2hHg=\r\nx-amz-request-id: FSGFW3FSNNGE44NM\r\nlast-modified: Thu, 26 Mar 2026 15:02:59 GMT\r\netag: \"4d3bb9c4c97fe6e54b5e62d21c989072\"\r\nx-amz-server-side-encryption: AES256\r\nx-amz-meta-entrypoints-hash: \r\ncache-control: max-age=2592000,stale-while-revalidate=10800\r\nx-amz-meta-surrogate-control: max-age=31536000\r\nx-amz-meta-surrogate-key: fender-asset-build-preview\r\nx-amz-version-id: vV9VuqJ1ihuPOstYHinOV5j_LJugSigR\r\ncontent-type: text/javascript\r\nserver: AmazonS3\r\ncontent-encoding: br\r\nvia: 1.1 varnish, 1.1 varnish\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ndate: Thu, 26 Mar 2026 23:10:45 GMT\r\nage: 210\r\nx-served-by: cache-lga21937-LGA, cache-hel1410029-HEL\r\nx-cache: HIT, HIT\r\nx-cache-hits: 68, 46\r\nvary: Accept-Encoding\r\ncontent-length: 8451\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":22064,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (22064), with no line terminators","md5":"4d3bb9c4c97fe6e54b5e62d21c989072","sha1":"c02300c36ceacaff01c133915e53bad39a85bd0a","sha256":"f26163935953bb759fe8b8a157edcfc6baa8b895d6ba2b6aefd113a7668f0bb2","sha512":"d7e368b1fa89cee68edaf6d1f0fac01e39ea0b751104bd23b5f5a561bd2266990f062bee9a922f898e217c552514845d5b9936cce198eab141fb19b85abe1ca2","ssdeep":"384:MbTLjg9uCGg9dz5zmNr6P1VR7DJ1n+kBkxcncBHFBUkBJBi9VC:L9v3dmNGzRvJ1n+qkuc5/UiLi9w","tlshash":"d4a22bed638ce8bc18111480fe1e9094becdb0312c4a96b2cfb571643865d6b5ef9b17","first_seen":"2026-03-26T15:38:39.48847Z","last_seen":"2026-03-27T15:24:05.260194Z","times_seen":273,"resource_available":true,"data":null}},"time_used":172,"timings":{"blocked":70,"dns":1,"connect":27,"send":0,"wait":13,"receive":2,"ssl":55},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"a.klaviyo.com/forms/api/v3/geo-ip","fqdn":"a.klaviyo.com","domain":"klaviyo.com","tld":"com"},"ip":{"addr":"172.64.147.119","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://mdmacanada.cc/","date":"2026-03-26T23:10:46.185Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"klaviyo.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Sun, 22 Feb 2026 17:15:54 GMT","end":"Sat, 23 May 2026 18:15:51 GMT"},"fingerprint":{"sha1":"DF:78:56:75:A5:1C:C9:B7:B8:D5:66:88:6B:BD:7D:CC:14:32:12:89","sha256":"07:4B:ED:5D:CD:41:AB:B2:3C:E3:4A:BC:EC:51:9B:96:07:EA:23:20:06:18:25:47:6A:1D:64:BA:2C:8F:1F:A7"}}},"request":{"raw":"GET /forms/api/v3/geo-ip HTTP/1.1\r\nHost: a.klaviyo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://mdmacanada.cc\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mdmacanada.cc/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 26 Mar 2026 23:10:46 GMT\r\ncontent-type: application/json; charset=utf-8\r\ncontent-length: 43\r\ncf-ray: 9e29d4a32c5bb4ee-OSL\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: \r\naccess-control-allow-methods: GET\r\naccess-control-allow-origin: *\r\naccess-control-max-age: 86400\r\nallow: GET, OPTIONS\r\ncache-control: max-age=7200\r\ncontent-language: en-us\r\ncontent-security-policy: object-src 'none'; base-uri 'none'; script-src 'report-sample' 'strict-dynamic' 'unsafe-eval'; frame-ancestors 'self' login.bigcommerce.com *.mybigcommerce.com admin.shopify.com klaviyo.file.force.com klaviyo.lightning.force.com klaviyo.my.salesforce.com; report-uri /csp/\r\nvary: Accept-Language, Cookie, Origin\r\nx-klaviyo-req-id: ee62b099-d2b9-434d-aea5-d20c044c10c2\r\nx-envoy-upstream-service-time: 16\r\ncf-cache-status: DYNAMIC\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\nserver: cloudflare\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}],"data":{"size":43,"size_decoded":0,"mime_type":"application/json; charset=utf-8","magic":"JSON text data","md5":"3f0d31b87c04be5630900cb70b2c5384","sha1":"48da531f7a971d213ea1cfacd3313bfa5cfa186e","sha256":"bbdbcbd2f4b1e8f59644055c7cca8169cc9c77e15a82625d118738a650c36726","sha512":"7b6c37f54ea0d17fd6ef6e237bdad88cb9799a79d79d35c2aaf2860acb99a990d610b6da0aee9586489ef27c7d6fcb3fa86ded972ff88f0fbb28918e9600f0d9","ssdeep":"","tlshash":"bd90021454ec4d1558724141143a324901a98201c19a000688405741878108d9010184","first_seen":"2025-07-10T14:37:54.638672Z","last_seen":"2026-04-25T20:46:10.869346Z","times_seen":10366,"resource_available":false,"data":null}},"time_used":294,"timings":{"blocked":77,"dns":56,"connect":1,"send":0,"wait":143,"receive":0,"ssl":13},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mdmacanada.cc/wp-content/uploads/2023/08/cropped-MDMA-SiteLogo-32x32.png","fqdn":"mdmacanada.cc","domain":"mdmacanada.cc","tld":"cc"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mdmacanada.cc/","date":"2026-03-26T23:10:46.822Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mdmacanada.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 29 Jan 2026 00:46:51 GMT","end":"Wed, 29 Apr 2026 01:45:19 GMT"},"fingerprint":{"sha1":"B7:47:48:08:4D:35:A4:0D:8D:CE:D7:71:A9:FA:22:B1:5B:A1:AC:40","sha256":"AE:86:CA:6D:76:85:1D:C6:34:96:AE:04:62:0C:A6:24:0A:DD:10:3E:9E:C3:97:21:29:1A:84:BA:B3:91:6A:6F"}}},"request":{"raw":"GET /wp-content/uploads/2023/08/cropped-MDMA-SiteLogo-32x32.png HTTP/1.1\r\nHost: mdmacanada.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mdmacanada.cc/\r\nCookie: wffn_flt=2026-3-26 23:10:45; wffn_timezone=UTC; wffn_is_mobile=false; wffn_browser=Firefox; wffn_referrer=; wffn_fl_url=/; sbjs_migrations=1418474375998%3D1; sbjs_current_add=fd%3D2026-03-26%2023%3A10%3A45%7C%7C%7Cep%3Dhttps%3A%2F%2Fmdmacanada.cc%2F%7C%7C%7Crf%3D%28none%29; sbjs_first_add=fd%3D2026-03-26%2023%3A10%3A45%7C%7C%7Cep%3Dhttps%3A%2F%2Fmdmacanada.cc%2F%7C%7C%7Crf%3D%28none%29; sbjs_current=typ%3Dtypein%7C%7C%7Csrc%3D%28direct%29%7C%7C%7Cmdm%3D%28none%29%7C%7C%7Ccmp%3D%28none%29%7C%7C%7Ccnt%3D%28none%29%7C%7C%7Ctrm%3D%28none%29%7C%7C%7Cid%3D%28none%29%7C%7C%7Cplt%3D%28none%29%7C%7C%7Cfmt%3D%28none%29%7C%7C%7Ctct%3D%28none%29; sbjs_first=typ%3Dtypein%7C%7C%7Csrc%3D%28direct%29%7C%7C%7Cmdm%3D%28none%29%7C%7C%7Ccmp%3D%28none%29%7C%7C%7Ccnt%3D%28none%29%7C%7C%7Ctrm%3D%28none%29%7C%7C%7Cid%3D%28none%29%7C%7C%7Cplt%3D%28none%29%7C%7C%7Cfmt%3D%28none%29%7C%7C%7Ctct%3D%28none%29; sbjs_udata=vst%3D1%7C%7C%7Cuip%3D%28none%29%7C%7C%7Cuag%3DMozilla%2F5.0%20%28Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0%29%20Gecko%2F20100101%20Firefox%2F134.0; sbjs_session=pgs%3D1%7C%7C%7Ccpg%3Dhttps%3A%2F%2Fmdmacanada.cc%2F; __kla_id=eyJjaWQiOiJOek5pTVRaaE1UQXRaakUxWXkwME5UaG1MVGt5WlRRdFpHVXpZelUwWmpFeU9HUm0ifQ==\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 26 Mar 2026 23:10:47 GMT\r\ncontent-type: image/png\r\ncontent-length: 1531\r\ncache-control: public, max-age=604800\r\nexpires: Thu, 02 Apr 2026 23:10:47 GMT\r\nlast-modified: Sat, 25 May 2024 01:49:05 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nstrict-transport-security: max-age=63072000; includeSubDomains\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\npriority: u=6,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=b%2BwAJaV1R%2FasEti4v6Bf8Ltu7XymqjnmJq6JCvBeaeR5%2BhvwWWjcn%2FNQCG3GE03YhIZDIXdx1%2Bu4p1e8UGXA8ax%2BQeVlyqfTHulyreaiPGQwkcnbRRZRIcPION8IMfkr\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e29d4a6aff63181-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":1531,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 32 x 32, 8-bit colormap, non-interlaced","md5":"0eacba17698be9b79d56ebf52b38a6cc","sha1":"6f9ecb76d8fe8afd2b3f8de90ef9a0935af1eca2","sha256":"82a478b710c9f09b31dbae0e288627e3dcbff86823c0285c80968dee6ca46f7f","sha512":"fb8a5953d66fe58b0b0c0522624aadcfbb9e16e19fb142f1c8f81085d3aa73ee768524e5f0ab1889400698e02db4ca12d72b261f16486967f0b86eb1ed74c5d6","ssdeep":"","tlshash":"363129a464298d2419fff278f0759ec08df30049480ba51d023f6842f6d3058b5c0ac5","first_seen":"2026-03-26T23:11:11.774229Z","last_seen":"2026-03-27T01:49:53.393435Z","times_seen":2,"resource_available":false,"data":null}},"time_used":350,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":350,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-26","alert":"Sinkholed","trigger":"mdmacanada.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mdmacanada.cc/wp-content/themes/flatsome/assets/css/icons/fl-icons.woff2?v=3.18.7","fqdn":"mdmacanada.cc","domain":"mdmacanada.cc","tld":"cc"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://mdmacanada.cc/","date":"2026-03-26T23:10:45.442Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mdmacanada.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 29 Jan 2026 00:46:51 GMT","end":"Wed, 29 Apr 2026 01:45:19 GMT"},"fingerprint":{"sha1":"B7:47:48:08:4D:35:A4:0D:8D:CE:D7:71:A9:FA:22:B1:5B:A1:AC:40","sha256":"AE:86:CA:6D:76:85:1D:C6:34:96:AE:04:62:0C:A6:24:0A:DD:10:3E:9E:C3:97:21:29:1A:84:BA:B3:91:6A:6F"}}},"request":{"raw":"GET /wp-content/themes/flatsome/assets/css/icons/fl-icons.woff2?v=3.18.7 HTTP/1.1\r\nHost: mdmacanada.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mdmacanada.cc/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 26 Mar 2026 23:10:45 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 7244\r\ncache-control: public, max-age=604800\r\nexpires: Thu, 02 Apr 2026 23:10:45 GMT\r\nlast-modified: Sat, 25 May 2024 01:48:56 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nstrict-transport-security: max-age=63072000; includeSubDomains\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=oTatqLjCnG0%2FYZjFkUNmRV%2BLkt8wK6aCenPvuh99NQxB56PnuzHne82PfEoYIpieCpirZzAH3%2F5rIEO%2BjCtPYaBKQierfv2ApprWww%2BFkL8Qv6K0Czk9PRhBTFxY5tvj\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e29d49e0fa23181-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":7244,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 7244, version 1.0","md5":"239a062dc84e13d3bf0264055163f5b8","sha1":"df819f2954a4738a6bf7adfc692e16cc09d15ef2","sha256":"bc425300c8a8a921a3d481e8b2395ef3c6cac4333b7326ceb1f5963fa6102b77","sha512":"538e9bd520386b1e83597c74cc22343cbf8c024bd645fb38586df42abc8dfb94763a2b332c091a9b88d4bd93e9c6be893b3bdb39a95ded59b07a0868872b3fb7","ssdeep":"192:I+1ZEes2m7X8Yb1ASJaPOCD9P2P3v5oOy:IsOzxb1AoamW9P2vv8","tlshash":"58e18ead66249e8ede70e33cd234f73a4cf87d204a9ea68be54bd2b506558ca091409c","first_seen":"2023-11-11T17:21:40Z","last_seen":"2026-04-25T20:47:57.491736Z","times_seen":3580,"resource_available":false,"data":null}},"time_used":358,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":358,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-26","alert":"Sinkholed","trigger":"mdmacanada.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.trustindex.io/assets/default-avatar/noprofile-10.svg","fqdn":"cdn.trustindex.io","domain":"trustindex.io","tld":"io"},"ip":{"addr":"3.167.2.9","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://mdmacanada.cc/","date":"2026-03-26T23:10:45.706Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.trustindex.io","organization":""},"issuer":{"commonName":"GoGetSSL RSA DV CA","organization":"GoGetSSL"},"validity":{"start":"Fri, 23 May 2025 00:00:00 GMT","end":"Tue, 23 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"4B:EB:D9:98:03:6A:DB:BE:49:BA:B2:3E:3A:B2:F6:D9:D7:62:B5:B7","sha256":"F8:20:DB:3C:4B:D6:B3:4C:28:EC:90:B0:25:20:9C:38:18:7C:FF:7B:DF:24:B2:C8:77:4C:33:96:D4:28:B7:B3"}}},"request":{"raw":"GET /assets/default-avatar/noprofile-10.svg HTTP/1.1\r\nHost: cdn.trustindex.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mdmacanada.cc/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/svg+xml\r\ncontent-length: 815\r\ndate: Thu, 08 Jan 2026 08:02:20 GMT\r\nserver: Apache/2.4.52 (Ubuntu)\r\ncache-control: public, max-age=31536000, immutable\r\nlast-modified: Wed, 11 Oct 2023 15:10:56 GMT\r\netag: \"32f-607723ae86b32\"\r\naccept-ranges: bytes\r\nreferrer-policy: origin\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: origin, x-requested-with, content-type\r\naccess-control-allow-methods: GET\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-embedder-policy: require-corp\r\ncontent-security-policy: frame-ancestors 'self' *;\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 50c588fd3255d023d9b9021263f5fa0a.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P2\r\nx-amz-cf-id: RmRR4_tt4E9yME8L3I-tQrd-BgJc6Uur6YuLlknSolsOJa4kMbcUbQ==\r\nage: 6707305\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Apache HTTP Server:2.4.52","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":815,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"a0c72d7447369c9e215df55846ab542c","sha1":"28caf422adf4f074f4befc29bbe29b2e4c142bde","sha256":"94f9b7ee5a31cef567d769a77921de1d1d03e4edc636372379a2557bf6a284cc","sha512":"ae47959f647507ab6c45ef89e25088d9d3cd7b7f0df2c7a94486fb3f26980c4e915d4817a5b231cff3040ed13afe04f7a2ac5aa54698bdd1019ee2c3a51bdca6","ssdeep":"","tlshash":"6d011288c248992a8420c378a2b6b5d2411742478b019f4ed5d12b3bd43e4f77a443ef","first_seen":"2023-05-21T20:18:35Z","last_seen":"2026-04-25T15:22:18.664779Z","times_seen":107,"resource_available":false,"data":null}},"time_used":1,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.trustindex.io/assets/icon/ti-verified.svg","fqdn":"cdn.trustindex.io","domain":"trustindex.io","tld":"io"},"ip":{"addr":"3.167.2.9","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mdmacanada.cc/","date":"2026-03-26T23:10:45.781Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.trustindex.io","organization":""},"issuer":{"commonName":"GoGetSSL RSA DV CA","organization":"GoGetSSL"},"validity":{"start":"Fri, 23 May 2025 00:00:00 GMT","end":"Tue, 23 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"4B:EB:D9:98:03:6A:DB:BE:49:BA:B2:3E:3A:B2:F6:D9:D7:62:B5:B7","sha256":"F8:20:DB:3C:4B:D6:B3:4C:28:EC:90:B0:25:20:9C:38:18:7C:FF:7B:DF:24:B2:C8:77:4C:33:96:D4:28:B7:B3"}}},"request":{"raw":"GET /assets/icon/ti-verified.svg HTTP/1.1\r\nHost: cdn.trustindex.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://cdn.trustindex.io/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/svg+xml\r\ndate: Thu, 29 Jan 2026 07:48:41 GMT\r\nserver: Apache/2.4.52 (Ubuntu)\r\ncache-control: public, max-age=31536000, immutable\r\nlast-modified: Wed, 19 Jun 2024 14:05:53 GMT\r\ncontent-encoding: br\r\ncontent-security-policy: frame-ancestors 'self' *;\r\nreferrer-policy: origin\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: origin, x-requested-with, content-type\r\naccess-control-allow-methods: GET\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-embedder-policy: require-corp\r\netag: W/\"766-61b3eb2464c39\"\r\nvary: accept-encoding\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 50c588fd3255d023d9b9021263f5fa0a.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P2\r\nx-amz-cf-id: K-7Ml3tE1WAHZbGvaTbsfFcTsDMVHFPIiom8JkPE4JYYar2w1OiZ6A==\r\nage: 4893724\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Apache HTTP Server:2.4.52","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":1894,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"d6e1c567d5dc80b402cf86ed763c51f1","sha1":"ffa5327947f1b3d9fb91b97b7659c812c775d8d5","sha256":"c32230b8d1bab877a41b9680e9f7f83062e4677396162f5ae602e8027d53a31c","sha512":"72c3df81d687431fc3f6187aa7eae02d9786b0baf942a295d40a9c389bd64d795ef5614f1aef927fcc86c460c5a3828ec93ed2b042530d170056a15dca66881f","ssdeep":"","tlshash":"2f41ae95d184df394cc2c59cdbbb91f310a2a809e1f6aecdb9f7599c640e8a4f460524","first_seen":"2024-08-01T15:14:37Z","last_seen":"2026-04-25T18:53:31.823857Z","times_seen":592,"resource_available":false,"data":null}},"time_used":2,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.trustindex.io/assets/fonts/poppins/latin-600.woff2","fqdn":"cdn.trustindex.io","domain":"trustindex.io","tld":"io"},"ip":{"addr":"3.167.2.9","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://mdmacanada.cc/","date":"2026-03-26T23:10:45.785Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.trustindex.io","organization":""},"issuer":{"commonName":"GoGetSSL RSA DV CA","organization":"GoGetSSL"},"validity":{"start":"Fri, 23 May 2025 00:00:00 GMT","end":"Tue, 23 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"4B:EB:D9:98:03:6A:DB:BE:49:BA:B2:3E:3A:B2:F6:D9:D7:62:B5:B7","sha256":"F8:20:DB:3C:4B:D6:B3:4C:28:EC:90:B0:25:20:9C:38:18:7C:FF:7B:DF:24:B2:C8:77:4C:33:96:D4:28:B7:B3"}}},"request":{"raw":"GET /assets/fonts/poppins/latin-600.woff2 HTTP/1.1\r\nHost: cdn.trustindex.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nReferer: https://cdn.trustindex.io/\r\nOrigin: https://mdmacanada.cc\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: font/woff2\r\ncontent-length: 8000\r\ndate: Tue, 06 Jan 2026 12:52:53 GMT\r\nserver: Apache/2.4.52 (Ubuntu)\r\ncache-control: public, max-age=31536000, immutable\r\nlast-modified: Thu, 24 Jul 2025 12:16:05 GMT\r\netag: \"1f40-63aabca2b29db\"\r\naccept-ranges: bytes\r\nreferrer-policy: origin\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: origin, x-requested-with, content-type\r\naccess-control-allow-methods: GET\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-embedder-policy: require-corp\r\ncontent-security-policy: frame-ancestors 'self' *;\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 7a83657ba338d5960d8d5abdbe0a3136.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P2\r\nx-amz-cf-id: UvQk6kvLTNiLwYlI7GKqLE2pYmQt1rMTSV2b_Squ8PpZ6mw7LcS2yA==\r\nage: 6862672\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server:2.4.52","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":8000,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 8000, version 1.0","md5":"72993dddf88a63e8f226656f7de88e57","sha1":"179f97ec0275f09603a8db94d4380eb584d81cd5","sha256":"f4e80d9dfd374d02989b87a27b5ed4cb78fbb177c27f1478e9a8b0afb7513149","sha512":"7c20165f9d22a86341e841fd58526209017dcde2afe2d0d2a89fe853d95dc69f658d25cf798c71f452dab09843fc808c1ae87a60b1284134163abf5a1d93e50a","ssdeep":"192:GDonmfrEdXT8WrxzRXwyQo3zGEOM7Y2hOMgWnsfYSjv4ENFGwrlKJ:8onPxTzjgyQSzLPXOTIYHJAJ","tlshash":"08f1b0ffa92456c4df692475a5044f27623652b4dd35cb2f496f3e12d2d74224bcc4c1","first_seen":"2023-04-05T18:53:14Z","last_seen":"2026-04-25T21:03:03.500525Z","times_seen":217524,"resource_available":false,"data":null}},"time_used":4,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":4,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mdmacanada.cc/wp-content/cache/debloat/js/4addc29de1119df20103d3c995cf8b92.js","fqdn":"mdmacanada.cc","domain":"mdmacanada.cc","tld":"cc"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://mdmacanada.cc/","date":"2026-03-26T23:10:45.364Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mdmacanada.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 29 Jan 2026 00:46:51 GMT","end":"Wed, 29 Apr 2026 01:45:19 GMT"},"fingerprint":{"sha1":"B7:47:48:08:4D:35:A4:0D:8D:CE:D7:71:A9:FA:22:B1:5B:A1:AC:40","sha256":"AE:86:CA:6D:76:85:1D:C6:34:96:AE:04:62:0C:A6:24:0A:DD:10:3E:9E:C3:97:21:29:1A:84:BA:B3:91:6A:6F"}}},"request":{"raw":"GET /wp-content/cache/debloat/js/4addc29de1119df20103d3c995cf8b92.js HTTP/1.1\r\nHost: mdmacanada.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mdmacanada.cc/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 26 Mar 2026 23:10:45 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 29744\r\ncache-control: public, max-age=604800\r\nexpires: Thu, 02 Apr 2026 23:10:45 GMT\r\nlast-modified: Sat, 25 May 2024 01:50:07 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nstrict-transport-security: max-age=63072000; includeSubDomains\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7sKfvwperuPHF0r%2BmH7lVNV%2FBMjexjh8RJwsoEnfTW%2FEFHR0us4j28hm5kiQmYItvNeoiY0pOm7qf%2F7Bf7PTWuqYhWwRfkVWEdPYjGFhrvl7taK%2F%2FiLSCBIZemncekKu\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e29d49d7ea43181-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":87553,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65447)","md5":"826eb77e86b02ab7724fe3d0141ff87c","sha1":"79cd3587d565afe290076a8d36c31c305a573d18","sha256":"cb6f2d32c49d1c2b25e9ffc9aaafa3f83075346c01bcd4ae6eb187392a4292cf","sha512":"fc79fdb76763025dc39fac045a215ff155ef2f492a0e9640079d6f089fa6218af2b3ab7c6eaf636827dee9294e6939a95ab24554e870c976679c25567ad6374c","ssdeep":"1536:0RUX9uDgwxcy2KVBNwchN6SLaHEk2BSrBESp+a/IEk4aAocVi8SMBQ47GKO:sHNwcv9VBQpLl88SMBQ47GKO","tlshash":"7483f8df77ca702247ab30b9006f550bf276199d684d4400f159d8e9bcb8a4a827bf7e","first_seen":"2023-11-03T09:26:43Z","last_seen":"2026-04-25T21:03:19.202004Z","times_seen":741274,"resource_available":true,"data":null}},"time_used":485,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":469,"receive":16,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-26","alert":"Sinkholed","trigger":"mdmacanada.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mdmacanada.cc/wp-content/uploads/2023/08/cropped-cropped-cropped-MdmaCanada-Logo-3-1.png","fqdn":"mdmacanada.cc","domain":"mdmacanada.cc","tld":"cc"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mdmacanada.cc/","date":"2026-03-26T23:10:45.374Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mdmacanada.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 29 Jan 2026 00:46:51 GMT","end":"Wed, 29 Apr 2026 01:45:19 GMT"},"fingerprint":{"sha1":"B7:47:48:08:4D:35:A4:0D:8D:CE:D7:71:A9:FA:22:B1:5B:A1:AC:40","sha256":"AE:86:CA:6D:76:85:1D:C6:34:96:AE:04:62:0C:A6:24:0A:DD:10:3E:9E:C3:97:21:29:1A:84:BA:B3:91:6A:6F"}}},"request":{"raw":"GET /wp-content/uploads/2023/08/cropped-cropped-cropped-MdmaCanada-Logo-3-1.png HTTP/1.1\r\nHost: mdmacanada.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mdmacanada.cc/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 26 Mar 2026 23:10:45 GMT\r\ncontent-type: image/png\r\ncontent-length: 10668\r\ncache-control: public, max-age=604800\r\nexpires: Thu, 02 Apr 2026 23:10:45 GMT\r\nlast-modified: Sat, 25 May 2024 01:49:05 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nstrict-transport-security: max-age=63072000; includeSubDomains\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=sn2QBGhhh4GYpIMnFftIOrwpOkubZ6xeYD0vVvYh%2Bp%2FPa%2BDI3rBNZz29zrjPQw5qRHNU7Pi%2BNnaQ4YOW8QZXNUvC1XfLnf9TCi2uXIi5Pfar3hSV%2FkoKjMY%2F9V%2Fjz3oD\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e29d49d8eba3181-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10668,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 592 x 215, 8-bit/color RGBA, non-interlaced","md5":"513e30bbd2748ecc9c0573a3d85111fc","sha1":"ae02b05b5e43a1275996746db433adb348073c40","sha256":"c896b8fc481a5f3248d5ef0bb0bac1b7452e71b8756ff9b1b15cd994c230dd92","sha512":"d2cf5fb5d3207e5e87ab0a1293c024c0f0ae9de3a916e4f6b30179ebc648f5c744100c6f5c982b7fc79792f5305e71489ad6d63e555d539e37961de7ffe0c7d3","ssdeep":"192:ib9EZq+w7DjqZJNHanJo7cy8XX+Xurcen/AWDO21ieoBAHJXeCV4z:iw0jqZJNCHFrZ/AoOtQNz4z","tlshash":"5b229ebeba3be4010c6bc43b56001f430f9b6661a6ef1e54ca71eb2f601ae0533d6196","first_seen":"2026-03-26T23:11:11.780465Z","last_seen":"2026-03-27T01:49:53.344826Z","times_seen":2,"resource_available":false,"data":null}},"time_used":462,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":461,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-26","alert":"Sinkholed","trigger":"mdmacanada.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mdmacanada.cc/wp-content/cache/debloat/js/432e9bdb9cfc3bd870ef8f6fe96c8309.js","fqdn":"mdmacanada.cc","domain":"mdmacanada.cc","tld":"cc"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://mdmacanada.cc/","date":"2026-03-26T23:10:45.422Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mdmacanada.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 29 Jan 2026 00:46:51 GMT","end":"Wed, 29 Apr 2026 01:45:19 GMT"},"fingerprint":{"sha1":"B7:47:48:08:4D:35:A4:0D:8D:CE:D7:71:A9:FA:22:B1:5B:A1:AC:40","sha256":"AE:86:CA:6D:76:85:1D:C6:34:96:AE:04:62:0C:A6:24:0A:DD:10:3E:9E:C3:97:21:29:1A:84:BA:B3:91:6A:6F"}}},"request":{"raw":"GET /wp-content/cache/debloat/js/432e9bdb9cfc3bd870ef8f6fe96c8309.js HTTP/1.1\r\nHost: mdmacanada.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mdmacanada.cc/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 26 Mar 2026 23:10:45 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 1020\r\ncache-control: public, max-age=604800\r\nexpires: Thu, 02 Apr 2026 23:10:45 GMT\r\nlast-modified: Fri, 13 Mar 2026 11:37:08 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nstrict-transport-security: max-age=63072000; includeSubDomains\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Mi7ntmAau8V%2Bh%2BJTLjceTanZO4D6v8LpDRqQBIKFySS9KCgiY3nV3zJnJSk%2B8zS%2BJdKO38HIM%2F2zasakO6MbIluaA1RU2bXTwlm8S4BUdYFBxUCYdAascF3Ljd0LSNOm\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e29d49dcf3d3181-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2439,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (2439), with no line terminators","md5":"46a816ff38bdd095e2118365ad4c618b","sha1":"c58ae69eeea5bf2846b88a6c7cbaaa7728a2444d","sha256":"0eb862a5891526d089b727fdfa30222cca4b4d75b5835727bf57df17436256f6","sha512":"b6650185967270b09fed48ef9937d21ae45b37010aef6b6a6a4ce3efb295bd39d3734b1cce7535e126cb255b1a3b40c27dd97322f1b70ee0e1c67163e2539cf4","ssdeep":"","tlshash":"41418335b001a826c37782d997aba651b335662d760290dca19c8cb43a39c0b7972cbf","first_seen":"2026-02-05T17:32:11.552459Z","last_seen":"2026-04-25T19:57:51.283165Z","times_seen":12654,"resource_available":true,"data":null}},"time_used":380,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":380,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-26","alert":"Sinkholed","trigger":"mdmacanada.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/69967ba6a3b/js/twk-vendor.js","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"172.66.161.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://mdmacanada.cc/","date":"2026-03-26T23:10:47.276Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tawk.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 06 Mar 2026 09:33:33 GMT","end":"Thu, 04 Jun 2026 10:33:27 GMT"},"fingerprint":{"sha1":"F0:6C:DC:32:63:CD:34:E3:15:CD:7F:77:F5:A3:64:E0:9B:36:95:83","sha256":"B6:7F:6E:A3:69:3E:0D:3B:04:3E:8B:65:86:7E:1D:5F:82:84:18:16:8D:AD:72:D5:51:E3:46:BC:BD:CD:BC:38"}}},"request":{"raw":"GET /_s/v4/app/69967ba6a3b/js/twk-vendor.js HTTP/1.1\r\nHost: embed.tawk.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://mdmacanada.cc\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mdmacanada.cc/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 26 Mar 2026 23:10:47 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Thu, 19 Feb 2026 02:56:35 GMT\r\netag: W/\"3b341e35b39f6195793ecaf5db7c1d63\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000, immutable\r\nx-cache-status: HIT\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=0; includeSubDomains; preload\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nx-content-type-options: nosniff\r\ncf-ray: 9e29d4a96bcfb28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":82913,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65472)","md5":"3b341e35b39f6195793ecaf5db7c1d63","sha1":"3ef56ed9ac8bfbf5347dc4592653703f59763083","sha256":"548669d6434f5204dca25b9a6f8a02f63301b8c1b58a717b91fec8b6c2918305","sha512":"6b222121b74ffeabd4de7b69f354ad25283d0989376e8e3f6d97f829e28175291eab0a535ca77c22d3f65595250ad9ad3909525c2eb74bf9783f4955c3d7cde2","ssdeep":"768:kURUFvX9zXAfE4dm9+fuDosXRfMySUHM1ONdYO31hY6d/o6cyO4fefHvSAW64F:kURUZXGfzd1uU+8ODY6JORfHBWJF","tlshash":"b483e6dcb295b57117ab20b5417f050bf33a7815a80ac0a4f266f4da7c7848ea06bf7d","first_seen":"2024-03-08T05:46:53Z","last_seen":"2026-04-25T21:03:03.450305Z","times_seen":51590,"resource_available":true,"data":null}},"time_used":289,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":289,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/69967ba6a3b/js/twk-main.js","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"172.66.161.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://mdmacanada.cc/","date":"2026-03-26T23:10:47.272Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tawk.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 06 Mar 2026 09:33:33 GMT","end":"Thu, 04 Jun 2026 10:33:27 GMT"},"fingerprint":{"sha1":"F0:6C:DC:32:63:CD:34:E3:15:CD:7F:77:F5:A3:64:E0:9B:36:95:83","sha256":"B6:7F:6E:A3:69:3E:0D:3B:04:3E:8B:65:86:7E:1D:5F:82:84:18:16:8D:AD:72:D5:51:E3:46:BC:BD:CD:BC:38"}}},"request":{"raw":"GET /_s/v4/app/69967ba6a3b/js/twk-main.js HTTP/1.1\r\nHost: embed.tawk.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://mdmacanada.cc\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mdmacanada.cc/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 26 Mar 2026 23:10:47 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Thu, 19 Feb 2026 02:56:35 GMT\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000, immutable\r\nx-cache-status: HIT\r\nstrict-transport-security: max-age=0; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\ncf-cache-status: MISS\r\netag: W/\"da5bb1dc647470204df0e49f5afac2de\"\r\ncontent-encoding: br\r\ncf-ray: 9e29d4a96bccb28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":121,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with no line terminators","md5":"da5bb1dc647470204df0e49f5afac2de","sha1":"f5cbf596ca5e4fe208e4c55af6e45b71f9febbe8","sha256":"705186becc9e0a306a6b4867ae2768aa9dd3b8c12393d9f9c52029e9a6fcf31c","sha512":"d9c0eda8c93df421f8147960ff4b00f8eacd8791b8386b020f04d0478c6b7a4328767a82b52b8cfbb7c3a44cb55cec488c2d1008670bee709d67d8bdbd887c39","ssdeep":"","tlshash":"d4b09b6c1057f86955e8064ed3b7f65d1d961050811104301658a1753321143c61c55b","first_seen":"2023-03-07T01:02:45Z","last_seen":"2026-04-25T21:03:03.457234Z","times_seen":78064,"resource_available":true,"data":null}},"time_used":150,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":150,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/69967ba6a3b/js/twk-app.js","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"172.66.161.