{"report_id":"98c52b44-7d4a-4599-9bdf-e4468f0d088f","version":0,"status":"done","tags":[],"date":"2026-09-10T19:48:22Z","url":{"schema":"http","addr":"essschools.com/","fqdn":"essschools.com","domain":"essschools.com","tld":"com"},"ip":{"addr":"162.254.39.18","port":0,"asn":22612,"as":"Namecheap, Inc.","country":"United States","country_code":"US"},"final":{"url":{"schema":"https","addr":"essschools.com/","fqdn":"essschools.com","domain":"essschools.com","tld":"com"},"title":"Home","dom":{"size":20483,"mime_type":"text/html; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text","md5":"75bb1b25e427ff75a78ab1ee7e104c22","sha1":"5ecf103985ff46b4057472154ab1af668e53230f","sha256":"5c236f3b9c7ab70cb7bf2676683d6d2577d27a1f9beb98fb7a8c7a3b5f44446b","sha512":"0badc2e715e10fa09f811503332ab11d73fe5b3a677b7834d4282ddd456222b3ee05ca3b84566534469bd9885febfbbb7e921c9777eceab9a7aac9c5c0740a3c","ssdeep":"192:Q8Lg3wImStMvKMlayWQZTNoRzILxWqA5n1bMJYPnVTvT2g5o+5tnVPRd3xZfLFSA:/lt7AbeY/D7nVZd3VSGT7","tlshash":"f492622638f85533026784d9a6f6ab0abee5d50bc90aad0036fc0be84fc7d538c47659","dom_hash":"domhashf8eb68edeebdd8ce74965cf52d2acd81","first_seen":"2026-09-10T19:48:25.026766Z","last_seen":"2026-09-10T19:48:25.026766Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"essschools.com/","fqdn":"essschools.com","domain":"essschools.com","tld":"com"},"ip":{"addr":"162.254.39.18","port":0,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-10-15T19:48:22Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":3}},"detection":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-10","alert":"Phishing Block","trigger":"essschools.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-10","alert":"Sinkholed","trigger":"essschools.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-10","alert":"Sinkholed","trigger":"essschools.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null},"summary":[{"fqdn":"essschools.com","ip":{"addr":"162.254.39.18","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"domain_registered":"2023-07-16","domain_rank":0,"first_seen":"2025-10-14T13:20:29.080471Z","last_seen":"2026-06-20T11:54:35.717006Z","alert_count":84,"request_count":28,"received_data":889412,"sent_data":15025,"comment":"","tags":null,"fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"YouTube","description":"YouTube is a video sharing service where users can create their own profile, upload videos, watch, like and comment on other videos.","website":"https://www.youtube.com","common_platform_enumeration":"","icon":"YouTube.png","categories":["Video players"]},{"name":"OWL Carousel","description":"OWL Carousel is an enabled jQuery plugin that lets you create responsive carousel sliders.","website":"https://owlcarousel2.github.io/OwlCarousel2/","common_platform_enumeration":"","icon":"OWL Carousel.png","categories":["JavaScript libraries"]},{"name":"Moment.js","description":"Moment.js is a free and open-source JavaScript library that removes the need to use the native JavaScript Date object directly.","website":"https://momentjs.com","common_platform_enumeration":"cpe:2.3:a:momentjs:moment:*:*:*:*:*:*:*:*","icon":"Moment.js.svg","categories":["JavaScript libraries"]},{"name":"Lightbox","description":"Lightbox is small javascript library used to overlay images on top of the current page.","website":"https://lokeshdhakar.com/projects/lightbox2/","common_platform_enumeration":"cpe:2.3:a:lightbox_photo_gallery_project:lightbox_photo_gallery:*:*:*:*:*:*:*:*","icon":"Lightbox.png","categories":["JavaScript libraries"]},{"name":"CodeIgniter","description":"","website":"https://codeigniter.com","common_platform_enumeration":"cpe:2.3:a:codeigniter:codeigniter:*:*:*:*:*:*:*:*","icon":"CodeIgniter.png","categories":["Web frameworks"]},{"name":"Bootstrap","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]},{"name":"PHP:8.1.34","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"essschools.com/backend/themes/default/datepicker/bootstrap-datepicker.min.js","fqdn":"essschools.com","domain":"essschools.com","tld":"com"},"ip":{"addr":"162.254.39.18","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"64d102e431ec166a09a9086d446acdee","sha1":"ec66cf3489a91ad9aa14b92c5546b6332e1436c2","sha256":"79b865eae859a35fb0b2c2a5db78a08ba98128ff58829410214aa927b1671340","sha512":"373668d5b2e01a3d41b146b7eb6561bc2f060fcb30a877cd3690c16ccb4ec2824daa20e57c06dae10194496be4750504e6cac568331073d29964566c0c95c6aa","ssdeep":"768:JqoOuPkQ+QdmxWNzndFk8eK0p8S+WtToHxxgAqA85Gen1BZP4:JqoRdmUzndbsnoHxt85tn17P4","tlshash":"f3d295c931957916817b91b0812b1303a733d8ae9c89883cbd6cc9d66e7dd4921bdfbc","size":29336,"data":"","first_seen":"2023-03-07T13:50:02Z","last_seen":"2026-09-10T19:48:25.048076Z","times_seen":417,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"essschools.com/","fqdn":"essschools.com","domain":"essschools.com","tld":"com"},"ip":{"addr":"162.254.39.18","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"8e66ff458419e66658e0caa88634d161","sha1":"d8ae29e83d1a795a3674421ff9e40e7d96cd2d09","sha256":"22c5eeffb7bd5a03f1b9790a213629e6966fd612a5ede93f587ee8074d806ff1","sha512":"9a07322e01be0424027f097f23d0cb3a1eb7637c7ab8579856c189109c805658849e9a5ab2994d64a6b89a2ad261e4770119c9895c132d2e84e63dadfc1c0d9a","ssdeep":"","tlshash":"2590045701d15115d7014140c10134455dd3050c4c504753dd3f0c54074447570c3451","size":41,"data":"","first_seen":"2026-06-20T11:54:37.486544Z","last_seen":"2026-09-10T19:48:25.056971Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"essschools.com/","fqdn":"essschools.com","domain":"essschools.com","tld":"com"},"ip":{"addr":"162.254.39.18","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"a5df61309857d93b27eb0d346a1022af","sha1":"2d00732047ced79ad951e4c05af35bb7ab73f037","sha256":"ecb6f8b37a75d55de103800014e5cb5a1f224320eff94bc87b264b5c80fc23d1","sha512":"2c1e16373ef626648485a47ec4a4ba3d215c3a54ea2a7dee942230846db570c84cab4822e5b29c30c8d0b471ed0c069962590fa9435342f7f9cb7685cc2ea220","ssdeep":"","tlshash":"d4a0020e25e11023123f68a71d7fd4c4951e984a18a5dd02ff8c45b24fa90286ee290e","size":82,"data":"","first_seen":"2026-06-20T11:54:37.487743Z","last_seen":"2026-09-10T19:48:25.058316Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"essschools.com/","fqdn":"essschools.com","domain":"essschools.com","tld":"com"},"ip":{"addr":"162.254.39.18","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"afbad99b69e04a727c8062fbaaab6f31","sha1":"0072409c4af429b2ce0bca599e2ddf692836e75d","sha256":"4806d71ed7d2bca1e73f61d86e78057efd01fa7031a786b0c73f8f616486f9de","sha512":"05b00048e29e5922865f172921b792832f545d67001d4a69f4a0ff0aabe0fe00dfa1751f58a7bfbc6c372b329b64e94393845cda544ac06529e6e8971d8e4edd","ssdeep":"","tlshash":"5bc0801d5c7d5554011f00373c2bc714571c201b0445754879bc54404f2d3181117fcc","size":168,"data":"","first_seen":"2026-06-20T11:54:37.489042Z","last_seen":"2026-09-10T19:48:25.059312Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"essschools.com/","fqdn":"essschools.com","domain":"essschools.com","tld":"com"},"ip":{"addr":"162.254.39.18","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"ca968008c9e456e896692a6c012326f9","sha1":"57bfc9bda5be39e45b6ab7237ef008c4b8068809","sha256":"3239691676961d115576eac0ebc801af307ef14b214e9aa6c228a83e9c69bf7e","sha512":"556ff7e3962822bca1951a4ac29a0d616ab293ce9f73a6cc01a5cdcdbe4cb45cd88c0e0e9874c46c6dd2461faae5f2247acb08637a5483f57427bb84c72716df","ssdeep":"","tlshash":"9cf0e95b70fc1449512320799667114a2d66860315089e0cfb6c7db04f45d3b7da3eef","size":614,"data":"","first_seen":"2026-06-20T11:54:37.490192Z","last_seen":"2026-09-10T19:48:25.060323Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"essschools.com/","fqdn":"essschools.com","domain":"essschools.com","tld":"com"},"ip":{"addr":"162.254.39.18","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"797277a7d6bf192e9d1cc22e56fa4533","sha1":"994b8f7504d22493c6f1c3c4c401fb64d63ba209","sha256":"47bb34da906920a8823f6fab858dbf45ae26f86b6d0ab9ad008ac19f770ca8b3","sha512":"621079a7376db4fa5930ca7da6550b89c1ecded536717e94f8fabde6adf5e4768e9da7b80d9c6ed380a850da96f793b728a10cf2c128f7440c60b86c56ec089b","ssdeep":"","tlshash":"c941de3cb8f629e7853370b44bbf40a433b650436501dec4398d9aa36f9853c4766aee","size":2353,"data":"","first_seen":"2026-06-20T11:54:37.491377Z","last_seen":"2026-09-10T19:48:25.061409Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"essschools.com/backend/dist/js/moment.min.js","fqdn":"essschools.com","domain":"essschools.com","tld":"com"},"ip":{"addr":"162.254.39.18","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"5091aef91928aaca200c0e453bdfff05","sha1":"0ec0a97bc938e6453e1b4da64c6c30aa6efd22f9","sha256":"f5634d8b799c27f5c1ae2ea5f27a427ccaf01e590cb74964add19d06e20d9f86","sha512":"8990d806f6d39a8f84bfd11bafba5aa64963919f721f4bb88c165c83b0f94d8a82c9bf4b38c29c496e58a5badfcf4d09938cbbf888fd827da48bed7245cbf1cc","ssdeep":"768:FmNolKWoVAzQwalFLcfbmDlEfOpqc40Ji:FBzIFSgu1ca","tlshash":"86e2a5897a56b002576312f444bf060bb23c98a5a44e4d2af089e8e87d7cc7d527bf7d","size":34177,"data":"","first_seen":"2023-03-10T03:13:03Z","last_seen":"2026-09-10T19:48:25.05219Z","times_seen":21,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"essschools.com/backend/themes/default/js/custom.js","fqdn":"essschools.com","domain":"essschools.com","tld":"com"},"ip":{"addr":"162.254.39.18","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"a9ee86fc5b5c944cabff22a393ce139c","sha1":"13d873a2fce143eb7a299f56b691d096d870c3ff","sha256":"52b53537924ca15806347a3e339701cc33d03346f17dbf44bed1cb48fd667754","sha512":"061a14f20cc092250220ed6c3f3180fec739735b0aa3bc15fa8b1cf4e6e11c563beb8fcf217281107b71f4292f3eb3b139c9df6c8b4b0ad3222a0b6547311ff2","ssdeep":"96:TQxwf4TC8lekrBgBDjDekdZB6mspCxJXUmysJXnXUkJXRLEe:cxZw3ZgMxJXwsJXnXUkJXRt","tlshash":"fcd14f09bd2931b10873f338db3b9624ff6924079102aa1079fe6b942f7102961ace9c","size":6221,"data":"","first_seen":"2025-08-04T07:37:34.465683Z","last_seen":"2026-09-10T19:48:25.033674Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"essschools.com/backend/dist/js/bootstrap-select.min.js","fqdn":"essschools.com","domain":"essschools.com","tld":"com"},"ip":{"addr":"162.254.39.18","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"fc34ce1c5622e906a7c3ef0ec552d2ec","sha1":"46fcbd71810b0a9a01629969d68613756152b815