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://mdmacanada.cc/","date":"2026-03-26T23:10:47.279Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tawk.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 06 Mar 2026 09:33:33 GMT","end":"Thu, 04 Jun 2026 10:33:27 GMT"},"fingerprint":{"sha1":"F0:6C:DC:32:63:CD:34:E3:15:CD:7F:77:F5:A3:64:E0:9B:36:95:83","sha256":"B6:7F:6E:A3:69:3E:0D:3B:04:3E:8B:65:86:7E:1D:5F:82:84:18:16:8D:AD:72:D5:51:E3:46:BC:BD:CD:BC:38"}}},"request":{"raw":"GET /_s/v4/app/69967ba6a3b/js/twk-app.js HTTP/1.1\r\nHost: embed.tawk.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://mdmacanada.cc\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mdmacanada.cc/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 26 Mar 2026 23:10:47 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Thu, 19 Feb 2026 02:56:34 GMT\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000, immutable\r\nx-cache-status: HIT\r\nstrict-transport-security: max-age=0; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\ncf-cache-status: MISS\r\netag: W/\"e736e189edb5d0d9d5b8e7f23dd9114a\"\r\ncontent-encoding: br\r\ncf-ray: 9e29d4a96bffb28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":151,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with no line terminators","md5":"e736e189edb5d0d9d5b8e7f23dd9114a","sha1":"bcabee193f13756fa9154fc492fe420c47140343","sha256":"13cf82e6f9d48221cd55f8b3c3d206f7bdb83f291034b478e484ccfef7d500dd","sha512":"ea972884c185633ea238bdacea6ac9da0e0e92f88588cd85c214514c3597bc7d811c4dc4cd35b671dd2db97179bedceb38bd5d200abb9653fbcaeac2ca6ec7b5","ssdeep":"","tlshash":"a0c080ac1496fc9c1674154a8377f54a5cd510108055141015d851a11311546560c54d","first_seen":"2023-03-07T01:02:46Z","last_seen":"2026-04-25T21:03:03.501784Z","times_seen":78105,"resource_available":true,"data":null}},"time_used":159,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":159,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mdmacanada.cc/wp-content/plugins/debloat/inc/delay-load/js/delay-load.min.js?ver=1.2.8","fqdn":"mdmacanada.cc","domain":"mdmacanada.cc","tld":"cc"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://mdmacanada.cc/","date":"2026-03-26T23:10:45.431Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mdmacanada.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 29 Jan 2026 00:46:51 GMT","end":"Wed, 29 Apr 2026 01:45:19 GMT"},"fingerprint":{"sha1":"B7:47:48:08:4D:35:A4:0D:8D:CE:D7:71:A9:FA:22:B1:5B:A1:AC:40","sha256":"AE:86:CA:6D:76:85:1D:C6:34:96:AE:04:62:0C:A6:24:0A:DD:10:3E:9E:C3:97:21:29:1A:84:BA:B3:91:6A:6F"}}},"request":{"raw":"GET /wp-content/plugins/debloat/inc/delay-load/js/delay-load.min.js?ver=1.2.8 HTTP/1.1\r\nHost: mdmacanada.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mdmacanada.cc/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 26 Mar 2026 23:10:45 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 1343\r\ncache-control: public, max-age=604800\r\nexpires: Thu, 02 Apr 2026 23:10:45 GMT\r\nlast-modified: Sat, 25 May 2024 01:48:48 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nstrict-transport-security: max-age=63072000; includeSubDomains\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=SiKpA56x3cRwzXpkrhGmFDHtqCMiWtupIS0zURwr70vGJTb06u%2BOs4JqQuMFh9Lvq0upzmAYEApB%2FhKBKYMr5HQpz8EWvg0195P0PPGzE6QEMSjZB2XLLkV%2B4JGdDQxH\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e29d49ddf5b3181-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":3299,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (3299), with no line terminators","md5":"00c83d508a60a93f2cdf6be175ab6f81","sha1":"59ffa1b5f8db3a5087db3db74ded69fc255b9946","sha256":"98b3f307a592154d8029581be6fa886f72839f6b918ef689581310ace8b6480c","sha512":"5f818ae4781941460a1d89ec894ba80fccbf1676593fe1c714d696acbce1edd5903ec1eced3909489cb6474ac53e6646cf10f3ccaa63c3879020257aaeea9500","ssdeep":"","tlshash":"e66175703b09b831125594ad61fe9b016a3063b23007d4a5a57cdce5bc54ee301abddb","first_seen":"2023-03-07T01:27:34Z","last_seen":"2026-04-25T11:57:38.03597Z","times_seen":403,"resource_available":true,"data":null}},"time_used":391,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":388,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-26","alert":"Sinkholed","trigger":"mdmacanada.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.trustindex.io/widgets/32/32df3fa309ab228f8576e3f730a/content.html","fqdn":"cdn.trustindex.io","domain":"trustindex.io","tld":"io"},"ip":{"addr":"3.167.2.9","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://mdmacanada.cc/","date":"2026-03-26T23:10:45.606Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.trustindex.io","organization":""},"issuer":{"commonName":"GoGetSSL RSA DV CA","organization":"GoGetSSL"},"validity":{"start":"Fri, 23 May 2025 00:00:00 GMT","end":"Tue, 23 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"4B:EB:D9:98:03:6A:DB:BE:49:BA:B2:3E:3A:B2:F6:D9:D7:62:B5:B7","sha256":"F8:20:DB:3C:4B:D6:B3:4C:28:EC:90:B0:25:20:9C:38:18:7C:FF:7B:DF:24:B2:C8:77:4C:33:96:D4:28:B7:B3"}}},"request":{"raw":"GET /widgets/32/32df3fa309ab228f8576e3f730a/content.html HTTP/1.1\r\nHost: cdn.trustindex.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://mdmacanada.cc\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mdmacanada.cc/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/html\r\ncontent-length: 2742\r\ndate: Thu, 26 Mar 2026 21:26:09 GMT\r\nserver: Apache/2.4.52 (Ubuntu)\r\nlast-modified: Thu, 10 Jul 2025 11:15:11 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\nreferrer-policy: origin\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: origin, x-requested-with, content-type\r\naccess-control-allow-methods: GET\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-embedder-policy: require-corp\r\ncontent-security-policy: frame-ancestors 'self' *;\r\netag: \"5bb7-639914e985f37-gzip\"\r\nvary: Accept-Encoding\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 7a83657ba338d5960d8d5abdbe0a3136.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P2\r\nx-amz-cf-id: YsHb0K5rh_XGOJIWpSQXLT5PjSi2HCsP0wn5pH3JoFuL6NJLt9VwaA==\r\nage: 6276\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Apache HTTP Server:2.4.52","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":23479,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with very long lines (3883)","md5":"f6dbdb1bbbcd9ee5dc6fb767c2a24126","sha1":"15ebd394f3cd5545ac50ab49b3da21a2d63aeac3","sha256":"79067559330c5908d31ba115c6f04925b990036b6a33ff4685ccbd61c50a96c6","sha512":"6e8d03a390ab6a32ebab1c4f274477fc3af9f2dbce08967d15221ade00d13f9ec6cb61436f895185727997e15906ac72ec310501517699c5b9df988f4e7b8a16","ssdeep":"384:G1p4p4p4p4pRzPp9ppOp9p7p4p4p4p4pIeVoRppOptp6p4p4p4p4pIeVooipOpY1:Gp4p4p4p4ppp9ppOp9p7p4p4p4p4pIeN","tlshash":"ccb2ed31c166c93e5be761d0e1f3ab797153920ddaa2446d99b1e6bc03fad833c2e118","first_seen":"2026-03-26T23:11:11.785121Z","last_seen":"2026-03-27T01:49:53.353509Z","times_seen":2,"resource_available":false,"data":null}},"time_used":41,"timings":{"blocked":7,"dns":1,"connect":1,"send":0,"wait":24,"receive":0,"ssl":5},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.trustindex.io/assets/default-avatar/noprofile-08.svg","fqdn":"cdn.trustindex.io","domain":"trustindex.io","tld":"io"},"ip":{"addr":"3.167.2.9","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://mdmacanada.cc/","date":"2026-03-26T23:10:45.882Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.trustindex.io","organization":""},"issuer":{"commonName":"GoGetSSL RSA DV CA","organization":"GoGetSSL"},"validity":{"start":"Fri, 23 May 2025 00:00:00 GMT","end":"Tue, 23 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"4B:EB:D9:98:03:6A:DB:BE:49:BA:B2:3E:3A:B2:F6:D9:D7:62:B5:B7","sha256":"F8:20:DB:3C:4B:D6:B3:4C:28:EC:90:B0:25:20:9C:38:18:7C:FF:7B:DF:24:B2:C8:77:4C:33:96:D4:28:B7:B3"}}},"request":{"raw":"GET /assets/default-avatar/noprofile-08.svg HTTP/1.1\r\nHost: cdn.trustindex.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mdmacanada.cc/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/svg+xml\r\ncontent-length: 815\r\ndate: Tue, 28 Oct 2025 13:01:04 GMT\r\nserver: Apache/2.4.52 (Ubuntu)\r\ncache-control: max-age=31536000, public\r\nlast-modified: Wed, 11 Oct 2023 15:10:56 GMT\r\netag: \"32f-607723ae86b32\"\r\naccept-ranges: bytes\r\nreferrer-policy: origin\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: origin, x-requested-with, content-type\r\naccess-control-allow-methods: GET\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-embedder-policy: require-corp\r\ncontent-security-policy: frame-ancestors 'self' *;\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 50c588fd3255d023d9b9021263f5fa0a.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P2\r\nx-amz-cf-id: Em1kVv-Nbzp6N1FSlLv02kuiISyWKqpOhxgc3vj-RdnAh1eZwzdn5Q==\r\nage: 12910181\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Apache HTTP Server:2.4.52","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":815,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"196996bd22d795bee589dc21021ebee1","sha1":"440d7b673006b532fc0cfea98aaaab3269ab8617","sha256":"d7b7374854e5b833930ab69ce33d9a0f4b3d68cccebde32b1594a6617b197874","sha512":"63d6eeabd5c6589361c30ff706a163456e9da777bd05b561401c53cbddba016f880194c43facdafc6c0700e647e5bbbedc8a7e12b8a6272601e560783bd6410e","ssdeep":"","tlshash":"83011288c248996a8030c378a2b5b5d2411742878b019f4ed5d12b3bd43d4f77a443ef","first_seen":"2023-06-18T23:13:42Z","last_seen":"2026-04-25T15:22:18.657821Z","times_seen":93,"resource_available":false,"data":null}},"time_used":2,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mdmacanada.cc/wp-content/uploads/2023/09/MDMA-CRYSTALS-REColored-ltPink-300x300.png","fqdn":"mdmacanada.cc","domain":"mdmacanada.cc","tld":"cc"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://mdmacanada.cc/","date":"2026-03-26T23:10:45.382Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mdmacanada.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 29 Jan 2026 00:46:51 GMT","end":"Wed, 29 Apr 2026 01:45:19 GMT"},"fingerprint":{"sha1":"B7:47:48:08:4D:35:A4:0D:8D:CE:D7:71:A9:FA:22:B1:5B:A1:AC:40","sha256":"AE:86:CA:6D:76:85:1D:C6:34:96:AE:04:62:0C:A6:24:0A:DD:10:3E:9E:C3:97:21:29:1A:84:BA:B3:91:6A:6F"}}},"request":{"raw":"GET /wp-content/uploads/2023/09/MDMA-CRYSTALS-REColored-ltPink-300x300.png HTTP/1.1\r\nHost: mdmacanada.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mdmacanada.cc/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 26 Mar 2026 23:10:45 GMT\r\ncontent-type: image/png\r\ncontent-length: 82977\r\ncache-control: public, max-age=604800\r\nexpires: Thu, 02 Apr 2026 23:10:45 GMT\r\nlast-modified: Sat, 25 May 2024 01:49:06 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nstrict-transport-security: max-age=63072000; includeSubDomains\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4sVTbCiId1PRM%2FjbOOSFPG7PURM%2B%2BFOgkS2G2aHoTgMv0kGCELUMkiBnvFOlwIG2vFOpQA%2FOxkZUdhnWpRku7j23l9okLNhiv9NGDvkWmdK0dQm9Ei8qAerRV3WzlgIw\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e29d49d8ec63181-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":82977,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 300 x 300, 8-bit/color RGB, non-interlaced","md5":"5e5c4747d2464ac6e44c27006e437059","sha1":"dcd05a6b2f526885274d1d392cb01a6be0b986ec","sha256":"7abc7adc1b55fadb997bbbe99b572fee4e816f7346d8d034f503ece3a173101d","sha512":"2a5b52b46e6d09323574b3f5e415fc64cedf1b570f9dfa766867a178941cd02118409ab3803f5d1dbd8cee6bbd527f06731395dfb4489d1ec3641e5658aee3b6","ssdeep":"1536:scSvck0ljliHMfxuwMdDk2GCKSWI+tQVIAx3UKczNkB5lVW7vMQl6:Kb/H0E/yRtQVzxEKczqBVWw9","tlshash":"188302271c7b887628d5ab325c37a3c16be7a64c34841f7503989bb0a719f27a63dd12","first_seen":"2026-03-26T23:11:11.786907Z","last_seen":"2026-03-27T01:49:53.372297Z","times_seen":2,"resource_available":false,"data":null}},"time_used":583,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":464,"receive":119,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-26","alert":"Sinkholed","trigger":"mdmacanada.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mdmacanada.cc/wp-content/fonts/inter/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7.woff2","fqdn":"mdmacanada.cc","domain":"mdmacanada.cc","tld":"cc"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://mdmacanada.cc/","date":"2026-03-26T23:10:45.439Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mdmacanada.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 29 Jan 2026 00:46:51 GMT","end":"Wed, 29 Apr 2026 01:45:19 GMT"},"fingerprint":{"sha1":"B7:47:48:08:4D:35:A4:0D:8D:CE:D7:71:A9:FA:22:B1:5B:A1:AC:40","sha256":"AE:86:CA:6D:76:85:1D:C6:34:96:AE:04:62:0C:A6:24:0A:DD:10:3E:9E:C3:97:21:29:1A:84:BA:B3:91:6A:6F"}}},"request":{"raw":"GET /wp-content/fonts/inter/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7.woff2 HTTP/1.1\r\nHost: mdmacanada.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mdmacanada.cc/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 26 Mar 2026 23:10:45 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 48256\r\ncache-control: public, max-age=604800\r\nexpires: Thu, 02 Apr 2026 23:10:45 GMT\r\nlast-modified: Fri, 12 Sep 2025 04:42:52 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nstrict-transport-security: max-age=63072000; includeSubDomains\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4FT2Jo5XsgSjdn3QBbacZljA%2FAdUWTBFjrEIME2N3565X6qz2oiw9i2NaathXp789208NVoEMQbrlGEiDxWPwq%2FTGCrIuc5MoPyeDnxn93DJiwWl0bnqBQnSvyz%2FYES%2F\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e29d49e0f9f3181-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":48256,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48256, version 1.0","md5":"260c81a4759baf163c025001c4f27872","sha1":"f11d729bb0a4d8350d2ea3d0fc062cf6ef2d5298","sha256":"3100e775e8616cd2611beecfa23a4263d7037586789b43f035236a2e6fbd4c62","sha512":"9acec3e7a411a1eb6d072c3773bb14e5aa74d85d334674ec0fb018b7937174d5b612b756b2ce7aa3993d31dfe172516e7aaec79c7dd209eac5fd15d9aea077e9","ssdeep":"768:Gp4Wb3wv+eCLRZRtq9uGHpHveBOX5qw/14X+5edVWK4afHSTle4MRhVUNMT/TQDt:Gp483wdmXRtqhJPeByj/f4WK4mHIj8xw","tlshash":"be2302df9e4d72d29271267045338383798e2d8a50aae7a1061c0fe6de05b69d31fb9c","first_seen":"2025-05-30T10:47:22.433446Z","last_seen":"2026-04-25T19:41:51.098576Z","times_seen":15103,"resource_available":false,"data":null}},"time_used":569,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":458,"receive":111,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-26","alert":"Sinkholed","trigger":"mdmacanada.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mdmacanada.cc/wp-content/fonts/inter/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7.woff2","fqdn":"mdmacanada.cc","domain":"mdmacanada.cc","tld":"cc"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://mdmacanada.cc/","date":"2026-03-26T23:10:45.441Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mdmacanada.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 29 Jan 2026 00:46:51 GMT","end":"Wed, 29 Apr 2026 01:45:19 GMT"},"fingerprint":{"sha1":"B7:47:48:08:4D:35:A4:0D:8D:CE:D7:71:A9:FA:22:B1:5B:A1:AC:40","sha256":"AE:86:CA:6D:76:85:1D:C6:34:96:AE:04:62:0C:A6:24:0A:DD:10:3E:9E:C3:97:21:29:1A:84:BA:B3:91:6A:6F"}}},"request":{"raw":"GET /wp-content/fonts/inter/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7.woff2 HTTP/1.1\r\nHost: mdmacanada.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mdmacanada.cc/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 26 Mar 2026 23:10:45 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 48256\r\ncache-control: public, max-age=604800\r\nexpires: Thu, 02 Apr 2026 23:10:45 GMT\r\nlast-modified: Fri, 12 Sep 2025 04:42:52 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nstrict-transport-security: max-age=63072000; includeSubDomains\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nage: 0\r\ncf-cache-status: HIT\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=R8ntUDmuxv6Jk%2FjzqjwHZ21tmjdNvDKYw%2BxIFDChA%2FMZ91YZEURXIyO0HiY8TXD0ucGDwxZyIxhCNxxpVJsL%2B%2FspG333Tq9DVegwI6BwlDUKTb%2FkhZPL7RyHi31RYJlM\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e29d49e0fa03181-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":48256,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 48256, version 1.0","md5":"260c81a4759baf163c025001c4f27872","sha1":"f11d729bb0a4d8350d2ea3d0fc062cf6ef2d5298","sha256":"3100e775e8616cd2611beecfa23a4263d7037586789b43f035236a2e6fbd4c62","sha512":"9acec3e7a411a1eb6d072c3773bb14e5aa74d85d334674ec0fb018b7937174d5b612b756b2ce7aa3993d31dfe172516e7aaec79c7dd209eac5fd15d9aea077e9","ssdeep":"768:Gp4Wb3wv+eCLRZRtq9uGHpHveBOX5qw/14X+5edVWK4afHSTle4MRhVUNMT/TQDt:Gp483wdmXRtqhJPeByj/f4WK4mHIj8xw","tlshash":"be2302df9e4d72d29271267045338383798e2d8a50aae7a1061c0fe6de05b69d31fb9c","first_seen":"2025-05-30T10:47:22.433446Z","last_seen":"2026-04-25T19:41:51.098576Z","times_seen":15103,"resource_available":false,"data":null}},"time_used":567,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":458,"receive":109,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-26","alert":"Sinkholed","trigger":"mdmacanada.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"static.klaviyo.com/onsite/js/vendors~in_app_forms~signup_forms~client_identity~telemetry~onsite-triggering-v2~onsite-triggering~.00140035a0ee1bdef5e1.js","fqdn":"static.klaviyo.com","domain":"klaviyo.com","tld":"com"},"ip":{"addr":"151.101.2.133","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://mdmacanada.cc/","date":"2026-03-26T23:10:46.113Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"static.klaviyo.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 02 Mar 2026 22:32:36 GMT","end":"Sun, 31 May 2026 22:32:35 GMT"},"fingerprint":{"sha1":"36:11:62:1C:62:9E:7B:97:05:37:F9:A2:98:8F:68:41:2E:6B:D7:B5","sha256":"05:31:1A:E8:28:B5:E9:56:9C:39:CF:3B:A4:17:62:2A:BD:15:10:60:75:8E:D0:BA:D6:B8:02:1F:E1:A0:20:F8"}}},"request":{"raw":"GET /onsite/js/vendors~in_app_forms~signup_forms~client_identity~telemetry~onsite-triggering-v2~onsite-triggering~.00140035a0ee1bdef5e1.js HTTP/1.1\r\nHost: static.klaviyo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://mdmacanada.cc\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mdmacanada.cc/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nx-amz-id-2: e7eMAkagCpPk88YHlK2jH0k5mG04O7XszA9nqJJUvEGnLjRLeejhBWpdnrW34pYesoARNFwnDBk=\r\nx-amz-request-id: VS3QCXSP6XCEDB6W\r\nlast-modified: Wed, 04 Mar 2026 16:08:30 GMT\r\netag: \"8895a9cf40ff6c641b2aaee1fd291b40\"\r\nx-amz-server-side-encryption: AES256\r\nx-amz-meta-entrypoints-hash: \r\ncache-control: max-age=2592000,stale-while-revalidate=10800\r\nx-amz-meta-surrogate-control: max-age=31536000\r\nx-amz-meta-surrogate-key: fender-assset\r\nx-amz-version-id: Rx4wmCJXcRflpBVf5NzN4XcC2T4uqEpj\r\ncontent-type: text/javascript\r\nserver: AmazonS3\r\ncontent-encoding: br\r\nvia: 1.1 varnish, 1.1 varnish\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ndate: Thu, 26 Mar 2026 23:10:46 GMT\r\nage: 3137\r\nx-served-by: cache-lga21976-LGA, cache-hel1410029-HEL\r\nx-cache: HIT, HIT\r\nx-cache-hits: 289, 180\r\nvary: Accept-Encoding\r\ncontent-length: 3015\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}],"data":{"size":8121,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (8121), with no line terminators","md5":"8895a9cf40ff6c641b2aaee1fd291b40","sha1":"0d7b93411bb3c7a5b97bc2cf5b5df9b5ee72c9e7","sha256":"9d510ffe6a19c8fd8ccc5be20ed1e6916db53f74e4b43fffa6db830de2d3f690","sha512":"1eaa44f046ff3682d82532e4865468d63f19bc3271d4d684df8a4526b8baa418fc8a59a9360d0a140abc86fc9206278b22ea608cbcfd786720bfce5283d40eb6","ssdeep":"192:yrZ2ZVjGa09TmXgiToFpo7MSC4PJCFYJ/IL4Mx2mItg5Z7:yrZ2ZVjGaKTmXfToHo7MSC4PJCWJzotB","tlshash":"c7f1a5e833ce706157b7207816af9042b0790926240c947df15ad4a83c34c6967bfeed","first_seen":"2026-03-02T22:50:38.010267Z","last_seen":"2026-04-25T20:46:10.780154Z","times_seen":10541,"resource_available":true,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mdmacanada.cc/?wc-ajax=get_refreshed_fragments","fqdn":"mdmacanada.cc","domain":"mdmacanada.cc","tld":"cc"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://mdmacanada.cc/","date":"2026-03-26T23:10:46.465Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mdmacanada.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 29 Jan 2026 00:46:51 GMT","end":"Wed, 29 Apr 2026 01:45:19 GMT"},"fingerprint":{"sha1":"B7:47:48:08:4D:35:A4:0D:8D:CE:D7:71:A9:FA:22:B1:5B:A1:AC:40","sha256":"AE:86:CA:6D:76:85:1D:C6:34:96:AE:04:62:0C:A6:24:0A:DD:10:3E:9E:C3:97:21:29:1A:84:BA:B3:91:6A:6F"}}},"request":{"raw":"POST /?wc-ajax=get_refreshed_fragments HTTP/1.1\r\nHost: mdmacanada.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nContent-Type: application/x-www-form-urlencoded; charset=UTF-8\r\nX-Requested-With: XMLHttpRequest\r\nContent-Length: 18\r\nOrigin: https://mdmacanada.cc\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mdmacanada.cc/\r\nCookie: wffn_flt=2026-3-26 23:10:45; wffn_timezone=UTC; wffn_is_mobile=false; wffn_browser=Firefox; wffn_referrer=; wffn_fl_url=/; sbjs_migrations=1418474375998%3D1; sbjs_current_add=fd%3D2026-03-26%2023%3A10%3A45%7C%7C%7Cep%3Dhttps%3A%2F%2Fmdmacanada.cc%2F%7C%7C%7Crf%3D%28none%29; sbjs_first_add=fd%3D2026-03-26%2023%3A10%3A45%7C%7C%7Cep%3Dhttps%3A%2F%2Fmdmacanada.cc%2F%7C%7C%7Crf%3D%28none%29; sbjs_current=typ%3Dtypein%7C%7C%7Csrc%3D%28direct%29%7C%7C%7Cmdm%3D%28none%29%7C%7C%7Ccmp%3D%28none%29%7C%7C%7Ccnt%3D%28none%29%7C%7C%7Ctrm%3D%28none%29%7C%7C%7Cid%3D%28none%29%7C%7C%7Cplt%3D%28none%29%7C%7C%7Cfmt%3D%28none%29%7C%7C%7Ctct%3D%28none%29; sbjs_first=typ%3Dtypein%7C%7C%7Csrc%3D%28direct%29%7C%7C%7Cmdm%3D%28none%29%7C%7C%7Ccmp%3D%28none%29%7C%7C%7Ccnt%3D%28none%29%7C%7C%7Ctrm%3D%28none%29%7C%7C%7Cid%3D%28none%29%7C%7C%7Cplt%3D%28none%29%7C%7C%7Cfmt%3D%28none%29%7C%7C%7Ctct%3D%28none%29; sbjs_udata=vst%3D1%7C%7C%7Cuip%3D%28none%29%7C%7C%7Cuag%3DMozilla%2F5.0%20%28Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0%29%20Gecko%2F20100101%20Firefox%2F134.0; sbjs_session=pgs%3D1%7C%7C%7Ccpg%3Dhttps%3A%2F%2Fmdmacanada.cc%2F; __kla_id=eyJjaWQiOiJOek5pTVRaaE1UQXRaakUxWXkwME5UaG1MVGt5WlRRdFpHVXpZelUwWmpFeU9HUm0ifQ==\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":18,"data":"time=1774566646461"}},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 26 Mar 2026 23:10:47 GMT\r\ncontent-type: application/json; charset=UTF-8\r\nx-powered-by: PHP/7.4.33\r\naccess-control-allow-origin: https://mdmacanada.cc\r\naccess-control-allow-credentials: true\r\nx-content-type-options: nosniff\r\nx-robots-tag: noindex\r\nset-cookie: fkcart_cart_qty=0; expires=Thu, 26-Mar-2026 23:40:47 GMT; Max-Age=1800; path=/; secure\nfkcart_cart_total=%3Cspan%20class%3D%22woocommerce-Price-amount%20amount%22%3E%3Cbdi%3E%3Cspan%20class%3D%22woocommerce-Price-currencySymbol%22%3E%26%2336%3B%3C%2Fspan%3E0.00%3C%2Fbdi%3E%3C%2Fspan%3E; expires=Thu, 26-Mar-2026 23:40:47 GMT; Max-Age=1800; path=/; secure\r\nexpires: Wed, 11 Jan 1984 05:00:00 GMT\r\ncache-control: no-cache, must-revalidate, max-age=0, no-store, private\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nstrict-transport-security: max-age=63072000; includeSubDomains\r\nx-frame-options: SAMEORIGIN\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: DYNAMIC\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=y4rnl%2BfA5FhwObGIO1OMQVLTCH51c6cExT4x2wj7YkRSnOeWv%2BzKPZoy77Wf0WWJyIqqjhZo0b9ttw4DwEYo6EGwR2H%2FOAqn3T09fhyoAVzI7hvHq3IuEVChTxyCbrAO\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e29d4a46c5e3181-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"PHP:7.4.33","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":17759,"size_decoded":0,"mime_type":"application/json; charset=UTF-8","magic":"JSON text data","md5":"0598b8fee00afba75949bf82f55f1b61","sha1":"7eda4da1e35ff360d322284fee50fc0314ee3499","sha256":"c9ea634f4f96c7d15a0e52f219a1807c9c5b8b53fc9471d936ef85b023137a62","sha512":"f19598e0b194c49f7975f04bbee14a2c34389ecce4cfa849cc9d449ecbab6684e6e0199a6ace5d5f902c9de83627467c67928c66ea16c53db1180deced9de092","ssdeep":"192:IOExGrWUKZKm1IKfV+ZHKB6PKNqul7FkeQRDT1IKfV+ZHKBllKZUXm5d28HLH1IG:IOkprfGKBbxGes3rfGKBSdzrfGKBjd","tlshash":"448264b2b0ed12b15c0acbd1be6609ee7c4b3c987e9fca46729c52183716878d563c5c","first_seen":"2026-03-26T23:11:11.790233Z","last_seen":"2026-03-26T23:11:11.790233Z","times_seen":1,"resource_available":false,"data":null}},"time_used":818,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":815,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-26","alert":"Sinkholed","trigger":"mdmacanada.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"lh3.googleusercontent.com/a/ACg8ocL3gMWuBOhQ3D7s5IX6DLEnj-svBk0T8-hqq9nqdKiphrG_Ng=w40-h40-c","fqdn":"lh3.googleusercontent.com","domain":"googleusercontent.com","tld":"com"},"ip":{"addr":"142.250.178.65","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://mdmacanada.cc/","date":"2026-03-26T23:10:46.816Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.googleusercontent.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 09 Mar 2026 08:37:42 GMT","end":"Mon, 01 Jun 2026 08:37:41 GMT"},"fingerprint":{"sha1":"7D:11:01:3C:E2:AD:83:07:6F:B1:C5:93:97:85:83:87:0B:36:4F:19","sha256":"A8:96:42:48:48:E2:29:05:5F:B7:D4:6E:C9:A5:58:AD:06:3A:D9:3C:32:B6:20:31:AC:35:DA:1C:C1:7E:A8:2F"}}},"request":{"raw":"GET /a/ACg8ocL3gMWuBOhQ3D7s5IX6DLEnj-svBk0T8-hqq9nqdKiphrG_Ng=w40-h40-c HTTP/1.1\r\nHost: lh3.googleusercontent.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mdmacanada.cc/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/png\r\nvary: Origin\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\naccess-control-expose-headers: Content-Length\r\netag: \"v0\"\r\nexpires: Fri, 27 Mar 2026 23:10:46 GMT\r\ncache-control: public, max-age=86400, no-transform\r\ncontent-disposition: inline;filename=\"unnamed.png\"\r\nx-content-type-options: nosniff\r\ndate: Thu, 26 Mar 2026 23:10:46 GMT\r\nserver: fife\r\ncontent-length: 503\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":503,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 40 x 40, 8-bit/color RGB, non-interlaced","md5":"15566a44ca21334217c53575d90f5f40","sha1":"b065803d15d44d147f093e025cdbc83352a8678d","sha256":"bbfbdf46e72fe9f5c0c768d3bc10f47bb973ff6107ff5888c3b6213e3a7e465d","sha512":"3888bf346d797a2824c25827715faeab2a93b0556d2cd7c181d27a7b5b63a27e26204776ea994e5abc8d9562bf1ddd3e037a621ddce27ca7ca28dc61dae9b112","ssdeep":"","tlshash":"2cf00e610ed1ecfc01ea0a6bf75353f8beb1e64b5782805b800d591a2a7e2159ec4a67","first_seen":"2026-03-26T23:11:11.791527Z","last_seen":"2026-03-27T01:49:53.341801Z","times_seen":2,"resource_available":false,"data":null}},"time_used":307,"timings":{"blocked":108,"dns":47,"connect":14,"send":0,"wait":44,"receive":0,"ssl":91},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mdmacanada.cc/wp-content/uploads/2023/08/cropped-MDMA-SiteLogo-192x192.png","fqdn":"mdmacanada.cc","domain":"mdmacanada.cc","tld":"cc"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mdmacanada.cc/","date":"2026-03-26T23:10:46.821Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mdmacanada.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 29 Jan 2026 00:46:51 GMT","end":"Wed, 29 Apr 2026 01:45:19 GMT"},"fingerprint":{"sha1":"B7:47:48:08:4D:35:A4:0D:8D:CE:D7:71:A9:FA:22:B1:5B:A1:AC:40","sha256":"AE:86:CA:6D:76:85:1D:C6:34:96:AE:04:62:0C:A6:24:0A:DD:10:3E:9E:C3:97:21:29:1A:84:BA:B3:91:6A:6F"}}},"request":{"raw":"GET /wp-content/uploads/2023/08/cropped-MDMA-SiteLogo-192x192.png HTTP/1.1\r\nHost: mdmacanada.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mdmacanada.cc/\r\nCookie: wffn_flt=2026-3-26 23:10:45; wffn_timezone=UTC; wffn_is_mobile=false; wffn_browser=Firefox; wffn_referrer=; wffn_fl_url=/; sbjs_migrations=1418474375998%3D1; sbjs_current_add=fd%3D2026-03-26%2023%3A10%3A45%7C%7C%7Cep%3Dhttps%3A%2F%2Fmdmacanada.cc%2F%7C%7C%7Crf%3D%28none%29; sbjs_first_add=fd%3D2026-03-26%2023%3A10%3A45%7C%7C%7Cep%3Dhttps%3A%2F%2Fmdmacanada.cc%2F%7C%7C%7Crf%3D%28none%29; sbjs_current=typ%3Dtypein%7C%7C%7Csrc%3D%28direct%29%7C%7C%7Cmdm%3D%28none%29%7C%7C%7Ccmp%3D%28none%29%7C%7C%7Ccnt%3D%28none%29%7C%7C%7Ctrm%3D%28none%29%7C%7C%7Cid%3D%28none%29%7C%7C%7Cplt%3D%28none%29%7C%7C%7Cfmt%3D%28none%29%7C%7C%7Ctct%3D%28none%29; sbjs_first=typ%3Dtypein%7C%7C%7Csrc%3D%28direct%29%7C%7C%7Cmdm%3D%28none%29%7C%7C%7Ccmp%3D%28none%29%7C%7C%7Ccnt%3D%28none%29%7C%7C%7Ctrm%3D%28none%29%7C%7C%7Cid%3D%28none%29%7C%7C%7Cplt%3D%28none%29%7C%7C%7Cfmt%3D%28none%29%7C%7C%7Ctct%3D%28none%29; sbjs_udata=vst%3D1%7C%7C%7Cuip%3D%28none%29%7C%7C%7Cuag%3DMozilla%2F5.0%20%28Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0%29%20Gecko%2F20100101%20Firefox%2F134.0; sbjs_session=pgs%3D1%7C%7C%7Ccpg%3Dhttps%3A%2F%2Fmdmacanada.cc%2F; __kla_id=eyJjaWQiOiJOek5pTVRaaE1UQXRaakUxWXkwME5UaG1MVGt5WlRRdFpHVXpZelUwWmpFeU9HUm0ifQ==\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 26 Mar 2026 23:10:46 GMT\r\ncontent-type: image/png\r\ncontent-length: 7591\r\ncache-control: public, max-age=604800\r\nexpires: Thu, 02 Apr 2026 23:10:46 GMT\r\nlast-modified: Sat, 25 May 2024 01:49:05 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nstrict-transport-security: max-age=63072000; includeSubDomains\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\npriority: u=6,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Jfa%2Btg1%2B5NjGRT9ZIbCpjDQd%2FXfZhCXwUbPr9Sm9YAMMQxIMKX6qouLUV56d%2FDduvvq6ldVRfkxheM8SaKI1uElUFc%2BD%2BbCHYnhnzfVDsbv5X%2B8TGu4CLVXBQvSnqoL%2F\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e29d4a69ff23181-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":7591,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 192 x 192, 8-bit colormap, non-interlaced","md5":"ae9e7c3243d46563979660f2687ab74d","sha1":"f6a5c585fb6562c0e8e2b2d7fda6c4cc3f5ae650","sha256":"aebb93e7e0311d777f44119ed05eedcbf5d7ad8b5238d49e70cb947c34c99491","sha512":"b99bbf2ad6627ec57bc5b88f2f60765174f1202d3d3a342c1a6b2e4a56bcb9298b083b2071523df8264e10a113f73361c4bd8b071ea6caa3930816b6d51ca83b","ssdeep":"192:9lhvoR018vXF8Jx8ZGvLbwBs7bjUBj9paDWAw:9lpOPiQGvSrpaDy","tlshash":"1cf1c00264768cf1ddcd1cb6a1f515207dade9e1e14892a930e7d29b312ecbe20af593","first_seen":"2026-03-26T23:11:11.792718Z","last_seen":"2026-03-27T01:49:53.389031Z","times_seen":2,"resource_available":false,"data":null}},"time_used":121,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":120,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-26","alert":"Sinkholed","trigger":"mdmacanada.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.trustindex.io/loader.js?32df3fa309ab228f8576e3f730a","fqdn":"cdn.trustindex.io","domain":"trustindex.io","tld":"io"},"ip":{"addr":"3.167.2.9","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://mdmacanada.cc/","date":"2026-03-26T23:10:45.376Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.trustindex.io","organization":""},"issuer":{"commonName":"GoGetSSL RSA DV CA","organization":"GoGetSSL"},"validity":{"start":"Fri, 23 May 2025 00:00:00 GMT","end":"Tue, 23 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"4B:EB:D9:98:03:6A:DB:BE:49:BA:B2:3E:3A:B2:F6:D9:D7:62:B5:B7","sha256":"F8:20:DB:3C:4B:D6:B3:4C:28:EC:90:B0:25:20:9C:38:18:7C:FF:7B:DF:24:B2:C8:77:4C:33:96:D4:28:B7:B3"}}},"request":{"raw":"GET /loader.js?32df3fa309ab228f8576e3f730a HTTP/1.1\r\nHost: cdn.trustindex.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mdmacanada.cc/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/javascript\r\ncontent-length: 21194\r\ndate: Thu, 26 Mar 2026 05:50:02 GMT\r\nserver: Apache/2.4.52 (Ubuntu)\r\nlast-modified: Fri, 20 Mar 2026 13:52:32 GMT\r\netag: \"14d96-64d74ff1fafb9-gzip\"\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\nreferrer-policy: origin\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: origin, x-requested-with, content-type\r\naccess-control-allow-methods: GET\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-embedder-policy: require-corp\r\ncontent-security-policy: frame-ancestors 'self' *;\r\nvary: Accept-Encoding\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 50c588fd3255d023d9b9021263f5fa0a.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P2\r\nx-amz-cf-id: wYd6FEqFTjznSWKj0mItygCqVWMg7Gmw2LSTgtKVlNTHZF7SpjAo_w==\r\nage: 62443\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Apache HTTP Server:2.4.52","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":85398,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65534), with no line terminators","md5":"e0482d46de5f43f7cab955a0a7ea74f4","sha1":"617db8b16ebc9ed530cac268fca97961a4416b07","sha256":"3777638f6db06aee60ac76004fc6207392915c69bfb2e7f76cfde176bce16eef","sha512":"0d3c5bf8c257a4f8c41f998dc68cc871d47f2830d1ee147a21e709c61409e3954c7ba0a6838c5e8e846044f2e1e37a3fd8c0da4d9c44728d56e05e283bc7df44","ssdeep":"1536:CzQkY8MgXaXzOuAl1KTQB3JwgrJv1dRxeHSaRaVdU4Rer3:UQkY8MgXaXzO1ywrN1dRxeyq4Rer3","tlshash":"9d83b731a324683306ae41ea94a97661e70275dee5424c2dfd7cfcda5898cc234f9bf1","first_seen":"2026-03-20T14:21:23.924637Z","last_seen":"2026-04-12T16:17:37.667593Z","times_seen":540,"resource_available":true,"data":null}},"time_used":146,"timings":{"blocked":65,"dns":62,"connect":1,"send":0,"wait":1,"receive":1,"ssl":13},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mdmacanada.cc/wp-content/cache/debloat/js/89c9cd18dc38a87c0d34b7506289616b.js","fqdn":"mdmacanada.cc","domain":"mdmacanada.cc","tld":"cc"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://mdmacanada.cc/","date":"2026-03-26T23:10:45.421Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mdmacanada.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 29 Jan 2026 00:46:51 GMT","end":"Wed, 29 Apr 2026 01:45:19 GMT"},"fingerprint":{"sha1":"B7:47:48:08:4D:35:A4:0D:8D:CE:D7:71:A9:FA:22:B1:5B:A1:AC:40","sha256":"AE:86:CA:6D:76:85:1D:C6:34:96:AE:04:62:0C:A6:24:0A:DD:10:3E:9E:C3:97:21:29:1A:84:BA:B3:91:6A:6F"}}},"request":{"raw":"GET /wp-content/cache/debloat/js/89c9cd18dc38a87c0d34b7506289616b.js HTTP/1.1\r\nHost: mdmacanada.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mdmacanada.cc/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 26 Mar 2026 23:10:45 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 4609\r\ncache-control: public, max-age=604800\r\nexpires: Thu, 02 Apr 2026 23:10:45 GMT\r\nlast-modified: Fri, 13 Mar 2026 11:37:08 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nstrict-transport-security: max-age=63072000; includeSubDomains\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=dfIYYkuITKWGyTN0w%2FWjoMwm1YMbHXfZQJ%2BHtv4t9zq6HiOwN52ep5T1mcvt%2FzOwF6yf%2FvoZx7l4suCal%2F3IcvWU07PmcG%2B4YrKu1Avbtm9qGbz%2B2fhZ5K00AzVGYtTA\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e29d49dcf363181-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":15315,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (15315), with no line terminators","md5":"fc06080ebf979384eaf92a5f1cd7a50b","sha1":"1474b07026c758629a82df51a5e4fbb7abf531df","sha256":"c50a0b33030ba0ec063be642c297f48af94359e2222ff140817248d591faf837","sha512":"d6443028105566717f328c56d17a0694e13905aa008bd36ba744e76bc5181e854ab80563be1d3167d728bf5eba6c502d7e36aebf0ed74504c88e47125cc710aa","ssdeep":"384:1wNWSiRVRS4tdanZkYH5FL736ePkPakFX:qNdi7anPH5FL736ePkP/","tlshash":"fc62e945756050358aa511ac283b018f613adc3aa6f46834ef18e4ae387cede51fbb7d","first_seen":"2024-06-19T04:58:57Z","last_seen":"2026-04-25T21:02:59.578977Z","times_seen":107181,"resource_available":true,"data":null}},"time_used":372,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":371,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-26","alert":"Sinkholed","trigger":"mdmacanada.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mdmacanada.cc/wp-content/uploads/2023/08/MDMA-Banner-MOBILE-1200x540-v4.png","fqdn":"mdmacanada.cc","domain":"mdmacanada.cc","tld":"cc"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://mdmacanada.cc/","date":"2026-03-26T23:10:46.469Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mdmacanada.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 29 Jan 2026 00:46:51 GMT","end":"Wed, 29 Apr 2026 01:45:19 GMT"},"fingerprint":{"sha1":"B7:47:48:08:4D:35:A4:0D:8D:CE:D7:71:A9:FA:22:B1:5B:A1:AC:40","sha256":"AE:86:CA:6D:76:85:1D:C6:34:96:AE:04:62:0C:A6:24:0A:DD:10:3E:9E:C3:97:21:29:1A:84:BA:B3:91:6A:6F"}}},"request":{"raw":"GET /wp-content/uploads/2023/08/MDMA-Banner-MOBILE-1200x540-v4.png HTTP/1.1\r\nHost: mdmacanada.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mdmacanada.cc/\r\nCookie: wffn_flt=2026-3-26 23:10:45; wffn_timezone=UTC; wffn_is_mobile=false; wffn_browser=Firefox; wffn_referrer=; wffn_fl_url=/; sbjs_migrations=1418474375998%3D1; sbjs_current_add=fd%3D2026-03-26%2023%3A10%3A45%7C%7C%7Cep%3Dhttps%3A%2F%2Fmdmacanada.cc%2F%7C%7C%7Crf%3D%28none%29; sbjs_first_add=fd%3D2026-03-26%2023%3A10%3A45%7C%7C%7Cep%3Dhttps%3A%2F%2Fmdmacanada.cc%2F%7C%7C%7Crf%3D%28none%29; sbjs_current=typ%3Dtypein%7C%7C%7Csrc%3D%28direct%29%7C%7C%7Cmdm%3D%28none%29%7C%7C%7Ccmp%3D%28none%29%7C%7C%7Ccnt%3D%28none%29%7C%7C%7Ctrm%3D%28none%29%7C%7C%7Cid%3D%28none%29%7C%7C%7Cplt%3D%28none%29%7C%7C%7Cfmt%3D%28none%29%7C%7C%7Ctct%3D%28none%29; sbjs_first=typ%3Dtypein%7C%7C%7Csrc%3D%28direct%29%7C%7C%7Cmdm%3D%28none%29%7C%7C%7Ccmp%3D%28none%29%7C%7C%7Ccnt%3D%28none%29%7C%7C%7Ctrm%3D%28none%29%7C%7C%7Cid%3D%28none%29%7C%7C%7Cplt%3D%28none%29%7C%7C%7Cfmt%3D%28none%29%7C%7C%7Ctct%3D%28none%29; sbjs_udata=vst%3D1%7C%7C%7Cuip%3D%28none%29%7C%7C%7Cuag%3DMozilla%2F5.0%20%28Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0%29%20Gecko%2F20100101%20Firefox%2F134.0; sbjs_session=pgs%3D1%7C%7C%7Ccpg%3Dhttps%3A%2F%2Fmdmacanada.cc%2F; __kla_id=eyJjaWQiOiJOek5pTVRaaE1UQXRaakUxWXkwME5UaG1MVGt5WlRRdFpHVXpZelUwWmpFeU9HUm0ifQ==\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 26 Mar 2026 23:10:46 GMT\r\ncontent-type: image/png\r\ncontent-length: 197826\r\ncache-control: public, max-age=604800\r\nexpires: Thu, 02 Apr 2026 23:10:46 GMT\r\nlast-modified: Sat, 25 May 2024 01:49:05 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nstrict-transport-security: max-age=63072000; includeSubDomains\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=KFEH9ac%2F6jxn7FNKdRzAZvS6Up591fCUKIx5eLi2LudTM7nGncCCFCJOTgiVb%2Flm%2FM2I89QJUI%2Bq7ZZhTR0ZAMqdkTzIenSxLTMDSWD808zEt8zHd1%2FwLc97c%2F4XBElP\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e29d4a47c6d3181-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":197826,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 1200 x 540, 8-bit/color RGB, non-interlaced","md5":"16b46378835438425c76fc0afda53847","sha1":"3cfb4afb2f35fbcfeae5ad353ca3dbb297182a84","sha256":"ee45767d56b326e64d5628cfc879999632f97be70ccba530b5050e60e1054d00","sha512":"7f2f7cf9c31c11a338ca7df8a043e520a25e200e85be91d83215cb481cb149aaecb649684e3f4a03bb0d99e7d016b6096a61db4ab20f8fa3495b54d075b308e7","ssdeep":"6144:x4VADJbZm7/ZO7l1GMKz0kpZ+/lUrtQdigRNVvjIDugL:x4+i7/Qky/SwigtvjIbL","tlshash":"ca141367a57001ae29c4bf52a33b5c4da9675392090bf3dfebd8ea1f2d14438c5eb142","first_seen":"2026-03-26T23:11:11.800284Z","last_seen":"2026-03-27T01:49:53.340513Z","times_seen":2,"resource_available":false,"data":null}},"time_used":660,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":434,"receive":226,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-26","alert":"Sinkholed","trigger":"mdmacanada.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"lh3.googleusercontent.com/a/ACg8ocIKYkwEPlaq3INjsOex1iE11wMghNtr3d3PYHFHQFMGQDJhx_U=w40-h40-c","fqdn":"lh3.googleusercontent.com","domain":"googleusercontent.com","tld":"com"},"ip":{"addr":"142.250.178.65","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://mdmacanada.cc/","date":"2026-03-26T23:10:46.819Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.googleusercontent.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 09 Mar 2026 08:37:42 GMT","end":"Mon, 01 Jun 2026 08:37:41 GMT"},"fingerprint":{"sha1":"7D:11:01:3C:E2:AD:83:07:6F:B1:C5:93:97:85:83:87:0B:36:4F:19","sha256":"A8:96:42:48:48:E2:29:05:5F:B7:D4:6E:C9:A5:58:AD:06:3A:D9:3C:32:B6:20:31:AC:35:DA:1C:C1:7E:A8:2F"}}},"request":{"raw":"GET /a/ACg8ocIKYkwEPlaq3INjsOex1iE11wMghNtr3d3PYHFHQFMGQDJhx_U=w40-h40-c HTTP/1.1\r\nHost: lh3.googleusercontent.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mdmacanada.cc/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/jpeg\r\nvary: Origin\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\naccess-control-expose-headers: Content-Length\r\netag: \"v3b\"\r\nexpires: Fri, 27 Mar 2026 23:10:47 GMT\r\ncache-control: public, max-age=86400, no-transform\r\ncontent-disposition: inline;filename=\"unnamed.jpg\"\r\nx-content-type-options: nosniff\r\ndate: Thu, 26 Mar 2026 23:10:47 GMT\r\nserver: fife\r\ncontent-length: 1404\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1404,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, Exif Standard: [TIFF image data, little-endian, direntries=1, software=Picasa], baseline, precision 8, 40x40, components 3","md5":"4ecad2dbf5e03bee1356c02def9deba8","sha1":"a9b343e4512d8cd66478b476747999c1a47fdd68","sha256":"c75dfcf012366d2491890d88588a1685014673256f4b0e56562ffeda4e091ab9","sha512":"de053b01ad864ecb283a2651df2c32ef363e615fd08736b92ec0b8cab594e6b6249c98800b1626caf2152e6e6931af60b283e1108977b6b9f9d8fd77fa6c7b0a","ssdeep":"","tlshash":"2821b84a56074262fc8fab31521523755d38cf865789834fd06f569dea635c11718a80","first_seen":"2026-03-26T23:11:11.801541Z","last_seen":"2026-03-27T01:49:53.362026Z","times_seen":2,"resource_available":false,"data":null}},"time_used":420,"timings":{"blocked":106,"dns":45,"connect":15,"send":0,"wait":160,"receive":0,"ssl":89},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mdmacanada.cc/wp-content/themes/flatsome/assets/js/chunk.tooltips.js?ver=3.18.7","fqdn":"mdmacanada.cc","domain":"mdmacanada.cc","tld":"cc"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://mdmacanada.cc/","date":"2026-03-26T23:10:47.283Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mdmacanada.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 29 Jan 2026 00:46:51 GMT","end":"Wed, 29 Apr 2026 01:45:19 GMT"},"fingerprint":{"sha1":"B7:47:48:08:4D:35:A4:0D:8D:CE:D7:71:A9:FA:22:B1:5B:A1:AC:40","sha256":"AE:86:CA:6D:76:85:1D:C6:34:96:AE:04:62:0C:A6:24:0A:DD:10:3E:9E:C3:97:21:29:1A:84:BA:B3:91:6A:6F"}}},"request":{"raw":"GET /wp-content/themes/flatsome/assets/js/chunk.tooltips.js?ver=3.18.7 HTTP/1.1\r\nHost: mdmacanada.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mdmacanada.cc/\r\nCookie: wffn_flt=2026-3-26 23:10:45; wffn_timezone=UTC; wffn_is_mobile=false; wffn_browser=Firefox; wffn_referrer=; wffn_fl_url=/; sbjs_migrations=1418474375998%3D1; sbjs_current_add=fd%3D2026-03-26%2023%3A10%3A45%7C%7C%7Cep%3Dhttps%3A%2F%2Fmdmacanada.cc%2F%7C%7C%7Crf%3D%28none%29; sbjs_first_add=fd%3D2026-03-26%2023%3A10%3A45%7C%7C%7Cep%3Dhttps%3A%2F%2Fmdmacanada.cc%2F%7C%7C%7Crf%3D%28none%29; sbjs_current=typ%3Dtypein%7C%7C%7Csrc%3D%28direct%29%7C%7C%7Cmdm%3D%28none%29%7C%7C%7Ccmp%3D%28none%29%7C%7C%7Ccnt%3D%28none%29%7C%7C%7Ctrm%3D%28none%29%7C%7C%7Cid%3D%28none%29%7C%7C%7Cplt%3D%28none%29%7C%7C%7Cfmt%3D%28none%29%7C%7C%7Ctct%3D%28none%29; sbjs_first=typ%3Dtypein%7C%7C%7Csrc%3D%28direct%29%7C%7C%7Cmdm%3D%28none%29%7C%7C%7Ccmp%3D%28none%29%7C%7C%7Ccnt%3D%28none%29%7C%7C%7Ctrm%3D%28none%29%7C%7C%7Cid%3D%28none%29%7C%7C%7Cplt%3D%28none%29%7C%7C%7Cfmt%3D%28none%29%7C%7C%7Ctct%3D%28none%29; sbjs_udata=vst%3D1%7C%7C%7Cuip%3D%28none%29%7C%7C%7Cuag%3DMozilla%2F5.0%20%28Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0%29%20Gecko%2F20100101%20Firefox%2F134.0; sbjs_session=pgs%3D1%7C%7C%7Ccpg%3Dhttps%3A%2F%2Fmdmacanada.cc%2F; __kla_id=eyJjaWQiOiJOek5pTVRaaE1UQXRaakUxWXkwME5UaG1MVGt5WlRRdFpHVXpZelUwWmpFeU9HUm0ifQ==\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 26 Mar 2026 23:10:47 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 9748\r\ncache-control: public, max-age=604800\r\nexpires: Thu, 02 Apr 2026 23:10:47 GMT\r\nlast-modified: Sat, 25 May 2024 01:48:56 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nstrict-transport-security: max-age=63072000; includeSubDomains\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=1eq03b2ne%2Bn9ewE3swX0sSBV7%2BzNtXPuzcomupP4Y3%2BXX1S9iu3MtMaTgEYqpav6Db%2B92NKz9K6gg1JavI2K7ZbIoXBVx1nvlL1EkZBiPpkRCn2wcdU5vnxKaoAXNWxD\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e29d4a97d2a3181-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":39860,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (39860), with no line terminators","md5":"fd8b8521010d831c4d95db4467c6b89c","sha1":"b366ddaf5aeeb83ad4209f27e4f96f8952823483","sha256":"0a0a9c4251675f3abb5b43a00d186c997029ba504bdf710074746b46102ec8ba","sha512":"03b74533af169cd412f3e91661336c120692184ad85598fcca5b4909612bd2fec8038a505c647bc224c76787afcf1891df3ec15cec3779e1ffff00bca7c05c97","ssdeep":"768:Upk+gInpvUKN7K3TCPHq3U5Hs9Nn1eU6YwlKUqAacA5Ag3KEuP3UtEduE7Hhg566:twk3TCPe5wsdAry","tlshash":"7d03769af351291246eb62fd6336370f1132812d91c380b4b17c9be91dae507b7b7a6c","first_seen":"2023-05-02T08:02:19Z","last_seen":"2026-04-25T19:17:03.426464Z","times_seen":14197,"resource_available":true,"data":null}},"time_used":455,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":455,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-26","alert":"Sinkholed","trigger":"mdmacanada.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/69967ba6a3b/languages/en_dev.json","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"172.66.161.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://mdmacanada.cc/","date":"2026-03-26T23:10:48.043Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tawk.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 06 Mar 2026 09:33:33 GMT","end":"Thu, 04 Jun 2026 10:33:27 GMT"},"fingerprint":{"sha1":"F0:6C:DC:32:63:CD:34:E3:15:CD:7F:77:F5:A3:64:E0:9B:36:95:83","sha256":"B6:7F:6E:A3:69:3E:0D:3B:04:3E:8B:65:86:7E:1D:5F:82:84:18:16:8D:AD:72:D5:51:E3:46:BC:BD:CD:BC:38"}}},"request":{"raw":"GET /_s/v4/app/69967ba6a3b/languages/en_dev.json HTTP/1.1\r\nHost: embed.tawk.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://mdmacanada.cc/\r\nOrigin: https://mdmacanada.cc\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 26 Mar 2026 23:10:48 GMT\r\ncontent-type: application/json\r\nlast-modified: Thu, 19 Feb 2026 02:56:35 GMT\r\netag: W/\"73eea1de9215521cb137b51419ba55a9\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000, immutable\r\nx-cache-status: HIT\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=0; includeSubDomains; preload\r\nvary: accept-encoding\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nx-content-type-options: nosniff\r\ncf-ray: 9e29d4ae4b74c272-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":10839,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"73eea1de9215521cb137b51419ba55a9","sha1":"a8876b573146cd5450adc92a5450febea8d33f22","sha256":"df1d970dbd95be40780e8c006102fa7892bfe26bc989ee0c9222b089038542ee","sha512":"277849fa8a9d59430663b5c1aac29a198436731ab59bc5968ed9fcfb839f00a31e6e278c3c78547f6e1c20d94847963375de011be6493af268a7bac25cd15257","ssdeep":"192:ImwHq/LrnzPLEgIE1iN+xiDgGOy+HpVHnKWyay8V1K5Av+cE:s6LrnzCE1iN+xkDOy+Hp8/5Avy","tlshash":"c7224269ce504ea702c29647399f35437624429b1f54382eb78891ac0f8ec6f71f779e","first_seen":"2026-02-18T09:54:55.751197Z","last_seen":"2026-04-25T21:03:03.566265Z","times_seen":14112,"resource_available":false,"data":null}},"time_used":154,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":154,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static-tracking.klaviyo.com/onsite/js/build-preview/commit-a9008e2652932ce924ec514ff7f88d1dd460ca1b/post_identification_sync.e290d099b5bfa48fdae0.js?cb=2","fqdn":"static-tracking.klaviyo.com","domain":"klaviyo.com","tld":"com"},"ip":{"addr":"151.101.66.133","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://mdmacanada.cc/","date":"2026-03-26T23:10:45.765Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"static-tracking.klaviyo.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 10 Mar 2026 18:32:35 GMT","end":"Mon, 08 Jun 2026 18:32:34 GMT"},"fingerprint":{"sha1":"67:8B:C3:D0:ED:A5:30:2B:01:C2:00:BE:98:CB:EB:8B:10:29:07:77","sha256":"41:4B:FC:4B:5F:DF:5A:99:DF:7E:97:0B:FE:A9:EC:22:03:5C:8E:FC:FD:92:1D:47:5A:D8:78:1A:4A:13:F8:FB"}}},"request":{"raw":"GET /onsite/js/build-preview/commit-a9008e2652932ce924ec514ff7f88d1dd460ca1b/post_identification_sync.e290d099b5bfa48fdae0.js?cb=2 HTTP/1.1\r\nHost: static-tracking.klaviyo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://mdmacanada.cc\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mdmacanada.cc/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nx-amz-id-2: wtUJfDOTkIc3qVaJLNv5W+IFVuag1LKu4mRKMty/TT1TH3Hnj4ouhbNWNo4N+jGe7yavB7m/jELoJTVpWYsdaXz9kT8eVGNM\r\nx-amz-request-id: FSGDJBPD4CHZDG6X\r\nlast-modified: Thu, 26 Mar 2026 15:02:59 GMT\r\netag: \"7869fd8269efcec7dd1f9b02f377a851\"\r\nx-amz-server-side-encryption: AES256\r\nx-amz-meta-entrypoints-hash: \r\ncache-control: max-age=2592000,stale-while-revalidate=10800\r\nx-amz-meta-surrogate-control: max-age=31536000\r\nx-amz-meta-surrogate-key: fender-asset-build-preview\r\nx-amz-version-id: doW_ae7zk3PFtoeA9bT_aEllGFTvK6rM\r\ncontent-type: text/javascript\r\nserver: AmazonS3\r\ncontent-encoding: br\r\nvia: 1.1 varnish, 1.1 varnish\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ndate: Thu, 26 Mar 2026 23:10:45 GMT\r\nage: 209\r\nx-served-by: cache-lga21956-LGA, cache-hel1410028-HEL\r\nx-cache: HIT, HIT\r\nx-cache-hits: 60, 51\r\nvary: Accept-Encoding\r\ncontent-length: 1880\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":4039,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (4039), with no line terminators","md5":"7869fd8269efcec7dd1f9b02f377a851","sha1":"b24e503afc3ea9f90dc51e3b597a90877ccf654e","sha256":"8ee0426266bf888b4fbde32c2fbcb4ea01b8dc62c18a3d4efba487eb193cd36f","sha512":"8fe8a4623b88116e56789e160fc588841a2e2995a4d015b0bd6b6a8f9300814fea1622295ac753c1913db988f177e939d236347b5115b7c0025c2704513bb5b4","ssdeep":"","tlshash":"b381da5a75e6f0b40ef81dda55741114f9bc980cf91cc8a0f268cd4f956f856a33aa0f","first_seen":"2026-03-09T17:13:19.585377Z","last_seen":"2026-04-24T00:51:00.716985Z","times_seen":7327,"resource_available":true,"data":null}},"time_used":170,"timings":{"blocked":69,"dns":33,"connect":13,"send":0,"wait":15,"receive":0,"ssl":32},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/6562fe62ba9fcf18a80ef28f/1hg5b3cdr","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"172.66.161.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://mdmacanada.cc/","date":"2026-03-26T23:10:45.971Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tawk.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 06 Mar 2026 09:33:33 GMT","end":"Thu, 04 Jun 2026 10:33:27 GMT"},"fingerprint":{"sha1":"F0:6C:DC:32:63:CD:34:E3:15:CD:7F:77:F5:A3:64:E0:9B:36:95:83","sha256":"B6:7F:6E:A3:69:3E:0D:3B:04:3E:8B:65:86:7E:1D:5F:82:84:18:16:8D:AD:72:D5:51:E3:46:BC:BD:CD:BC:38"}}},"request":{"raw":"GET /6562fe62ba9fcf18a80ef28f/1hg5b3cdr HTTP/1.1\r\nHost: embed.tawk.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://mdmacanada.cc\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mdmacanada.cc/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 26 Mar 2026 23:10:46 GMT\r\ncontent-type: application/x-javascript\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=7200, s-maxage=3600\r\netag: W/\"stable-v4-69967ba6a3b\"\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=0; includeSubDomains; preload\r\ncf-cache-status: MISS\r\nx-content-type-options: nosniff\r\nserver: cloudflare\r\ncf-ray: 9e29d4a18bdab28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":2123,"size_decoded":0,"mime_type":"application/x-javascript","magic":"JavaScript source, ASCII text","md5":"972e2fbde31ece567026d1ff5af69cc7","sha1":"6bce361f0209c6719db4d7480171149b8c1f3713","sha256":"9af85af596db11793dd39ca45f15b0d71ae0a9696a6f484d84fc588b5da268c8","sha512":"1b557e3f728a1c912837f4a51d2df6f91911fc1aa3fdf52fe34f62f23f89694276b155131a5b960ad1ff6789a03cbb29fc4e9c9b398c1f241d7c1abc4bd32942","ssdeep":"","tlshash":"9141caee5b4f1c56b22410d90ebef90ef47720f749da5892970c085272657ad2f8de38","first_seen":"2026-03-26T23:11:11.805098Z","last_seen":"2026-03-27T01:49:53.33404Z","times_seen":2,"resource_available":true,"data":null}},"time_used":211,"timings":{"blocked":29,"dns":21,"connect":1,"send":0,"wait":147,"receive":0,"ssl":11},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mdmacanada.cc/wp-content/themes/flatsome/assets/js/flatsome.js?ver=a0a7aee297766598a20e","fqdn":"mdmacanada.cc","domain":"mdmacanada.cc","tld":"cc"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://mdmacanada.cc/","date":"2026-03-26T23:10:47.280Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mdmacanada.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 29 Jan 2026 00:46:51 GMT","end":"Wed, 29 Apr 2026 01:45:19 GMT"},"fingerprint":{"sha1":"B7:47:48:08:4D:35:A4:0D:8D:CE:D7:71:A9:FA:22:B1:5B:A1:AC:40","sha256":"AE:86:CA:6D:76:85:1D:C6:34:96:AE:04:62:0C:A6:24:0A:DD:10:3E:9E:C3:97:21:29:1A:84:BA:B3:91:6A:6F"}}},"request":{"raw":"GET /wp-content/themes/flatsome/assets/js/flatsome.js?ver=a0a7aee297766598a20e HTTP/1.1\r\nHost: mdmacanada.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mdmacanada.cc/\r\nCookie: wffn_flt=2026-3-26 23:10:45; wffn_timezone=UTC; wffn_is_mobile=false; wffn_browser=Firefox; wffn_referrer=; wffn_fl_url=/; sbjs_migrations=1418474375998%3D1; sbjs_current_add=fd%3D2026-03-26%2023%3A10%3A45%7C%7C%7Cep%3Dhttps%3A%2F%2Fmdmacanada.cc%2F%7C%7C%7Crf%3D%28none%29; sbjs_first_add=fd%3D2026-03-26%2023%3A10%3A45%7C%7C%7Cep%3Dhttps%3A%2F%2Fmdmacanada.cc%2F%7C%7C%7Crf%3D%28none%29; sbjs_current=typ%3Dtypein%7C%7C%7Csrc%3D%28direct%29%7C%7C%7Cmdm%3D%28none%29%7C%7C%7Ccmp%3D%28none%29%7C%7C%7Ccnt%3D%28none%29%7C%7C%7Ctrm%3D%28none%29%7C%7C%7Cid%3D%28none%29%7C%7C%7Cplt%3D%28none%29%7C%7C%7Cfmt%3D%28none%29%7C%7C%7Ctct%3D%28none%29; sbjs_first=typ%3Dtypein%7C%7C%7Csrc%3D%28direct%29%7C%7C%7Cmdm%3D%28none%29%7C%7C%7Ccmp%3D%28none%29%7C%7C%7Ccnt%3D%28none%29%7C%7C%7Ctrm%3D%28none%29%7C%7C%7Cid%3D%28none%29%7C%7C%7Cplt%3D%28none%29%7C%7C%7Cfmt%3D%28none%29%7C%7C%7Ctct%3D%28none%29; sbjs_udata=vst%3D1%7C%7C%7Cuip%3D%28none%29%7C%7C%7Cuag%3DMozilla%2F5.0%20%28Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0%29%20Gecko%2F20100101%20Firefox%2F134.0; sbjs_session=pgs%3D1%7C%7C%7Ccpg%3Dhttps%3A%2F%2Fmdmacanada.cc%2F; __kla_id=eyJjaWQiOiJOek5pTVRaaE1UQXRaakUxWXkwME5UaG1MVGt5WlRRdFpHVXpZelUwWmpFeU9HUm0ifQ==\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 26 Mar 2026 23:10:47 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 16076\r\ncache-control: public, max-age=604800\r\nexpires: Thu, 02 Apr 2026 23:10:47 GMT\r\nlast-modified: Sat, 25 May 2024 01:48:56 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nstrict-transport-security: max-age=63072000; includeSubDomains\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=lVZgp6JYNEWrP9ZY%2F1BosMbG9UkzSyIzZuCQ9w%2FzDXBD8JGtd1x%2F8giOl3chRhEZqO%2FjCqPFxjMZ0JaV8cBu1YTIUUBBGp4a%2FwkE%2BugH%2BfR%2BrdqNF220%2FJ6dfoOKYwBx\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e29d4a97d213181-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":53856,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (53856), with no line terminators","md5":"0f13719c0342913a1990f6ffff131bc5","sha1":"1bfdb4055f5960d97decdf88f16a250f5568173f","sha256":"1ce97f1528f3d41dff547488d8d57c66637423dafb1bca9fe5c48861b2739725","sha512":"b060a6ca9f4f4bec1f9e169b3c03bd2af3789c112ce63aa279d218d5d9258dd20d3ba723fe3e251dcd520612aacf3a35ffaa93bc65694e3273227cf8fd1021d5","ssdeep":"1536:c9wJq+5+Q8kNSBEpeLMEXmoEtZccPhtUaD3o1xj:qAzwLlgP4aDI","tlshash":"cb33d819b25070fe01ff61a7f13fa32432376525b0174054b52d98fa2d6ae5e22a3f7a","first_seen":"2024-04-05T15:17:42Z","last_seen":"2026-04-25T18:22:29.522233Z","times_seen":1602,"resource_available":true,"data":null}},"time_used":455,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":454,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-26","alert":"Sinkholed","trigger":"mdmacanada.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mdmacanada.cc/wp-content/cache/debloat/js/288f435a0bebd5d533c675a8c98b8ba6.js","fqdn":"mdmacanada.cc","domain":"mdmacanada.cc","tld":"cc"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://mdmacanada.cc/","date":"2026-03-26T23:10:45.366Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mdmacanada.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 29 Jan 2026 00:46:51 GMT","end":"Wed, 29 Apr 2026 01:45:19 GMT"},"fingerprint":{"sha1":"B7:47:48:08:4D:35:A4:0D:8D:CE:D7:71:A9:FA:22:B1:5B:A1:AC:40","sha256":"AE:86:CA:6D:76:85:1D:C6:34:96:AE:04:62:0C:A6:24:0A:DD:10:3E:9E:C3:97:21:29:1A:84:BA:B3:91:6A:6F"}}},"request":{"raw":"GET /wp-content/cache/debloat/js/288f435a0bebd5d533c675a8c98b8ba6.js HTTP/1.1\r\nHost: mdmacanada.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mdmacanada.cc/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 26 Mar 2026 23:10:45 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 4678\r\ncache-control: public, max-age=604800\r\nexpires: Thu, 02 Apr 2026 23:10:45 GMT\r\nlast-modified: Sat, 25 May 2024 01:50:07 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nstrict-transport-security: max-age=63072000; includeSubDomains\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=s8%2BMXLYC%2FmsGXGIUvPlmufCSLFUWvPm6%2F6doMNiyhxjyNlqvOhS33yZhaiAnXXACs9mbEcupji%2FUb%2Bp5SEIst3kaH630PY6mlnhKW%2FLyUB7Veg2QlzQ8oiblXHVBwS4H\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e29d49d7ea93181-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":13577,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (13479)","md5":"9ffeb32e2d9efbf8f70caabded242267","sha1":"3ad0c10e501ac2a9bfa18f9cd7e700219b378738","sha256":"5274f11e6fb32ae0cf2dfb9f8043272865c397a7c4223b4cfa7d50ea52fbde89","sha512":"8d6be545508a1c38278b8ad780c3758ae48a25e4e12eee443375aa56031d9b356f8c90f22d4f251140fa3f65603af40523165e33cae2e2d62fc78ec106e3d731","ssdeep":"192:5rprDN+sag6ifKIUpQI99P1tLm9kdgyq1+J3aCJQ+h4MPLORq:5rprxaefKI0LP19m4q1WW+h4Mjp","tlshash":"9952c8adb56679724eb721b8f03bd24f71b205de560d8940d19cc4f6282dc6e812bf78","first_seen":"2023-05-09T19:21:05Z","last_seen":"2026-04-25T21:03:19.203045Z","times_seen":687965,"resource_available":true,"data":null}},"time_used":358,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":358,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-26","alert":"Sinkholed","trigger":"mdmacanada.