","sha256":"068a204b057e24ebdf97dec979544cd39d47e4d298dd1f05f1f087ecdebc4d9c","sha512":"d55d4beb6c6239844593e03545e315e4a746f55f9d697b44acd9e62645a7bc38aebbe6d4e2770e2f752caa548780f7ebcd9c86c67ceeb8dbc79311b5e9ea9482","ssdeep":"384:eLan1vjMBZWsSFkDvUnOZjE4dAHQnM07iraWuL7IS:eLa1vjM3QFkDvUOZI4TzMs77","tlshash":"75a2965b716233b222ff40db602a1a49b133ba3dd9034059357e8af659fcd8474a7e36","size":21556,"data":"","first_seen":"2023-03-08T09:17:19Z","last_seen":"2026-09-10T19:48:25.041064Z","times_seen":175,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"essschools.com/backend/toast-alert/toastr.js","fqdn":"essschools.com","domain":"essschools.com","tld":"com"},"ip":{"addr":"162.254.39.18","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"fa3a318d61ca62755cc84face5b315ee","sha1":"2064876b82275c6496bcb7fa5597fc9941a14717","sha256":"715824bd46c808423c048c58456b5a4be1d90dbf38bb893ddeaf4a4d10b29c03","sha512":"1601efb65c65b32dac10eb2a181ec84b916c42901cdea4c3b2b4a6461ddd2ef615354fbf8b043a0ebac3484d63bed3c0f555d02df7ffa7d8b919a531a664cdf2","ssdeep":"96:N6mApHxN4DcSDaeD88DG+v+LxyX5Y7LuQpbnt4g4EDNHChmGTotgl4NZjOKjv0:NBK+vxpYnPD4eNCfTo6SNZjOKQ","tlshash":"67f1f0c1331fa75b4edb239c9036944cfa7de232854a147bb8a996986974708d3e32dc","size":8037,"data":"","first_seen":"2023-03-09T12:30:49Z","last_seen":"2026-09-10T19:48:25.037874Z","times_seen":63,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"essschools.com/backend/themes/default/js/bootstrap.min.js","fqdn":"essschools.com","domain":"essschools.com","tld":"com"},"ip":{"addr":"162.254.39.18","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"04c84852e9937b142ac73c285b895b85","sha1":"8fb8a9319055253d085edfc3bb72d20f614ec709","sha256":"36460e494e4c628443afded40b2743b5ede9a4a76fb4f7b9ef2345cc7e59fd64","sha512":"e27be06bc898dcf893f06cc49cafcbb6ba6e3a69106a89a500f6993e57600b3636392784811237a1a783967dbe05d57a0769c78f8074a0c3a59b16b655b1d350","ssdeep":"768:72rGy27UwlNqMl95qNmCFejhqs8snmi+CSFXfgx8Gf3Zq7Q:yg73zhq0GvgJ3ZKQ","tlshash":"eff28606b23031a147efb1e1525b020e7239696ee906907c78b99af53db9c48717bf3d","size":37051,"data":"","first_seen":"2023-03-07T01:03:32Z","last_seen":"2026-09-10T19:48:25.042646Z","times_seen":6929,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"essschools.com/backend/themes/default/js/jquery.waypoints.min.js","fqdn":"essschools.com","domain":"essschools.com","tld":"com"},"ip":{"addr":"162.254.39.18","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"98fd151faf76ea2f96b48e9a216325ba","sha1":"a3367a304da57e67e1353dbf18193847faf9c081","sha256":"8c39ce2883aad8a36c4194dc053127b29efa1677cc12db45e805760c5d9f14d1","sha512":"084880fbbf13a4ff4a0083f3a81bf152ff21cb8d63c88ddfdae1e2ec31a9fd8fca6bdef7aa049dc9b35e81615c8aa87a1ab37651e3f1d8a91f9674146d484d20","ssdeep":"192:5BBzxsMCm1dJDl6hj8P6PEGnvfiZaLkYluY4pLyUJWZPeGz+nrFr:5BFoIJDlC8CPZnvrLkYluYTUuPeGzs","tlshash":"0f026189750534221bdf90fad91f474ab3375828b80680bdb4c8d4ed28f252d676bf7a","size":8833,"data":"","first_seen":"2023-03-07T01:31:34Z","last_seen":"2026-09-10T20:13:34.006829Z","times_seen":5803,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"essschools.com/backend/custom/jquery.min.js","fqdn":"essschools.com","domain":"essschools.com","tld":"com"},"ip":{"addr":"162.254.39.18","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"9a094379d98c6458d480ad5a51c4aa27","sha1":"3fe9d8acaaec99fc8a3f0e90ed66d5057da2de4e","sha256":"b2ce8462d173fc92b60f98701f45443710e423af1b11525a762008ff2c1a0204","sha512":"4bbb1ccb1c9712ace14220d79a16cad01b56a4175a0dd837a90ca4d6ec262ebf0fc20e6fa1e19db593f3d593ddd90cfdffe492ef17a356a1756f27f90376b650","ssdeep":"1536:DPEkjP+iADIOr/NEe876nmBu3HvF38NdTuJO1z6/A4TqAub0R4ULvguEhjzXpa9r:oNM2Jiz6oAFKP5a98HrY","tlshash":"8b83d6d9b2c67062977734b850bf410bb17a98dab80c8c60f0a4d5e47eb4a8d517bf2d","size":84249,"data":"","first_seen":"2023-03-07T01:30:18Z","last_seen":"2026-09-10T23:30:49.517923Z","times_seen":4119,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"essschools.com/backend/themes/default/js/ss-lightbox.js","fqdn":"essschools.com","domain":"essschools.com","tld":"com"},"ip":{"addr":"162.254.39.18","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"9d9dcf65608fdc3a80ca3a4cc0cea298","sha1":"8845d7b87034caed942506e9888ab984b7badac2","sha256":"0a356cb882b6b1d3826263c7521788e268bef09f6ee2b5f9b24010fe942933a5","sha512":"52f9fbe1337f679db0dc8df922461e0c99400c3cf209f35eaa0646863504beb306be2f0675bc3856d85ba62cf627f22b64e130d714e693c227d18ce0c638328c","ssdeep":"768:24eHEEjbhgWEdOVMKEPaPnfola8v1hqLNP81aHJbajeHLMnBjpIIVwkmRL/jlWT4:MpNN/XP81aHopdVwPBFkbddAWbnbtW6a","tlshash":"97b263e733be292ec548121b983e895feb6cd932c106417e7899e0dd16dc84497b1ebc","size":25413,"data":"","first_seen":"2025-08-04T07:37:34.49141Z","last_seen":"2026-09-10T19:48:25.032307Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"essschools.com/backend/dist/js/dropify.min.js","fqdn":"essschools.com","domain":"essschools.com","tld":"com"},"ip":{"addr":"162.254.39.18","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"3bf2481f31d61f7178bfea9b23cdde29","sha1":"9ed9d6f71597c3bd2b859928baf9ebcc1ade4055","sha256":"37235d6568d286f79740fcec35b154dfec0fa078bdd93a13d23c070ea50d6149","sha512":"df31a5878084e8439bce31bcdfd65d7a9b752ca0a19272f3d7465e82607cc740c4b3c3ff868f3a2c3b4c41cf65182477570ca2af5ae5129bb0203f7b8f2393d2","ssdeep":"192:j1upARJkx9Oh1HK9OotyFvyDXQwjPcJ6sk4UdiHV2OHFdIOL5W:j1SxEHKQotyFaDXQwj0J72OHYS5W","tlshash":"76228705fd14b45a846f90f4a0860606333ad42f5639f1bc76b4d9ee85f5c486baaff0","size":10225,"data":"","first_seen":"2023-03-10T03:13:03Z","last_seen":"2026-09-10T19:48:25.03012Z","times_seen":63,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"essschools.com/backend/themes/default/js/owl.carousel.min.js","fqdn":"essschools.com","domain":"essschools.com","tld":"com"},"ip":{"addr":"162.254.39.18","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"b7b9c97cd68ec336d01a79d5be48c58d","sha1":"1a99890b57c9859a622337ed0b2f989d6e30cc0e","sha256":"b394d33b2a7ec654a6b037ebfda6618341b3f897a362be624c923c2711b54a43","sha512":"968e18822c24c6c54827999ec766fe54750a9489d22b6a45b641854731ec00beb8fd93b9bda8823e67463f7a99ab587d333673821ae90cfdf7e92716ba050c4e","ssdeep":"768:JBA7PMMFA0tdlXKNSR4vlGRep2lcwJeL+C2jQdc7/CORUQuFBt33:HAIMFFdYMxAcLQDV","tlshash":"cb137346b3202d2a869b61a0663f160bb23a291ce414507d7d7da6de6d7dc4c213fbfc","size":42766,"data":"","first_seen":"2023-03-07T01:03:18Z","last_seen":"2026-09-10T22:50:10.775055Z","times_seen":21038,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"essschools.com/backend/themes/default/js/jquery.counterup.min.js","fqdn":"essschools.com","domain":"essschools.com","tld":"com"},"ip":{"addr":"162.254.39.18","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"06cc5114aee64876887958d69fe2001d","sha1":"40d8497aeec849035c9ac378343505447a28f3d7","sha256":"4bf6fce76bffaea2f36936a940d9e8c8e9c47036508ec89465f5d13f41a9e83f","sha512":"1abe87459407e877e13fa13fd19547465f6a3911c5ed1a06debd1c8335aa9504300aa42e0377766a01734a85aaf63cc20b7f542d18129d1ff0e9ee6ac67172dc","ssdeep":"","tlshash":"cb1159797a0f2dcdaa40e419f2efb0a491767dbc4c90984b52d158401f95abc2b5bb70","size":915,"data":"","first_seen":"2023-03-07T12:11:03Z","last_seen":"2026-09-10T19:48:25.039911Z","times_seen":451,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"essschools.com/backend/themes/default/css/owl.carousel.css","fqdn":"essschools.com","domain":"essschools.com","tld":"com"},"ip":{"addr":"162.254.39.18","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://essschools.com/","date":"2026-09-10T19:47:53.233Z","timestamp":1789069673233,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"essschools.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Tue, 23 Jun 2026 00:00:00 GMT","end":"Thu, 07 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"42:2E:53:EA:2D:EC:EB:65:00:72:1B:90:A6:4C:9E:C6:CE:5C:EF:BA","sha256":"6F:74:11:89:40:F0:04:7B:21:36:9B:4F:F7:26:2C:D9:3F:A2:E3:C5:CB:B2:00:E0:22:5F:7D:C5:93:6B:27:57"}}},"request":{"raw":"GET /backend/themes/default/css/owl.carousel.css HTTP/1.1\r\nHost: essschools.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://essschools.com/\r\nCookie: ci_session=5s6r3gc3e3m9nrm0rqc4j1j0rcttrp5f\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=604800\r\nexpires: Thu, 17 Sep 2026 19:47:53 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 02 Mar 2017 05:13:12 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 1005\r\ndate: Thu, 10 Sep 2026 19:47:53 GMT\r\nserver: LiteSpeed\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":4028,"size_decoded":1365,"mime_type":"text/css","magic":"ASCII text","md5":"83ef097be10f83e9f999a55c34a04beb","sha1":"e718931278aa33db5c3012b814c30accfe87f244","sha256":"87b34f2c1c4c30f70478efc10c6c026f9311019f028157314717e6ddfa4c1f4b","sha512":"d87dd1c17572aa1abcccfd45441959ea8054e0d9322e35cd6dc9d21a712ec51d520ceacbd1248830d0a9f8f6c74d49fc4582db84688afe95bc221d9bb537f49e","ssdeep":"","tlshash":"b081cbe62176010e281a93e01aee6b5a353e8453c8199c58b2f75309cf8ef8c115ff6f","first_seen":"2023-04-10T12:12:27Z","last_seen":"2026-09-10T19:48:25.02805Z","times_seen":3132,"resource_available":false,"data":null}},"time_used":168,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":168,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-10","alert":"Phishing Block","trigger":"essschools.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-10","alert":"Sinkholed","trigger":"essschools.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-10","alert":"Sinkholed","trigger":"essschools.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"essschools.com/backend/themes/default/css/style.css","fqdn":"essschools.com","domain":"essschools.com","tld":"com"},"ip":{"addr":"162.254.39.18","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://essschools.com/","date":"2026-09-10T19:47:53.239Z","timestamp":1789069673239,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"essschools.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Tue, 23 Jun 2026 00:00:00 GMT","end":"Thu, 07 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"42:2E:53:EA:2D:EC:EB:65:00:72:1B:90:A6:4C:9E:C6:CE:5C:EF:BA","sha256":"6F:74:11:89:40:F0:04:7B:21:36:9B:4F:F7:26:2C:D9:3F:A2:E3:C5:CB:B2:00:E0:22:5F:7D:C5:93:6B:27:57"}}},"request":{"raw":"GET /backend/themes/default/css/style.css HTTP/1.1\r\nHost: essschools.