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mdmacanada.cc/wp-content/cache/debloat/js/9351e4978761082eba1a8753a98dbf13.js","fqdn":"mdmacanada.cc","domain":"mdmacanada.cc","tld":"cc"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://mdmacanada.cc/","date":"2026-03-26T23:10:45.416Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mdmacanada.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 29 Jan 2026 00:46:51 GMT","end":"Wed, 29 Apr 2026 01:45:19 GMT"},"fingerprint":{"sha1":"B7:47:48:08:4D:35:A4:0D:8D:CE:D7:71:A9:FA:22:B1:5B:A1:AC:40","sha256":"AE:86:CA:6D:76:85:1D:C6:34:96:AE:04:62:0C:A6:24:0A:DD:10:3E:9E:C3:97:21:29:1A:84:BA:B3:91:6A:6F"}}},"request":{"raw":"GET /wp-content/cache/debloat/js/9351e4978761082eba1a8753a98dbf13.js HTTP/1.1\r\nHost: mdmacanada.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mdmacanada.cc/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 26 Mar 2026 23:10:45 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 1852\r\ncache-control: public, max-age=604800\r\nexpires: Thu, 02 Apr 2026 23:10:45 GMT\r\nlast-modified: Wed, 03 Dec 2025 15:26:44 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nstrict-transport-security: max-age=63072000; includeSubDomains\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Vpx%2B%2B927t8B1hGZDvxnmKNh4w3jUVbVa2AFKUMtytH1TMj6fLm%2FpVpMpx6mZ5UnpNqHh0R8q4kusUqP0yOwKo1bZVTod%2FWawJXd%2Fhg9E7sHhPnXzouFH3PWCryxtzZNB\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e29d49dbf263181-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5661,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (5626)","md5":"90e932bd9e62583fc494c00498cfe7f5","sha1":"4f57e11bff609f90f49174187a0b5a6ba847ad28","sha256":"87cee5f49ba0d3017efc409579fc58b91a717f8f14751f7d804447ac9bcbaf4b","sha512":"ed9c129faf972ddfa705f05c3207884e5e9cd175baa45d49ce9d42bc0d01e4e8f36e627731bdd97214b1e2400fdd5012262a42f9800cd4f5565dbf183ba58507","ssdeep":"96:wXDE/3s/0EBM6ZUUCRTH+zl4NsBjcEmDtrGV2C2yics6w1RfGdzsvqZTq:wzg3kBFZYH+zhjngRw2cLzw1RfGdzsvx","tlshash":"56c153847983b970b2337057f0ff48d561baeba575298081964ec4a05d7388ee0a7abd","first_seen":"2025-10-27T08:47:54.273294Z","last_seen":"2026-04-25T21:03:07.860129Z","times_seen":134249,"resource_available":true,"data":null}},"time_used":386,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":386,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-26","alert":"Sinkholed","trigger":"mdmacanada.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mdmacanada.cc/wp-content/cache/debloat/js/ca37ef15447bf1422396697306d12017.js","fqdn":"mdmacanada.cc","domain":"mdmacanada.cc","tld":"cc"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://mdmacanada.cc/","date":"2026-03-26T23:10:45.424Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mdmacanada.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 29 Jan 2026 00:46:51 GMT","end":"Wed, 29 Apr 2026 01:45:19 GMT"},"fingerprint":{"sha1":"B7:47:48:08:4D:35:A4:0D:8D:CE:D7:71:A9:FA:22:B1:5B:A1:AC:40","sha256":"AE:86:CA:6D:76:85:1D:C6:34:96:AE:04:62:0C:A6:24:0A:DD:10:3E:9E:C3:97:21:29:1A:84:BA:B3:91:6A:6F"}}},"request":{"raw":"GET /wp-content/cache/debloat/js/ca37ef15447bf1422396697306d12017.js HTTP/1.1\r\nHost: mdmacanada.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mdmacanada.cc/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 26 Mar 2026 23:10:45 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 16076\r\ncache-control: public, max-age=604800\r\nexpires: Thu, 02 Apr 2026 23:10:45 GMT\r\nlast-modified: Sat, 25 May 2024 01:50:07 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nstrict-transport-security: max-age=63072000; includeSubDomains\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=tVU8z5rhK6fRQjLN1lCLm2DgbXIoHtfB9RtP2nodkXUnx%2Baz6Q8QTRNkGdJSg20cqcLPhDrFQt9SZegFjYq6dbBv4SProKVpws83oiGOT18d%2BQ30CgKhw3zvH3bFy9fj\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e29d49dcf473181-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":53856,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (53856), with no line terminators","md5":"0f13719c0342913a1990f6ffff131bc5","sha1":"1bfdb4055f5960d97decdf88f16a250f5568173f","sha256":"1ce97f1528f3d41dff547488d8d57c66637423dafb1bca9fe5c48861b2739725","sha512":"b060a6ca9f4f4bec1f9e169b3c03bd2af3789c112ce63aa279d218d5d9258dd20d3ba723fe3e251dcd520612aacf3a35ffaa93bc65694e3273227cf8fd1021d5","ssdeep":"1536:c9wJq+5+Q8kNSBEpeLMEXmoEtZccPhtUaD3o1xj:qAzwLlgP4aDI","tlshash":"cb33d819b25070fe01ff61a7f13fa32432376525b0174054b52d98fa2d6ae5e22a3f7a","first_seen":"2024-04-05T15:17:42Z","last_seen":"2026-04-25T18:22:29.522233Z","times_seen":1602,"resource_available":true,"data":null}},"time_used":445,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":444,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-26","alert":"Sinkholed","trigger":"mdmacanada.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"static.klaviyo.com/onsite/js/1011.1f31096a902efe86fbac.js","fqdn":"static.klaviyo.com","domain":"klaviyo.com","tld":"com"},"ip":{"addr":"151.101.2.133","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://mdmacanada.cc/","date":"2026-03-26T23:10:46.116Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"static.klaviyo.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 02 Mar 2026 22:32:36 GMT","end":"Sun, 31 May 2026 22:32:35 GMT"},"fingerprint":{"sha1":"36:11:62:1C:62:9E:7B:97:05:37:F9:A2:98:8F:68:41:2E:6B:D7:B5","sha256":"05:31:1A:E8:28:B5:E9:56:9C:39:CF:3B:A4:17:62:2A:BD:15:10:60:75:8E:D0:BA:D6:B8:02:1F:E1:A0:20:F8"}}},"request":{"raw":"GET /onsite/js/1011.1f31096a902efe86fbac.js HTTP/1.1\r\nHost: static.klaviyo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://mdmacanada.cc\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mdmacanada.cc/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nx-amz-id-2: Y7pnKUPwzHmJj7KnIgCtgc34AosBR+WrM/+96Cj4ozFqHV1OAF/GR94R5xtNKPdlWBicixtRU4rwYpG75hFlaf7DXIfq6XsO\r\nx-amz-request-id: ZRHEGSZAHY3TMPYT\r\nlast-modified: Thu, 12 Mar 2026 20:34:39 GMT\r\netag: \"20ced6aaae1a6ec076e837981c8d71b3\"\r\nx-amz-server-side-encryption: AES256\r\nx-amz-meta-entrypoints-hash: \r\ncache-control: max-age=2592000,stale-while-revalidate=10800\r\nx-amz-meta-surrogate-control: max-age=31536000\r\nx-amz-meta-surrogate-key: fender-assset\r\nx-amz-version-id: 3DrfHckFlrKSHEBumXF8jF5IJXIOWO1d\r\ncontent-type: text/javascript\r\nserver: AmazonS3\r\ncontent-encoding: br\r\nvia: 1.1 varnish, 1.1 varnish\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ndate: Thu, 26 Mar 2026 23:10:46 GMT\r\nage: 3137\r\nx-served-by: cache-lga21963-LGA, cache-hel1410029-HEL\r\nx-cache: HIT, HIT\r\nx-cache-hits: 74, 372\r\nvary: Accept-Encoding\r\ncontent-length: 8072\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}],"data":{"size":26380,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (26380), with no line terminators","md5":"20ced6aaae1a6ec076e837981c8d71b3","sha1":"783d5cc9e849c95c23223c5c840c30451adc4709","sha256":"59cf35004ea9e24ba70e6e29f71ffc3b425e71d5b89bc38fc216322fbd25b932","sha512":"142037006d3a9c11b4718bfc14d92f9f571a78443c287fb51be6a664e2e59f677d891e65c0a68cdea1951741c93783bce004b7e518ece3cd0a69baef4f796397","ssdeep":"768:17PhTyri8FHT6SHW/Jzs6RiddNQXcbk456SDrnEVs4SqxJQuHtfx2AxD8tB8leN0:NTSDte","tlshash":"47c23bc6bbd5f13016e994f6507a2252b36c298b380c4060f2798c8e7d45a8b7377bb9","first_seen":"2026-03-12T21:18:00.81401Z","last_seen":"2026-04-19T03:09:40.720579Z","times_seen":1746,"resource_available":true,"data":null}},"time_used":13,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":13,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mdmacanada.cc/wp-content/themes/flatsome/assets/js/chunk.popups.js?ver=3.18.7","fqdn":"mdmacanada.cc","domain":"mdmacanada.cc","tld":"cc"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://mdmacanada.cc/","date":"2026-03-26T23:10:47.282Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mdmacanada.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 29 Jan 2026 00:46:51 GMT","end":"Wed, 29 Apr 2026 01:45:19 GMT"},"fingerprint":{"sha1":"B7:47:48:08:4D:35:A4:0D:8D:CE:D7:71:A9:FA:22:B1:5B:A1:AC:40","sha256":"AE:86:CA:6D:76:85:1D:C6:34:96:AE:04:62:0C:A6:24:0A:DD:10:3E:9E:C3:97:21:29:1A:84:BA:B3:91:6A:6F"}}},"request":{"raw":"GET /wp-content/themes/flatsome/assets/js/chunk.popups.js?ver=3.18.7 HTTP/1.1\r\nHost: mdmacanada.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mdmacanada.cc/\r\nCookie: wffn_flt=2026-3-26 23:10:45; wffn_timezone=UTC; wffn_is_mobile=false; wffn_browser=Firefox; wffn_referrer=; wffn_fl_url=/; sbjs_migrations=1418474375998%3D1; sbjs_current_add=fd%3D2026-03-26%2023%3A10%3A45%7C%7C%7Cep%3Dhttps%3A%2F%2Fmdmacanada.cc%2F%7C%7C%7Crf%3D%28none%29; sbjs_first_add=fd%3D2026-03-26%2023%3A10%3A45%7C%7C%7Cep%3Dhttps%3A%2F%2Fmdmacanada.cc%2F%7C%7C%7Crf%3D%28none%29; sbjs_current=typ%3Dtypein%7C%7C%7Csrc%3D%28direct%29%7C%7C%7Cmdm%3D%28none%29%7C%7C%7Ccmp%3D%28none%29%7C%7C%7Ccnt%3D%28none%29%7C%7C%7Ctrm%3D%28none%29%7C%7C%7Cid%3D%28none%29%7C%7C%7Cplt%3D%28none%29%7C%7C%7Cfmt%3D%28none%29%7C%7C%7Ctct%3D%28none%29; sbjs_first=typ%3Dtypein%7C%7C%7Csrc%3D%28direct%29%7C%7C%7Cmdm%3D%28none%29%7C%7C%7Ccmp%3D%28none%29%7C%7C%7Ccnt%3D%28none%29%7C%7C%7Ctrm%3D%28none%29%7C%7C%7Cid%3D%28none%29%7C%7C%7Cplt%3D%28none%29%7C%7C%7Cfmt%3D%28none%29%7C%7C%7Ctct%3D%28none%29; sbjs_udata=vst%3D1%7C%7C%7Cuip%3D%28none%29%7C%7C%7Cuag%3DMozilla%2F5.0%20%28Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0%29%20Gecko%2F20100101%20Firefox%2F134.0; sbjs_session=pgs%3D1%7C%7C%7Ccpg%3Dhttps%3A%2F%2Fmdmacanada.cc%2F; __kla_id=eyJjaWQiOiJOek5pTVRaaE1UQXRaakUxWXkwME5UaG1MVGt5WlRRdFpHVXpZelUwWmpFeU9HUm0ifQ==\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 26 Mar 2026 23:10:47 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 6941\r\ncache-control: public, max-age=604800\r\nexpires: Thu, 02 Apr 2026 23:10:47 GMT\r\nlast-modified: Sat, 25 May 2024 01:48:56 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nstrict-transport-security: max-age=63072000; includeSubDomains\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=An2tzwyK%2BEPYgNZpm%2BnhETGAcG%2FgCIGQqJwzFSWf1ez8VGt8nQ23pmYyUXEChX7RJSukGFCyR97sHZWUEAF8QWiCcm%2B42fj2s0EUkeYTpLM92Kg9jNN6BxYoVXe0uTpC\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e29d4a97d273181-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":20041,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (20041), with no line terminators","md5":"bf993b0a8b61c90cdf9d6db0b74fdc1d","sha1":"4d1c454f45a6549c50d7ce3eddcc3194d777ec10","sha256":"f793c6524fb66bf6952e24951937d2519f9caa869f06548a0fd7fc677c719219","sha512":"131c7af22c2645b021765d48058a8cec418e490397e212bfd18288301d86970449216640475683a98690bdf5c52f610ce90ff6ce4de9159c3006fc866a930077","ssdeep":"384:YP9kCoixNXe/bDhRSkvRuAoCIKJe5anL/L3LnlqV+g+JdSPR5c3GJxQc:YlNkhH0KA5anLPlqH+aPw3QGc","tlshash":"c092e858f1a2b21783eb75b82d9f240c3b72e512c94bc001665994a86dfde88a127f3c","first_seen":"2023-05-02T08:02:19Z","last_seen":"2026-04-25T19:17:03.425905Z","times_seen":14240,"resource_available":true,"data":null}},"time_used":140,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":140,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-26","alert":"Sinkholed","trigger":"mdmacanada.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"va.tawk.to/v1/session/start","fqdn":"va.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"172.66.161.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://mdmacanada.cc/","date":"2026-03-26T23:10:48.045Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tawk.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 06 Mar 2026 09:33:33 GMT","end":"Thu, 04 Jun 2026 10:33:27 GMT"},"fingerprint":{"sha1":"F0:6C:DC:32:63:CD:34:E3:15:CD:7F:77:F5:A3:64:E0:9B:36:95:83","sha256":"B6:7F:6E:A3:69:3E:0D:3B:04:3E:8B:65:86:7E:1D:5F:82:84:18:16:8D:AD:72:D5:51:E3:46:BC:BD:CD:BC:38"}}},"request":{"raw":"OPTIONS /v1/session/start HTTP/1.1\r\nHost: va.tawk.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nAccess-Control-Request-Method: POST\r\nAccess-Control-Request-Headers: content-type\r\nReferer: https://mdmacanada.cc/\r\nOrigin: https://mdmacanada.cc\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"OPTIONS"},"response":{"raw":"HTTP/3 200 OK\r\nx-served-by: visitor-application-preemptive-d3cp\r\naccess-control-allow-origin: https://mdmacanada.cc\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 3600\r\naccess-control-allow-methods: POST,OPTIONS\r\naccess-control-allow-headers: content-type,x-tawk-token\r\ncache-control: public, s-maxage=600, max-age=600\r\ncontent-type: text/html; charset=utf-8\r\nvary: Accept-Encoding\r\ndate: Thu, 26 Mar 2026 23:10:48 GMT\r\npriority: u=4,i=?0\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=0; includeSubDomains; preload\r\ncf-cache-status: DYNAMIC\r\nserver: cloudflare\r\ncontent-encoding: br\r\ncf-ray: 9e29d4ae6b79c272-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-25T21:03:12.227584Z","times_seen":14193312,"resource_available":true,"data":null}},"time_used":221,"timings":{"blocked":13,"dns":0,"connect":0,"send":0,"wait":208,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mdmacanada.cc/wp-content/uploads/2023/09/MDMA-CRYSTALS-REREColored-300x300.png","fqdn":"mdmacanada.cc","domain":"mdmacanada.cc","tld":"cc"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://mdmacanada.cc/","date":"2026-03-26T23:10:45.378Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mdmacanada.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 29 Jan 2026 00:46:51 GMT","end":"Wed, 29 Apr 2026 01:45:19 GMT"},"fingerprint":{"sha1":"B7:47:48:08:4D:35:A4:0D:8D:CE:D7:71:A9:FA:22:B1:5B:A1:AC:40","sha256":"AE:86:CA:6D:76:85:1D:C6:34:96:AE:04:62:0C:A6:24:0A:DD:10:3E:9E:C3:97:21:29:1A:84:BA:B3:91:6A:6F"}}},"request":{"raw":"GET /wp-content/uploads/2023/09/MDMA-CRYSTALS-REREColored-300x300.png HTTP/1.1\r\nHost: mdmacanada.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mdmacanada.cc/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 26 Mar 2026 23:10:45 GMT\r\ncontent-type: image/png\r\ncontent-length: 97109\r\ncache-control: public, max-age=604800\r\nexpires: Thu, 02 Apr 2026 23:10:45 GMT\r\nlast-modified: Sat, 25 May 2024 01:49:06 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nstrict-transport-security: max-age=63072000; includeSubDomains\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Bru5xsVsDa1X11nlR175E5ZYAZFUYJzVNdWrZVhCsuhKI658U%2FUR7tHLIlpHff7ZwG29vpAFL4HbNVvhk7qNcvCHy5pESK99GJSmefvuILWDK1sCCpNj3TOxf42kaZNL\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e29d49d8ec13181-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":97109,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 300 x 300, 8-bit/color RGB, non-interlaced","md5":"12a19370e2216e8d8fd09f0ce8ff752c","sha1":"cc15ec992d0488990b10c53711965491012e4581","sha256":"a43a63eb0508e28db73ffa41d58c922bb332f8812c26af80c4a69d3f3029ea93","sha512":"54ec68ae076423e52b508a82eb888d8932dac8bf431e106bd4ec9fc4cb6f28d9d86a016f244351d2ff787a9f42e4e745d5380386611a636850b59bcd44858994","ssdeep":"1536:9Yqn0qFNDoR/eo3v+3n7ocmzAhMHZvDLzYQOvl98Z6gaU4lSvxdNJYs3Pa4HxiXq:USNDoRWo3G3n7uz0MHZU8Z94AdAsi4R/","tlshash":"9b9312c68cc4a743173407897489dc9b2f62dbe4c2246ead98276fffab4596cc209746","first_seen":"2026-03-26T23:11:11.811834Z","last_seen":"2026-03-27T01:49:53.357883Z","times_seen":2,"resource_available":false,"data":null}},"time_used":666,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":456,"receive":210,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-26","alert":"Sinkholed","trigger":"mdmacanada.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mdmacanada.cc/wp-content/cache/debloat/js/66a8ebba57d6dc27e95e3bc4a88406c5.js","fqdn":"mdmacanada.cc","domain":"mdmacanada.cc","tld":"cc"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://mdmacanada.cc/","date":"2026-03-26T23:10:45.425Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mdmacanada.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 29 Jan 2026 00:46:51 GMT","end":"Wed, 29 Apr 2026 01:45:19 GMT"},"fingerprint":{"sha1":"B7:47:48:08:4D:35:A4:0D:8D:CE:D7:71:A9:FA:22:B1:5B:A1:AC:40","sha256":"AE:86:CA:6D:76:85:1D:C6:34:96:AE:04:62:0C:A6:24:0A:DD:10:3E:9E:C3:97:21:29:1A:84:BA:B3:91:6A:6F"}}},"request":{"raw":"GET /wp-content/cache/debloat/js/66a8ebba57d6dc27e95e3bc4a88406c5.js HTTP/1.1\r\nHost: mdmacanada.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mdmacanada.cc/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 26 Mar 2026 23:10:45 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 1776\r\ncache-control: public, max-age=604800\r\nexpires: Thu, 02 Apr 2026 23:10:45 GMT\r\nlast-modified: Sat, 25 May 2024 01:50:07 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nstrict-transport-security: max-age=63072000; includeSubDomains\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\netag: \r\ncf-cache-status: REVALIDATED\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9k9yVj4r7eS6rbNYdZWhcqC%2BnvGO0pD7x%2FLJkIzhURSsVufo3T2keqWeC7jw7j2FW4v02Mqw9ZX5raT6a2%2BYOpTKWJS2GLfG3D0ZvBAbvD1odAk1AgwzdOJQjBqiNy3O\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e29d49ddf4d3181-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":5997,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (5997), with no line terminators","md5":"ef746e2ce5c655e6ed3fac45df824824","sha1":"87b2a281583619589d8a1f589b1a9dbf626d6c70","sha256":"4c0cf189bb3b0c52d35a0b3a93a7b76034ee98b2bec64f1f65ad5fe81d13fb55","sha512":"02ec89c6a1baad01db184d7460b848f9550ff829cfe1f7fd011838c8964e4d488a2a39bbd033d2aea7408b34b98adaae14d381e1f888a8524f1e9a2dfd510185","ssdeep":"96:BRfsr5RftJhTBUvKJMn8AzLKyPWlnl+kSLRGNQXLwFctWlQy52euF8S:BiZjhTBgWMn8Azuf14kqIQXLwF2QQy5Y","tlshash":"aec12e74722923a664bf61e7287771c16573bc79880ac148702b56b64c7ecdea30be1f","first_seen":"2023-11-18T17:08:31Z","last_seen":"2026-04-20T22:33:25.761782Z","times_seen":211,"resource_available":true,"data":null}},"time_used":383,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":383,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-26","alert":"Sinkholed","trigger":"mdmacanada.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mdmacanada.cc/wp-content/uploads/2023/09/MDMA-CRYSTALS-REColored-green-300x300.png","fqdn":"mdmacanada.cc","domain":"mdmacanada.cc","tld":"cc"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://mdmacanada.cc/","date":"2026-03-26T23:10:45.509Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mdmacanada.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 29 Jan 2026 00:46:51 GMT","end":"Wed, 29 Apr 2026 01:45:19 GMT"},"fingerprint":{"sha1":"B7:47:48:08:4D:35:A4:0D:8D:CE:D7:71:A9:FA:22:B1:5B:A1:AC:40","sha256":"AE:86:CA:6D:76:85:1D:C6:34:96:AE:04:62:0C:A6:24:0A:DD:10:3E:9E:C3:97:21:29:1A:84:BA:B3:91:6A:6F"}}},"request":{"raw":"GET /wp-content/uploads/2023/09/MDMA-CRYSTALS-REColored-green-300x300.png HTTP/1.1\r\nHost: mdmacanada.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mdmacanada.cc/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 26 Mar 2026 23:10:45 GMT\r\ncontent-type: image/png\r\ncontent-length: 100968\r\ncache-control: public, max-age=604800\r\nexpires: Thu, 02 Apr 2026 23:10:45 GMT\r\nlast-modified: Sat, 25 May 2024 01:49:06 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nstrict-transport-security: max-age=63072000; includeSubDomains\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=n3WtiYLFa2XGij%2FyoWB2Z%2BZQTGdZ3muk2RH%2BhsXpFsllW0z2gXTkq0ay9dHR4eHYKYnjaK6WHJTVoXP%2BIKUJ8Rn48%2Btz3CbKXT%2FOIt3Eiijxci0296I5uzQtEd91RELt\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e29d49e685f3181-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":100968,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 300 x 300, 8-bit/color RGB, non-interlaced","md5":"9653daf59808919f1bf873aaea3c386d","sha1":"a147e3cff06614afcb89c88885d11bfee0f4fb61","sha256":"a4d42b42cd9a053789d5328174f466c383a697547f3a864de6a1bf48a8f70a83","sha512":"fe53ecff1a649a1d98b1c23ccdd4c53b47554ebacf7b8fe9897fce7da8dbdc341c72caa14ca8e841c4108d00ee886fce0dbdef596b16851757adb83731bf4fb6","ssdeep":"1536:tzy8/40helO7asp6MKEgX8nCcow62f+Mud9DIZ98f2LvEN1Fi351KzsUcRgulO4X:tzVelX9zEgXO6q/udJIr7i5sUvsPWc","tlshash":"51a312781b128a5d4d1e36406fec1c7e81fc889e62db023e2b5174c6af6fb5c519981f","first_seen":"2026-03-26T23:11:11.813592Z","last_seen":"2026-03-27T01:49:53.312018Z","times_seen":2,"resource_available":false,"data":null}},"time_used":650,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":433,"receive":217,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-26","alert":"Sinkholed","trigger":"mdmacanada.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mdmacanada.cc/wp-content/uploads/2023/09/MDMA-CRYSTALS-REColored-brown-300x300.png","fqdn":"mdmacanada.cc","domain":"mdmacanada.cc","tld":"cc"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://mdmacanada.cc/","date":"2026-03-26T23:10:45.511Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mdmacanada.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 29 Jan 2026 00:46:51 GMT","end":"Wed, 29 Apr 2026 01:45:19 GMT"},"fingerprint":{"sha1":"B7:47:48:08:4D:35:A4:0D:8D:CE:D7:71:A9:FA:22:B1:5B:A1:AC:40","sha256":"AE:86:CA:6D:76:85:1D:C6:34:96:AE:04:62:0C:A6:24:0A:DD:10:3E:9E:C3:97:21:29:1A:84:BA:B3:91:6A:6F"}}},"request":{"raw":"GET /wp-content/uploads/2023/09/MDMA-CRYSTALS-REColored-brown-300x300.png HTTP/1.1\r\nHost: mdmacanada.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mdmacanada.cc/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 26 Mar 2026 23:10:45 GMT\r\ncontent-type: image/png\r\ncontent-length: 74819\r\ncache-control: public, max-age=604800\r\nexpires: Thu, 02 Apr 2026 23:10:45 GMT\r\nlast-modified: Sat, 25 May 2024 01:49:06 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nstrict-transport-security: max-age=63072000; includeSubDomains\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ROaNQlZpodJ5CKKkCOd%2FDVPj24eu8xwyEYItfrUCjIhsGao%2FzW9niYzNv1zOHH6dxDWcnCVVz7zDpPRHmx5%2BIwc33n1SsUH%2BZPn%2BdbtBSOrGPF1RRlXG9XsvOh7kFwa6\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e29d49e68623181-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":74819,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 300 x 300, 8-bit/color RGB, non-interlaced","md5":"2f40e73b32e961a4a4a7e728bd88ea52","sha1":"78d3d20de8cea0eba10f1dc6323a857bf5322cd1","sha256":"9444d5cc0bb2f8e47f9471448b9016128cc1b9c784d11acc68b0601608cea18a","sha512":"69a9fd0319c791d4d25ba69ecedddba216a69cd0ecd2f8d761088cfc3d8d2c568301bd4b76e44bb8121dd9c174a3686630a5c6b04593d44359da43acc0389277","ssdeep":"1536:znOkVTaXb176WjKyaDjaFAPaLi7QDnz56si217vJgIv:zDMRe9ykjaeui7QDnzIXStz","tlshash":"3e7302b1cd92b240dc0b47af568c9bd2dd90da11a35a6b7cf6bb63e0416f8b443a5037","first_seen":"2026-03-26T23:11:11.814905Z","last_seen":"2026-03-27T01:49:53.30475Z","times_seen":2,"resource_available":false,"data":null}},"time_used":579,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":458,"receive":121,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-26","alert":"Sinkholed","trigger":"mdmacanada.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.trustindex.io/assets/default-avatar/noprofile-02.svg","fqdn":"cdn.trustindex.io","domain":"trustindex.io","tld":"io"},"ip":{"addr":"3.167.2.9","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://mdmacanada.cc/","date":"2026-03-26T23:10:45.713Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.trustindex.io","organization":""},"issuer":{"commonName":"GoGetSSL RSA DV CA","organization":"GoGetSSL"},"validity":{"start":"Fri, 23 May 2025 00:00:00 GMT","end":"Tue, 23 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"4B:EB:D9:98:03:6A:DB:BE:49:BA:B2:3E:3A:B2:F6:D9:D7:62:B5:B7","sha256":"F8:20:DB:3C:4B:D6:B3:4C:28:EC:90:B0:25:20:9C:38:18:7C:FF:7B:DF:24:B2:C8:77:4C:33:96:D4:28:B7:B3"}}},"request":{"raw":"GET /assets/default-avatar/noprofile-02.svg HTTP/1.1\r\nHost: cdn.trustindex.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mdmacanada.cc/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/svg+xml\r\ncontent-length: 815\r\ndate: Sat, 31 Jan 2026 09:01:39 GMT\r\nserver: Apache/2.4.52 (Ubuntu)\r\ncache-control: public, max-age=31536000, immutable\r\nlast-modified: Wed, 11 Oct 2023 15:10:56 GMT\r\netag: \"32f-607723ae86b32\"\r\naccept-ranges: bytes\r\nreferrer-policy: origin\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: origin, x-requested-with, content-type\r\naccess-control-allow-methods: GET\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-embedder-policy: require-corp\r\ncontent-security-policy: frame-ancestors 'self' *;\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 50c588fd3255d023d9b9021263f5fa0a.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P2\r\nx-amz-cf-id: p8XpKLNpP9Kq9xxKKL6HFfR5p6PlTih_P5tH6Y4Y3kasgDQTYEtsnA==\r\nage: 4716546\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Apache HTTP Server:2.4.52","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":815,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"509485400e106121a8d749c2a560fb07","sha1":"c2c62b0a1bf58e126a63a19730cbcaebeb190ded","sha256":"1f1783fa1004570603f49885ffec534066aef163628fc128c51423d7df74da49","sha512":"3f9a67bc3fb7485b35bd22d62f6f5b3b367a13e4dfbd9a5b2639aa167801b7e4311b996e288012acc9875522a62a255f8f5166c04a4b7b266e82d78a903d6fb1","ssdeep":"","tlshash":"2d011288c248992a8420c378a2b5b5d1411702478b019f4ed5d13b3bd43d4f77a443ef","first_seen":"2023-07-24T22:05:07Z","last_seen":"2026-04-25T15:22:18.664184Z","times_seen":84,"resource_available":false,"data":null}},"time_used":1,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.klaviyo.com/onsite/js/build-preview/commit-a9008e2652932ce924ec514ff7f88d1dd460ca1b/event_adapter.4f7be3f375ef0d59c121.js?cb=2","fqdn":"static.klaviyo.com","domain":"klaviyo.com","tld":"com"},"ip":{"addr":"151.101.2.133","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://mdmacanada.cc/","date":"2026-03-26T23:10:45.766Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"static.klaviyo.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 02 Mar 2026 22:32:36 GMT","end":"Sun, 31 May 2026 22:32:35 GMT"},"fingerprint":{"sha1":"36:11:62:1C:62:9E:7B:97:05:37:F9:A2:98:8F:68:41:2E:6B:D7:B5","sha256":"05:31:1A:E8:28:B5:E9:56:9C:39:CF:3B:A4:17:62:2A:BD:15:10:60:75:8E:D0:BA:D6:B8:02:1F:E1:A0:20:F8"}}},"request":{"raw":"GET /onsite/js/build-preview/commit-a9008e2652932ce924ec514ff7f88d1dd460ca1b/event_adapter.4f7be3f375ef0d59c121.js?cb=2 HTTP/1.1\r\nHost: static.klaviyo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://mdmacanada.cc\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mdmacanada.cc/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nx-amz-id-2: PKATjkZiZuHdIdCI4ZPYP1eSSlLXBxpplYCcYZljDtBxKDFcbcY+4C7UC8sUt/jWtg0/WWzfq+bp/7ABQjj0U3yuBVSSOif8\r\nx-amz-request-id: FSGFAVCV6QXVA0YW\r\nlast-modified: Thu, 26 Mar 2026 15:02:59 GMT\r\netag: \"9df1707497f448aa3ccd5404fe28e512\"\r\nx-amz-server-side-encryption: AES256\r\nx-amz-meta-entrypoints-hash: \r\ncache-control: max-age=2592000,stale-while-revalidate=10800\r\nx-amz-meta-surrogate-control: max-age=31536000\r\nx-amz-meta-surrogate-key: fender-asset-build-preview\r\nx-amz-version-id: N6gQqqiMqbPfzdT9s.nQL0l6CNLRCh4U\r\ncontent-type: text/javascript\r\nserver: AmazonS3\r\ncontent-encoding: br\r\nvia: 1.1 varnish, 1.1 varnish\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ndate: Thu, 26 Mar 2026 23:10:45 GMT\r\nage: 210\r\nx-served-by: cache-lga21940-LGA, cache-hel1410029-HEL\r\nx-cache: HIT, HIT\r\nx-cache-hits: 66, 46\r\nvary: Accept-Encoding\r\ncontent-length: 380\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}],"data":{"size":710,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (710), with no line terminators","md5":"9df1707497f448aa3ccd5404fe28e512","sha1":"9477f717089604ab571e0fbd45cf0952157e7162","sha256":"5781894c574f678af2c21bf733bb768e9157a46dca4b449d1a277b11bdee1168","sha512":"5ec561fddd9a4f87639ff2a24346398bed8c2bea64235cc8ca7818d2ca71d995618301d992db57cd1f06c4fd357d9ff62cd14c3d6d1bac9c3d83437e23775bdb","ssdeep":"","tlshash":"7401154e3ad2f613259f34f5d73c1a4533fc4647b9199550e5904c34249155d7392cde","first_seen":"2026-03-09T17:13:19.482928Z","last_seen":"2026-04-24T00:51:00.702467Z","times_seen":7467,"resource_available":true,"data":null}},"time_used":69,"timings":{"blocked":-1,"dns":0,"connect":13,"send":0,"wait":14,"receive":0,"ssl":41},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/69967ba6a3b/js/twk-chunk-common.js","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"172.66.161.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://mdmacanada.cc/","date":"2026-03-26T23:10:47.278Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tawk.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 06 Mar 2026 09:33:33 GMT","end":"Thu, 04 Jun 2026 10:33:27 GMT"},"fingerprint":{"sha1":"F0:6C:DC:32:63:CD:34:E3:15:CD:7F:77:F5:A3:64:E0:9B:36:95:83","sha256":"B6:7F:6E:A3:69:3E:0D:3B:04:3E:8B:65:86:7E:1D:5F:82:84:18:16:8D:AD:72:D5:51:E3:46:BC:BD:CD:BC:38"}}},"request":{"raw":"GET /_s/v4/app/69967ba6a3b/js/twk-chunk-common.js HTTP/1.1\r\nHost: embed.tawk.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://mdmacanada.cc\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mdmacanada.cc/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 26 Mar 2026 23:10:47 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Thu, 19 Feb 2026 02:56:35 GMT\r\netag: W/\"d9deabdd1848c34f3ab46722f446c153\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000, immutable\r\nx-cache-status: HIT\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=0; includeSubDomains; preload\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nx-content-type-options: nosniff\r\ncf-ray: 9e29d4a96bf6b28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":240941,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65458)","md5":"d9deabdd1848c34f3ab46722f446c153","sha1":"ca3efc8a6fe26ae3556374b113dda96032edd201","sha256":"6a583970080e55cee4ced2fc7d5e5de94283f0e6eea428a50219b8e343ff0890","sha512":"d260841afedfa06bc864b92b64cf3bd1a323b2de447ce38cb1499cc6fccfab0da309a76814b6cfb20fae85fb5707fc72fec9996b64bfa31703445d6a933daa3c","ssdeep":"3072:I4MYggYqWzhT9dyWFW1Wn+fM4fOrcErQYIMPdLMz9o115:kyWFW1W+fM4fFkBLMz9215","tlshash":"7e34c69df186b47606a37130501f320af23a685ab45ac494f636d8e1bd789cea133f7d","first_seen":"2026-02-19T03:13:10.643204Z","last_seen":"2026-04-15T01:21:42.632515Z","times_seen":11130,"resource_available":true,"data":null}},"time_used":299,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":299,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/69967ba6a3b/js/twk-runtime.js","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"172.66.161.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://mdmacanada.cc/","date":"2026-03-26T23:10:47.279Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tawk.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 06 Mar 2026 09:33:33 GMT","end":"Thu, 04 Jun 2026 10:33:27 GMT"},"fingerprint":{"sha1":"F0:6C:DC:32:63:CD:34:E3:15:CD:7F:77:F5:A3:64:E0:9B:36:95:83","sha256":"B6:7F:6E:A3:69:3E:0D:3B:04:3E:8B:65:86:7E:1D:5F:82:84:18:16:8D:AD:72:D5:51:E3:46:BC:BD:CD:BC:38"}}},"request":{"raw":"GET /_s/v4/app/69967ba6a3b/js/twk-runtime.js HTTP/1.1\r\nHost: embed.tawk.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://mdmacanada.cc\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mdmacanada.cc/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 26 Mar 2026 23:10:47 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Thu, 19 Feb 2026 02:56:35 GMT\r\netag: W/\"0beffdc96a1a1b35b5ce2759d6d1d51a\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000, immutable\r\nx-cache-status: HIT\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=0; includeSubDomains; preload\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nx-content-type-options: nosniff\r\ncf-ray: 9e29d4a96bfbb28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2306,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (2306), with no line terminators","md5":"0beffdc96a1a1b35b5ce2759d6d1d51a","sha1":"8d9d42c92a1d18382b66ee353d3b81b8641ced00","sha256":"e27dcd41e84265874a28c43fa5780e5ddabc8cae4fa0d010d0ca18360e704389","sha512":"6c5f688f184fa65416108e0f6af9947e741b70ccce5053b318e8ed64858d9ccd6e6b2f905103bb3871e540ecfb7a85efb0503c539bb4545d6975c34aa58dc090","ssdeep":"","tlshash":"7f4183d936e8f9b6434318a1043f9016f6352976097be4c0531dd4f5bc78849815afb6","first_seen":"2026-02-19T03:13:10.681687Z","last_seen":"2026-04-15T01:21:42.763559Z","times_seen":11136,"resource_available":true,"data":null}},"time_used":148,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":148,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.klaviyo.com/onsite/js/klaviyo.js?company_id=X8dkN5\u0026ver=3.3.5","fqdn":"static.klaviyo.com","domain":"klaviyo.com","tld":"com"},"ip":{"addr":"151.101.2.133","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://mdmacanada.cc/","date":"2026-03-26T23:10:45.408Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"static.klaviyo.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 02 Mar 2026 22:32:36 GMT","end":"Sun, 31 May 2026 22:32:35 GMT"},"fingerprint":{"sha1":"36:11:62:1C:62:9E:7B:97:05:37:F9:A2:98:8F:68:41:2E:6B:D7:B5","sha256":"05:31:1A:E8:28:B5:E9:56:9C:39:CF:3B:A4:17:62:2A:BD:15:10:60:75:8E:D0:BA:D6:B8:02:1F:E1:A0:20:F8"}}},"request":{"raw":"GET /onsite/js/klaviyo.js?company_id=X8dkN5\u0026ver=3.3.5 HTTP/1.1\r\nHost: static.klaviyo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mdmacanada.cc/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: \r\naccess-control-allow-methods: GET\r\naccess-control-allow-origin: *\r\naccess-control-max-age: 86400\r\nallow: GET, OPTIONS\r\ncache-control: max-age=1, stale-while-revalidate=10800, stale-if-error=86400\r\ncontent-language: en-us\r\ncontent-security-policy: object-src 'none'; base-uri 'none'; script-src 'report-sample' 'strict-dynamic' 'unsafe-eval'; frame-ancestors 'self' login.bigcommerce.com *.mybigcommerce.com admin.shopify.com klaviyo.file.force.com klaviyo.lightning.force.com klaviyo.my.salesforce.com; report-uri /csp/\r\ncontent-type: application/javascript\r\netag: \"9fe5e06847ad5c1a490d5cfaa23e049d\"\r\nserver: nginx\r\nx-klaviyo-hash: build-preview/commit-a9008e2652932ce924ec514ff7f88d1dd460ca1b/\r\ncontent-encoding: br\r\nvia: 1.1 varnish, 1.1 varnish\r\naccept-ranges: bytes\r\nage: 2491\r\ndate: Thu, 26 Mar 2026 23:10:45 GMT\r\nx-served-by: cache-lga21924-LGA, cache-hel1410029-HEL\r\nx-cache: HIT, MISS\r\nx-cache-hits: 3, 0\r\nx-timer: S1774566646.541271,VS0,VE94\r\nvary: Accept-Encoding\r\ncontent-length: 1802\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":8668,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (8667)","md5":"9fe5e06847ad5c1a490d5cfaa23e049d","sha1":"f19a16a147da3224ace857a7757bbbc6f23736bd","sha256":"2b726ec2f8e94e56e43810d5b24a3aae575b64bfcfbe43873e0b3d990a2d651d","sha512":"283fbbb0f9eccc099467539897d59bb0e93bea6ce5b06dc8e8ed7ae14ddc7a6a6f8c8f2e7dbf637ccc0192fedb3d953ec671a424f3e2751162d539a7269ab350","ssdeep":"192:rCfnAeNY88RYKwCgwWwpMoMKMoM2wpwOWMoM2MkK4wCpwSwzwpMaMpMaMZwpwzws:rcAeNY88v+3uDFDdu9WDdHK43bCu9G9S","tlshash":"950234be5ac1c0bf1f0370da8e37be2cb86ac71cdd8655a5d352945415e38b4ee2a284","first_seen":"2026-03-26T23:11:11.819376Z","last_seen":"2026-03-27T01:49:53.3194Z","times_seen":2,"resource_available":true,"data":null}},"time_used":363,"timings":{"blocked":113,"dns":42,"connect":26,"send":0,"wait":121,"receive":1,"ssl":55},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mdmacanada.cc/wp-content/cache/debloat/js/7103de4985735031a1dc4b34d9c0befd.js","fqdn":"mdmacanada.cc","domain":"mdmacanada.cc","tld":"cc"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://mdmacanada.cc/","date":"2026-03-26T23:10:45.418Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mdmacanada.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 29 Jan 2026 00:46:51 GMT","end":"Wed, 29 Apr 2026 01:45:19 GMT"},"fingerprint":{"sha1":"B7:47:48:08:4D:35:A4:0D:8D:CE:D7:71:A9:FA:22:B1:5B:A1:AC:40","sha256":"AE:86:CA:6D:76:85:1D:C6:34:96:AE:04:62:0C:A6:24:0A:DD:10:3E:9E:C3:97:21:29:1A:84:BA:B3:91:6A:6F"}}},"request":{"raw":"GET /wp-content/cache/debloat/js/7103de4985735031a1dc4b34d9c0befd.js HTTP/1.1\r\nHost: mdmacanada.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mdmacanada.cc/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 26 Mar 2026 23:10:45 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 2043\r\ncache-control: public, max-age=604800\r\nexpires: Thu, 02 Apr 2026 23:10:45 GMT\r\nlast-modified: Sat, 25 May 2024 01:58:20 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nstrict-transport-security: max-age=63072000; includeSubDomains\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=NPP7hpiZFX4NolIGMpaicd2firmpmIA%2F9BH9l3qUKB9IDMpi6tDc3sMPrFs%2BPNT4Hqk%2BByHaQ4eXgJ9sL9kzphDpAZP2lUUNrpx1I2ugwcKM33dxS7Nf37Y0MqbypbI9\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e29d49dcf2f3181-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":5994,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (5994), with no line terminators","md5":"120712943e35b657e97aab20af3d54bc","sha1":"08419f4281ffe39c81e7fab124c6732b422b798a","sha256":"6023c879c2b4a0f320b94f0418e720fb36937be1efb36bceabec9323c5b4ce00","sha512":"7cda92af9b818789f97d579603726d564451507b01f403aeafad8f1d671ffaa4db295c3e012797ab85414e2ae3105640463c02b2ad8d3bf387c22aebf96a13e6","ssdeep":"96:QCGue50Jc8QlBtVScsMJQSMJ/ZlM5JQVQfQ8ezqjpLRVFylaJ9Nv9Vp//iS3udlA:ZGuedRz7BsUMNZWBySyUNv9Vp/qS3qnW","tlshash":"6bc1c7c9f274edf412f610b1596a66c0fd74105af1d254c0aacdea88ab748cb1253bfe","first_seen":"2024-04-08T04:38:19Z","last_seen":"2026-04-23T18:42:46.692517Z","times_seen":93,"resource_available":true,"data":null}},"time_used":372,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":371,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-26","alert":"Sinkholed","trigger":"mdmacanada.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mdmacanada.cc/wp-content/uploads/2023/09/MDMA-CRYSTALS-REColored-6-300x300.png","fqdn":"mdmacanada.cc","domain":"mdmacanada.cc","tld":"cc"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://mdmacanada.cc/","date":"2026-03-26T23:10:45.513Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mdmacanada.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 29 Jan 2026 00:46:51 GMT","end":"Wed, 29 Apr 2026 01:45:19 GMT"},"fingerprint":{"sha1":"B7:47:48:08:4D:35:A4:0D:8D:CE:D7:71:A9:FA:22:B1:5B:A1:AC:40","sha256":"AE:86:CA:6D:76:85:1D:C6:34:96:AE:04:62:0C:A6:24:0A:DD:10:3E:9E:C3:97:21:29:1A:84:BA:B3:91:6A:6F"}}},"request":{"raw":"GET /wp-content/uploads/2023/09/MDMA-CRYSTALS-REColored-6-300x300.png HTTP/1.1\r\nHost: mdmacanada.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mdmacanada.cc/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 26 Mar 2026 23:10:45 GMT\r\ncontent-type: image/png\r\ncontent-length: 99094\r\ncache-control: public, max-age=604800\r\nexpires: Thu, 02 Apr 2026 23:10:45 GMT\r\nlast-modified: Sat, 25 May 2024 01:49:06 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nstrict-transport-security: max-age=63072000; includeSubDomains\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=U42glqr50lJa8i2kHJnhbnn6I381HRwisUrPF6vDuCOkVhQwp086f%2BMjt4GEnlthFgtl011eFNJlzEZGzsL70JyocQGwFNGeUthk%2BP6JRPWY4QhEcUXPXxfu9iQRwznI\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e29d49e68663181-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":99094,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 300 x 300, 8-bit/color RGB, non-interlaced","md5":"dd5aa2c4307b007f8afcf7389bf36c44","sha1":"c8cd53eed4fdb1da996ac2bd3289af5084868bce","sha256":"87149bf57df9430baea143982239bf016e7937760695f0fa8a419763dce39286","sha512":"2a8cc057bf1f847e1802f8c577e486d1b7af5b3ce218c7df9e4a4a45d77939a857a17d1befb669f134fc1390242cd4eb60167cb588dedba5fac46682abef810e","ssdeep":"3072:wTv2YdB5umd/bOa9OaoT1XdkELHvRwG4+Uw3ZjW7fNskNbWZ:c+N7PmmUw3FW7FZaZ","tlshash":"cea302256bc08b641db8b9562bed0585601493ffda12818c80343b6613bd89eff7f667","first_seen":"2026-03-26T23:11:11.821676Z","last_seen":"2026-03-27T01:49:53.322016Z","times_seen":2,"resource_available":false,"data":null}},"time_used":675,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":453,"receive":222,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-26","alert":"Sinkholed","trigger":"mdmacanada.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.trustindex.io/assets/js/richsnippet.js?d00c2d176917gb01","fqdn":"cdn.trustindex.io","domain":"trustindex.io","tld":"io"},"ip":{"addr":"3.167.2.9","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://mdmacanada.cc/","date":"2026-03-26T23:10:45.682Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.trustindex.io","organization":""},"issuer":{"commonName":"GoGetSSL RSA DV CA","organization":"GoGetSSL"},"validity":{"start":"Fri, 23 May 2025 00:00:00 GMT","end":"Tue, 23 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"4B:EB:D9:98:03:6A:DB:BE:49:BA:B2:3E:3A:B2:F6:D9:D7:62:B5:B7","sha256":"F8:20:DB:3C:4B:D6:B3:4C:28:EC:90:B0:25:20:9C:38:18:7C:FF:7B:DF:24:B2:C8:77:4C:33:96:D4:28:B7:B3"}}},"request":{"raw":"GET /assets/js/richsnippet.js?d00c2d176917gb01 HTTP/1.1\r\nHost: cdn.trustindex.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mdmacanada.cc/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/javascript\r\ncontent-length: 944\r\ndate: Fri, 27 Feb 2026 07:23:34 GMT\r\nserver: Apache/2.4.52 (Ubuntu)\r\nlast-modified: Fri, 27 Feb 2026 07:22:38 GMT\r\netag: \"787-64bc91a106c76-gzip\"\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\nreferrer-policy: origin\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: origin, x-requested-with, content-type\r\naccess-control-allow-methods: GET\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-embedder-policy: require-corp\r\ncontent-security-policy: frame-ancestors 'self' *;\r\ncache-control: public, max-age=31536000, immutable\r\nvary: Accept-Encoding\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 50c588fd3255d023d9b9021263f5fa0a.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P2\r\nx-amz-cf-id: GmMbu02g-OrjPRQ_qBtD61RrpQHcJrNwUdtwB2iVBxl_09pyOMRSvw==\r\nage: 2389631\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Apache HTTP Server:2.4.52","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":1927,"size_decoded":0,"mime_type":"text/javascript","magic":"ASCII text, with very long lines (1887)","md5":"1ffcd301e9fd02a60278f22591eaf3d7","sha1":"0bb8f30a5e3dc86b626685dd6dd5e2cd63b8149c","sha256":"b1a9acc879e900885a746a5dee612cb3207a80a85953c0cb6b1467532dbe928a","sha512":"ddb33b4fec36e9879559bd26ddbbf576f4eac9c7806be5bef7efd36480817c690b7b1640b8aa5ff52423da5c4e35f18535ffc285a4573f287a535f4fee213e4d","ssdeep":"","tlshash":"3f4164158351a57a4f8f21e169e3df047d2218a49441402df549f07bb879ccbc58dfda","first_seen":"2026-02-27T12:50:12.82299Z","last_seen":"2026-04-25T19:22:32.085104Z","times_seen":662,"resource_available":true,"data":null}},"time_used":3,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.trustindex.io/assets/default-avatar/noprofile-03.svg","fqdn":"cdn.trustindex.io","domain":"trustindex.io","tld":"io"},"ip":{"addr":"3.167.2.9","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://mdmacanada.cc/","date":"2026-03-26T23:10:45.712Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.trustindex.io","organization":""},"issuer":{"commonName":"GoGetSSL RSA DV CA","organization":"GoGetSSL"},"validity":{"start":"Fri, 23 May 2025 00:00:00 GMT","end":"Tue, 23 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"4B:EB:D9:98:03:6A:DB:BE:49:BA:B2:3E:3A:B2:F6:D9:D7:62:B5:B7","sha256":"F8:20:DB:3C:4B:D6:B3:4C:28:EC:90:B0:25:20:9C:38:18:7C:FF:7B:DF:24:B2:C8:77:4C:33:96:D4:28:B7:B3"}}},"request":{"raw":"GET /assets/default-avatar/noprofile-03.svg HTTP/1.1\r\nHost: cdn.trustindex.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mdmacanada.cc/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/svg+xml\r\ncontent-length: 815\r\ndate: Sun, 08 Feb 2026 06:04:10 GMT\r\nserver: Apache/2.4.52 (Ubuntu)\r\ncache-control: public, max-age=31536000, immutable\r\nlast-modified: Wed, 11 Oct 2023 15:10:56 GMT\r\netag: \"32f-607723ae86b32\"\r\naccept-ranges: bytes\r\nreferrer-policy: origin\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: origin, x-requested-with, content-type\r\naccess-control-allow-methods: GET\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-embedder-policy: require-corp\r\ncontent-security-policy: frame-ancestors 'self' *;\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 50c588fd3255d023d9b9021263f5fa0a.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P2\r\nx-amz-cf-id: ICDMylnyPVDgppXXVcE891d7TJ5in8ttrgXBoihE92TcCZYyLaisVw==\r\nage: 4035995\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Apache HTTP Server:2.4.52","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":815,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"5131ad5d6daaafaf9c84fa8eb8221fe9","sha1":"69ce3bb1c577ebae8d10567630cb985d351f2320","sha256":"78d2745da4758f2c82a5d745f4ff7769b9c83be5b71ba792768a4b6bb2788af4","sha512":"b66255e4333c4afd3d8969ef2a8b5f77ebf54209501ca1bf9fe59217ca9954c35dbf468c5d1216f4470a3df92642b2c650c22234759f7c085787ce8e041d12e9","ssdeep":"","tlshash":"d0011288c2489a2a8020c379a2b5b5d1011742478a019f4ed5d12b3be43d4f77a443ff","first_seen":"2023-06-30T07:04:00Z","last_seen":"2026-04-25T15:22:18.658407Z","times_seen":85,"resource_available":false,"data":null}},"time_used":2,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/69967ba6a3b/js/twk-chunk-vendors.js","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"172.66.161.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://mdmacanada.cc/","date":"2026-03-26T23:10:47.277Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tawk.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 06 Mar 2026 09:33:33 GMT","end":"Thu, 04 Jun 2026 10:33:27 GMT"},"fingerprint":{"sha1":"F0:6C:DC:32:63:CD:34:E3:15:CD:7F:77:F5:A3:64:E0:9B:36:95:83","sha256":"B6:7F:6E:A3:69:3E:0D:3B:04:3E:8B:65:86:7E:1D:5F:82:84:18:16:8D:AD:72:D5:51:E3:46:BC:BD:CD:BC:38"}}},"request":{"raw":"GET /_s/v4/app/69967ba6a3b/js/twk-chunk-vendors.js HTTP/1.1\r\nHost: embed.tawk.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://mdmacanada.cc\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mdmacanada.cc/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 26 Mar 2026 23:10:47 GMT\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\nlast-modified: Thu, 19 Feb 2026 02:56:35 GMT\r\netag: W/\"b057293b718ae7060a9acc593ff83f67\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000, immutable\r\nx-cache-status: HIT\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=0; includeSubDomains; preload\r\ncf-cache-status: MISS\r\nvary: accept-encoding\r\nx-content-type-options: nosniff\r\ncf-ray: 9e29d4a96bf4b28a-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":324696,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65465)","md5":"b057293b718ae7060a9acc593ff83f67","sha1":"991ec4ae783d59b4ae91113a0ecb5e6b21d19d45","sha256":"39d3bf235a12d663f4c2564a4d0311e4c902370219bdf1c4b81d2d1698dae888","sha512":"61865e60d018bd21ca9c737aeb975e8f52b0d0fa74128720cd03fb59f7766362efc8d84b06def39558f302b15d1bb39e44dde7cf0a840d62cdcaec6932df4f52","ssdeep":"3072:NTX1gABPVhOj6y1ekyYadM/9LJQMoZmVodXsJ5Ar6VKkOPmx/:FGABPVhO5wdKJCMo4VJ5Ar6kOx/","tlshash":"11644bc8f183b0b606e7a1a5009f5207737a151968ed8498f574dee968e8e5c633bf3c","first_seen":"2026-02-19T03:13:10.628072Z","last_seen":"2026-04-21T03:41:36.073067Z","times_seen":12668,"resource_available":true,"data":null}},"time_used":318,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":318,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mdmacanada.cc/wp-content/plugins/woocommerce/assets/client/blocks/wc-blocks.css?ver=wc-10.6.1","fqdn":"mdmacanada.cc","domain":"mdmacanada.cc","tld":"cc"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://mdmacanada.cc/","date":"2026-03-26T23:10:47.285Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mdmacanada.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 29 Jan 2026 00:46:51 GMT","end":"Wed, 29 Apr 2026 01:45:19 GMT"},"fingerprint":{"sha1":"B7:47:48:08:4D:35:A4:0D:8D:CE:D7:71:A9:FA:22:B1:5B:A1:AC:40","sha256":"AE:86:CA:6D:76:85:1D:C6:34:96:AE:04:62:0C:A6:24:0A:DD:10:3E:9E:C3:97:21:29:1A:84:BA:B3:91:6A:6F"}}},"request":{"raw":"GET /wp-content/plugins/woocommerce/assets/client/blocks/wc-blocks.css?ver=wc-10.6.1 HTTP/1.1\r\nHost: mdmacanada.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mdmacanada.cc/\r\nCookie: wffn_flt=2026-3-26 23:10:45; wffn_timezone=UTC; wffn_is_mobile=false; wffn_browser=Firefox; wffn_referrer=; wffn_fl_url=/; sbjs_migrations=1418474375998%3D1; sbjs_current_add=fd%3D2026-03-26%2023%3A10%3A45%7C%7C%7Cep%3Dhttps%3A%2F%2Fmdmacanada.cc%2F%7C%7C%7Crf%3D%28none%29; sbjs_first_add=fd%3D2026-03-26%2023%3A10%3A45%7C%7C%7Cep%3Dhttps%3A%2F%2Fmdmacanada.cc%2F%7C%7C%7Crf%3D%28none%29; sbjs_current=typ%3Dtypein%7C%7C%7Csrc%3D%28direct%29%7C%7C%7Cmdm%3D%28none%29%7C%7C%7Ccmp%3D%28none%29%7C%7C%7Ccnt%3D%28none%29%7C%7C%7Ctrm%3D%28none%29%7C%7C%7Cid%3D%28none%29%7C%7C%7Cplt%3D%28none%29%7C%7C%7Cfmt%3D%28none%29%7C%7C%7Ctct%3D%28none%29; sbjs_first=typ%3Dtypein%7C%7C%7Csrc%3D%28direct%29%7C%7C%7Cmdm%3D%28none%29%7C%7C%7Ccmp%3D%28none%29%7C%7C%7Ccnt%3D%28none%29%7C%7C%7Ctrm%3D%28none%29%7C%7C%7Cid%3D%28none%29%7C%7C%7Cplt%3D%28none%29%7C%7C%7Cfmt%3D%28none%29%7C%7C%7Ctct%3D%28none%29; sbjs_udata=vst%3D1%7C%7C%7Cuip%3D%28none%29%7C%7C%7Cuag%3DMozilla%2F5.0%20%28Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0%29%20Gecko%2F20100101%20Firefox%2F134.0; sbjs_session=pgs%3D1%7C%7C%7Ccpg%3Dhttps%3A%2F%2Fmdmacanada.cc%2F; __kla_id=eyJjaWQiOiJOek5pTVRaaE1UQXRaakUxWXkwME5UaG1MVGt5WlRRdFpHVXpZelUwWmpFeU9HUm0ifQ==\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 26 Mar 2026 23:10:47 GMT\r\ncontent-type: text/css\r\ncontent-length: 2391\r\ncache-control: public, max-age=604800\r\nexpires: Thu, 02 Apr 2026 23:10:47 GMT\r\nlast-modified: Fri, 13 Mar 2026 11:35:18 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nstrict-transport-security: max-age=63072000; includeSubDomains\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2Bv3XPJ2qQ04EmDa3WalDVpVUBNFSPW7jCXwfbhj2YkcitxN2HnLkgD3lH7Qh0GIkrpAG7KkqDYXPsZp0z%2FiFvd%2BiLeRlMLADrBXVpl1Ce0HKNdtMBJ%2BnK8OPuY7iYPmp\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e29d4a97d303181-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":14006,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (10312)","md5":"e2d671c403c7e2bd09b3b298c748d0db","sha1":"d9e1884d4627704102a1e6c19905ca2f00431c6a","sha256":"45173f1550e57be245f3ed3b0f6fde7962e27901d5a04adf9342e546500bed49","sha512":"cee28ff90c4e108f2afbbf51772f294ed1a5b5d179b3c7dec59ee0781f6cb2e3f70a79a8f88e3b6587507c0aea6b2f483dd0d1f1ca753b8ed6670b9ef15c9770","ssdeep":"96:JctcybwYP5GKHxNBQUEr2xT8l/0JYNFvyadAAPOO+yH1:eF7RGKRNQr2Ges","tlshash":"fd5266b1e7b52cf8493989649e70b6d2b5f93080cbd325d9d04ae580719f4aa0bd27cf","first_seen":"2025-09-22T15:19:04.124916Z","last_seen":"2026-04-25T21:04:37.161572Z","times_seen":60522,"resource_available":false,"data":null}},"time_used":338,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":338,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-26","alert":"Sinkholed","trigger":"mdmacanada.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mdmacanada.cc/wp-content/cache/debloat/js/5b195bfe11b57fc783f9d73ca6ccb2b6.js","fqdn":"mdmacanada.cc","domain":"mdmacanada.cc","tld":"cc"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://mdmacanada.cc/","date":"2026-03-26T23:10:45.372Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mdmacanada.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 29 Jan 2026 00:46:51 GMT","end":"Wed, 29 Apr 2026 01:45:19 GMT"},"fingerprint":{"sha1":"B7:47:48:08:4D:35:A4:0D:8D:CE:D7:71:A9:FA:22:B1:5B:A1:AC:40","sha256":"AE:86:CA:6D:76:85:1D:C6:34:96:AE:04:62:0C:A6:24:0A:DD:10:3E:9E:C3:97:21:29:1A:84:BA:B3:91:6A:6F"}}},"request":{"raw":"GET /wp-content/cache/debloat/js/5b195bfe11b57fc783f9d73ca6ccb2b6.js HTTP/1.1\r\nHost: mdmacanada.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mdmacanada.cc/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 26 Mar 2026 23:10:45 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 1296\r\ncache-control: public, max-age=604800\r\nexpires: Thu, 02 Apr 2026 23:10:45 GMT\r\nlast-modified: Fri, 13 Mar 2026 11:37:08 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nstrict-transport-security: max-age=63072000; includeSubDomains\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Ea%2B%2BdisG6%2FQXPNpM7C0mDyuHVBVR9nGjls8gpQvA%2Fjx2wuJVsGHi%2Fs6BXktoPfDRUUHeqhHizkPim6OZN4uuORc62PtO3htdBkWfkpqlGMt7S3AVYJYDZrZ965wh%2ButJ\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e29d49d8eb63181-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4350,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (4350), with no line terminators","md5":"d6843fa9b6dfd1cae807f2c375830d09","sha1":"cc378797cb063f3981907698a6cc01e539eca654","sha256":"fca8dd4ee9c93f33dc3149e2c78aec8a28c54036faaf19c7b0ac9ca32293c070","sha512":"c9eb3dd5c84945d185f5ccccd954ef9546488e4979f9b3af5de54e107b2d0f8959e6c54509eee41f5ab67eb28488476e9a7751cd1a3fe671b618316cf944f3f0","ssdeep":"96:8mJQb8DHwbTtwqfDZa27MXi/NCa2St01Zyw6VfQ0GfV5VP:FKwWpwQFa2N/NCa2St01Zyw6VY9fV5VP","tlshash":"119173ceb121e4b693a22d82602fda850533383ff08694f8248aa6e51f359456577f3f","first_seen":"2025-11-27T20:47:57.43318Z","last_seen":"2026-04-25T19:57:51.254965Z","times_seen":20001,"resource_available":true,"data":null}},"time_used":377,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":377,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-26","alert":"Sinkholed","trigger":"mdmacanada.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-M9BQL00QVP","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.251.143.136","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://mdmacanada.cc/","date":"2026-03-26T23:10:45.413Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Feb 2026 18:19:44 GMT","end":"Mon, 18 May 2026 18:19:43 GMT"},"fingerprint":{"sha1":"5D:21:36:26:B5:1D:67:14:0D:6A:68:D3:7C:EB:39:6E:A1:45:8C:29","sha256":"BC:A5:DD:5A:08:3A:33:49:76:BB:EB:18:9C:45:17:80:A1:3E:31:5F:BA:F9:93:28:C7:76:A0:97:FF:E9:3F:1C"}}},"request":{"raw":"GET /gtag/js?id=G-M9BQL00QVP HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mdmacanada.cc/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Thu, 26 Mar 2026 23:10:45 GMT\r\nexpires: Thu, 26 Mar 2026 23:10:45 GMT\r\ncache-control: private, max-age=900\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\nserver: Google Tag Manager\r\ncontent-length: 154441\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":465034,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (6031)","md5":"0a6e95cafb03f51d23561940d1a067f6","sha1":"0d9143e52edbefcb4719468a0c6bc0c8f190ab12","sha256":"4e54e8cf1aada9b28badca1264188650d1f2463092a865f5e1e34308bdd5cedb","sha512":"cd68ca7aaa5b15502fb676ae4b556a11e81c17a3397bbf35e4d0cbfca6e985c6b00d8e9199052b7d6c60e7c6e361383f5a451e55ae57fa641f168085dded1215","ssdeep":"6144:LCORjaFCE9VJlQGXHIzs8WVP1W+rwkQdqQtYTc0HdZgQ0:8CEfJlbIY8CmOp0","tlshash":"1aa409ceb3d674625296e478903f01cba57b29e2b44cc8a5f189cce42e7465a4277f3c","first_seen":"2026-03-26T23:11:11.825745Z","last_seen":"2026-03-26T23:11:11.825745Z","times_seen":1,"resource_available":true,"data":null}},"time_used":245,"timings":{"blocked":83,"dns":1,"connect":8,"send":0,"wait":35,"receive":29,"ssl":86},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mdmacanada.cc/wp-content/cache/debloat/js/99c439278c9233f6710ad5b378a685cf.js","fqdn":"mdmacanada.cc","domain":"mdmacanada.cc","tld":"cc"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://mdmacanada.cc/","date":"2026-03-26T23:10:45.420Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mdmacanada.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 29 Jan 2026 00:46:51 GMT","end":"Wed, 29 Apr 2026 01:45:19 GMT"},"fingerprint":{"sha1":"B7:47:48:08:4D:35:A4:0D:8D:CE:D7:71:A9:FA:22:B1:5B:A1:AC:40","sha256":"AE:86:CA:6D:76:85:1D:C6:34:96:AE:04:62:0C:A6:24:0A:DD:10:3E:9E:C3:97:21:29:1A:84:BA:B3:91:6A:6F"}}},"request":{"raw":"GET /wp-content/cache/debloat/js/99c439278c9233f6710ad5b378a685cf.js HTTP/1.1\r\nHost: mdmacanada.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mdmacanada.cc/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 26 Mar 2026 23:10:45 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 4408\r\ncache-control: public, max-age=604800\r\nexpires: Thu, 02 Apr 2026 23:10:45 GMT\r\nlast-modified: Sat, 25 May 2024 01:50:07 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nstrict-transport-security: max-age=63072000; includeSubDomains\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\netag: \r\ncf-cache-status: REVALIDATED\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=kPKL3Gf4AjjUkPSZbyRshNl2rGIVELLIrAW%2F5ovaABDrnYvvMaxKMh0CsCag9yUlyMoiuK3WV6blR%2FeLz7yPTQgksoPllsGQUsYrryrSrXp43QPIPfbWkZv52D3QWHb7\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e29d49dcf323181-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":14885,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (13464)","md5":"84b8202dcbaa8bd47d62a4332f743856","sha1":"2150d9d487e93cc871475a5d2439082643298257","sha256":"fddaa60597e1d22d8ca9529bab0ae12193fcea87401511283924f116ea1028a3","sha512":"09c7095f97fb383b02552fa1444df735ce5bcad8bbbc3d4734ed48ecfe1531a5cd35ef70d5edcd4e2de828c491d0e2c46b299772b5934859fe368a9e53274ec5","ssdeep":"384:71yd4Sk6FCT6IZ9bAstA3fVipSfUeGey4of:70iSk2RIZ9MsmNqVl","tlshash":"7c62b644b2416772d3df60adc89b050ea9bbba186d05289c763bc9c98d74f0c70bfa75","first_seen":"2023-03-10T20:00:21Z","last_seen":"2026-04-25T10:01:17.62374Z","times_seen":459,"resource_available":true,"data":null}},"time_used":386,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":386,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-26","alert":"Sinkholed","trigger":"mdmacanada.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mdmacanada.cc/wp-content/themes/flatsome-child/style.css?ver=1.0","fqdn":"mdmacanada.cc","domain":"mdmacanada.cc","tld":"cc"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://mdmacanada.cc/","date":"2026-03-26T23:10:47.732Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mdmacanada.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 29 Jan 2026 00:46:51 GMT","end":"Wed, 29 Apr 2026 01:45:19 GMT"},"fingerprint":{"sha1":"B7:47:48:08:4D:35:A4:0D:8D:CE:D7:71:A9:FA:22:B1:5B:A1:AC:40","sha256":"AE:86:CA:6D:76:85:1D:C6:34:96:AE:04:62:0C:A6:24:0A:DD:10:3E:9E:C3:97:21:29:1A:84:BA:B3:91:6A:6F"}}},"request":{"raw":"GET /wp-content/themes/flatsome-child/style.css?ver=1.0 HTTP/1.1\r\nHost: mdmacanada.