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://essschools.com/\r\nCookie: ci_session=5s6r3gc3e3m9nrm0rqc4j1j0rcttrp5f\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=604800\r\nexpires: Thu, 17 Sep 2026 19:47:53 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 20 Dec 2022 06:42:14 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 10601\r\ndate: Thu, 10 Sep 2026 19:47:53 GMT\r\nserver: LiteSpeed\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":56066,"size_decoded":10962,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"1790338667b260e9f00cd7effdcbd5b2","sha1":"e75b02f6dd28f9d06f51110903d9f992a6e9655c","sha256":"3aed279a226a1581de33458f601c98b2c7cf91c1abcdf79e8bb81b141f3591e7","sha512":"c428682462f7100317bc147b6ec9b84a6714e7e804a583c9b40870b3efb191987d0872162489653bc7e974afb697d2eb45f8db75817b064776b8195ad97fc717","ssdeep":"384:Muvx2uhTmMfgKwK5KatfcvnoMWyHfZERLrQoIgL0L8puQEUuNfkVg3f/Z1:MWxFfgKwK5KZjHxEBL0LIuQSy0r","tlshash":"44436364d60511057037e3a8a7e247a5eb3e4053ea0305bebbea3550cfb65ac06b2fcd","first_seen":"2025-08-04T07:37:34.496343Z","last_seen":"2026-09-10T19:48:25.028614Z","times_seen":4,"resource_available":false,"data":null}},"time_used":329,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":329,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-10","alert":"Phishing Block","trigger":"essschools.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-10","alert":"Sinkholed","trigger":"essschools.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-10","alert":"Sinkholed","trigger":"essschools.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"essschools.com/backend/dist/js/dropify.min.js","fqdn":"essschools.com","domain":"essschools.com","tld":"com"},"ip":{"addr":"162.254.39.18","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://essschools.com/","date":"2026-09-10T19:47:53.248Z","timestamp":1789069673248,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"essschools.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Tue, 23 Jun 2026 00:00:00 GMT","end":"Thu, 07 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"42:2E:53:EA:2D:EC:EB:65:00:72:1B:90:A6:4C:9E:C6:CE:5C:EF:BA","sha256":"6F:74:11:89:40:F0:04:7B:21:36:9B:4F:F7:26:2C:D9:3F:A2:E3:C5:CB:B2:00:E0:22:5F:7D:C5:93:6B:27:57"}}},"request":{"raw":"GET /backend/dist/js/dropify.min.js HTTP/1.1\r\nHost: essschools.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://essschools.com/\r\nCookie: ci_session=5s6r3gc3e3m9nrm0rqc4j1j0rcttrp5f\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/javascript\r\nlast-modified: Wed, 03 Oct 2018 21:01:34 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 2770\r\ndate: Thu, 10 Sep 2026 19:47:53 GMT\r\nserver: LiteSpeed\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":10225,"size_decoded":3058,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (10225), with no line terminators","md5":"3bf2481f31d61f7178bfea9b23cdde29","sha1":"9ed9d6f71597c3bd2b859928baf9ebcc1ade4055","sha256":"37235d6568d286f79740fcec35b154dfec0fa078bdd93a13d23c070ea50d6149","sha512":"df31a5878084e8439bce31bcdfd65d7a9b752ca0a19272f3d7465e82607cc740c4b3c3ff868f3a2c3b4c41cf65182477570ca2af5ae5129bb0203f7b8f2393d2","ssdeep":"192:j1upARJkx9Oh1HK9OotyFvyDXQwjPcJ6sk4UdiHV2OHFdIOL5W:j1SxEHKQotyFaDXQwj0J72OHYS5W","tlshash":"76228705fd14b45a846f90f4a0860606333ad42f5639f1bc76b4d9ee85f5c486baaff0","first_seen":"2023-03-10T03:13:03Z","last_seen":"2026-09-10T19:48:25.03012Z","times_seen":63,"resource_available":true,"data":null}},"time_used":486,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":486,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-10","alert":"Phishing Block","trigger":"essschools.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-10","alert":"Sinkholed","trigger":"essschools.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-10","alert":"Sinkholed","trigger":"essschools.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"essschools.com/backend/themes/default/rtl/bootstrap-rtl.min.css","fqdn":"essschools.com","domain":"essschools.com","tld":"com"},"ip":{"addr":"162.254.39.18","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://essschools.com/","date":"2026-09-10T19:47:53.252Z","timestamp":1789069673252,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"essschools.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Tue, 23 Jun 2026 00:00:00 GMT","end":"Thu, 07 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"42:2E:53:EA:2D:EC:EB:65:00:72:1B:90:A6:4C:9E:C6:CE:5C:EF:BA","sha256":"6F:74:11:89:40:F0:04:7B:21:36:9B:4F:F7:26:2C:D9:3F:A2:E3:C5:CB:B2:00:E0:22:5F:7D:C5:93:6B:27:57"}}},"request":{"raw":"GET /backend/themes/default/rtl/bootstrap-rtl.min.css HTTP/1.1\r\nHost: essschools.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://essschools.com/\r\nCookie: ci_session=5s6r3gc3e3m9nrm0rqc4j1j0rcttrp5f\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=604800\r\nexpires: Thu, 17 Sep 2026 19:47:53 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 09 May 2019 23:14:02 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 18511\r\ndate: Thu, 10 Sep 2026 19:47:53 GMT\r\nserver: LiteSpeed\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":121311,"size_decoded":18872,"mime_type":"text/css","magic":"ASCII text, with very long lines (65367), with CRLF line terminators","md5":"4e61c07e53ecaabce3a885e4ff2533aa","sha1":"3de9fe0401d8f5135638d96a4535b871153929b1","sha256":"de131b17a3b42bda39c902f5f25375e0f1107d9a5d491413336228bc639e0217","sha512":"2853cc304cb4f24b8dd0e240299ac6fc33f92c21e1fff50ba32c2f386a50fb8beadcee0b16fe6a16eca59572b601bbe226d2be487fb3c5acf8b77b0a06db54e0","ssdeep":"768:tyGxw/dIH3I7r3n+UI60HQURqSeqdR8ttbZbnQ9N+OHtrT6R++PAMCYQzaR:Zw/WMHI60HQURqqRUrQpn0++9Cq","tlshash":"40c3c6a0f11031ea7333c55a71d0ed8a2259e152e55b4fb7f22f29d84f886ca1673f1a","first_seen":"2026-01-02T05:28:37.65778Z","last_seen":"2026-09-10T19:48:25.03123Z","times_seen":3,"resource_available":false,"data":null}},"time_used":482,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":482,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-10","alert":"Sinkholed","trigger":"essschools.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-10","alert":"Phishing Block","trigger":"essschools.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-10","alert":"Sinkholed","trigger":"essschools.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"essschools.com/backend/themes/default/js/ss-lightbox.js","fqdn":"essschools.com","domain":"essschools.com","tld":"com"},"ip":{"addr":"162.254.39.18","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://essschools.com/","date":"2026-09-10T19:47:53.262Z","timestamp":1789069673262,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"essschools.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Tue, 23 Jun 2026 00:00:00 GMT","end":"Thu, 07 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"42:2E:53:EA:2D:EC:EB:65:00:72:1B:90:A6:4C:9E:C6:CE:5C:EF:BA","sha256":"6F:74:11:89:40:F0:04:7B:21:36:9B:4F:F7:26:2C:D9:3F:A2:E3:C5:CB:B2:00:E0:22:5F:7D:C5:93:6B:27:57"}}},"request":{"raw":"GET /backend/themes/default/js/ss-lightbox.js HTTP/1.1\r\nHost: essschools.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://essschools.com/\r\nCookie: ci_session=5s6r3gc3e3m9nrm0rqc4j1j0rcttrp5f\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/javascript\r\nlast-modified: Thu, 18 Mar 2021 16:01:10 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 6093\r\ndate: Thu, 10 Sep 2026 19:47:53 GMT\r\nserver: LiteSpeed\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":25413,"size_decoded":6381,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (566), with CRLF line terminators","md5":"9d9dcf65608fdc3a80ca3a4cc0cea298","sha1":"8845d7b87034caed942506e9888ab984b7badac2","sha256":"0a356cb882b6b1d3826263c7521788e268bef09f6ee2b5f9b24010fe942933a5","sha512":"52f9fbe1337f679db0dc8df922461e0c99400c3cf209f35eaa0646863504beb306be2f0675bc3856d85ba62cf627f22b64e130d714e693c227d18ce0c638328c","ssdeep":"768:24eHEEjbhgWEdOVMKEPaPnfola8v1hqLNP81aHJbajeHLMnBjpIIVwkmRL/jlWT4:MpNN/XP81aHopdVwPBFkbddAWbnbtW6a","tlshash":"97b263e733be292ec548121b983e895feb6cd932c106417e7899e0dd16dc84497b1ebc","first_seen":"2025-08-04T07:37:34.49141Z","last_seen":"2026-09-10T19:48:25.032307Z","times_seen":8,"resource_available":true,"data":null}},"time_used":485,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":476,"receive":9,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-10","alert":"Sinkholed","trigger":"essschools.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-10","alert":"Sinkholed","trigger":"essschools.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-10","alert":"Phishing Block","trigger":"essschools.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"essschools.com/backend/themes/default/js/custom.js","fqdn":"essschools.com","domain":"essschools.com","tld":"com"},"ip":{"addr":"162.254.39.18","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://essschools.com/","date":"2026-09-10T19:47:53.263Z","timestamp":1789069673263,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"essschools.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Tue, 23 Jun 2026 00:00:00 GMT","end":"Thu, 07 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"42:2E:53:EA:2D:EC:EB:65:00:72:1B:90:A6:4C:9E:C6:CE:5C:EF:BA","sha256":"6F:74:11:89:40:F0:04:7B:21:36:9B:4F:F7:26:2C:D9:3F:A2:E3:C5:CB:B2:00:E0:22:5F:7D:C5:93:6B:27:57"}}},"request":{"raw":"GET /backend/themes/default/js/custom.js HTTP/1.1\r\nHost: essschools.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://essschools.com/\r\nCookie: ci_session=5s6r3gc3e3m9nrm0rqc4j1j0rcttrp5f\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/javascript\r\nlast-modified: Sun, 16 May 2021 13:41:22 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 1604\r\ndate: Thu, 10 Sep 2026 19:47:53 GMT\r\nserver: LiteSpeed\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":6221,"size_decoded":1892,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with CRLF line terminators","md5":"a9ee86fc5b5c944cabff22a393ce139c","sha1":"13d873a2fce143eb7a299f56b691d096d870c3ff","sha256":"52b53537924ca15806347a3e339701cc33d03346f17dbf44bed1cb48fd667754","sha512":"061a14f20cc092250220ed6c3f3180fec739735b0aa3bc15fa8b1cf4e6e11c563beb8fcf217281107b71f4292f3eb3b139c9df6c8b4b0ad3222a0b6547311ff2","ssdeep":"96:TQxwf4TC8lekrBgBDjDekdZB6mspCxJXUmysJXnXUkJXRLEe:cxZw3ZgMxJXwsJXnXUkJXRt","tlshash":"fcd14f09bd2931b10873f338db3b9624ff6924079102aa1079fe6b942f7102961ace9c","first_seen":"2025-08-04T07:37:34.465683Z","last_seen":"2026-09-10T19:48:25.033674Z","times_seen":8,"resource_available":true,"data":null}},"time_used":637,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":637,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-10","alert":"Sinkholed","trigger":"essschools.