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mdmacanada.cc/\r\nCookie: wffn_flt=2026-3-26 23:10:45; wffn_timezone=UTC; wffn_is_mobile=false; wffn_browser=Firefox; wffn_referrer=; wffn_fl_url=/; sbjs_migrations=1418474375998%3D1; sbjs_current_add=fd%3D2026-03-26%2023%3A10%3A45%7C%7C%7Cep%3Dhttps%3A%2F%2Fmdmacanada.cc%2F%7C%7C%7Crf%3D%28none%29; sbjs_first_add=fd%3D2026-03-26%2023%3A10%3A45%7C%7C%7Cep%3Dhttps%3A%2F%2Fmdmacanada.cc%2F%7C%7C%7Crf%3D%28none%29; sbjs_current=typ%3Dtypein%7C%7C%7Csrc%3D%28direct%29%7C%7C%7Cmdm%3D%28none%29%7C%7C%7Ccmp%3D%28none%29%7C%7C%7Ccnt%3D%28none%29%7C%7C%7Ctrm%3D%28none%29%7C%7C%7Cid%3D%28none%29%7C%7C%7Cplt%3D%28none%29%7C%7C%7Cfmt%3D%28none%29%7C%7C%7Ctct%3D%28none%29; sbjs_first=typ%3Dtypein%7C%7C%7Csrc%3D%28direct%29%7C%7C%7Cmdm%3D%28none%29%7C%7C%7Ccmp%3D%28none%29%7C%7C%7Ccnt%3D%28none%29%7C%7C%7Ctrm%3D%28none%29%7C%7C%7Cid%3D%28none%29%7C%7C%7Cplt%3D%28none%29%7C%7C%7Cfmt%3D%28none%29%7C%7C%7Ctct%3D%28none%29; sbjs_udata=vst%3D1%7C%7C%7Cuip%3D%28none%29%7C%7C%7Cuag%3DMozilla%2F5.0%20%28Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0%29%20Gecko%2F20100101%20Firefox%2F134.0; sbjs_session=pgs%3D1%7C%7C%7Ccpg%3Dhttps%3A%2F%2Fmdmacanada.cc%2F; __kla_id=eyJjaWQiOiJOek5pTVRaaE1UQXRaakUxWXkwME5UaG1MVGt5WlRRdFpHVXpZelUwWmpFeU9HUm0ifQ==; fkcart_cart_qty=0; fkcart_cart_total=%3Cspan%20class%3D%22woocommerce-Price-amount%20amount%22%3E%3Cbdi%3E%3Cspan%20class%3D%22woocommerce-Price-currencySymbol%22%3E%26%2336%3B%3C%2Fspan%3E0.00%3C%2Fbdi%3E%3C%2Fspan%3E\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 26 Mar 2026 23:10:48 GMT\r\ncontent-type: text/css\r\ncontent-length: 1061\r\ncache-control: public, max-age=604800\r\nexpires: Thu, 02 Apr 2026 23:10:48 GMT\r\nlast-modified: Sat, 25 May 2024 01:48:56 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nstrict-transport-security: max-age=63072000; includeSubDomains\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=QNlhYgTZ%2FTphIIxhhHaA1Lg1mQOH%2B%2BE0me9MYeq7ZgoxW3KDsITPxMNdJjpzFqdJLO4Fa6ldXIylGYYOi5hSemjLJNR5AmkBe2tmvt4oFPs6R%2FBLjzGB%2FZjdgPn3DlJ8\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e29d4ac5a2a3181-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":3536,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"a5315f645d00a19380df0c1204002c0b","sha1":"a507c70e1a496ec2ba27e4a143001d219e2b7083","sha256":"f029fddd636e1005becd47a40ffa4a20099092e80590dde5b4bea21dcb80a542","sha512":"95276f7cae8262c1d366253a084fad14481777ee95b9942542d7ad7d420b00e3b7171c617e3918601d25d18c992041e22e9a3c8cd5e5b05b16bc3e7326cf4982","ssdeep":"","tlshash":"737165dde610190593366e74bb526fb2bdae54e24a0207b976e15404abc1d7a0268fcc","first_seen":"2026-03-26T23:11:11.827362Z","last_seen":"2026-03-27T01:49:53.297639Z","times_seen":2,"resource_available":false,"data":null}},"time_used":354,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":354,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-26","alert":"Sinkholed","trigger":"mdmacanada.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"va.tawk.to/v1/session/start","fqdn":"va.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"172.66.161.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://mdmacanada.cc/","date":"2026-03-26T23:10:48.279Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tawk.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 06 Mar 2026 09:33:33 GMT","end":"Thu, 04 Jun 2026 10:33:27 GMT"},"fingerprint":{"sha1":"F0:6C:DC:32:63:CD:34:E3:15:CD:7F:77:F5:A3:64:E0:9B:36:95:83","sha256":"B6:7F:6E:A3:69:3E:0D:3B:04:3E:8B:65:86:7E:1D:5F:82:84:18:16:8D:AD:72:D5:51:E3:46:BC:BD:CD:BC:38"}}},"request":{"raw":"POST /v1/session/start HTTP/1.1\r\nHost: va.tawk.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://mdmacanada.cc/\r\nContent-Type: application/json; charset=utf-8\r\nContent-Length: 175\r\nOrigin: https://mdmacanada.cc\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":175,"data":"{\"p\":\"6562fe62ba9fcf18a80ef28f\",\"w\":\"1hg5b3cdr\",\"platform\":\"desktop\",\"tzo\":0,\"url\":\"https://mdmacanada.cc/\",\"vss\":\"\",\"consent\":false,\"wss\":\"min\",\"uik\":\"Sk0JiiyhXovD5QiDd_dum\"}"}},"response":{"raw":"HTTP/3 400 Bad Request\r\nx-served-by: visitor-application-preemptive-2lhl\r\naccess-control-allow-origin: https://mdmacanada.cc\r\naccess-control-allow-credentials: true\r\naccess-control-max-age: 3600\r\naccess-control-allow-methods: POST,OPTIONS\r\naccess-control-allow-headers: content-type,x-tawk-token\r\ncontent-type: application/json\r\npriority: u=4,i=?0\r\nvary: Accept-Encoding\r\ndate: Thu, 26 Mar 2026 23:10:48 GMT\r\ncontent-length: 64\r\nstrict-transport-security: max-age=0; includeSubDomains; preload\r\ncf-cache-status: DYNAMIC\r\nserver: cloudflare\r\nx-content-type-options: nosniff\r\ncf-ray: 9e29d4afbfcd5a0f-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"400","status_text":"Bad Request","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":64,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"9043baefaa2d92758fcc3f0b9cad497e","sha1":"874e7007e26dd1821e6da389ccf7e9538883d60c","sha256":"2e2d99bd933abaab5940564af5cbc0b6733745b7f882d7e1bdaeab1aba7c6fd1","sha512":"2adb581136753c1f4d90b720dada3f60b39b01e261993a51a8c85fbfa7f243a9815de7e1cba62e948c83db39f96ca51c7fe8ffb3d7dc72dffb26853525c113b9","ssdeep":"","tlshash":"c2a0022a53dc3ddf6bc70801ec28f510179984c178982c224a0c7b96624366ec911519","first_seen":"2023-04-07T09:44:08Z","last_seen":"2026-04-25T16:52:28.773646Z","times_seen":548,"resource_available":false,"data":null}},"time_used":164,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":164,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mdmacanada.cc/wp-content/cache/debloat/js/78bcfd28775b12953b1c8fb44323ef3d.js","fqdn":"mdmacanada.cc","domain":"mdmacanada.cc","tld":"cc"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://mdmacanada.cc/","date":"2026-03-26T23:10:45.368Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mdmacanada.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 29 Jan 2026 00:46:51 GMT","end":"Wed, 29 Apr 2026 01:45:19 GMT"},"fingerprint":{"sha1":"B7:47:48:08:4D:35:A4:0D:8D:CE:D7:71:A9:FA:22:B1:5B:A1:AC:40","sha256":"AE:86:CA:6D:76:85:1D:C6:34:96:AE:04:62:0C:A6:24:0A:DD:10:3E:9E:C3:97:21:29:1A:84:BA:B3:91:6A:6F"}}},"request":{"raw":"GET /wp-content/cache/debloat/js/78bcfd28775b12953b1c8fb44323ef3d.js HTTP/1.1\r\nHost: mdmacanada.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mdmacanada.cc/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 26 Mar 2026 23:10:45 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 2258\r\ncache-control: public, max-age=604800\r\nexpires: Thu, 02 Apr 2026 23:10:45 GMT\r\nlast-modified: Tue, 15 Oct 2024 10:04:07 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nstrict-transport-security: max-age=63072000; includeSubDomains\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vhDeLzetq9b9oGD1XxuhgbthXpgICDX8SQd8hPUlzdjh6b9kzA%2FAbVv%2FjBGCeLrwNUMxZi4iMWfPVSoBG2OYWXR7T6oNcf%2Brdk5mTrgyiOPvewZmuZxWqhxzIVM4rzsY\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e29d49d7eab3181-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":5753,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (5753), with no line terminators","md5":"4d1dcc4e2de13a9409f3eaa70a893329","sha1":"bf1bdd680e501f3aeb55a993803598217827dbe7","sha256":"b3596eb1da16d207322afbd9cd14cd0bd389a68c92e50f9ab415d487d7ceeea9","sha512":"e94d92aed86299c6360e6992e7ab5d377cc485c4b5180619fbb92890e4004865cb8fd0e4186044f4ebb5e009291de99a7aba26ed16efe0bf5fef418e38acc9c2","ssdeep":"96:MkMIJdJXKCNaCXjYRErS8Hw/qu09VpakWVDmZzxZfZDHYk45BAUb0XYSE1PlXARz:MkMIJdJXPNfzYRErS8Qe9VpakWVqBxZ9","tlshash":"38c1a55c3229743e8ea1086b2dff964db6381d1524e9c48cd115f96068a5dcac33abbf","first_seen":"2024-10-13T01:26:01.164516Z","last_seen":"2026-04-25T09:32:57.821032Z","times_seen":365,"resource_available":true,"data":null}},"time_used":354,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":354,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-26","alert":"Sinkholed","trigger":"mdmacanada.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mdmacanada.cc/wp-content/cache/debloat/js/a5c3be0e45a7c899ee0f12d2e5387d07.js","fqdn":"mdmacanada.cc","domain":"mdmacanada.cc","tld":"cc"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://mdmacanada.cc/","date":"2026-03-26T23:10:45.428Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mdmacanada.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 29 Jan 2026 00:46:51 GMT","end":"Wed, 29 Apr 2026 01:45:19 GMT"},"fingerprint":{"sha1":"B7:47:48:08:4D:35:A4:0D:8D:CE:D7:71:A9:FA:22:B1:5B:A1:AC:40","sha256":"AE:86:CA:6D:76:85:1D:C6:34:96:AE:04:62:0C:A6:24:0A:DD:10:3E:9E:C3:97:21:29:1A:84:BA:B3:91:6A:6F"}}},"request":{"raw":"GET /wp-content/cache/debloat/js/a5c3be0e45a7c899ee0f12d2e5387d07.js HTTP/1.1\r\nHost: mdmacanada.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mdmacanada.cc/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 26 Mar 2026 23:10:45 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 7093\r\ncache-control: public, max-age=604800\r\nexpires: Thu, 02 Apr 2026 23:10:45 GMT\r\nlast-modified: Sat, 25 May 2024 01:50:07 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nstrict-transport-security: max-age=63072000; includeSubDomains\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=aDx91xY1bWt%2FxPrImsVRY1IPOBwCNM%2FTLmx2dNNqEsNDOCvGnDao%2B1xXFJcJ80u%2BSrCyFEjFQ53jUblVF3f1GVIqVCX%2BdRJOWxf6Umm8GMrGhRqrj1KWqf07PoW6ohLQ\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e29d49ddf533181-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":21855,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (21855), with no line terminators","md5":"80785ca1336add97de70eb47237201e9","sha1":"b4e353eaee00046f3da067be1d8120c0cedb0a29","sha256":"3b51cad83cb9da92cacdddcbf103f93d6021b9cd5799c928408fe770f2c2ac50","sha512":"9c9fd8d004c8cdf153d8dcfaf38a7d2a0ff3ed50189041167aec5c39b3adae9f5b8cd67cc0c58fa3e4d5c6a74a800fea540a56bd761fb33e0880c39ec2cad3c2","ssdeep":"384:s1ntfI5Ix+a1Yz00oz/mHY4gRbBNScnObZGNOj6osVB7hzqyy61RFfvz+WWxQcI8:WntfI5Ix+a1Yw0oz/GgRbBNScObZGIjx","tlshash":"68a2a32af37470ad41ba60b5b83b53a4727730797507809cb12a98d66c2ad5e2133f7e","first_seen":"2024-01-21T11:14:44Z","last_seen":"2026-04-25T15:55:07.471595Z","times_seen":596,"resource_available":true,"data":null}},"time_used":374,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":374,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-26","alert":"Sinkholed","trigger":"mdmacanada.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.trustindex.io/assets/platform/Trustindex/star/f.svg","fqdn":"cdn.trustindex.io","domain":"trustindex.io","tld":"io"},"ip":{"addr":"3.167.2.9","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://mdmacanada.cc/","date":"2026-03-26T23:10:45.686Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.trustindex.io","organization":""},"issuer":{"commonName":"GoGetSSL RSA DV CA","organization":"GoGetSSL"},"validity":{"start":"Fri, 23 May 2025 00:00:00 GMT","end":"Tue, 23 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"4B:EB:D9:98:03:6A:DB:BE:49:BA:B2:3E:3A:B2:F6:D9:D7:62:B5:B7","sha256":"F8:20:DB:3C:4B:D6:B3:4C:28:EC:90:B0:25:20:9C:38:18:7C:FF:7B:DF:24:B2:C8:77:4C:33:96:D4:28:B7:B3"}}},"request":{"raw":"GET /assets/platform/Trustindex/star/f.svg HTTP/1.1\r\nHost: cdn.trustindex.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mdmacanada.cc/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/svg+xml\r\ndate: Wed, 21 Jan 2026 13:45:25 GMT\r\nserver: Apache/2.4.52 (Ubuntu)\r\ncache-control: public, max-age=31536000, immutable\r\nlast-modified: Thu, 15 Jan 2026 11:52:18 GMT\r\ncontent-encoding: br\r\ncontent-security-policy: frame-ancestors 'self' *;\r\nreferrer-policy: origin\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: origin, x-requested-with, content-type\r\naccess-control-allow-methods: GET\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-embedder-policy: require-corp\r\netag: W/\"6b7-6486bdb4e6c2a\"\r\nvary: accept-encoding\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 50c588fd3255d023d9b9021263f5fa0a.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P2\r\nx-amz-cf-id: M_Ol1W8QGeYHS8NjbigW4ShDWAQZsEdDaGF0OCYC29wfLA6NmW-wxg==\r\nage: 5563519\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Apache HTTP Server:2.4.52","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":1719,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"ddd60942c8fc943be985edbd7b7f8a31","sha1":"31b14ababb280e730148e434d1d74c7999cf47b8","sha256":"003ca5ed8424c2f21cc94bc89eefa0456401bf90a6d3e47ce020e656a3f9f3c4","sha512":"c2b285e67bc3173203d2a13b83c1e97b622105c8e94522b1d742f848dc9b2f1a5859e78ca8fe9a99b4a61cf6fe975510b6a86d78dffd2e0e30e364c450cd0ec3","ssdeep":"","tlshash":"3f3132da3b2199e2c399cb6577f4db042d3704572dbe048ae5ca171f6c200762af4e6a","first_seen":"2026-01-21T02:59:37.0854Z","last_seen":"2026-04-25T15:22:18.584459Z","times_seen":36,"resource_available":false,"data":null}},"time_used":2,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static-tracking.klaviyo.com/onsite/js/build-preview/commit-a9008e2652932ce924ec514ff7f88d1dd460ca1b/static.05920b16793f2a456e22.js?cb=2","fqdn":"static-tracking.klaviyo.com","domain":"klaviyo.com","tld":"com"},"ip":{"addr":"151.101.66.133","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://mdmacanada.cc/","date":"2026-03-26T23:10:45.759Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"static-tracking.klaviyo.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 10 Mar 2026 18:32:35 GMT","end":"Mon, 08 Jun 2026 18:32:34 GMT"},"fingerprint":{"sha1":"67:8B:C3:D0:ED:A5:30:2B:01:C2:00:BE:98:CB:EB:8B:10:29:07:77","sha256":"41:4B:FC:4B:5F:DF:5A:99:DF:7E:97:0B:FE:A9:EC:22:03:5C:8E:FC:FD:92:1D:47:5A:D8:78:1A:4A:13:F8:FB"}}},"request":{"raw":"GET /onsite/js/build-preview/commit-a9008e2652932ce924ec514ff7f88d1dd460ca1b/static.05920b16793f2a456e22.js?cb=2 HTTP/1.1\r\nHost: static-tracking.klaviyo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://mdmacanada.cc\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mdmacanada.cc/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nx-amz-id-2: rG+WKrUyRcL4JM2BmOzn+GG8brA27KWVvIyDc9O5HnIQEqO8wB1F8uHqg8pB7V7CpLuCls39tfhAUat+HHOQky0c7CsTdxn7\r\nx-amz-request-id: FSG7SYBHVFF4EBEH\r\nlast-modified: Thu, 26 Mar 2026 15:02:59 GMT\r\netag: \"0c095a3158e5872bf223abd432da2d3f\"\r\nx-amz-server-side-encryption: AES256\r\nx-amz-meta-entrypoints-hash: \r\ncache-control: max-age=2592000,stale-while-revalidate=10800\r\nx-amz-meta-surrogate-control: max-age=31536000\r\nx-amz-meta-surrogate-key: fender-asset-build-preview\r\nx-amz-version-id: 8l5tFusX5ialOi7Py8x_T4fWOu.xdKoy\r\ncontent-type: text/javascript\r\nserver: AmazonS3\r\ncontent-encoding: br\r\nvia: 1.1 varnish, 1.1 varnish\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ndate: Thu, 26 Mar 2026 23:10:45 GMT\r\nage: 209\r\nx-served-by: cache-lga21924-LGA, cache-hel1410028-HEL\r\nx-cache: HIT, HIT\r\nx-cache-hits: 67, 53\r\nvary: Accept-Encoding\r\ncontent-length: 532\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}],"data":{"size":993,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (993), with no line terminators","md5":"0c095a3158e5872bf223abd432da2d3f","sha1":"56c40a52e907453dd7133e990799ecf3dbba8cd0","sha256":"4670fc97a26af996504582be0c2bb3cec58b8f10c872e8e4a8f73996739668c7","sha512":"405deb634603ecd98de121cf5d8b9f3ce5e283a77319a1a87febde5bd2dc9cce226e59012755e0b2b44ea40426ec97d17f3a81de02714e8733e1060c668b6288","ssdeep":"","tlshash":"ca11ef5f7bd0f5650f5e1cc0267b243cbcfd9282352d84a3e61498cc17606662315d8d","first_seen":"2026-03-09T17:13:19.535307Z","last_seen":"2026-04-24T00:51:00.723095Z","times_seen":7454,"resource_available":true,"data":null}},"time_used":166,"timings":{"blocked":69,"dns":37,"connect":13,"send":0,"wait":14,"receive":0,"ssl":31},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.trustindex.io/assets/fonts/poppins/latin.woff2","fqdn":"cdn.trustindex.io","domain":"trustindex.io","tld":"io"},"ip":{"addr":"3.167.2.9","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://mdmacanada.cc/","date":"2026-03-26T23:10:45.793Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.trustindex.io","organization":""},"issuer":{"commonName":"GoGetSSL RSA DV CA","organization":"GoGetSSL"},"validity":{"start":"Fri, 23 May 2025 00:00:00 GMT","end":"Tue, 23 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"4B:EB:D9:98:03:6A:DB:BE:49:BA:B2:3E:3A:B2:F6:D9:D7:62:B5:B7","sha256":"F8:20:DB:3C:4B:D6:B3:4C:28:EC:90:B0:25:20:9C:38:18:7C:FF:7B:DF:24:B2:C8:77:4C:33:96:D4:28:B7:B3"}}},"request":{"raw":"GET /assets/fonts/poppins/latin.woff2 HTTP/1.1\r\nHost: cdn.trustindex.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nReferer: https://cdn.trustindex.io/\r\nOrigin: https://mdmacanada.cc\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: font/woff2\r\ncontent-length: 7884\r\ndate: Tue, 06 Jan 2026 09:54:19 GMT\r\nserver: Apache/2.4.52 (Ubuntu)\r\nlast-modified: Thu, 24 Jul 2025 12:16:05 GMT\r\netag: \"1ecc-63aabca2b2dc3\"\r\naccept-ranges: bytes\r\nreferrer-policy: origin\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: origin, x-requested-with, content-type\r\naccess-control-allow-methods: GET\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-embedder-policy: require-corp\r\ncontent-security-policy: frame-ancestors 'self' *;\r\ncache-control: public, max-age=31536000, immutable\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 7a83657ba338d5960d8d5abdbe0a3136.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P2\r\nx-amz-cf-id: 06JGOOBxc7AdkMOzhHd3RoGoXlrDpqDOmZj7sj5TIt_CWo8MtnbYjw==\r\nage: 6873386\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server:2.4.52","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]}],"data":{"size":7884,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 7884, version 1.0","md5":"9212f6f9860f9fc6c69b02fedf6db8c3","sha1":"ac6d71b4d5fdd2b3dabc9a06ff6c001e4251da0b","sha256":"7d93459d86585bfcdbb7e0376056226adb25821ee54b96236fe2123e9560929f","sha512":"67317495f4b53e20a9f31c034e456e6c37f387dffb2c092caa5159bc441cfcadd02749ffe5bbed1d580d5300a59e48a767ef2c6d9978b474f84c1a2cd095c126","ssdeep":"192:xLFDbKO9E3rS3JWBRO/J601FSS5ZUbik3Zy2f0:pd9J5W501otlI","tlshash":"c3f1ae4eb3f2cd1be40982e53a0fc90b1c578272681fd772d067a22517893bc8db2c81","first_seen":"2023-04-05T15:35:34Z","last_seen":"2026-04-25T21:02:38.900516Z","times_seen":311467,"resource_available":false,"data":null}},"time_used":6,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":6,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mdmacanada.cc/wp-content/themes/flatsome/assets/css/flatsome.css?ver=3.18.7","fqdn":"mdmacanada.cc","domain":"mdmacanada.cc","tld":"cc"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://mdmacanada.cc/","date":"2026-03-26T23:10:47.636Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mdmacanada.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 29 Jan 2026 00:46:51 GMT","end":"Wed, 29 Apr 2026 01:45:19 GMT"},"fingerprint":{"sha1":"B7:47:48:08:4D:35:A4:0D:8D:CE:D7:71:A9:FA:22:B1:5B:A1:AC:40","sha256":"AE:86:CA:6D:76:85:1D:C6:34:96:AE:04:62:0C:A6:24:0A:DD:10:3E:9E:C3:97:21:29:1A:84:BA:B3:91:6A:6F"}}},"request":{"raw":"GET /wp-content/themes/flatsome/assets/css/flatsome.css?ver=3.18.7 HTTP/1.1\r\nHost: mdmacanada.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mdmacanada.cc/\r\nCookie: wffn_flt=2026-3-26 23:10:45; wffn_timezone=UTC; wffn_is_mobile=false; wffn_browser=Firefox; wffn_referrer=; wffn_fl_url=/; sbjs_migrations=1418474375998%3D1; sbjs_current_add=fd%3D2026-03-26%2023%3A10%3A45%7C%7C%7Cep%3Dhttps%3A%2F%2Fmdmacanada.cc%2F%7C%7C%7Crf%3D%28none%29; sbjs_first_add=fd%3D2026-03-26%2023%3A10%3A45%7C%7C%7Cep%3Dhttps%3A%2F%2Fmdmacanada.cc%2F%7C%7C%7Crf%3D%28none%29; sbjs_current=typ%3Dtypein%7C%7C%7Csrc%3D%28direct%29%7C%7C%7Cmdm%3D%28none%29%7C%7C%7Ccmp%3D%28none%29%7C%7C%7Ccnt%3D%28none%29%7C%7C%7Ctrm%3D%28none%29%7C%7C%7Cid%3D%28none%29%7C%7C%7Cplt%3D%28none%29%7C%7C%7Cfmt%3D%28none%29%7C%7C%7Ctct%3D%28none%29; sbjs_first=typ%3Dtypein%7C%7C%7Csrc%3D%28direct%29%7C%7C%7Cmdm%3D%28none%29%7C%7C%7Ccmp%3D%28none%29%7C%7C%7Ccnt%3D%28none%29%7C%7C%7Ctrm%3D%28none%29%7C%7C%7Cid%3D%28none%29%7C%7C%7Cplt%3D%28none%29%7C%7C%7Cfmt%3D%28none%29%7C%7C%7Ctct%3D%28none%29; sbjs_udata=vst%3D1%7C%7C%7Cuip%3D%28none%29%7C%7C%7Cuag%3DMozilla%2F5.0%20%28Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0%29%20Gecko%2F20100101%20Firefox%2F134.0; sbjs_session=pgs%3D1%7C%7C%7Ccpg%3Dhttps%3A%2F%2Fmdmacanada.cc%2F; __kla_id=eyJjaWQiOiJOek5pTVRaaE1UQXRaakUxWXkwME5UaG1MVGt5WlRRdFpHVXpZelUwWmpFeU9HUm0ifQ==; fkcart_cart_qty=0; fkcart_cart_total=%3Cspan%20class%3D%22woocommerce-Price-amount%20amount%22%3E%3Cbdi%3E%3Cspan%20class%3D%22woocommerce-Price-currencySymbol%22%3E%26%2336%3B%3C%2Fspan%3E0.00%3C%2Fbdi%3E%3C%2Fspan%3E\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 26 Mar 2026 23:10:47 GMT\r\ncontent-type: text/css\r\ncontent-length: 28781\r\ncache-control: public, max-age=604800\r\nexpires: Thu, 02 Apr 2026 23:10:47 GMT\r\nlast-modified: Sat, 25 May 2024 01:48:56 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nstrict-transport-security: max-age=63072000; includeSubDomains\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=tVQzej9gkbs4kQB36Zg7BKuVUb1mLIUAQcftBujzDN3ZWnByYhE3jG%2F%2FKUHATvyWzHzcPfxINvWq%2BLNHnq2crjhA6SItQaDm5QfKRnGd0DEeaQLXifhtGRUAiAQ7zEhc\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e29d4abb9343181-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":151701,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"07752037befa9f1b8adab1bdebed6891","sha1":"1b033710dd902265b49885f91a8b174b0b611622","sha256":"f33b70f5f1d46edbe129750ed686fb7a56c300cd2053870f062124726414fb56","sha512":"15459eef956c86040eac3fca20e993b28d2af8b5c796a2d36e38c039a24bf5d1226ff7b3ccb4307683cfea2c7299f65e6ef9503bc3c703871fd8fe7af0a322d6","ssdeep":"3072:Xq5/324TXYK8Jm1LqCYD2Sx9JNp30dOeLWo0EADT+1zeckhNV5Q:ySx9JNp30dOeLWo0EADT+1zeckhNV5Q","tlshash":"d8e32b52f384242ca5178319e5c4fbbc763991a1e7624afbf0639629cbcb6da0135f0d","first_seen":"2024-01-25T17:47:27Z","last_seen":"2026-04-25T18:22:29.548162Z","times_seen":1667,"resource_available":false,"data":null}},"time_used":238,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":237,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-26","alert":"Sinkholed","trigger":"mdmacanada.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mdmacanada.cc/wp-content/themes/flatsome/assets/css/flatsome-shop.css?ver=3.18.7","fqdn":"mdmacanada.cc","domain":"mdmacanada.cc","tld":"cc"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://mdmacanada.cc/","date":"2026-03-26T23:10:47.719Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mdmacanada.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 29 Jan 2026 00:46:51 GMT","end":"Wed, 29 Apr 2026 01:45:19 GMT"},"fingerprint":{"sha1":"B7:47:48:08:4D:35:A4:0D:8D:CE:D7:71:A9:FA:22:B1:5B:A1:AC:40","sha256":"AE:86:CA:6D:76:85:1D:C6:34:96:AE:04:62:0C:A6:24:0A:DD:10:3E:9E:C3:97:21:29:1A:84:BA:B3:91:6A:6F"}}},"request":{"raw":"GET /wp-content/themes/flatsome/assets/css/flatsome-shop.css?ver=3.18.7 HTTP/1.1\r\nHost: mdmacanada.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mdmacanada.cc/\r\nCookie: wffn_flt=2026-3-26 23:10:45; wffn_timezone=UTC; wffn_is_mobile=false; wffn_browser=Firefox; wffn_referrer=; wffn_fl_url=/; sbjs_migrations=1418474375998%3D1; sbjs_current_add=fd%3D2026-03-26%2023%3A10%3A45%7C%7C%7Cep%3Dhttps%3A%2F%2Fmdmacanada.cc%2F%7C%7C%7Crf%3D%28none%29; sbjs_first_add=fd%3D2026-03-26%2023%3A10%3A45%7C%7C%7Cep%3Dhttps%3A%2F%2Fmdmacanada.cc%2F%7C%7C%7Crf%3D%28none%29; sbjs_current=typ%3Dtypein%7C%7C%7Csrc%3D%28direct%29%7C%7C%7Cmdm%3D%28none%29%7C%7C%7Ccmp%3D%28none%29%7C%7C%7Ccnt%3D%28none%29%7C%7C%7Ctrm%3D%28none%29%7C%7C%7Cid%3D%28none%29%7C%7C%7Cplt%3D%28none%29%7C%7C%7Cfmt%3D%28none%29%7C%7C%7Ctct%3D%28none%29; sbjs_first=typ%3Dtypein%7C%7C%7Csrc%3D%28direct%29%7C%7C%7Cmdm%3D%28none%29%7C%7C%7Ccmp%3D%28none%29%7C%7C%7Ccnt%3D%28none%29%7C%7C%7Ctrm%3D%28none%29%7C%7C%7Cid%3D%28none%29%7C%7C%7Cplt%3D%28none%29%7C%7C%7Cfmt%3D%28none%29%7C%7C%7Ctct%3D%28none%29; sbjs_udata=vst%3D1%7C%7C%7Cuip%3D%28none%29%7C%7C%7Cuag%3DMozilla%2F5.0%20%28Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0%29%20Gecko%2F20100101%20Firefox%2F134.0; sbjs_session=pgs%3D1%7C%7C%7Ccpg%3Dhttps%3A%2F%2Fmdmacanada.cc%2F; __kla_id=eyJjaWQiOiJOek5pTVRaaE1UQXRaakUxWXkwME5UaG1MVGt5WlRRdFpHVXpZelUwWmpFeU9HUm0ifQ==; fkcart_cart_qty=0; fkcart_cart_total=%3Cspan%20class%3D%22woocommerce-Price-amount%20amount%22%3E%3Cbdi%3E%3Cspan%20class%3D%22woocommerce-Price-currencySymbol%22%3E%26%2336%3B%3C%2Fspan%3E0.00%3C%2Fbdi%3E%3C%2Fspan%3E\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 26 Mar 2026 23:10:48 GMT\r\ncontent-type: text/css\r\ncontent-length: 6391\r\ncache-control: public, max-age=604800\r\nexpires: Thu, 02 Apr 2026 23:10:48 GMT\r\nlast-modified: Sat, 25 May 2024 01:48:56 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nstrict-transport-security: max-age=63072000; includeSubDomains\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=jGvcu9tJDdF7B9u%2B0gpAzeBSOfbgwePQkGHccqw9ro9Ezn%2BRfzgZaHo%2FxrV%2Bk9aQ9vK1ezndPLu5N1gkzaZXF%2Fa7lL4pwSosvnNNMNCoWjj2pvwGoCwhJj7il4Y5axFb\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e29d4ac3a083181-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":30106,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (30099)","md5":"7450f4214e9ad027cc9f0cee6d269c29","sha1":"35fc4d29efbba475386c0a314834173bb1f9fbbf","sha256":"525e5980c0957d270add568f4683c5566591d655b886016d91c988ea7174e764","sha512":"d80e5d6f5fa5496fc0fd7ce268be807d931e2a404606e6d0c9e4e0f18ac46b94258baeb743e9ff0a7fd32391c22f7c6f6633d7ae03a2f05bf3565ab1479bae8a","ssdeep":"768:F9JXDto6Cn1agaIrVT17fYujmRFOutkV0QSYCnFK+:F9JXDto6u8gaIt17fYujmRFOutkV0QSX","tlshash":"00d2b672f2b13828a17bc225e8c1faf974b4f165e78705faec426629cb895f7163150c","first_seen":"2024-02-07T09:44:04Z","last_seen":"2026-04-25T15:55:07.496293Z","times_seen":399,"resource_available":false,"data":null}},"time_used":357,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":356,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-26","alert":"Sinkholed","trigger":"mdmacanada.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mdmacanada.cc/","fqdn":"mdmacanada.cc","domain":"mdmacanada.cc","tld":"cc"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-03-26T23:10:40.666Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mdmacanada.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 29 Jan 2026 00:46:51 GMT","end":"Wed, 29 Apr 2026 01:45:19 GMT"},"fingerprint":{"sha1":"B7:47:48:08:4D:35:A4:0D:8D:CE:D7:71:A9:FA:22:B1:5B:A1:AC:40","sha256":"AE:86:CA:6D:76:85:1D:C6:34:96:AE:04:62:0C:A6:24:0A:DD:10:3E:9E:C3:97:21:29:1A:84:BA:B3:91:6A:6F"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: mdmacanada.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Thu, 26 Mar 2026 23:10:45 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nx-powered-by: PHP/7.4.33\r\nlink: \u003chttps://mdmacanada.cc/wp-json/\u003e; rel=\"https://api.w.org/\", \u003chttps://mdmacanada.cc/wp-json/wp/v2/pages/53\u003e; rel=\"alternate\"; title=\"JSON\"; type=\"application/json\", \u003chttps://mdmacanada.cc/\u003e; rel=shortlink\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zm89SXRiYywLSrUVnirNX2%2Bz%2BSVr%2Bhx4YFY1e86u616l5WnY7u%2BsnxHYsAPGif06yKZp%2FTG2XURxL5I7lt5WThV2H2jBPjAhyRQTaQFU5s31V%2FmddcgYxDaBY2iZvyLc\"}]}\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nstrict-transport-security: max-age=63072000; includeSubDomains\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9e29d480693eb4f4-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"WordPress:6.9.4","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"PHP:7.4.33","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]},{"name":"Google Analytics","description":"Google Analytics is a free web analytics service that tracks and reports website traffic.","website":"https://google.com/analytics","common_platform_enumeration":"","icon":"Google Analytics.svg","categories":["Analytics"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Klaviyo","description":"Klaviyo is an email and SMS marketing platform for online businesses.","website":"https://www.klaviyo.com/","common_platform_enumeration":"","icon":"Klaviyo.svg","categories":["Marketing automation"]}],"data":{"size":261216,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (43699)","md5":"d7c364e76396b5182a8c3955b9e04f83","sha1":"48b3d1254b73052d5611a4314c9a3ac6bf46203b","sha256":"478ad9bf204576ff381a8f9c1d142adb722af41c5e7c9e91236f8a65ee9aa19f","sha512":"201244d4fb9341d1340cc25c30edeb31a440a2d22cad36c9ffbff4faafe3eb0be06129a17c16415b3f8d9fedeba1c5b7dfa7964132531adde509a46cbcebdd9f","ssdeep":"6144:2tz8476LAveLWlJZ9ATTawex50DoLqIdiFhdIkml/1YKlRkgX:2tz7aabn","tlshash":"014419b751600164511346e7d3dc6e98662ae232c6920cdeb3ef194acfc3fda726670b","first_seen":"2026-03-26T23:11:11.833765Z","last_seen":"2026-03-26T23:11:11.833765Z","times_seen":1,"resource_available":true,"data":null}},"time_used":4606,"timings":{"blocked":40,"dns":27,"connect":1,"send":0,"wait":4520,"receive":0,"ssl":16},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-26","alert":"Sinkholed","trigger":"mdmacanada.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mdmacanada.cc/wp-content/cache/debloat/js/7457b5eb74a540f48cf35db3679d81ce.js","fqdn":"mdmacanada.cc","domain":"mdmacanada.cc","tld":"cc"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://mdmacanada.cc/","date":"2026-03-26T23:10:45.371Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mdmacanada.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 29 Jan 2026 00:46:51 GMT","end":"Wed, 29 Apr 2026 01:45:19 GMT"},"fingerprint":{"sha1":"B7:47:48:08:4D:35:A4:0D:8D:CE:D7:71:A9:FA:22:B1:5B:A1:AC:40","sha256":"AE:86:CA:6D:76:85:1D:C6:34:96:AE:04:62:0C:A6:24:0A:DD:10:3E:9E:C3:97:21:29:1A:84:BA:B3:91:6A:6F"}}},"request":{"raw":"GET /wp-content/cache/debloat/js/7457b5eb74a540f48cf35db3679d81ce.js HTTP/1.1\r\nHost: mdmacanada.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mdmacanada.cc/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 26 Mar 2026 23:10:45 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 3277\r\ncache-control: public, max-age=604800\r\nexpires: Thu, 02 Apr 2026 23:10:45 GMT\r\nlast-modified: Fri, 13 Mar 2026 11:37:08 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nstrict-transport-security: max-age=63072000; includeSubDomains\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=JZvgEbUDYMO3XnQUuwVvjIROfpPIK42I1ypRNBqM11jj5BVJdAblNxGm5SFTdTtPb71rJhlkVjCVtK1oSqwyL%2F4uIvdR8OHSNM9f%2FmMjC8%2BIpYJIIRz2KXyNr5em5HE7\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e29d49d7eb33181-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":9636,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (9242)","md5":"ef56117d1bb5cc41aa6bd127a49c7640","sha1":"b9c2ed774177fc0fceba5cb58113024b23fe4fb7","sha256":"d151f8c0b2659cfb63704d68654ad8d9437ae9da4410536f63ddec21689a0620","sha512":"0ec9039dbb47470815ad8bf58fd206672717a146b3a99bcb12444687e8489698e06664e6c6cc38a5d2954fa919e5a6c3bc57e44f3be2655f92b801bac43ec763","ssdeep":"192:x9cCxjlRE8iST7TMcPvedRUtV7uLEUfHqo/gH5P5AxTov7fG3ex2NrMP:x9RjlRE8iSf4cPmgtV7uoOKIgxaxTovp","tlshash":"9f12e96831f3215780b7b1907cf7e38f73b2553c648798d1d0acd4692aacd7a2622f09","first_seen":"2023-08-09T05:33:46Z","last_seen":"2026-04-25T21:02:59.665937Z","times_seen":129152,"resource_available":true,"data":null}},"time_used":372,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":372,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-26","alert":"Sinkholed","trigger":"mdmacanada.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mdmacanada.cc/wp-content/uploads/2023/09/MDMA-CRYSTALS-REColored-4-300x300.png","fqdn":"mdmacanada.cc","domain":"mdmacanada.cc","tld":"cc"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://mdmacanada.cc/","date":"2026-03-26T23:10:45.380Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mdmacanada.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 29 Jan 2026 00:46:51 GMT","end":"Wed, 29 Apr 2026 01:45:19 GMT"},"fingerprint":{"sha1":"B7:47:48:08:4D:35:A4:0D:8D:CE:D7:71:A9:FA:22:B1:5B:A1:AC:40","sha256":"AE:86:CA:6D:76:85:1D:C6:34:96:AE:04:62:0C:A6:24:0A:DD:10:3E:9E:C3:97:21:29:1A:84:BA:B3:91:6A:6F"}}},"request":{"raw":"GET /wp-content/uploads/2023/09/MDMA-CRYSTALS-REColored-4-300x300.png HTTP/1.1\r\nHost: mdmacanada.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mdmacanada.cc/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 26 Mar 2026 23:10:45 GMT\r\ncontent-type: image/png\r\ncontent-length: 90048\r\ncache-control: public, max-age=604800\r\nexpires: Thu, 02 Apr 2026 23:10:45 GMT\r\nlast-modified: Sat, 25 May 2024 01:49:06 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nstrict-transport-security: max-age=63072000; includeSubDomains\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=RtAgQTWrThoJsGnjUArOkGNZXl%2BxvxHT1uANPmayyHnxKXpNO7zlqc%2FdVS0V3l%2BShEHf6o1jLaNxo8rtSzCOWilNWTFDTtlfKDCcSy0p64I1T2M2nrPTZnFHP%2B2lDFWD\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e29d49d8ec33181-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":90048,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 300 x 300, 8-bit/color RGB, non-interlaced","md5":"2973540ff844d3b093e80c3acd97d547","sha1":"8054b416dda63e1bab458d5fb0a1a2d565d8c4be","sha256":"46cf4ec5ad9cce3fae02278bfd470ff4ae855519cc44d104c0f6e40c1cf191ec","sha512":"f48fafb4cbef88e1ed88a3832fbaea4b4cb0e2dfad9012a44d43dea0c88bacc99abfec926d9c5ca6fc4c8b2a16bd009b6e5cd5a9976ce6578bcb386488db3501","ssdeep":"1536:t1YG/61W1JdlgMMxqG/rK9i7bgCKiznZ54OJJYgqDaz5GNTc9S/Pvi54Hd:Qt1ITgMMU4rKIbRKizX4ODYg334/i5id","tlshash":"3b930169e31188e532fb024baed03c5f5ce09d07b246bb8d95b564a43963e5a27f801f","first_seen":"2026-03-26T23:11:11.835712Z","last_seen":"2026-03-27T01:49:53.325504Z","times_seen":2,"resource_available":false,"data":null}},"time_used":650,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":480,"receive":170,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-26","alert":"Sinkholed","trigger":"mdmacanada.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mdmacanada.cc/wp-content/cache/debloat/js/2545442f1561769556e410b5df2fbdf5.js","fqdn":"mdmacanada.cc","domain":"mdmacanada.cc","tld":"cc"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://mdmacanada.cc/","date":"2026-03-26T23:10:45.405Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mdmacanada.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 29 Jan 2026 00:46:51 GMT","end":"Wed, 29 Apr 2026 01:45:19 GMT"},"fingerprint":{"sha1":"B7:47:48:08:4D:35:A4:0D:8D:CE:D7:71:A9:FA:22:B1:5B:A1:AC:40","sha256":"AE:86:CA:6D:76:85:1D:C6:34:96:AE:04:62:0C:A6:24:0A:DD:10:3E:9E:C3:97:21:29:1A:84:BA:B3:91:6A:6F"}}},"request":{"raw":"GET /wp-content/cache/debloat/js/2545442f1561769556e410b5df2fbdf5.js HTTP/1.1\r\nHost: mdmacanada.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mdmacanada.cc/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 26 Mar 2026 23:10:45 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 413\r\ncache-control: public, max-age=604800\r\nexpires: Thu, 02 Apr 2026 23:10:45 GMT\r\nlast-modified: Tue, 24 Sep 2024 16:51:00 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nstrict-transport-security: max-age=63072000; includeSubDomains\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=d2YV5TbFECNNnVGyHCpRlj0AMpoJ2JcQs2D%2FNEVFaHURvEsRb9RL7X4B3osx5mHp3acm7NIZbSQfT0GCzvnE1kdKsVKEFTfGtl%2B1voyYB%2FHj559epvo%2FVb5%2Bd1BcT54r\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e29d49dbf1d3181-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":1506,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (649)","md5":"7e3f80ea8102136b40dc7f8cce5e5777","sha1":"376d0ef3d51cce4da3a43634a0ad33779ed3146f","sha256":"eb423dbd2d4b71fbd8094591b0f47a5e8dc2202a2aed4bfa0fa7bb32b1ee5dfe","sha512":"6df8b5d97bb4d2207e17f5aa2fe1b35b0472387734d5c07f79c8676ca0baefb6c849a82ac0ec5476fd14855ce6f53c3101cde0c0636f0620c3ad5deef5c34f59","ssdeep":"","tlshash":"3931f7d8e135e6f6a1f63263949202c17ce63db947a60411a69f72601ee4ccd623f73b","first_seen":"2026-03-26T23:11:11.836781Z","last_seen":"2026-03-27T01:49:53.332747Z","times_seen":2,"resource_available":true,"data":null}},"time_used":384,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":384,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-26","alert":"Sinkholed","trigger":"mdmacanada.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"static-tracking.klaviyo.com/onsite/js/build-preview/commit-a9008e2652932ce924ec514ff7f88d1dd460ca1b/fender_analytics.e5aba8b3a52dc623782c.js?cb=2","fqdn":"static-tracking.klaviyo.com","domain":"klaviyo.com","tld":"com"},"ip":{"addr":"151.101.66.133","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://mdmacanada.cc/","date":"2026-03-26T23:10:45.757Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"static-tracking.klaviyo.com","organization":""},"issuer":{"commonName":"R12","organization":"Let's Encrypt"},"validity":{"start":"Tue, 10 Mar 2026 18:32:35 GMT","end":"Mon, 08 Jun 2026 18:32:34 GMT"},"fingerprint":{"sha1":"67:8B:C3:D0:ED:A5:30:2B:01:C2:00:BE:98:CB:EB:8B:10:29:07:77","sha256":"41:4B:FC:4B:5F:DF:5A:99:DF:7E:97:0B:FE:A9:EC:22:03:5C:8E:FC:FD:92:1D:47:5A:D8:78:1A:4A:13:F8:FB"}}},"request":{"raw":"GET /onsite/js/build-preview/commit-a9008e2652932ce924ec514ff7f88d1dd460ca1b/fender_analytics.e5aba8b3a52dc623782c.js?cb=2 HTTP/1.1\r\nHost: static-tracking.klaviyo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://mdmacanada.cc\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mdmacanada.cc/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nx-amz-id-2: yVrmnWttA1QdQ/nejLRC2kLHYsMXqwpjGEb7dm7/3AN1uxVfUujm7QEkbuuKzSlbUR0mT55SnghqdjdHLVP8nA==\r\nx-amz-request-id: FSG6AM3GR067EKFY\r\nlast-modified: Thu, 26 Mar 2026 15:02:59 GMT\r\netag: \"dfd2613aee0622f5f85f1c1d57683aad\"\r\nx-amz-server-side-encryption: AES256\r\nx-amz-meta-entrypoints-hash: \r\ncache-control: max-age=2592000,stale-while-revalidate=10800\r\nx-amz-meta-surrogate-control: max-age=31536000\r\nx-amz-meta-surrogate-key: fender-asset-build-preview\r\nx-amz-version-id: qST5b7PfS29ONY3SPuajxqr.fIoGJYiS\r\ncontent-type: text/javascript\r\nserver: AmazonS3\r\ncontent-encoding: br\r\nvia: 1.1 varnish, 1.1 varnish\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ndate: Thu, 26 Mar 2026 23:10:45 GMT\r\nage: 209\r\nx-served-by: cache-lga21927-LGA, cache-hel1410028-HEL\r\nx-cache: HIT, HIT\r\nx-cache-hits: 63, 53\r\nvary: Accept-Encoding\r\ncontent-length: 13312\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":38425,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (38425), with no line terminators","md5":"dfd2613aee0622f5f85f1c1d57683aad","sha1":"0f770c9d4b50bc1524c8be712bf52d18cc24b100","sha256":"28faf9ece2b0697c7dbbdc937bbe18d61e881d9d31ac57bff483783f3229cce1","sha512":"77cbb91e138f914c0ccc44430b651fc74046cfdddb261972aea4c000402efee536144115cd27daac8e9d65d092963f974dd5c8cb14ce1c0d04a3821547492485","ssdeep":"768:meKYdHHSjJmG36Gc9dtR3vrCraJ3+Wmi8vJYcSz3YfUeWYCLxCXGLurL3WeSXiIs:BK0HIcdz/OViI1C51ASXOrP","tlshash":"a003c787b1d1a435079620edf53b1949f23c1448b94880bcf678c8db2deda4a6267bbd","first_seen":"2025-12-04T20:56:43.543714Z","last_seen":"2026-04-19T18:06:53.197042Z","times_seen":14520,"resource_available":true,"data":null}},"time_used":259,"timings":{"blocked":115,"dns":37,"connect":30,"send":0,"wait":13,"receive":3,"ssl":55},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mdmacanada.cc/wp-includes/js/wp-emoji-release.min.js?ver=6.9.4","fqdn":"mdmacanada.cc","domain":"mdmacanada.cc","tld":"cc"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://mdmacanada.cc/","date":"2026-03-26T23:10:46.260Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mdmacanada.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 29 Jan 2026 00:46:51 GMT","end":"Wed, 29 Apr 2026 01:45:19 GMT"},"fingerprint":{"sha1":"B7:47:48:08:4D:35:A4:0D:8D:CE:D7:71:A9:FA:22:B1:5B:A1:AC:40","sha256":"AE:86:CA:6D:76:85:1D:C6:34:96:AE:04:62:0C:A6:24:0A:DD:10:3E:9E:C3:97:21:29:1A:84:BA:B3:91:6A:6F"}}},"request":{"raw":"GET /wp-includes/js/wp-emoji-release.min.js?ver=6.9.4 HTTP/1.1\r\nHost: mdmacanada.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mdmacanada.cc/\r\nCookie: wffn_flt=2026-3-26 23:10:45; wffn_timezone=UTC; wffn_is_mobile=false; wffn_browser=Firefox; wffn_referrer=; wffn_fl_url=/; sbjs_migrations=1418474375998%3D1; sbjs_current_add=fd%3D2026-03-26%2023%3A10%3A45%7C%7C%7Cep%3Dhttps%3A%2F%2Fmdmacanada.cc%2F%7C%7C%7Crf%3D%28none%29; sbjs_first_add=fd%3D2026-03-26%2023%3A10%3A45%7C%7C%7Cep%3Dhttps%3A%2F%2Fmdmacanada.cc%2F%7C%7C%7Crf%3D%28none%29; sbjs_current=typ%3Dtypein%7C%7C%7Csrc%3D%28direct%29%7C%7C%7Cmdm%3D%28none%29%7C%7C%7Ccmp%3D%28none%29%7C%7C%7Ccnt%3D%28none%29%7C%7C%7Ctrm%3D%28none%29%7C%7C%7Cid%3D%28none%29%7C%7C%7Cplt%3D%28none%29%7C%7C%7Cfmt%3D%28none%29%7C%7C%7Ctct%3D%28none%29; sbjs_first=typ%3Dtypein%7C%7C%7Csrc%3D%28direct%29%7C%7C%7Cmdm%3D%28none%29%7C%7C%7Ccmp%3D%28none%29%7C%7C%7Ccnt%3D%28none%29%7C%7C%7Ctrm%3D%28none%29%7C%7C%7Cid%3D%28none%29%7C%7C%7Cplt%3D%28none%29%7C%7C%7Cfmt%3D%28none%29%7C%7C%7Ctct%3D%28none%29; sbjs_udata=vst%3D1%7C%7C%7Cuip%3D%28none%29%7C%7C%7Cuag%3DMozilla%2F5.0%20%28Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0%29%20Gecko%2F20100101%20Firefox%2F134.0; sbjs_session=pgs%3D1%7C%7C%7Ccpg%3Dhttps%3A%2F%2Fmdmacanada.cc%2F; __kla_id=eyJjaWQiOiJOek5pTVRaaE1UQXRaakUxWXkwME5UaG1MVGt5WlRRdFpHVXpZelUwWmpFeU9HUm0ifQ==\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 26 Mar 2026 23:10:46 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 4949\r\ncache-control: public, max-age=604800\r\nexpires: Thu, 02 Apr 2026 23:10:46 GMT\r\nlast-modified: Wed, 03 Dec 2025 15:18:55 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nstrict-transport-security: max-age=63072000; includeSubDomains\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=y0zsxC6SuEmYmcwQc9Fu58rkSUS5CprRz3YGFysja90GyxV7tORobh5FrAu%2FvH2y8zHhIy5NyxG3JADXF42D%2BLCJCWoRxPVAhaZI53UObGWasgOxCNxua159jl6OC9%2F%2F\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e29d4a3192e3181-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":22762,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (19823)","md5":"f0cc9ba5cf46af0cd73d521803e3b07e","sha1":"7d2a74f87dc70a39eccce3bae1d4cc404cb134f4","sha256":"fd59b0ebf6282ed71647bf2f6e0d1925bbfd1f270865a832079ebb60259aabca","sha512":"7ec44f08676c195547a623504c7105ef3d0acea5839675599598043f3e0b5a3386452e3db6fbea90722f7be9e6effdae1b89c49e2b05b22b8c415616e07d471d","ssdeep":"384:WzevzApRZTbXU/3o//bEPhXgA5POkpJTX:Wsk9XU/3o//YpXgAs+hX","tlshash":"7fa2959ba33a4e8f343e3bd78d968f4dc9da555321c0e079dbefb6c169a00568274c80","first_seen":"2025-11-10T19:52:32.864936Z","last_seen":"2026-04-25T21:03:07.677556Z","times_seen":165089,"resource_available":true,"data":null}},"time_used":355,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":355,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-26","alert":"Sinkholed","trigger":"mdmacanada.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"lh3.googleusercontent.com/a/ACg8ocKx8_6X_J2XzcFE401FPMwecd0Yiw5uj-Pctc7Eeag50QZkww=w40-h40-c","fqdn":"lh3.googleusercontent.com","domain":"googleusercontent.com","tld":"com"},"ip":{"addr":"142.250.178.65","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://mdmacanada.cc/","date":"2026-03-26T23:10:46.817Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.googleusercontent.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 09 Mar 2026 08:37:42 GMT","end":"Mon, 01 Jun 2026 08:37:41 GMT"},"fingerprint":{"sha1":"7D:11:01:3C:E2:AD:83:07:6F:B1:C5:93:97:85:83:87:0B:36:4F:19","sha256":"A8:96:42:48:48:E2:29:05:5F:B7:D4:6E:C9:A5:58:AD:06:3A:D9:3C:32:B6:20:31:AC:35:DA:1C:C1:7E:A8:2F"}}},"request":{"raw":"GET /a/ACg8ocKx8_6X_J2XzcFE401FPMwecd0Yiw5uj-Pctc7Eeag50QZkww=w40-h40-c HTTP/1.1\r\nHost: lh3.googleusercontent.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mdmacanada.cc/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/png\r\nvary: Origin\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\naccess-control-expose-headers: Content-Length\r\netag: \"v0\"\r\nexpires: Fri, 27 Mar 2026 23:10:47 GMT\r\ncache-control: public, max-age=86400, no-transform\r\ncontent-disposition: inline;filename=\"unnamed.png\"\r\nx-content-type-options: nosniff\r\ndate: Thu, 26 Mar 2026 23:10:47 GMT\r\nserver: fife\r\ncontent-length: 441\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":441,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 40 x 40, 8-bit/color RGB, non-interlaced","md5":"3772f22d9ea3e50bfb693b93bb35c4bc","sha1":"ec95d45dc339d96a16085f2c5b5464a5f477b388","sha256":"da28758e06b7a54bf7ceea2f0b859a6edc7175f0b3fd4dcbfff831455a2162f6","sha512":"5676615076f8d4da688e34ea444579bd27b142733c4ca510dcc97126e6ae680472797c87649bde4d120aa944bda1b6d92a4a2dff2196770d4681eb924f79d75c","ssdeep":"","tlshash":"a9f023933f118c67dae4e072171a10a5ed617332e846c69e0704ec18628c4dbadd5732","first_seen":"2026-03-26T23:11:11.838991Z","last_seen":"2026-03-27T01:49:53.351202Z","times_seen":2,"resource_available":false,"data":null}},"time_used":403,"timings":{"blocked":132,"dns":46,"connect":28,"send":0,"wait":93,"receive":0,"ssl":102},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-M9BQL00QVP","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.251.143.136","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://mdmacanada.cc/","date":"2026-03-26T23:10:47.267Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 23 Feb 2026 18:19:44 GMT","end":"Mon, 18 May 2026 18:19:43 GMT"},"fingerprint":{"sha1":"5D:21:36:26:B5:1D:67:14:0D:6A:68:D3:7C:EB:39:6E:A1:45:8C:29","sha256":"BC:A5:DD:5A:08:3A:33:49:76:BB:EB:18:9C:45:17:80:A1:3E:31:5F:BA:F9:93:28:C7:76:A0:97:FF:E9:3F:1C"}}},"request":{"raw":"GET /gtag/js?id=G-M9BQL00QVP HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mdmacanada.cc/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Thu, 26 Mar 2026 23:10:47 GMT\r\nexpires: Thu, 26 Mar 2026 23:10:47 GMT\r\ncache-control: private, max-age=900\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\nserver: Google Tag Manager\r\ncontent-length: 154441\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":465034,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (6031)","md5":"0a6e95cafb03f51d23561940d1a067f6","sha1":"0d9143e52edbefcb4719468a0c6bc0c8f190ab12","sha256":"4e54e8cf1aada9b28badca1264188650d1f2463092a865f5e1e34308bdd5cedb","sha512":"cd68ca7aaa5b15502fb676ae4b556a11e81c17a3397bbf35e4d0cbfca6e985c6b00d8e9199052b7d6c60e7c6e361383f5a451e55ae57fa641f168085dded1215","ssdeep":"6144:LCORjaFCE9VJlQGXHIzs8WVP1W+rwkQdqQtYTc0HdZgQ0:8CEfJlbIY8CmOp0","tlshash":"1aa409ceb3d674625296e478903f01cba57b29e2b44cc8a5f189cce42e7465a4277f3c","first_seen":"2026-03-26T23:11:11.825745Z","last_seen":"2026-03-26T23:11:11.825745Z","times_seen":1,"resource_available":true,"data":null}},"time_used":84,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":34,"receive":50,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mdmacanada.cc/wp-content/cache/debloat/js/491679f822f0e064ead7fb5927c1b59a.js","fqdn":"mdmacanada.cc","domain":"mdmacanada.cc","tld":"cc"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://mdmacanada.cc/","date":"2026-03-26T23:10:45.417Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mdmacanada.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 29 Jan 2026 00:46:51 GMT","end":"Wed, 29 Apr 2026 01:45:19 GMT"},"fingerprint":{"sha1":"B7:47:48:08:4D:35:A4:0D:8D:CE:D7:71:A9:FA:22:B1:5B:A1:AC:40","sha256":"AE:86:CA:6D:76:85:1D:C6:34:96:AE:04:62:0C:A6:24:0A:DD:10:3E:9E:C3:97:21:29:1A:84:BA:B3:91:6A:6F"}}},"request":{"raw":"GET /wp-content/cache/debloat/js/491679f822f0e064ead7fb5927c1b59a.js HTTP/1.1\r\nHost: mdmacanada.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mdmacanada.cc/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 26 Mar 2026 23:10:45 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 2119\r\ncache-control: public, max-age=604800\r\nexpires: Thu, 02 Apr 2026 23:10:45 GMT\r\nlast-modified: Wed, 03 Dec 2025 15:26:44 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nstrict-transport-security: max-age=63072000; includeSubDomains\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vvzD0J5n%2BqbC61R%2BDNmHgKEW%2FpdpRdfJMCpsNbifGB31sj%2Few15eD%2BdkKk0vUB%2FkBk9uGXQOi4ABY%2Bta1LWxzxdB1IqyIm5R0fxWVMXw5cq3GaGh45tj6K831EW%2BOtYD\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e29d49dbf2d3181-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5314,"size_decoded":0,"mime_type":"application/javascript","magic":"data","md5":"3a5838d1182eb0b11f5a58bfe26e2529","sha1":"920b2291e65d62eb55c1958911768540abaff5cf","sha256":"d4efe709c65438ae90dff385486421fea45762880f21fc4e0dca3fa96210f428","sha512":"bc41d50cd2e5c17c75ba737c303f2f498cc94e2c3fe402b2f15c5f10531e53633598093da98579b2dee65733dce0f763d77380ae35a9591d8bf91f975b7c6845","ssdeep":"96:L9emIWL7lnv93ssmAeGejQVnmggoC7arVCG0GXF730IQRDdlZq+SxSD3LmD:8mIWZVszMuinmg3rQ8Xd30DDdlZq+Sx3","tlshash":"2bb157dcb9d57022235121a0597fb409f3357d6470ebb8006ba9c4a47eb15cfb1a2fad","first_seen":"2025-10-27T08:47:54.280246Z","last_seen":"2026-04-25T21:03:07.701827Z","times_seen":132653,"resource_available":true,"data":null}},"time_used":379,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":379,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-26","alert":"Sinkholed","trigger":"mdmacanada.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mdmacanada.cc/wp-content/cache/debloat/js/1e0055703ac9bbf762fdc8b4c370eb06.js","fqdn":"mdmacanada.cc","domain":"mdmacanada.cc","tld":"cc"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://mdmacanada.cc/","date":"2026-03-26T23:10:45.419Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mdmacanada.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 29 Jan 2026 00:46:51 GMT","end":"Wed, 29 Apr 2026 01:45:19 GMT"},"fingerprint":{"sha1":"B7:47:48:08:4D:35:A4:0D:8D:CE:D7:71:A9:FA:22:B1:5B:A1:AC:40","sha256":"AE:86:CA:6D:76:85:1D:C6:34:96:AE:04:62:0C:A6:24:0A:DD:10:3E:9E:C3:97:21:29:1A:84:BA:B3:91:6A:6F"}}},"request":{"raw":"GET /wp-content/cache/debloat/js/1e0055703ac9bbf762fdc8b4c370eb06.js HTTP/1.1\r\nHost: mdmacanada.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mdmacanada.cc/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 26 Mar 2026 23:10:45 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 1332\r\ncache-control: public, max-age=604800\r\nexpires: Thu, 02 Apr 2026 23:10:45 GMT\r\nlast-modified: Fri, 13 Mar 2026 11:37:08 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nstrict-transport-security: max-age=63072000; includeSubDomains\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7wevrTWviEzJKSKjiNoJz0wa57FUjVUwgJn5%2BqKppSYk0V9P8xp0832cGWoe4fNNwoOaiHk1pqzyNjtLCyBeq5b%2BNIOfrmDlmP9eqIXxsssM0i2Ltzi0hQ%2BL%2B%2B0bmVq8\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e29d49dcf313181-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4131,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (4131), with no line terminators","md5":"abf4bb282c65836335fa88b6a680fb5c","sha1":"4ff37875342f9e9ab85cc6284fd5acfc06df7d18","sha256":"a41ecabfaa5a628b26a98234caa818e4d68e3edf6c48cee40b2a6f4c4fcafaba","sha512":"98a8eff66d0687b1032168ed55e3bb451fad16f1317da18768311c1058b8d8cb67fd827810298a70a831ec9d73d308d7133e2d21d022e46356d1295f8f645874","ssdeep":"48:0ncEupIbXbi5okOBRQJ8H6xJsnDpr6r75eGSqlw4Sd+uOujoKsPPF3cLR8p2o:0cEQw26a8EJWrO75ekw4klctsd85","tlshash":"0a81872774216d7322eb75ba2c9fe98014331639a8414501b50acf6c2b7e8ca7637f3e","first_seen":"2025-07-14T18:47:47.063472Z","last_seen":"2026-04-25T19:57:51.408176Z","times_seen":30357,"resource_available":true,"data":null}},"time_used":386,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":386,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-26","alert":"Sinkholed","trigger":"mdmacanada.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mdmacanada.cc/wp-content/uploads/2023/09/MDMA-CRYSTALS-REColored-7-300x300.png","fqdn":"mdmacanada.cc","domain":"mdmacanada.cc","tld":"cc"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://mdmacanada.cc/","date":"2026-03-26T23:10:45.512Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mdmacanada.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 29 Jan 2026 00:46:51 GMT","end":"Wed, 29 Apr 2026 01:45:19 GMT"},"fingerprint":{"sha1":"B7:47:48:08:4D:35:A4:0D:8D:CE:D7:71:A9:FA:22:B1:5B:A1:AC:40","sha256":"AE:86:CA:6D:76:85:1D:C6:34:96:AE:04:62:0C:A6:24:0A:DD:10:3E:9E:C3:97:21:29:1A:84:BA:B3:91:6A:6F"}}},"request":{"raw":"GET /wp-content/uploads/2023/09/MDMA-CRYSTALS-REColored-7-300x300.png HTTP/1.1\r\nHost: mdmacanada.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mdmacanada.cc/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 26 Mar 2026 23:10:45 GMT\r\ncontent-type: image/png\r\ncontent-length: 62156\r\ncache-control: public, max-age=604800\r\nexpires: Thu, 02 Apr 2026 23:10:45 GMT\r\nlast-modified: Sat, 25 May 2024 01:49:06 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nstrict-transport-security: max-age=63072000; includeSubDomains\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=rXdwvWgD%2BpyGFRr%2FiDZQu%2FxYbZRozL8ZmR5o2lNZx%2BTERoYC5NOuqPDz3%2B1CHI25YsivyxnSXkOJaA0geOwHq9hcQ4h8SqDzDlaUXZeCA0u%2BKmbRiPa7A8wDRE2SJ6fV\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e29d49e68633181-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":62156,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 300 x 300, 8-bit/color RGB, non-interlaced","md5":"98058d7a9368b024e07318bfb46f5520","sha1":"5972fdd362238af0c075cbf9d06d79276224ad07","sha256":"6df94ebe524e2b38f8447b74fd1f7da0b2f0591e6dbda367d783bde58bad64d9","sha512":"06be9ad82a08cdd29127e75a319daaaeb5b13e5f52dd2b7389674d80711ec0098258ffd1400ac81d02b46e62cdae2b6739b7d9028a7d23672cd2f33409986a9d","ssdeep":"1536:Ev+Wy7a0cN68ZtlGwX8fU2m6ts2t+pfh1:Eby7FcMMMdtL81","tlshash":"4e53025b6b4ee811182d3877dce2ed034ae4409795d856366abed0710b604f93fb85fc","first_seen":"2026-03-26T23:11:11.841379Z","last_seen":"2026-03-27T01:49:53.349419Z","times_seen":2,"resource_available":false,"data":null}},"time_used":572,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":450,"receive":122,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-26","alert":"Sinkholed","trigger":"mdmacanada.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"static.klaviyo.com/onsite/js/build-preview/commit-a9008e2652932ce924ec514ff7f88d1dd460ca1b/sharedUtils.759bb25d37e06b71196b.js?cb=2","fqdn":"static.klaviyo.com","domain":"klaviyo.com","tld":"com"},"ip":{"addr":"151.101.2.133","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://mdmacanada.cc/","date":"2026-03-26T23:10:45.764Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"static.klaviyo.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 02 Mar 2026 22:32:36 GMT","end":"Sun, 31 May 2026 22:32:35 GMT"},"fingerprint":{"sha1":"36:11:62:1C:62:9E:7B:97:05:37:F9:A2:98:8F:68:41:2E:6B:D7:B5","sha256":"05:31:1A:E8:28:B5:E9:56:9C:39:CF:3B:A4:17:62:2A:BD:15:10:60:75:8E:D0:BA:D6:B8:02:1F:E1:A0:20:F8"}}},"request":{"raw":"GET /onsite/js/build-preview/commit-a9008e2652932ce924ec514ff7f88d1dd460ca1b/sharedUtils.759bb25d37e06b71196b.js?cb=2 HTTP/1.1\r\nHost: static.klaviyo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://mdmacanada.cc\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mdmacanada.cc/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nx-amz-id-2: kcIUQWRvwoK4C3YxLB4YolRGSEi/LVwmn0re0Xs8RIYh5827WMlvoADysx1Sgsq3t5kYKWxM8uhInMBpwMd00aYV9SBfWFAX\r\nx-amz-request-id: FSGF37D8ABKB0J56\r\nlast-modified: Thu, 26 Mar 2026 15:02:59 GMT\r\netag: \"e6add62c63d252f8c87fff507a8eb0d0\"\r\nx-amz-server-side-encryption: AES256\r\nx-amz-meta-entrypoints-hash: \r\ncache-control: max-age=2592000,stale-while-revalidate=10800\r\nx-amz-meta-surrogate-control: max-age=31536000\r\nx-amz-meta-surrogate-key: fender-asset-build-preview\r\nx-amz-version-id: _yZgozlf_Nc_ZomNpFEmWBxYm7E1TNlv\r\ncontent-type: text/javascript\r\nserver: AmazonS3\r\ncontent-encoding: br\r\nvia: 1.1 varnish, 1.1 varnish\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ndate: Thu, 26 Mar 2026 23:10:45 GMT\r\nage: 210\r\nx-served-by: cache-lga21958-LGA, cache-hel1410029-HEL\r\nx-cache: HIT, HIT\r\nx-cache-hits: 68, 46\r\nvary: Accept-Encoding\r\ncontent-length: 22727\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":67133,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (65535), with no line terminators","md5":"e6add62c63d252f8c87fff507a8eb0d0","sha1":"74c1c5ec10ec66c4fce37911dee5d1eb9209de11","sha256":"7bc1f831a4ea4be20d54d8908f54518d8977a184d0f21ae93ce8aa999294b43e","sha512":"51f9169cc20d755034bac39c43ac5d54bee0668e08f99e67345b9847a76a671c25bc475d84817bbeb1084c840510b20b0bbd444c04aa147d21952459f8145562","ssdeep":"768:0hDq/UA2+Ofvr055DQY26YCv28hDVqsUuOqGQiVhUCHrj8kRMijbg2BXofUq6aMR:jArB6vcX3jW6fkKpE7h4QdSgg","tlshash":"4663b68dfec1b0a10773a566d27f941ab2ba1a55b40f88d0d16fc0d1ac7898f9133e6d","first_seen":"2026-03-26T15:38:39.542495Z","last_seen":"2026-03-27T15:24:05.232834Z","times_seen":273,"resource_available":true,"data":null}},"time_used":190,"timings":{"blocked":78,"dns":1,"connect":30,"send":0,"wait":13,"receive":4,"ssl":58},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mdmacanada.cc/wp-content/themes/flatsome/assets/js/chunk.slider.js?ver=3.18.7","fqdn":"mdmacanada.cc","domain":"mdmacanada.cc","tld":"cc"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://mdmacanada.cc/","date":"2026-03-26T23:10:47.281Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mdmacanada.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 29 Jan 2026 00:46:51 GMT","end":"Wed, 29 Apr 2026 01:45:19 GMT"},"fingerprint":{"sha1":"B7:47:48:08:4D:35:A4:0D:8D:CE:D7:71:A9:FA:22:B1:5B:A1:AC:40","sha256":"AE:86:CA:6D:76:85:1D:C6:34:96:AE:04:62:0C:A6:24:0A:DD:10:3E:9E:C3:97:21:29:1A:84:BA:B3:91:6A:6F"}}},"request":{"raw":"GET /wp-content/themes/flatsome/assets/js/chunk.slider.js?ver=3.18.7 HTTP/1.1\r\nHost: mdmacanada.