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-10","alert":"Phishing Block","trigger":"essschools.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-10","alert":"Sinkholed","trigger":"essschools.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"essschools.com/uploads/school_content/logo/1672900975-63781378463b6716fc2886!front_fav_icon-608ff44a5fdb33.94953981.png","fqdn":"essschools.com","domain":"essschools.com","tld":"com"},"ip":{"addr":"162.254.39.18","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://essschools.com/","date":"2026-09-10T19:47:53.996Z","timestamp":1789069673996,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"essschools.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Tue, 23 Jun 2026 00:00:00 GMT","end":"Thu, 07 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"42:2E:53:EA:2D:EC:EB:65:00:72:1B:90:A6:4C:9E:C6:CE:5C:EF:BA","sha256":"6F:74:11:89:40:F0:04:7B:21:36:9B:4F:F7:26:2C:D9:3F:A2:E3:C5:CB:B2:00:E0:22:5F:7D:C5:93:6B:27:57"}}},"request":{"raw":"GET /uploads/school_content/logo/1672900975-63781378463b6716fc2886!front_fav_icon-608ff44a5fdb33.94953981.png HTTP/1.1\r\nHost: essschools.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://essschools.com/\r\nCookie: ci_session=5s6r3gc3e3m9nrm0rqc4j1j0rcttrp5f\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=604800\r\nexpires: Thu, 17 Sep 2026 19:47:54 GMT\r\ncontent-type: image/png\r\nlast-modified: Thu, 05 Jan 2023 15:42:54 GMT\r\naccept-ranges: bytes\r\ncontent-length: 2345\r\ndate: Thu, 10 Sep 2026 19:47:54 GMT\r\nserver: LiteSpeed\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":2345,"size_decoded":2661,"mime_type":"image/png","magic":"PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced","md5":"2ea3c8369d379815df86dbb5a3a48ac4","sha1":"edef8a9ba1a66fe93cbab5b0d95bfe2aa2596238","sha256":"7985054ad55f9eed9a47ee1c521e0b39fe220ebd4672f932bf3488464b4010aa","sha512":"9bb13627f8b36d44744ec6da35f0552305801176e0cd2d4992f490f7e04a7734bd7d03f25e5bcca5c4a126d3f1bd4f09cf228c85ada9ee9d1aff864c12280ca4","ssdeep":"","tlshash":"79410ac5ea426881a2ec76e874fac60586578f41d3e0d341f9cfc59a55233f8591f2ca","first_seen":"2025-08-04T14:15:21.274727Z","last_seen":"2026-09-10T19:48:25.034693Z","times_seen":5,"resource_available":false,"data":null}},"time_used":167,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":167,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-10","alert":"Phishing Block","trigger":"essschools.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-10","alert":"Sinkholed","trigger":"essschools.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-10","alert":"Sinkholed","trigger":"essschools.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"essschools.com/backend/themes/default/rtl/style-rtl.css","fqdn":"essschools.com","domain":"essschools.com","tld":"com"},"ip":{"addr":"162.254.39.18","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://essschools.com/","date":"2026-09-10T19:47:53.253Z","timestamp":1789069673253,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"essschools.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Tue, 23 Jun 2026 00:00:00 GMT","end":"Thu, 07 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"42:2E:53:EA:2D:EC:EB:65:00:72:1B:90:A6:4C:9E:C6:CE:5C:EF:BA","sha256":"6F:74:11:89:40:F0:04:7B:21:36:9B:4F:F7:26:2C:D9:3F:A2:E3:C5:CB:B2:00:E0:22:5F:7D:C5:93:6B:27:57"}}},"request":{"raw":"GET /backend/themes/default/rtl/style-rtl.css HTTP/1.1\r\nHost: essschools.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://essschools.com/\r\nCookie: ci_session=5s6r3gc3e3m9nrm0rqc4j1j0rcttrp5f\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=604800\r\nexpires: Thu, 17 Sep 2026 19:47:53 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 20 Dec 2022 06:55:10 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 7050\r\ndate: Thu, 10 Sep 2026 19:47:53 GMT\r\nserver: LiteSpeed\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":35500,"size_decoded":7410,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"4127b93a03ef0f6370db7e89a9910219","sha1":"a8589073c810b478f36dc2b292079a5ba02b7f68","sha256":"0d8e9688d7fee4ccc8e6e74559e39a927ecaa24c83299b040e85b43e5392f6de","sha512":"366d34019ae4ebab463dc5a1c6bc6232b323e414d6f43cc9dcc8510b8cb8f6cf977eba9d3fe79d46cfd26fd782796de90c4184abc69c7f25bcdaa66737b9ca5f","ssdeep":"384:UvVhtU/mRfgKwK5Kawa+nbeWEHfwt00LrQBwMZuxm:sV3fgKwK5KIHot0Es","tlshash":"33f23428d7051104b037d3a9a7e247a4eb3e4053eb1305bdbaea7954cfb64ac0673e9d","first_seen":"2026-01-02T05:28:37.652228Z","last_seen":"2026-09-10T19:48:25.035738Z","times_seen":3,"resource_available":false,"data":null}},"time_used":484,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":482,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-10","alert":"Sinkholed","trigger":"essschools.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-10","alert":"Phishing Block","trigger":"essschools.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-10","alert":"Sinkholed","trigger":"essschools.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"essschools.com/backend/toast-alert/toastr.css","fqdn":"essschools.com","domain":"essschools.com","tld":"com"},"ip":{"addr":"162.254.39.18","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://essschools.com/","date":"2026-09-10T19:47:53.255Z","timestamp":1789069673255,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"essschools.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Tue, 23 Jun 2026 00:00:00 GMT","end":"Thu, 07 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"42:2E:53:EA:2D:EC:EB:65:00:72:1B:90:A6:4C:9E:C6:CE:5C:EF:BA","sha256":"6F:74:11:89:40:F0:04:7B:21:36:9B:4F:F7:26:2C:D9:3F:A2:E3:C5:CB:B2:00:E0:22:5F:7D:C5:93:6B:27:57"}}},"request":{"raw":"GET /backend/toast-alert/toastr.css HTTP/1.1\r\nHost: essschools.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://essschools.com/\r\nCookie: ci_session=5s6r3gc3e3m9nrm0rqc4j1j0rcttrp5f\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=604800\r\nexpires: Thu, 17 Sep 2026 19:47:53 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 07 Oct 2021 07:00:18 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 3212\r\ndate: Thu, 10 Sep 2026 19:47:53 GMT\r\nserver: LiteSpeed\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":8647,"size_decoded":3572,"mime_type":"text/css","magic":"ASCII text, with very long lines (821), with CRLF line terminators","md5":"cad3d6ba3aa05a0a868842e67bb88b7a","sha1":"a2e37f35c8f8adde347ee77f4bb0f175f57b3b62","sha256":"8c86ee163f693c1eb8f5ed57cb51eae1037abaecb5ea3301cd31e763acdd313c","sha512":"870942a605e6894f6c9487a655aa0b249be12d76d82a7155bde194e704561181db227c7456a11076d7bfb54d8fbfb893196732cb8a6c2b1aebe8fdbb257460d5","ssdeep":"96:rLarsp5FUfx15XyweI2r1flnLcTWQ78GhJZCjt7TWP+zLmlDhTWKG8CzymTWVMzU:rwZ/XyweImlLLY8sy0ttwGZVMdS","tlshash":"0602a724c78132046ab2467db71a9612af7650a3d7cd19aa7deb519cf3cbb944c70f80","first_seen":"2025-05-23T23:07:47.30515Z","last_seen":"2026-09-10T19:48:25.036829Z","times_seen":7,"resource_available":false,"data":null}},"time_used":480,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":480,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-10","alert":"Phishing Block","trigger":"essschools.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-10","alert":"Sinkholed","trigger":"essschools.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-10","alert":"Sinkholed","trigger":"essschools.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"essschools.com/backend/toast-alert/toastr.js","fqdn":"essschools.com","domain":"essschools.com","tld":"com"},"ip":{"addr":"162.254.39.18","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://essschools.com/","date":"2026-09-10T19:47:53.256Z","timestamp":1789069673256,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"essschools.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Tue, 23 Jun 2026 00:00:00 GMT","end":"Thu, 07 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"42:2E:53:EA:2D:EC:EB:65:00:72:1B:90:A6:4C:9E:C6:CE:5C:EF:BA","sha256":"6F:74:11:89:40:F0:04:7B:21:36:9B:4F:F7:26:2C:D9:3F:A2:E3:C5:CB:B2:00:E0:22:5F:7D:C5:93:6B:27:57"}}},"request":{"raw":"GET /backend/toast-alert/toastr.js HTTP/1.1\r\nHost: essschools.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://essschools.com/\r\nCookie: ci_session=5s6r3gc3e3m9nrm0rqc4j1j0rcttrp5f\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/javascript\r\nlast-modified: Thu, 22 Dec 2022 07:42:00 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 2004\r\ndate: Thu, 10 Sep 2026 19:47:53 GMT\r\nserver: LiteSpeed\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":8040,"size_decoded":2292,"mime_type":"text/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with CRLF line terminators","md5":"fa3a318d61ca62755cc84face5b315ee","sha1":"2064876b82275c6496bcb7fa5597fc9941a14717","sha256":"715824bd46c808423c048c58456b5a4be1d90dbf38bb893ddeaf4a4d10b29c03","sha512":"1601efb65c65b32dac10eb2a181ec84b916c42901cdea4c3b2b4a6461ddd2ef615354fbf8b043a0ebac3484d63bed3c0f555d02df7ffa7d8b919a531a664cdf2","ssdeep":"96:N6mApHxN4DcSDaeD88DG+v+LxyX5Y7LuQpbnt4g4EDNHChmGTotgl4NZjOKjv0:NBK+vxpYnPD4eNCfTo6SNZjOKQ","tlshash":"67f1f0c1331fa75b4edb239c9036944cfa7de232854a147bb8a996986974708d3e32dc","first_seen":"2023-03-09T12:30:49Z","last_seen":"2026-09-10T19:48:25.037874Z","times_seen":63,"resource_available":true,"data":null}},"time_used":479,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":479,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-10","alert":"Sinkholed","trigger":"essschools.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-10","alert":"Sinkholed","trigger":"essschools.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-10","alert":"Phishing Block","trigger":"essschools.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"essschools.com/backend/themes/default/js/owl.carousel.min.js","fqdn":"essschools.com","domain":"essschools.com","tld":"com"},"ip":{"addr":"162.254.39.18","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://essschools.com/","date":"2026-09-10T19:47:53.259Z","timestamp":1789069673259,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"essschools.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Tue, 23 Jun 2026 00:00:00 GMT","end":"Thu, 07 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"42:2E:53:EA:2D:EC:EB:65:00:72:1B:90:A6:4C:9E:C6:CE:5C:EF:BA","sha256":"6F:74:11:89:40:F0:04:7B:21:36:9B:4F:F7:26:2C:D9:3F:A2:E3:C5:CB:B2:00:E0:22:5F:7D:C5:93:6B:27:57"}}},"request":{"raw":"GET /backend/themes/default/js/owl.carousel.min.js HTTP/1.1\r\nHost: essschools.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://essschools.com/\r\nCookie: ci_session=5s6r3gc3e3m9nrm0rqc4j1j0rcttrp5f\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/javascript\r\nlast-modified: Thu, 02 Mar 2017 05:13:12 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 10649\r\ndate: Thu, 10 Sep 2026 19:47:53 GMT\r\nserver: LiteSpeed\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"YouTube","description":"YouTube is a video sharing service where users can create their own profile, upload videos, watch, like and comment on other videos.","website":"https://www.youtube.com","common_platform_enumeration":"","icon":"YouTube.png","categories":["Video players"]}],"data":{"size":42766,"size_decoded":10938,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (32000)","md5":"b7b9c97cd68ec336d01a79d5be48c58d","sha1":"1a99890b57c9859a622337ed0b2f989d6e30cc0e","sha256":"b394d33b2a7ec654a6b037ebfda6618341b3f897a362be624c923c2711b54a43","sha512":"968e18822c24c6c54827999ec766fe54750a9489d22b6a45b641854731ec00beb8fd93b9bda8823e67463f7a99ab587d333673821ae90cfdf7e92716ba050c4e","ssdeep":"768:JBA7PMMFA0tdlXKNSR4vlGRep2lcwJeL+C2jQdc7/CORUQuFBt33:HAIMFFdYMxAcLQDV","tlshash":"cb137346b3202d2a869b61a0663f160bb23a291ce414507d7d7da6de6d7dc4c213fbfc","first_seen":"2023-03-07T01:03:18Z","last_seen":"2026-09-10T22:50:10.775055Z","times_seen":21038,"resource_available":true,"data":null}},"time_used":476,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":476,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-10","alert":"Sinkholed","trigger":"essschools.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-10","alert":"Phishing Block","trigger":"essschools.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-10","alert":"Sinkholed","trigger":"essschools.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"essschools.com/backend/themes/default/js/jquery.counterup.min.js","fqdn":"essschools.com","domain":"essschools.com","tld":"com"},"ip":{"addr":"162.254.39.18","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://essschools.com/","date":"2026-09-10T19:47:53.261Z","timestamp":1789069673261,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"essschools.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Tue, 23 Jun 2026 00:00:00 GMT","end":"Thu, 07 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"42:2E:53:EA:2D:EC:EB:65:00:72:1B:90:A6:4C:9E:C6:CE:5C:EF:BA","sha256":"6F:74:11:89:40:F0:04:7B:21:36:9B:4F:F7:26:2C:D9:3F:A2:E3:C5:CB:B2:00:E0:22:5F:7D:C5:93:6B:27:57"}}},"request":{"raw":"GET /backend/themes/default/js/jquery.counterup.min.js HTTP/1.1\r\nHost: essschools.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://essschools.com/\r\nCookie: ci_session=5s6r3gc3e3m9nrm0rqc4j1j0rcttrp5f\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/javascript\r\nlast-modified: Thu, 09 May 2019 00:04:28 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 400\r\ndate: Thu, 10 Sep 2026 19:47:53 GMT\r\nserver: LiteSpeed\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":915,"size_decoded":687,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (915), with no line terminators","md5":"06cc5114aee64876887958d69fe2001d","sha1":"40d8497aeec849035c9ac378343505447a28f3d7","sha256":"4bf6fce76bffaea2f36936a940d9e8c8e9c47036508ec89465f5d13f41a9e83f","sha512":"1abe87459407e877e13fa13fd19547465f6a3911c5ed1a06debd1c8335aa9504300aa42e0377766a01734a85aaf63cc20b7f542d18129d1ff0e9ee6ac67172dc","ssdeep":"","tlshash":"cb1159797a0f2dcdaa40e419f2efb0a491767dbc4c90984b52d158401f95abc2b5bb70","first_seen":"2023-03-07T12:11:03Z","last_seen":"2026-09-10T19:48:25.039911Z","times_seen":451,"resource_available":true,"data":null}},"time_used":473,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":473,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-10","alert":"Sinkholed","trigger":"essschools.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-10","alert":"Sinkholed","trigger":"essschools.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-10","alert":"Phishing Block","trigger":"essschools.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"essschools.com/backend/dist/js/bootstrap-select.min.js","fqdn":"essschools.com","domain":"essschools.com","tld":"com"},"ip":{"addr":"162.254.39.18","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://essschools.com/","date":"2026-09-10T19:47:53.251Z","timestamp":1789069673251,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"essschools.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Tue, 23 Jun 2026 00:00:00 GMT","end":"Thu, 07 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"42:2E:53:EA:2D:EC:EB:65:00:72:1B:90:A6:4C:9E:C6:CE:5C:EF:BA","sha256":"6F:74:11:89:40:F0:04:7B:21:36:9B:4F:F7:26:2C:D9:3F:A2:E3:C5:CB:B2:00:E0:22:5F:7D:C5:93:6B:27:57"}}},"request":{"raw":"GET /backend/dist/js/bootstrap-select.min.js HTTP/1.1\r\nHost: essschools.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://essschools.com/\r\nCookie: ci_session=5s6r3gc3e3m9nrm0rqc4j1j0rcttrp5f\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/javascript\r\nlast-modified: Wed, 20 Nov 2019 22:08:32 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 6057\r\ndate: Thu, 10 Sep 2026 19:47:53 GMT\r\nserver: LiteSpeed\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":21556,"size_decoded":6345,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (21290)","md5":"fc34ce1c5622e906a7c3ef0ec552d2ec","sha1":"46fcbd71810b0a9a01629969d68613756152b815","sha256":"068a204b057e24ebdf97dec979544cd39d47e4d298dd1f05f1f087ecdebc4d9c","sha512":"d55d4beb6c6239844593e03545e315e4a746f55f9d697b44acd9e62645a7bc38aebbe6d4e2770e2f752caa548780f7ebcd9c86c67ceeb8dbc79311b5e9ea9482","ssdeep":"384:eLan1vjMBZWsSFkDvUnOZjE4dAHQnM07iraWuL7IS:eLa1vjM3QFkDvUOZI4TzMs77","tlshash":"75a2965b716233b222ff40db602a1a49b133ba3dd9034059357e8af659fcd8474a7e36","first_seen":"2023-03-08T09:17:19Z","last_seen":"2026-09-10T19:48:25.041064Z","times_seen":175,"resource_available":true,"data":null}},"time_used":484,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":484,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-10","alert":"Sinkholed","trigger":"essschools.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-10","alert":"Sinkholed","trigger":"essschools.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-10","alert":"Phishing Block","trigger":"essschools.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"essschools.com/backend/themes/default/js/bootstrap.min.js","fqdn":"essschools.com","domain":"essschools.com","tld":"com"},"ip":{"addr":"162.254.39.18","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://essschools.com/","date":"2026-09-10T19:47:53.258Z","timestamp":1789069673258,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"essschools.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Tue, 23 Jun 2026 00:00:00 GMT","end":"Thu, 07 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"42:2E:53:EA:2D:EC:EB:65:00:72:1B:90:A6:4C:9E:C6:CE:5C:EF:BA","sha256":"6F:74:11:89:40:F0:04:7B:21:36:9B:4F:F7:26:2C:D9:3F:A2:E3:C5:CB:B2:00:E0:22:5F:7D:C5:93:6B:27:57"}}},"request":{"raw":"GET /backend/themes/default/js/bootstrap.min.js HTTP/1.1\r\nHost: essschools.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://essschools.com/\r\nCookie: ci_session=5s6r3gc3e3m9nrm0rqc4j1j0rcttrp5f\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/javascript\r\nlast-modified: Wed, 03 Oct 2018 21:01:38 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 9523\r\ndate: Thu, 10 Sep 2026 19:47:53 GMT\r\nserver: LiteSpeed\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":37051,"size_decoded":9811,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (32033), with CRLF line terminators","md5":"04c84852e9937b142ac73c285b895b85","sha1":"8fb8a9319055253d085edfc3bb72d20f614ec709","sha256":"36460e494e4c628443afded40b2743b5ede9a4a76fb4f7b9ef2345cc7e59fd64","sha512":"e27be06bc898dcf893f06cc49cafcbb6ba6e3a69106a89a500f6993e57600b3636392784811237a1a783967dbe05d57a0769c78f8074a0c3a59b16b655b1d350","ssdeep":"768:72rGy27UwlNqMl95qNmCFejhqs8snmi+CSFXfgx8Gf3Zq7Q:yg73zhq0GvgJ3ZKQ","tlshash":"eff28606b23031a147efb1e1525b020e7239696ee906907c78b99af53db9c48717bf3d","first_seen":"2023-03-07T01:03:32Z","last_seen":"2026-09-10T19:48:25.042646Z","times_seen":6929,"resource_available":true,"data":null}},"time_used":478,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":478,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-10","alert":"Sinkholed","trigger":"essschools.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-10","alert":"Sinkholed","trigger":"essschools.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-10","alert":"Phishing Block","trigger":"essschools.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"essschools.com/backend/themes/default/fonts/roboto-regular-webfont.woff2","fqdn":"essschools.com","domain":"essschools.com","tld":"com"},"ip":{"addr":"162.254.39.18","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://essschools.com/","date":"2026-09-10T19:47:53.820Z","timestamp":1789069673820,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"essschools.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Tue, 23 Jun 2026 00:00:00 GMT","end":"Thu, 07 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"42:2E:53:EA:2D:EC:EB:65:00:72:1B:90:A6:4C:9E:C6:CE:5C:EF:BA","sha256":"6F:74:11:89:40:F0:04:7B:21:36:9B:4F:F7:26:2C:D9:3F:A2:E3:C5:CB:B2:00:E0:22:5F:7D:C5:93:6B:27:57"}}},"request":{"raw":"GET /backend/themes/default/fonts/roboto-regular-webfont.woff2 HTTP/1.1\r\nHost: essschools.