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mdmacanada.cc/\r\nCookie: wffn_flt=2026-3-26 23:10:45; wffn_timezone=UTC; wffn_is_mobile=false; wffn_browser=Firefox; wffn_referrer=; wffn_fl_url=/; sbjs_migrations=1418474375998%3D1; sbjs_current_add=fd%3D2026-03-26%2023%3A10%3A45%7C%7C%7Cep%3Dhttps%3A%2F%2Fmdmacanada.cc%2F%7C%7C%7Crf%3D%28none%29; sbjs_first_add=fd%3D2026-03-26%2023%3A10%3A45%7C%7C%7Cep%3Dhttps%3A%2F%2Fmdmacanada.cc%2F%7C%7C%7Crf%3D%28none%29; sbjs_current=typ%3Dtypein%7C%7C%7Csrc%3D%28direct%29%7C%7C%7Cmdm%3D%28none%29%7C%7C%7Ccmp%3D%28none%29%7C%7C%7Ccnt%3D%28none%29%7C%7C%7Ctrm%3D%28none%29%7C%7C%7Cid%3D%28none%29%7C%7C%7Cplt%3D%28none%29%7C%7C%7Cfmt%3D%28none%29%7C%7C%7Ctct%3D%28none%29; sbjs_first=typ%3Dtypein%7C%7C%7Csrc%3D%28direct%29%7C%7C%7Cmdm%3D%28none%29%7C%7C%7Ccmp%3D%28none%29%7C%7C%7Ccnt%3D%28none%29%7C%7C%7Ctrm%3D%28none%29%7C%7C%7Cid%3D%28none%29%7C%7C%7Cplt%3D%28none%29%7C%7C%7Cfmt%3D%28none%29%7C%7C%7Ctct%3D%28none%29; sbjs_udata=vst%3D1%7C%7C%7Cuip%3D%28none%29%7C%7C%7Cuag%3DMozilla%2F5.0%20%28Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0%29%20Gecko%2F20100101%20Firefox%2F134.0; sbjs_session=pgs%3D1%7C%7C%7Ccpg%3Dhttps%3A%2F%2Fmdmacanada.cc%2F; __kla_id=eyJjaWQiOiJOek5pTVRaaE1UQXRaakUxWXkwME5UaG1MVGt5WlRRdFpHVXpZelUwWmpFeU9HUm0ifQ==\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 26 Mar 2026 23:10:47 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 12985\r\ncache-control: public, max-age=604800\r\nexpires: Thu, 02 Apr 2026 23:10:47 GMT\r\nlast-modified: Sat, 25 May 2024 01:48:56 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nstrict-transport-security: max-age=63072000; includeSubDomains\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2F%2FzHOa1SEUYdxWKmJJvdR0r7z9Ny%2BAH83CAgM1ROC31iYdDHdWBZqbfP%2FFDgRNsW0jfkTFliZZ2oStFW7BCiLQb7cYEgQe7m5WoRw8H4BHKV3YaJSLIlij2su3H6HfZQ\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e29d4a97d253181-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":49913,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (49913), with no line terminators","md5":"dc5736a54ea2f7d768700c849aeb2b3f","sha1":"4c80335a09ea5134f7a0922b58c56a00a8d0db0d","sha256":"bec887feaec684bbc55998c457617df16605234f032386cd8068ad2dc8964a5c","sha512":"ece72dc5ec85a9e219c882d10411d848a2934b4f4d2fe6143cec5e349b5d4dc0b459e04563b44be0cad18092126729a4e47eaa2ca919d0a3f5433f4705d66e94","ssdeep":"1536:X/0mlwxaL/hxVzKXUlTAvw3J12/tqD18+AcJQVlxdz9+rdK0:Mmlz3JZt6w","tlshash":"cf23635eb241363941cff1a7622f464ea273206d140180acf8a9ecd65db9c8d743bf79","first_seen":"2023-05-02T08:02:19Z","last_seen":"2026-04-25T19:17:03.427683Z","times_seen":15137,"resource_available":true,"data":null}},"time_used":439,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":438,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-26","alert":"Sinkholed","trigger":"mdmacanada.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mdmacanada.cc/wp-content/themes/flatsome/assets/js/woocommerce.js?ver=49415fe6a9266f32f1f2","fqdn":"mdmacanada.cc","domain":"mdmacanada.cc","tld":"cc"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://mdmacanada.cc/","date":"2026-03-26T23:10:47.284Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mdmacanada.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 29 Jan 2026 00:46:51 GMT","end":"Wed, 29 Apr 2026 01:45:19 GMT"},"fingerprint":{"sha1":"B7:47:48:08:4D:35:A4:0D:8D:CE:D7:71:A9:FA:22:B1:5B:A1:AC:40","sha256":"AE:86:CA:6D:76:85:1D:C6:34:96:AE:04:62:0C:A6:24:0A:DD:10:3E:9E:C3:97:21:29:1A:84:BA:B3:91:6A:6F"}}},"request":{"raw":"GET /wp-content/themes/flatsome/assets/js/woocommerce.js?ver=49415fe6a9266f32f1f2 HTTP/1.1\r\nHost: mdmacanada.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mdmacanada.cc/\r\nCookie: wffn_flt=2026-3-26 23:10:45; wffn_timezone=UTC; wffn_is_mobile=false; wffn_browser=Firefox; wffn_referrer=; wffn_fl_url=/; sbjs_migrations=1418474375998%3D1; sbjs_current_add=fd%3D2026-03-26%2023%3A10%3A45%7C%7C%7Cep%3Dhttps%3A%2F%2Fmdmacanada.cc%2F%7C%7C%7Crf%3D%28none%29; sbjs_first_add=fd%3D2026-03-26%2023%3A10%3A45%7C%7C%7Cep%3Dhttps%3A%2F%2Fmdmacanada.cc%2F%7C%7C%7Crf%3D%28none%29; sbjs_current=typ%3Dtypein%7C%7C%7Csrc%3D%28direct%29%7C%7C%7Cmdm%3D%28none%29%7C%7C%7Ccmp%3D%28none%29%7C%7C%7Ccnt%3D%28none%29%7C%7C%7Ctrm%3D%28none%29%7C%7C%7Cid%3D%28none%29%7C%7C%7Cplt%3D%28none%29%7C%7C%7Cfmt%3D%28none%29%7C%7C%7Ctct%3D%28none%29; sbjs_first=typ%3Dtypein%7C%7C%7Csrc%3D%28direct%29%7C%7C%7Cmdm%3D%28none%29%7C%7C%7Ccmp%3D%28none%29%7C%7C%7Ccnt%3D%28none%29%7C%7C%7Ctrm%3D%28none%29%7C%7C%7Cid%3D%28none%29%7C%7C%7Cplt%3D%28none%29%7C%7C%7Cfmt%3D%28none%29%7C%7C%7Ctct%3D%28none%29; sbjs_udata=vst%3D1%7C%7C%7Cuip%3D%28none%29%7C%7C%7Cuag%3DMozilla%2F5.0%20%28Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0%29%20Gecko%2F20100101%20Firefox%2F134.0; sbjs_session=pgs%3D1%7C%7C%7Ccpg%3Dhttps%3A%2F%2Fmdmacanada.cc%2F; __kla_id=eyJjaWQiOiJOek5pTVRaaE1UQXRaakUxWXkwME5UaG1MVGt5WlRRdFpHVXpZelUwWmpFeU9HUm0ifQ==\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 26 Mar 2026 23:10:47 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 7093\r\ncache-control: public, max-age=604800\r\nexpires: Thu, 02 Apr 2026 23:10:47 GMT\r\nlast-modified: Sat, 25 May 2024 01:48:56 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nstrict-transport-security: max-age=63072000; includeSubDomains\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=leKbx7o41SoZhVe%2F%2Bax8C%2FUTDHkzwoZ6wYKAA4dy2lMZZGa9LQgAR8dCVBS0R1AZ9QIun1OgT2q5iLu1TznD2usMecwzXGPJrzpvUKTTbOLXXmRFuQM8%2Bqz55%2BR04V9N\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e29d4a97d2d3181-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":21855,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (21855), with no line terminators","md5":"80785ca1336add97de70eb47237201e9","sha1":"b4e353eaee00046f3da067be1d8120c0cedb0a29","sha256":"3b51cad83cb9da92cacdddcbf103f93d6021b9cd5799c928408fe770f2c2ac50","sha512":"9c9fd8d004c8cdf153d8dcfaf38a7d2a0ff3ed50189041167aec5c39b3adae9f5b8cd67cc0c58fa3e4d5c6a74a800fea540a56bd761fb33e0880c39ec2cad3c2","ssdeep":"384:s1ntfI5Ix+a1Yz00oz/mHY4gRbBNScnObZGNOj6osVB7hzqyy61RFfvz+WWxQcI8:WntfI5Ix+a1Yw0oz/GgRbBNScObZGIjx","tlshash":"68a2a32af37470ad41ba60b5b83b53a4727730797507809cb12a98d66c2ad5e2133f7e","first_seen":"2024-01-21T11:14:44Z","last_seen":"2026-04-25T15:55:07.471595Z","times_seen":596,"resource_available":true,"data":null}},"time_used":355,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":355,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-26","alert":"Sinkholed","trigger":"mdmacanada.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mdmacanada.cc/wp-content/themes/flatsome/assets/css/extensions/flatsome-swatches-frontend.css?ver=3.18.7","fqdn":"mdmacanada.cc","domain":"mdmacanada.cc","tld":"cc"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://mdmacanada.cc/","date":"2026-03-26T23:10:47.625Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mdmacanada.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 29 Jan 2026 00:46:51 GMT","end":"Wed, 29 Apr 2026 01:45:19 GMT"},"fingerprint":{"sha1":"B7:47:48:08:4D:35:A4:0D:8D:CE:D7:71:A9:FA:22:B1:5B:A1:AC:40","sha256":"AE:86:CA:6D:76:85:1D:C6:34:96:AE:04:62:0C:A6:24:0A:DD:10:3E:9E:C3:97:21:29:1A:84:BA:B3:91:6A:6F"}}},"request":{"raw":"GET /wp-content/themes/flatsome/assets/css/extensions/flatsome-swatches-frontend.css?ver=3.18.7 HTTP/1.1\r\nHost: mdmacanada.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mdmacanada.cc/\r\nCookie: wffn_flt=2026-3-26 23:10:45; wffn_timezone=UTC; wffn_is_mobile=false; wffn_browser=Firefox; wffn_referrer=; wffn_fl_url=/; sbjs_migrations=1418474375998%3D1; sbjs_current_add=fd%3D2026-03-26%2023%3A10%3A45%7C%7C%7Cep%3Dhttps%3A%2F%2Fmdmacanada.cc%2F%7C%7C%7Crf%3D%28none%29; sbjs_first_add=fd%3D2026-03-26%2023%3A10%3A45%7C%7C%7Cep%3Dhttps%3A%2F%2Fmdmacanada.cc%2F%7C%7C%7Crf%3D%28none%29; sbjs_current=typ%3Dtypein%7C%7C%7Csrc%3D%28direct%29%7C%7C%7Cmdm%3D%28none%29%7C%7C%7Ccmp%3D%28none%29%7C%7C%7Ccnt%3D%28none%29%7C%7C%7Ctrm%3D%28none%29%7C%7C%7Cid%3D%28none%29%7C%7C%7Cplt%3D%28none%29%7C%7C%7Cfmt%3D%28none%29%7C%7C%7Ctct%3D%28none%29; sbjs_first=typ%3Dtypein%7C%7C%7Csrc%3D%28direct%29%7C%7C%7Cmdm%3D%28none%29%7C%7C%7Ccmp%3D%28none%29%7C%7C%7Ccnt%3D%28none%29%7C%7C%7Ctrm%3D%28none%29%7C%7C%7Cid%3D%28none%29%7C%7C%7Cplt%3D%28none%29%7C%7C%7Cfmt%3D%28none%29%7C%7C%7Ctct%3D%28none%29; sbjs_udata=vst%3D1%7C%7C%7Cuip%3D%28none%29%7C%7C%7Cuag%3DMozilla%2F5.0%20%28Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0%29%20Gecko%2F20100101%20Firefox%2F134.0; sbjs_session=pgs%3D1%7C%7C%7Ccpg%3Dhttps%3A%2F%2Fmdmacanada.cc%2F; __kla_id=eyJjaWQiOiJOek5pTVRaaE1UQXRaakUxWXkwME5UaG1MVGt5WlRRdFpHVXpZelUwWmpFeU9HUm0ifQ==; fkcart_cart_qty=0; fkcart_cart_total=%3Cspan%20class%3D%22woocommerce-Price-amount%20amount%22%3E%3Cbdi%3E%3Cspan%20class%3D%22woocommerce-Price-currencySymbol%22%3E%26%2336%3B%3C%2Fspan%3E0.00%3C%2Fbdi%3E%3C%2Fspan%3E\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 26 Mar 2026 23:10:47 GMT\r\ncontent-type: text/css\r\ncontent-length: 988\r\ncache-control: public, max-age=604800\r\nexpires: Thu, 02 Apr 2026 23:10:47 GMT\r\nlast-modified: Sat, 25 May 2024 01:48:56 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nstrict-transport-security: max-age=63072000; includeSubDomains\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=V5NVPA%2Bf4UgRdXA0UVrT6uQJY44xG2%2BaZBmmWecKIiiXZPeMtcbUUflA3IrJgSHPqo0ILZZ6pEgqpxvns%2FV%2FwifPi5quVnqrtufa41JD2azwhgRaGyZmvlPPHPuGcFzY\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e29d4aba90d3181-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":4256,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (4253)","md5":"e5ace49c53a7f90f70204b4e4fc1601b","sha1":"feeb79ff5f4c2a9b367fb011ca9d13afd670d163","sha256":"1c237a5c836e945e5962bcf1f68fba80c726d456f03db59038c91351093b6166","sha512":"cd3897a5b8be3849166d98d59b1dfab534aa97019d4544a9c64ecae65453d31b0da2b8c0c42581cf33432d906a9a204f2dcac7939f5d3da7a9a38a24e40c701b","ssdeep":"96:Jr0hiwlifp74rZ3ORBwPwqwLw+ds2rWAAt00JzGtX1X:Chhifp74r1QZ0s5","tlshash":"2091877197496babfc12e8e9755a7ebf607794f0ae0207ada407e511c2caef6071c310","first_seen":"2023-06-19T09:44:23Z","last_seen":"2026-04-20T22:29:00.7976Z","times_seen":49,"resource_available":false,"data":null}},"time_used":358,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":357,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-26","alert":"Sinkholed","trigger":"mdmacanada.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"embed.tawk.to/_s/v4/app/69967ba6a3b/languages/en.json","fqdn":"embed.tawk.to","domain":"tawk.to","tld":"to"},"ip":{"addr":"172.66.161.212","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://mdmacanada.cc/","date":"2026-03-26T23:10:48.042Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"tawk.to","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 06 Mar 2026 09:33:33 GMT","end":"Thu, 04 Jun 2026 10:33:27 GMT"},"fingerprint":{"sha1":"F0:6C:DC:32:63:CD:34:E3:15:CD:7F:77:F5:A3:64:E0:9B:36:95:83","sha256":"B6:7F:6E:A3:69:3E:0D:3B:04:3E:8B:65:86:7E:1D:5F:82:84:18:16:8D:AD:72:D5:51:E3:46:BC:BD:CD:BC:38"}}},"request":{"raw":"GET /_s/v4/app/69967ba6a3b/languages/en.json HTTP/1.1\r\nHost: embed.tawk.to\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://mdmacanada.cc/\r\nOrigin: https://mdmacanada.cc\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: cloudflare\r\ndate: Thu, 26 Mar 2026 23:10:48 GMT\r\ncontent-type: application/json\r\nlast-modified: Thu, 19 Feb 2026 02:56:35 GMT\r\netag: W/\"4662c7c182dfe30065936bfa05f8c773\"\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=2592000, immutable\r\nx-cache-status: HIT\r\ncontent-encoding: gzip\r\nstrict-transport-security: max-age=0; includeSubDomains; preload\r\nvary: accept-encoding\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nx-content-type-options: nosniff\r\ncf-ray: 9e29d4ae4b73c272-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":11595,"size_decoded":0,"mime_type":"application/json","magic":"JSON text data","md5":"4662c7c182dfe30065936bfa05f8c773","sha1":"d1f155c335c31be5947ef8ebf82be1eee2782fc2","sha256":"2d2d85dfc80ec4f42d12bea574d59879d269b5c06557cf888367fbfa9036fe47","sha512":"abd2530371ef02602814b0bed360225c0530615c5db002d61511bca5e8cda0d8da2bd288631ee02da5fbf952b31bd4380284dcd56838277b52654f7d13dc6229","ssdeep":"192:wmr65/bLHzPrquLUVid+BCzfF+npqpe9svKGC6KEt1aZwf1E:fCbLHzxUVid+BEfF+np59L3Zwfi","tlshash":"ed323169ce504ea702d29646399f35437624829b1f54342eb78c91ac0f8ec6fa1f77ce","first_seen":"2025-06-18T04:11:24.033166Z","last_seen":"2026-04-25T21:03:03.482721Z","times_seen":46302,"resource_available":false,"data":null}},"time_used":151,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":150,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mdmacanada.cc/cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js","fqdn":"mdmacanada.cc","domain":"mdmacanada.cc","tld":"cc"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://mdmacanada.cc/","date":"2026-03-26T23:10:45.402Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mdmacanada.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 29 Jan 2026 00:46:51 GMT","end":"Wed, 29 Apr 2026 01:45:19 GMT"},"fingerprint":{"sha1":"B7:47:48:08:4D:35:A4:0D:8D:CE:D7:71:A9:FA:22:B1:5B:A1:AC:40","sha256":"AE:86:CA:6D:76:85:1D:C6:34:96:AE:04:62:0C:A6:24:0A:DD:10:3E:9E:C3:97:21:29:1A:84:BA:B3:91:6A:6F"}}},"request":{"raw":"GET /cdn-cgi/scripts/5c5dd728/cloudflare-static/email-decode.min.js HTTP/1.1\r\nHost: mdmacanada.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mdmacanada.cc/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 26 Mar 2026 23:10:45 GMT\r\ncontent-type: application/javascript\r\nexpires: Thu, 26 Mar 2026 23:58:45 GMT\r\ncache-control: public\r\nvary: accept-encoding\r\nx-frame-options: DENY\r\nx-content-type-options: nosniff\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2FMX7ddA6ePJ1gEbSk9D%2BNldN82fPO%2FrbZ9tRTN%2FiWViYOr4kzugCuIjZtqMw4mC2fDzl%2BShnP8vqlb6srHpal0Aoz%2FyBoxZdVR%2FvVyo97QbhCUCOmL15qBAidisfpow9\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\nserver: cloudflare\r\ncf-ray: 9e29d49dbf193181-OSL\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1239,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (1238)","md5":"9e8f56e8e1806253ba01a95cfc3d392c","sha1":"a8af90d7482e1e99d03de6bf88fed2315c5dd728","sha256":"2595496fe48df6fcf9b1bc57c29a744c121eb4dd11566466bc13d2e52e6bbcc8","sha512":"63f0f6f94fbabadc3f774ccaa6a401696e8a7651a074bc077d214f91da080b36714fd799eb40fed64154972008e34fc733d6ee314ac675727b37b58ffbebebee","ssdeep":"","tlshash":"6021d5743a18107e226a0133e56f66cee1f23715fd17e440408ad89566e4fe5063fed9","first_seen":"2023-03-07T01:02:00Z","last_seen":"2026-04-25T21:02:12.457233Z","times_seen":312847,"resource_available":true,"data":null}},"time_used":5,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":4,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-26","alert":"Sinkholed","trigger":"mdmacanada.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mdmacanada.cc/wp-content/cache/debloat/js/bd8b66ff466ff045cb9e39bf4094ad87.js","fqdn":"mdmacanada.cc","domain":"mdmacanada.cc","tld":"cc"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://mdmacanada.cc/","date":"2026-03-26T23:10:45.430Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mdmacanada.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 29 Jan 2026 00:46:51 GMT","end":"Wed, 29 Apr 2026 01:45:19 GMT"},"fingerprint":{"sha1":"B7:47:48:08:4D:35:A4:0D:8D:CE:D7:71:A9:FA:22:B1:5B:A1:AC:40","sha256":"AE:86:CA:6D:76:85:1D:C6:34:96:AE:04:62:0C:A6:24:0A:DD:10:3E:9E:C3:97:21:29:1A:84:BA:B3:91:6A:6F"}}},"request":{"raw":"GET /wp-content/cache/debloat/js/bd8b66ff466ff045cb9e39bf4094ad87.js HTTP/1.1\r\nHost: mdmacanada.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mdmacanada.cc/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 26 Mar 2026 23:10:45 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 943\r\ncache-control: public, max-age=604800\r\nexpires: Thu, 02 Apr 2026 23:10:45 GMT\r\nlast-modified: Fri, 13 Mar 2026 11:37:08 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nstrict-transport-security: max-age=63072000; includeSubDomains\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\npriority: u=3,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=HiIlkKWBLfIhTY%2FkBuTOKF7GAipGNDiv694tWk2IUtQ5jHhl1cFQEEhJWRz6NDg2yZwqMK7dm%2FYoULsmdT2bREWNfzooFusgdHxlP%2B6PsLeRRiDQDTrgpwZZpe8tHzne\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e29d49ddf573181-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2939,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (2939), with no line terminators","md5":"ae52867db002b2f95a21b85b3b518a04","sha1":"4b1615786f2e5240bec4229c7dc5c6f865c92ebe","sha256":"592acc60b8eea94fc366110175d8406604a609201d6debe5eb008a6debfbdc3b","sha512":"cb641d54680e78ff8f575ca1746319f42acba15c3422bb40f011421545ac0647cad018635834fc9ed553c7a61e0789d329c18a774d1dcd5fdb52d207e69768cd","ssdeep":"","tlshash":"7551321fb0208e9618b3187e613a719622329d69f2098670a015dca42eece4b1777dcf","first_seen":"2023-08-09T19:51:14Z","last_seen":"2026-04-25T20:48:17.883659Z","times_seen":44884,"resource_available":true,"data":null}},"time_used":378,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":378,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-26","alert":"Sinkholed","trigger":"mdmacanada.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.trustindex.io/assets/widget-presetted-css/v2/5-light-background.css","fqdn":"cdn.trustindex.io","domain":"trustindex.io","tld":"io"},"ip":{"addr":"3.167.2.9","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://mdmacanada.cc/","date":"2026-03-26T23:10:45.705Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.trustindex.io","organization":""},"issuer":{"commonName":"GoGetSSL RSA DV CA","organization":"GoGetSSL"},"validity":{"start":"Fri, 23 May 2025 00:00:00 GMT","end":"Tue, 23 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"4B:EB:D9:98:03:6A:DB:BE:49:BA:B2:3E:3A:B2:F6:D9:D7:62:B5:B7","sha256":"F8:20:DB:3C:4B:D6:B3:4C:28:EC:90:B0:25:20:9C:38:18:7C:FF:7B:DF:24:B2:C8:77:4C:33:96:D4:28:B7:B3"}}},"request":{"raw":"GET /assets/widget-presetted-css/v2/5-light-background.css HTTP/1.1\r\nHost: cdn.trustindex.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mdmacanada.cc/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css\r\ncontent-length: 10740\r\ndate: Fri, 20 Mar 2026 13:59:57 GMT\r\nserver: Apache/2.4.52 (Ubuntu)\r\nlast-modified: Fri, 20 Mar 2026 13:59:20 GMT\r\netag: \"1604a-64d751779af12-gzip\"\r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\nreferrer-policy: origin\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: origin, x-requested-with, content-type\r\naccess-control-allow-methods: GET\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-embedder-policy: require-corp\r\ncontent-security-policy: frame-ancestors 'self' *;\r\ncache-control: public, max-age=31536000, immutable\r\nvary: Accept-Encoding\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 50c588fd3255d023d9b9021263f5fa0a.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P2\r\nx-amz-cf-id: K8uwDpdoVcgaYkl9I8ndnfTmyMhKd85qPPrJb5Q4XQzYCmWM8EkSKA==\r\nage: 551448\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Apache HTTP Server:2.4.52","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":90186,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (65516)","md5":"4298a0a212ef38982ef53eb828ec8977","sha1":"0a8b6a4bc1f310b3bebd17330c6ad317e7e26d31","sha256":"7845d197c510a0183766baa3cce57c40c3db1ce6e84e7f5eab31c69514bec798","sha512":"5b63b700654d3a5273aaee7d1753c8f00bf484f4adbf58f75352de82eef1ac8dfa92c9ba9719d20e8a0ca75f23e5ebacb800de6be9964c973204781aea5f4455","ssdeep":"1536:+L0T6lPv8ny56kw+4WluWDxyHwtp191QaqeDUCvnRKkPTRdkGVxQh76YU:+L0T6lPv8ny5S+4WlKwtppQaqeDzkG3L","tlshash":"4e93021265fa280c7113140bd5e0b3b6c70bb1e6ef915ffddc3ab16b8c699a67132498","first_seen":"2026-03-22T02:19:11.370762Z","last_seen":"2026-04-23T06:34:52.951724Z","times_seen":6,"resource_available":false,"data":null}},"time_used":2,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.trustindex.io/assets/default-avatar/noprofile-04.svg","fqdn":"cdn.trustindex.io","domain":"trustindex.io","tld":"io"},"ip":{"addr":"3.167.2.9","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"lazy-imageset","requested_by":"https://mdmacanada.cc/","date":"2026-03-26T23:10:45.726Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.trustindex.io","organization":""},"issuer":{"commonName":"GoGetSSL RSA DV CA","organization":"GoGetSSL"},"validity":{"start":"Fri, 23 May 2025 00:00:00 GMT","end":"Tue, 23 Jun 2026 23:59:59 GMT"},"fingerprint":{"sha1":"4B:EB:D9:98:03:6A:DB:BE:49:BA:B2:3E:3A:B2:F6:D9:D7:62:B5:B7","sha256":"F8:20:DB:3C:4B:D6:B3:4C:28:EC:90:B0:25:20:9C:38:18:7C:FF:7B:DF:24:B2:C8:77:4C:33:96:D4:28:B7:B3"}}},"request":{"raw":"GET /assets/default-avatar/noprofile-04.svg HTTP/1.1\r\nHost: cdn.trustindex.io\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mdmacanada.cc/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: image/svg+xml\r\ncontent-length: 815\r\ndate: Tue, 13 Jan 2026 08:22:32 GMT\r\nserver: Apache/2.4.52 (Ubuntu)\r\ncache-control: public, max-age=31536000, immutable\r\nlast-modified: Wed, 11 Oct 2023 15:10:56 GMT\r\netag: \"32f-607723ae86b32\"\r\naccept-ranges: bytes\r\nreferrer-policy: origin\r\naccess-control-allow-origin: *\r\naccess-control-allow-headers: origin, x-requested-with, content-type\r\naccess-control-allow-methods: GET\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-embedder-policy: require-corp\r\ncontent-security-policy: frame-ancestors 'self' *;\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 50c588fd3255d023d9b9021263f5fa0a.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P2\r\nx-amz-cf-id: -bVkLDLMgesIefviK6gcciJxTeaUey3f9ahz0Sbft2JfJviviea3BQ==\r\nage: 6274093\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Ubuntu","description":"Ubuntu is a free and open-source operating system on Linux for the enterprise server, desktop, cloud, and IoT.","website":"https://www.ubuntu.com/server","common_platform_enumeration":"cpe:2.3:o:canonical:ubuntu_linux:*:*:*:*:*:*:*:*","icon":"Ubuntu.svg","categories":["Operating systems"]},{"name":"Apache HTTP Server:2.4.52","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":815,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"b7e672ad7dd3985ee9fc65d514268d00","sha1":"ba4434bae4abb1a66338e97482761a6b67b9a5c4","sha256":"02ab49d836e994249af1d316e587438071479903e763cf27b60fda038e3fe1ad","sha512":"0ff248b70a4bc848f7426514c4d631c7930f35fe3143c5eb0244347910945bff5da7c6e1f34794af8f8d2049d24b8bf1ea61484ead8a5dbcc68c49e7e4985e52","ssdeep":"","tlshash":"9d011288c348996a8020c378a2b5b5d2411702478a019f4ed5d12b3bd43d4f77a443ef","first_seen":"2023-05-21T20:18:35Z","last_seen":"2026-04-25T15:22:18.661167Z","times_seen":98,"resource_available":false,"data":null}},"time_used":1,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"static.klaviyo.com/onsite/js/vendors~Render~ClientStore~~~onsite-back-in-stock.7d7b5b811b79d6bdfaae.js","fqdn":"static.klaviyo.com","domain":"klaviyo.com","tld":"com"},"ip":{"addr":"151.101.2.133","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://mdmacanada.cc/","date":"2026-03-26T23:10:46.115Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"static.klaviyo.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 02 Mar 2026 22:32:36 GMT","end":"Sun, 31 May 2026 22:32:35 GMT"},"fingerprint":{"sha1":"36:11:62:1C:62:9E:7B:97:05:37:F9:A2:98:8F:68:41:2E:6B:D7:B5","sha256":"05:31:1A:E8:28:B5:E9:56:9C:39:CF:3B:A4:17:62:2A:BD:15:10:60:75:8E:D0:BA:D6:B8:02:1F:E1:A0:20:F8"}}},"request":{"raw":"GET /onsite/js/vendors~Render~ClientStore~~~onsite-back-in-stock.7d7b5b811b79d6bdfaae.js HTTP/1.1\r\nHost: static.klaviyo.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://mdmacanada.cc\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mdmacanada.cc/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nx-amz-id-2: CvbS7xPCNHD6Lj7vlRp2EtiYb1aBICx5QnDq0zve1KuNZmQkL2tllImBdQoP74ViKoTSqjr5vOk=\r\nx-amz-request-id: 8G4F9J96F8AHW10F\r\nlast-modified: Thu, 26 Feb 2026 23:09:56 GMT\r\netag: \"a31dcdb463713e4e8c3b85dfee5d64d9\"\r\nx-amz-server-side-encryption: AES256\r\nx-amz-meta-entrypoints-hash: \r\ncache-control: max-age=2592000,stale-while-revalidate=10800\r\nx-amz-meta-surrogate-control: max-age=31536000\r\nx-amz-meta-surrogate-key: fender-assset\r\nx-amz-version-id: C7SmZbfvbPcA7GwieMXdqdSzRn.vDizJ\r\ncontent-type: text/javascript\r\nserver: AmazonS3\r\ncontent-encoding: br\r\nvia: 1.1 varnish, 1.1 varnish\r\naccess-control-allow-origin: *\r\naccept-ranges: bytes\r\ndate: Thu, 26 Mar 2026 23:10:46 GMT\r\nage: 3137\r\nx-served-by: cache-lga21920-LGA, cache-hel1410029-HEL\r\nx-cache: HIT, HIT\r\nx-cache-hits: 71, 363\r\nvary: Accept-Encoding\r\ncontent-length: 2140\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Varnish","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]}],"data":{"size":5101,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (5101), with no line terminators","md5":"a31dcdb463713e4e8c3b85dfee5d64d9","sha1":"414beb7de6357039eecee87a3949a8ef286988dc","sha256":"f495ded85de4f334970eb7ad13e8f860e9aff8f38e8b5d73e4bcfffa75088f24","sha512":"2f1e136a0a68128846d257a7975c1f5b8ea9f3a46c8d3947caae150ce943af21907915300357efde5cb3c7dcbb76794805fb4728ad8938b38aef239ede90806e","ssdeep":"96:K8hjdQawKRWzDLrOaVa3IboRjdWHXRSZgMbh9Xquvb8/T8isbl:K8h+HLrj4Rj+QOMbzXz8r8iSl","tlshash":"38b1a7c872f7f4b562e738a4809f2046f23e5915a20cd404a3e2c5dd7c7a587d633d99","first_seen":"2026-02-26T13:42:08.339165Z","last_seen":"2026-04-25T20:46:10.837742Z","times_seen":10825,"resource_available":true,"data":null}},"time_used":14,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":13,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mdmacanada.cc/wp-content/plugins/ays-popup-box/public/css/ays-pb-public-min.css?ver=4.4.0","fqdn":"mdmacanada.cc","domain":"mdmacanada.cc","tld":"cc"},"ip":{"addr":"188.114.96.1","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"other","requested_by":"https://mdmacanada.cc/","date":"2026-03-26T23:10:47.735Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mdmacanada.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Thu, 29 Jan 2026 00:46:51 GMT","end":"Wed, 29 Apr 2026 01:45:19 GMT"},"fingerprint":{"sha1":"B7:47:48:08:4D:35:A4:0D:8D:CE:D7:71:A9:FA:22:B1:5B:A1:AC:40","sha256":"AE:86:CA:6D:76:85:1D:C6:34:96:AE:04:62:0C:A6:24:0A:DD:10:3E:9E:C3:97:21:29:1A:84:BA:B3:91:6A:6F"}}},"request":{"raw":"GET /wp-content/plugins/ays-popup-box/public/css/ays-pb-public-min.css?ver=4.4.0 HTTP/1.1\r\nHost: mdmacanada.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nX-Moz: prefetch\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://mdmacanada.cc/\r\nCookie: wffn_flt=2026-3-26 23:10:45; wffn_timezone=UTC; wffn_is_mobile=false; wffn_browser=Firefox; wffn_referrer=; wffn_fl_url=/; sbjs_migrations=1418474375998%3D1; sbjs_current_add=fd%3D2026-03-26%2023%3A10%3A45%7C%7C%7Cep%3Dhttps%3A%2F%2Fmdmacanada.cc%2F%7C%7C%7Crf%3D%28none%29; sbjs_first_add=fd%3D2026-03-26%2023%3A10%3A45%7C%7C%7Cep%3Dhttps%3A%2F%2Fmdmacanada.cc%2F%7C%7C%7Crf%3D%28none%29; sbjs_current=typ%3Dtypein%7C%7C%7Csrc%3D%28direct%29%7C%7C%7Cmdm%3D%28none%29%7C%7C%7Ccmp%3D%28none%29%7C%7C%7Ccnt%3D%28none%29%7C%7C%7Ctrm%3D%28none%29%7C%7C%7Cid%3D%28none%29%7C%7C%7Cplt%3D%28none%29%7C%7C%7Cfmt%3D%28none%29%7C%7C%7Ctct%3D%28none%29; sbjs_first=typ%3Dtypein%7C%7C%7Csrc%3D%28direct%29%7C%7C%7Cmdm%3D%28none%29%7C%7C%7Ccmp%3D%28none%29%7C%7C%7Ccnt%3D%28none%29%7C%7C%7Ctrm%3D%28none%29%7C%7C%7Cid%3D%28none%29%7C%7C%7Cplt%3D%28none%29%7C%7C%7Cfmt%3D%28none%29%7C%7C%7Ctct%3D%28none%29; sbjs_udata=vst%3D1%7C%7C%7Cuip%3D%28none%29%7C%7C%7Cuag%3DMozilla%2F5.0%20%28Windows%20NT%2010.0%3B%20Win64%3B%20x64%3B%20rv%3A134.0%29%20Gecko%2F20100101%20Firefox%2F134.0; sbjs_session=pgs%3D1%7C%7C%7Ccpg%3Dhttps%3A%2F%2Fmdmacanada.cc%2F; __kla_id=eyJjaWQiOiJOek5pTVRaaE1UQXRaakUxWXkwME5UaG1MVGt5WlRRdFpHVXpZelUwWmpFeU9HUm0ifQ==; fkcart_cart_qty=0; fkcart_cart_total=%3Cspan%20class%3D%22woocommerce-Price-amount%20amount%22%3E%3Cbdi%3E%3Cspan%20class%3D%22woocommerce-Price-currencySymbol%22%3E%26%2336%3B%3C%2Fspan%3E0.00%3C%2Fbdi%3E%3C%2Fspan%3E\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Thu, 26 Mar 2026 23:10:48 GMT\r\ncontent-type: text/css\r\ncontent-length: 5385\r\ncache-control: public, max-age=604800\r\nexpires: Thu, 02 Apr 2026 23:10:48 GMT\r\nlast-modified: Sat, 25 May 2024 01:48:48 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\nserver: cloudflare\r\nstrict-transport-security: max-age=63072000; includeSubDomains\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\npriority: u=4,i=?0\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Yi3MDn88Z%2BRBoHwlo3VA%2BdOqWV%2BqMmbe4tl1gi15Eb5yobdo4F6A1TsCZ%2FHN8PooT8ifbTgYMgeG6wA%2FC4LqLQeiMCskGhTFLnolm%2FFXKQY2AsI%2ByCNIylJ7j6koGMG9\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncf-ray: 9e29d4ac5a433181-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":30028,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (30028), with no line terminators","md5":"b721373bb19b2ec5afbdb6d69f386b5f","sha1":"f4acb0a6b7287d415e6c4e5fc598ded6e48debe6","sha256":"7594156ec01a847060b0ed248d05a0c8c6be8cd09d6fe8c5fb1b3693b50e7a3d","sha512":"1af633c83daec0c62a3afda43048dcaeb7b6290e08259f011c16ee3cccd01c4e1fdc0b06b0d94e1db330ac92eeaeac632ebcc9cabbf92ff9c194b144df63b825","ssdeep":"192:NCKVp197GdIykk1PU4FQBSDLrjapQynrOoAp04FatgBNaOE68xSYSa7Yj2tsAVhj:NWPU1GCO7Lak8Ka7Y9AVhHi3WOwh3vOC","tlshash":"edd2442254a96338967fe122bbc3bbad741cc801d777c65bd461ae39d3c61e7813628c","first_seen":"2024-05-09T14:03:53Z","last_seen":"2026-03-27T01:49:53.356653Z","times_seen":19,"resource_available":false,"data":null}},"time_used":347,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":347,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-26","alert":"Sinkholed","trigger":"mdmacanada.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}