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://essschools.com/backend/themes/default/css/style.css\r\nCookie: ci_session=5s6r3gc3e3m9nrm0rqc4j1j0rcttrp5f\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=604800\r\nexpires: Thu, 17 Sep 2026 19:47:53 GMT\r\ncontent-type: font/woff2\r\nlast-modified: Thu, 04 Oct 2018 02:31:34 GMT\r\naccept-ranges: bytes\r\ncontent-length: 25328\r\ndate: Thu, 10 Sep 2026 19:47:53 GMT\r\nserver: LiteSpeed\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":25328,"size_decoded":25646,"mime_type":"font/woff2","magic":"Web Open Font Format, TrueType, length 25328, version 1.0","md5":"16f263078fbd0462decf68f69deb4817","sha1":"2f1d3fbecbc41a70f53f25f33f93f89f0ab40266","sha256":"5af39f50fe2ae31eca4c0e3759a0169974140832acb61d6dd01808c82bdf2a1d","sha512":"883a14143c97c1a15645c556805dce3d64125fa53c7aba252a88872aa261a641f729573c98b15ee0c75e2a61c1c08ff581eae10fa8984708fa1330ffcf93242d","ssdeep":"384:O3gb6YYlaJm1614jKr8wW3FfbJygYqdH0RDARKEekWaiUsEY8YiWe0gqE4K4:XTYlSx1488H194uHIkRKl4Kqn+K4","tlshash":"c6b2f1bb466e723de433dcf6e43dfda978ad752082e0ce843893a4c8e65d225b541b05","first_seen":"2023-06-03T22:00:24Z","last_seen":"2026-09-10T19:48:25.043164Z","times_seen":47,"resource_available":false,"data":null}},"time_used":169,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":168,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-10","alert":"Sinkholed","trigger":"essschools.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-10","alert":"Sinkholed","trigger":"essschools.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-10","alert":"Phishing Block","trigger":"essschools.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"essschools.com/backend/themes/default/fonts/fontawesome-webfont.woff2?v=4.7.0","fqdn":"essschools.com","domain":"essschools.com","tld":"com"},"ip":{"addr":"162.254.39.18","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://essschools.com/","date":"2026-09-10T19:47:53.822Z","timestamp":1789069673822,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"essschools.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Tue, 23 Jun 2026 00:00:00 GMT","end":"Thu, 07 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"42:2E:53:EA:2D:EC:EB:65:00:72:1B:90:A6:4C:9E:C6:CE:5C:EF:BA","sha256":"6F:74:11:89:40:F0:04:7B:21:36:9B:4F:F7:26:2C:D9:3F:A2:E3:C5:CB:B2:00:E0:22:5F:7D:C5:93:6B:27:57"}}},"request":{"raw":"GET /backend/themes/default/fonts/fontawesome-webfont.woff2?v=4.7.0 HTTP/1.1\r\nHost: essschools.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://essschools.com/backend/themes/default/css/font-awesome.min.css\r\nCookie: ci_session=5s6r3gc3e3m9nrm0rqc4j1j0rcttrp5f\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=604800\r\nexpires: Thu, 17 Sep 2026 19:47:53 GMT\r\ncontent-type: font/woff2\r\nlast-modified: Thu, 03 Sep 2020 05:57:16 GMT\r\naccept-ranges: bytes\r\ncontent-length: 77160\r\ndate: Thu, 10 Sep 2026 19:47:53 GMT\r\nserver: LiteSpeed\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":77160,"size_decoded":77478,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 77160, version 4.459","md5":"af7ae505a9eed503f8b8e6982036873e","sha1":"d6f48cba7d076fb6f2fd6ba993a75b9dc1ecbf0c","sha256":"2adefcbc041e7d18fcf2d417879dc5a09997aa64d675b7a3c4b6ce33da13f3fe","sha512":"838fefdbc14901f41edf995a78fdac55764cd4912ccb734b8bea4909194582904d8f2afdf2b6c428667912ce4d65681a1044d045d1bc6de2b14113f0315fc892","ssdeep":"1536:/MkbAPfd1vyBKwHz4kco36ZvIaBfRPlajyXUA2jVTc:L0nXnHdfRVEAS2","tlshash":"7d7302e63b6c4943e03d6460708abe9f104b3ab42fe057e5c876db7f2722992b71552c","first_seen":"2023-04-05T03:30:47Z","last_seen":"2026-09-11T00:56:47.258911Z","times_seen":540257,"resource_available":false,"data":null}},"time_used":169,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":168,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-10","alert":"Phishing Block","trigger":"essschools.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-10","alert":"Sinkholed","trigger":"essschools.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-10","alert":"Sinkholed","trigger":"essschools.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"essschools.com/","fqdn":"essschools.com","domain":"essschools.com","tld":"com"},"ip":{"addr":"162.254.39.18","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-09-10T19:47:52.161Z","timestamp":1789069672161,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"essschools.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Tue, 23 Jun 2026 00:00:00 GMT","end":"Thu, 07 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"42:2E:53:EA:2D:EC:EB:65:00:72:1B:90:A6:4C:9E:C6:CE:5C:EF:BA","sha256":"6F:74:11:89:40:F0:04:7B:21:36:9B:4F:F7:26:2C:D9:3F:A2:E3:C5:CB:B2:00:E0:22:5F:7D:C5:93:6B:27:57"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: essschools.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nx-powered-by: PHP/8.1.34\r\nset-cookie: ci_session=5s6r3gc3e3m9nrm0rqc4j1j0rcttrp5f; expires=Thu, 10-Sep-2026 21:47:52 GMT; Max-Age=7200; path=/; HttpOnly; secure\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate\r\npragma: no-cache\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Thu, 10 Sep 2026 19:47:52 GMT\r\nserver: LiteSpeed\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":[{"name":"ci_session","value":"5s6r3gc3e3m9nrm0rqc4j1j0rcttrp5f","quoted":false,"path":"/","expires":"2026-09-10T21:47:52Z","raw_expires":"Thu, 10-Sep-2026 21:47:52 GMT","max_age":7200,"secure":true,"http_only":true,"same_site":"","partitioned":false,"raw":"ci_session=5s6r3gc3e3m9nrm0rqc4j1j0rcttrp5f; expires=Thu, 10-Sep-2026 21:47:52 GMT; Max-Age=7200; path=/; HttpOnly; secure"}],"status_code":"200","status_text":"OK","fingerprints":[{"name":"OWL Carousel","description":"OWL Carousel is an enabled jQuery plugin that lets you create responsive carousel sliders.","website":"https://owlcarousel2.github.io/OwlCarousel2/","common_platform_enumeration":"","icon":"OWL Carousel.png","categories":["JavaScript libraries"]},{"name":"Moment.js","description":"Moment.js is a free and open-source JavaScript library that removes the need to use the native JavaScript Date object directly.","website":"https://momentjs.com","common_platform_enumeration":"cpe:2.3:a:momentjs:moment:*:*:*:*:*:*:*:*","icon":"Moment.js.svg","categories":["JavaScript libraries"]},{"name":"Lightbox","description":"Lightbox is small javascript library used to overlay images on top of the current page.","website":"https://lokeshdhakar.com/projects/lightbox2/","common_platform_enumeration":"cpe:2.3:a:lightbox_photo_gallery_project:lightbox_photo_gallery:*:*:*:*:*:*:*:*","icon":"Lightbox.png","categories":["JavaScript libraries"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"CodeIgniter","description":"","website":"https://codeigniter.com","common_platform_enumeration":"cpe:2.3:a:codeigniter:codeigniter:*:*:*:*:*:*:*:*","icon":"CodeIgniter.png","categories":["Web frameworks"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"Bootstrap","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]},{"name":"PHP:8.1.34","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]}],"data":{"size":20897,"size_decoded":4465,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with CRLF line terminators","md5":"19a895466ce8eac095ec18970f8f4fc6","sha1":"01bb6c3504c772fa9b65a6354d2a432dd5ab1279","sha256":"4278b73e46ddd56bb2b2e223b00cd6644f992732f5afa988afb8c51d306ec9f8","sha512":"638f0de68ecf779c30514d60c5fae274c98a241f77cc1b42d54f8366fe4b10cc913f18250f5e1e3a3e7e07b9763cba899018a16f1fe921d92463f6c5a98c350c","ssdeep":"192:K8LPU3Fr3JFv4o/dqrdeE9QPZiHW9QXt1wikdJ6Gkjwv32q0VxGk2lnEFjlicJzi:BICYawiKrZGQvlEdEcFjO","tlshash":"2092322668d859330233c5d9a6b1ab49ffe5810bc64ba90436fc1bab0ff7d118c47a59","first_seen":"2026-01-02T05:28:37.643888Z","last_seen":"2026-09-10T19:48:25.044679Z","times_seen":3,"resource_available":false,"data":null}},"time_used":836,"timings":{"blocked":-1,"dns":10,"connect":167,"send":0,"wait":321,"receive":0,"ssl":338},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-10","alert":"Phishing Block","trigger":"essschools.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-10","alert":"Sinkholed","trigger":"essschools.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-10","alert":"Sinkholed","trigger":"essschools.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"essschools.com/backend/dist/css/ss-print.css","fqdn":"essschools.com","domain":"essschools.com","tld":"com"},"ip":{"addr":"162.254.39.18","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://essschools.com/","date":"2026-09-10T19:47:53.241Z","timestamp":1789069673241,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"essschools.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Tue, 23 Jun 2026 00:00:00 GMT","end":"Thu, 07 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"42:2E:53:EA:2D:EC:EB:65:00:72:1B:90:A6:4C:9E:C6:CE:5C:EF:BA","sha256":"6F:74:11:89:40:F0:04:7B:21:36:9B:4F:F7:26:2C:D9:3F:A2:E3:C5:CB:B2:00:E0:22:5F:7D:C5:93:6B:27:57"}}},"request":{"raw":"GET /backend/dist/css/ss-print.css HTTP/1.1\r\nHost: essschools.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://essschools.com/\r\nCookie: ci_session=5s6r3gc3e3m9nrm0rqc4j1j0rcttrp5f\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=604800\r\nexpires: Thu, 17 Sep 2026 19:47:53 GMT\r\ncontent-type: text/css\r\nlast-modified: Sat, 24 Sep 2022 07:04:54 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 889\r\ndate: Thu, 10 Sep 2026 19:47:53 GMT\r\nserver: LiteSpeed\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":5891,"size_decoded":1248,"mime_type":"text/css","magic":"ASCII text","md5":"0b0204738ab62a6d600530db8a6b35b5","sha1":"1287e08761dae4120e8d1c76612842997a81e1c7","sha256":"095fa5a2f401a0a0b936be42427871042b335eb2557940882870197182f8db32","sha512":"e9d253a3ead1a11a58d24bd2ed7360f3f8b7c95356daaa30a1892b63d8c26c611411f2dad8a60b3a5ea3163dfd8ff9c88129eaab9e0a77be3d4525d8a3fa7205","ssdeep":"96:bQF0hRxFmangD8GCsyICYiyC7BHClWxqCian6C+UwC9LlXCxrOOCi+yCYkeC1p5C:bQF0zpngD8GCsyICYiyC7BHClWACianK","tlshash":"7bc1f59f5df328094823d5773a68925b2137b06bbabaec1a7fec5e01cf05595c892343","first_seen":"2023-11-02T03:54:18Z","last_seen":"2026-09-10T19:48:25.045737Z","times_seen":15,"resource_available":false,"data":null}},"time_used":327,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":327,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-10","alert":"Phishing Block","trigger":"essschools.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-10","alert":"Sinkholed","trigger":"essschools.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-10","alert":"Sinkholed","trigger":"essschools.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"essschools.com/backend/themes/default/datepicker/bootstrap-datepicker3.css","fqdn":"essschools.com","domain":"essschools.com","tld":"com"},"ip":{"addr":"162.254.39.18","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://essschools.com/","date":"2026-09-10T19:47:53.242Z","timestamp":1789069673242,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"essschools.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Tue, 23 Jun 2026 00:00:00 GMT","end":"Thu, 07 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"42:2E:53:EA:2D:EC:EB:65:00:72:1B:90:A6:4C:9E:C6:CE:5C:EF:BA","sha256":"6F:74:11:89:40:F0:04:7B:21:36:9B:4F:F7:26:2C:D9:3F:A2:E3:C5:CB:B2:00:E0:22:5F:7D:C5:93:6B:27:57"}}},"request":{"raw":"GET /backend/themes/default/datepicker/bootstrap-datepicker3.css HTTP/1.1\r\nHost: essschools.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://essschools.com/\r\nCookie: ci_session=5s6r3gc3e3m9nrm0rqc4j1j0rcttrp5f\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=604800\r\nexpires: Thu, 17 Sep 2026 19:47:53 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 30 Oct 2019 22:27:32 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 2534\r\ndate: Thu, 10 Sep 2026 19:47:53 GMT\r\nserver: LiteSpeed\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":32847,"size_decoded":2894,"mime_type":"text/css","magic":"ASCII text","md5":"a4c462d54d3e8a76ee0f98818b2f7f26","sha1":"79b6d2d3423c9dedd035d617b04f8408e14d9992","sha256":"9dcf856648a99dbb5505b9b8af69dfb84e243574e9e634f24fa76c380feea6aa","sha512":"8bd0fdbcc1ce5950fb1755d58ffc5cac1d0aa8c7b76c6b9a1ae917789c7910a2152a2a313e6026d6b5fb09ddc3c9dee60c553e71b3bf0a0f03ecb08f1329b2c3","ssdeep":"96:OFFgrH/fHvoELn8MAMHHvXfu6IAUJfnvneaunSg:OFirf7L8X76rTaunJ","tlshash":"e7e253481740382b1e66d5568958b8f3ff5350af5cbd87b575a008ac032faa367acdb3","first_seen":"2023-04-17T18:37:07Z","last_seen":"2026-09-10T19:48:25.046648Z","times_seen":348,"resource_available":false,"data":null}},"time_used":326,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":326,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-10","alert":"Sinkholed","trigger":"essschools.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-10","alert":"Sinkholed","trigger":"essschools.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-10","alert":"Phishing Block","trigger":"essschools.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"essschools.com/backend/themes/default/js/jquery.waypoints.min.js","fqdn":"essschools.com","domain":"essschools.com","tld":"com"},"ip":{"addr":"162.254.39.18","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://essschools.com/","date":"2026-09-10T19:47:53.259Z","timestamp":1789069673259,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"essschools.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Tue, 23 Jun 2026 00:00:00 GMT","end":"Thu, 07 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"42:2E:53:EA:2D:EC:EB:65:00:72:1B:90:A6:4C:9E:C6:CE:5C:EF:BA","sha256":"6F:74:11:89:40:F0:04:7B:21:36:9B:4F:F7:26:2C:D9:3F:A2:E3:C5:CB:B2:00:E0:22:5F:7D:C5:93:6B:27:57"}}},"request":{"raw":"GET /backend/themes/default/js/jquery.waypoints.min.js HTTP/1.1\r\nHost: essschools.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://essschools.com/\r\nCookie: ci_session=5s6r3gc3e3m9nrm0rqc4j1j0rcttrp5f\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/javascript\r\nlast-modified: Fri, 26 Apr 2019 22:40:28 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 2541\r\ndate: Thu, 10 Sep 2026 19:47:53 GMT\r\nserver: LiteSpeed\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":8833,"size_decoded":2829,"mime_type":"text/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (8668)","md5":"98fd151faf76ea2f96b48e9a216325ba","sha1":"a3367a304da57e67e1353dbf18193847faf9c081","sha256":"8c39ce2883aad8a36c4194dc053127b29efa1677cc12db45e805760c5d9f14d1","sha512":"084880fbbf13a4ff4a0083f3a81bf152ff21cb8d63c88ddfdae1e2ec31a9fd8fca6bdef7aa049dc9b35e81615c8aa87a1ab37651e3f1d8a91f9674146d484d20","ssdeep":"192:5BBzxsMCm1dJDl6hj8P6PEGnvfiZaLkYluY4pLyUJWZPeGz+nrFr:5BFoIJDlC8CPZnvrLkYluYTUuPeGzs","tlshash":"0f026189750534221bdf90fad91f474ab3375828b80680bdb4c8d4ed28f252d676bf7a","first_seen":"2023-03-07T01:31:34Z","last_seen":"2026-09-10T20:13:34.006829Z","times_seen":5803,"resource_available":true,"data":null}},"time_used":476,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":476,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-10","alert":"Sinkholed","trigger":"essschools.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-10","alert":"Phishing Block","trigger":"essschools.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-10","alert":"Sinkholed","trigger":"essschools.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"essschools.com/backend/themes/default/datepicker/bootstrap-datepicker.min.js","fqdn":"essschools.com","domain":"essschools.com","tld":"com"},"ip":{"addr":"162.254.39.18","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://essschools.com/","date":"2026-09-10T19:47:53.264Z","timestamp":1789069673264,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"essschools.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Tue, 23 Jun 2026 00:00:00 GMT","end":"Thu, 07 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"42:2E:53:EA:2D:EC:EB:65:00:72:1B:90:A6:4C:9E:C6:CE:5C:EF:BA","sha256":"6F:74:11:89:40:F0:04:7B:21:36:9B:4F:F7:26:2C:D9:3F:A2:E3:C5:CB:B2:00:E0:22:5F:7D:C5:93:6B:27:57"}}},"request":{"raw":"GET /backend/themes/default/datepicker/bootstrap-datepicker.min.js HTTP/1.1\r\nHost: essschools.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://essschools.com/\r\nCookie: ci_session=5s6r3gc3e3m9nrm0rqc4j1j0rcttrp5f\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/javascript\r\nlast-modified: Wed, 30 Oct 2019 22:27:26 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 8532\r\ndate: Thu, 10 Sep 2026 19:47:53 GMT\r\nserver: LiteSpeed\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":29336,"size_decoded":8820,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (29087)","md5":"64d102e431ec166a09a9086d446acdee","sha1":"ec66cf3489a91ad9aa14b92c5546b6332e1436c2","sha256":"79b865eae859a35fb0b2c2a5db78a08ba98128ff58829410214aa927b1671340","sha512":"373668d5b2e01a3d41b146b7eb6561bc2f060fcb30a877cd3690c16ccb4ec2824daa20e57c06dae10194496be4750504e6cac568331073d29964566c0c95c6aa","ssdeep":"768:JqoOuPkQ+QdmxWNzndFk8eK0p8S+WtToHxxgAqA85Gen1BZP4:JqoRdmUzndbsnoHxt85tn17P4","tlshash":"f3d295c931957916817b91b0812b1303a733d8ae9c89883cbd6cc9d66e7dd4921bdfbc","first_seen":"2023-03-07T13:50:02Z","last_seen":"2026-09-10T19:48:25.048076Z","times_seen":417,"resource_available":true,"data":null}},"time_used":635,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":482,"receive":153,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-10","alert":"Phishing Block","trigger":"essschools.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-10","alert":"Sinkholed","trigger":"essschools.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-10","alert":"Sinkholed","trigger":"essschools.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"essschools.com/backend/themes/default/css/bootstrap.min.css","fqdn":"essschools.com","domain":"essschools.com","tld":"com"},"ip":{"addr":"162.254.39.18","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://essschools.com/","date":"2026-09-10T19:47:53.232Z","timestamp":1789069673232,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"essschools.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Tue, 23 Jun 2026 00:00:00 GMT","end":"Thu, 07 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"42:2E:53:EA:2D:EC:EB:65:00:72:1B:90:A6:4C:9E:C6:CE:5C:EF:BA","sha256":"6F:74:11:89:40:F0:04:7B:21:36:9B:4F:F7:26:2C:D9:3F:A2:E3:C5:CB:B2:00:E0:22:5F:7D:C5:93:6B:27:57"}}},"request":{"raw":"GET /backend/themes/default/css/bootstrap.min.css HTTP/1.1\r\nHost: essschools.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://essschools.com/\r\nCookie: ci_session=5s6r3gc3e3m9nrm0rqc4j1j0rcttrp5f\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=604800\r\nexpires: Thu, 17 Sep 2026 19:47:53 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 09 May 2019 00:04:04 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 18299\r\ndate: Thu, 10 Sep 2026 19:47:53 GMT\r\nserver: LiteSpeed\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":121267,"size_decoded":18660,"mime_type":"text/css","magic":"ASCII text, with very long lines (65367), with CRLF line terminators","md5":"0f54ca13bcbc80a6571cd6e1d8573a7e","sha1":"458a363970d6a73e4f7dc89d0c481e7dd8c23b28","sha256":"23e487a836eea43a6a9b726df2857c10a912a8dc49ad3cbb2ebbec3c6880e7bf","sha512":"bbcc69ad47535b3c5c0bc5c36601d90ff3d5bcbe990285e8f96abba86ea65ad425c2e137aefef50bf6d8814981f75322431849b20f7de1b135986c439c831cb5","ssdeep":"768:Xy3Gxw/Vc/QWlJxtQOIuiHlq5mzI4X8OAduFKbv2ctg2Bd8JP7ecQVvH1Fs:Jw/a1fIuiHlq5mN8lDbNmPbx","tlshash":"5ec3c7a0f21031ea7333c55a75d0ed872219a153e66a4fb7f22f25d88f845ca1673f1a","first_seen":"2023-05-17T16:18:10Z","last_seen":"2026-09-10T19:48:25.049083Z","times_seen":42,"resource_available":false,"data":null}},"time_used":169,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":169,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-10","alert":"Sinkholed","trigger":"essschools.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-10","alert":"Phishing Block","trigger":"essschools.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-10","alert":"Sinkholed","trigger":"essschools.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"essschools.com/backend/custom/jquery.min.js","fqdn":"essschools.com","domain":"essschools.com","tld":"com"},"ip":{"addr":"162.254.39.18","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://essschools.com/","date":"2026-09-10T19:47:53.246Z","timestamp":1789069673246,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"essschools.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Tue, 23 Jun 2026 00:00:00 GMT","end":"Thu, 07 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"42:2E:53:EA:2D:EC:EB:65:00:72:1B:90:A6:4C:9E:C6:CE:5C:EF:BA","sha256":"6F:74:11:89:40:F0:04:7B:21:36:9B:4F:F7:26:2C:D9:3F:A2:E3:C5:CB:B2:00:E0:22:5F:7D:C5:93:6B:27:57"}}},"request":{"raw":"GET /backend/custom/jquery.min.js HTTP/1.1\r\nHost: essschools.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://essschools.com/\r\nCookie: ci_session=5s6r3gc3e3m9nrm0rqc4j1j0rcttrp5f\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/javascript\r\nlast-modified: Wed, 03 Oct 2018 21:01:32 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 28767\r\ndate: Thu, 10 Sep 2026 19:47:53 GMT\r\nserver: LiteSpeed\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":84249,"size_decoded":29056,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (32061), with CRLF line terminators","md5":"9a094379d98c6458d480ad5a51c4aa27","sha1":"3fe9d8acaaec99fc8a3f0e90ed66d5057da2de4e","sha256":"b2ce8462d173fc92b60f98701f45443710e423af1b11525a762008ff2c1a0204","sha512":"4bbb1ccb1c9712ace14220d79a16cad01b56a4175a0dd837a90ca4d6ec262ebf0fc20e6fa1e19db593f3d593ddd90cfdffe492ef17a356a1756f27f90376b650","ssdeep":"1536:DPEkjP+iADIOr/NEe876nmBu3HvF38NdTuJO1z6/A4TqAub0R4ULvguEhjzXpa9r:oNM2Jiz6oAFKP5a98HrY","tlshash":"8b83d6d9b2c67062977734b850bf410bb17a98dab80c8c60f0a4d5e47eb4a8d517bf2d","first_seen":"2023-03-07T01:30:18Z","last_seen":"2026-09-10T23:30:49.517923Z","times_seen":4119,"resource_available":true,"data":null}},"time_used":487,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":322,"receive":165,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-10","alert":"Sinkholed","trigger":"essschools.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-10","alert":"Sinkholed","trigger":"essschools.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-10","alert":"Phishing Block","trigger":"essschools.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"essschools.com/backend/themes/default/css/font-awesome.min.css","fqdn":"essschools.com","domain":"essschools.com","tld":"com"},"ip":{"addr":"162.254.39.18","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://essschools.com/","date":"2026-09-10T19:47:53.235Z","timestamp":1789069673235,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"essschools.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Tue, 23 Jun 2026 00:00:00 GMT","end":"Thu, 07 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"42:2E:53:EA:2D:EC:EB:65:00:72:1B:90:A6:4C:9E:C6:CE:5C:EF:BA","sha256":"6F:74:11:89:40:F0:04:7B:21:36:9B:4F:F7:26:2C:D9:3F:A2:E3:C5:CB:B2:00:E0:22:5F:7D:C5:93:6B:27:57"}}},"request":{"raw":"GET /backend/themes/default/css/font-awesome.min.css HTTP/1.1\r\nHost: essschools.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://essschools.com/\r\nCookie: ci_session=5s6r3gc3e3m9nrm0rqc4j1j0rcttrp5f\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=604800\r\nexpires: Thu, 17 Sep 2026 19:47:53 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 03 Sep 2020 06:14:10 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 6660\r\ndate: Thu, 10 Sep 2026 19:47:53 GMT\r\nserver: LiteSpeed\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":31002,"size_decoded":7020,"mime_type":"text/css","magic":"ASCII text, with very long lines (30837), with CRLF line terminators","md5":"4258bd5c7a06955b6dae720a835fb7b2","sha1":"84dceb26861254989c3af1b57179432ad0513f9a","sha256":"b139f243c33a32098b98fe104d2070f65662d47c93cbdee9b80ac9ea4e060830","sha512":"6302011adfd12b0cc8d5b9d05e3b5face32491a02c800d7a1acf03025dbfa0e4bd12da5bb2d6899ef18f410ca3c98502865efd135276cc49645c5ea9eac31b02","ssdeep":"384:/Hu5yWeTUKW+KlkJ5de2UYDyVfwYUas2l8yQ/8dwmaU8E:/wlr+Klk3Yi+fwYUf2l8yQ/e9v3","tlshash":"09d241e8e54c01d66731c48bff81b36862b6fb3dd5854da9f01f290c29d226522c5fba","first_seen":"2023-04-08T16:12:54Z","last_seen":"2026-09-10T19:48:25.05168Z","times_seen":3918,"resource_available":false,"data":null}},"time_used":332,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":168,"receive":164,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-10","alert":"Sinkholed","trigger":"essschools.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-10","alert":"Phishing Block","trigger":"essschools.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-10","alert":"Sinkholed","trigger":"essschools.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"essschools.com/backend/dist/js/moment.min.js","fqdn":"essschools.com","domain":"essschools.com","tld":"com"},"ip":{"addr":"162.254.39.18","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://essschools.com/","date":"2026-09-10T19:47:53.243Z","timestamp":1789069673243,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"essschools.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Tue, 23 Jun 2026 00:00:00 GMT","end":"Thu, 07 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"42:2E:53:EA:2D:EC:EB:65:00:72:1B:90:A6:4C:9E:C6:CE:5C:EF:BA","sha256":"6F:74:11:89:40:F0:04:7B:21:36:9B:4F:F7:26:2C:D9:3F:A2:E3:C5:CB:B2:00:E0:22:5F:7D:C5:93:6B:27:57"}}},"request":{"raw":"GET /backend/dist/js/moment.min.js HTTP/1.1\r\nHost: essschools.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://essschools.com/\r\nCookie: ci_session=5s6r3gc3e3m9nrm0rqc4j1j0rcttrp5f\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/javascript\r\nlast-modified: Wed, 03 Oct 2018 21:01:34 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 12138\r\ndate: Thu, 10 Sep 2026 19:47:53 GMT\r\nserver: LiteSpeed\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":34177,"size_decoded":12427,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (32005), with CRLF line terminators","md5":"5091aef91928aaca200c0e453bdfff05","sha1":"0ec0a97bc938e6453e1b4da64c6c30aa6efd22f9","sha256":"f5634d8b799c27f5c1ae2ea5f27a427ccaf01e590cb74964add19d06e20d9f86","sha512":"8990d806f6d39a8f84bfd11bafba5aa64963919f721f4bb88c165c83b0f94d8a82c9bf4b38c29c496e58a5badfcf4d09938cbbf888fd827da48bed7245cbf1cc","ssdeep":"768:FmNolKWoVAzQwalFLcfbmDlEfOpqc40Ji:FBzIFSgu1ca","tlshash":"86e2a5897a56b002576312f444bf060bb23c98a5a44e4d2af089e8e87d7cc7d527bf7d","first_seen":"2023-03-10T03:13:03Z","last_seen":"2026-09-10T19:48:25.05219Z","times_seen":21,"resource_available":true,"data":null}},"time_used":325,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":325,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-10","alert":"Phishing Block","trigger":"essschools.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-10","alert":"Sinkholed","trigger":"essschools.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-10","alert":"Sinkholed","trigger":"essschools.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"essschools.com/backend/dist/css/bootstrap-select.min.css","fqdn":"essschools.com","domain":"essschools.com","tld":"com"},"ip":{"addr":"162.254.39.18","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://essschools.com/","date":"2026-09-10T19:47:53.250Z","timestamp":1789069673250,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"essschools.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Tue, 23 Jun 2026 00:00:00 GMT","end":"Thu, 07 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"42:2E:53:EA:2D:EC:EB:65:00:72:1B:90:A6:4C:9E:C6:CE:5C:EF:BA","sha256":"6F:74:11:89:40:F0:04:7B:21:36:9B:4F:F7:26:2C:D9:3F:A2:E3:C5:CB:B2:00:E0:22:5F:7D:C5:93:6B:27:57"}}},"request":{"raw":"GET /backend/dist/css/bootstrap-select.min.css HTTP/1.1\r\nHost: essschools.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://essschools.com/\r\nCookie: ci_session=5s6r3gc3e3m9nrm0rqc4j1j0rcttrp5f\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=604800\r\nexpires: Thu, 17 Sep 2026 19:47:53 GMT\r\ncontent-type: text/css\r\nlast-modified: Sun, 03 Jul 2022 04:41:34 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 1617\r\ndate: Thu, 10 Sep 2026 19:47:53 GMT\r\nserver: LiteSpeed\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":7690,"size_decoded":1977,"mime_type":"text/css","magic":"ASCII text, with very long lines (3097)","md5":"c3cdbcdfa196c087ff2b63b2cd3d9166","sha1":"6d17b5ceb5a72ab97a17999d5f0d0bd017d9424c","sha256":"95ae1918fe56dd633ef456b800ccf6037022a2be7d790883befef887abba66bb","sha512":"34f764e025d124cbaa477acd8f54a4edab8e489a1814a53e0500ee680607d99b01e259bbfa43b087bd07a832f428b0229b8ce43f529442d1566257ba742ddf7a","ssdeep":"96:QDjAVi4X4BUcEh2V4w4Ucy8MwUcCM/hRUDg5ck6cGxIcjAYC:QDjKbHh8f8MkUDg5cfdEYC","tlshash":"2af1126d72914078a1a681797ac5be8735adf312f243846db7dff2188f8208f1d3395a","first_seen":"2023-11-02T03:54:18Z","last_seen":"2026-09-10T19:48:25.05344Z","times_seen":52,"resource_available":false,"data":null}},"time_used":485,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":485,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-10","alert":"Sinkholed","trigger":"essschools.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-10","alert":"Phishing Block","trigger":"essschools.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-10","alert":"Sinkholed","trigger":"essschools.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"essschools.com/uploads/school_content/logo/1672900975-128524590063b6716fc26ed!front_logo-608ff44a5f8f07.35255544.png","fqdn":"essschools.com","domain":"essschools.com","tld":"com"},"ip":{"addr":"162.254.39.18","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://essschools.com/","date":"2026-09-10T19:47:53.272Z","timestamp":1789069673272,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"essschools.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Tue, 23 Jun 2026 00:00:00 GMT","end":"Thu, 07 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"42:2E:53:EA:2D:EC:EB:65:00:72:1B:90:A6:4C:9E:C6:CE:5C:EF:BA","sha256":"6F:74:11:89:40:F0:04:7B:21:36:9B:4F:F7:26:2C:D9:3F:A2:E3:C5:CB:B2:00:E0:22:5F:7D:C5:93:6B:27:57"}}},"request":{"raw":"GET /uploads/school_content/logo/1672900975-128524590063b6716fc26ed!front_logo-608ff44a5f8f07.35255544.png HTTP/1.1\r\nHost: essschools.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://essschools.com/\r\nCookie: ci_session=5s6r3gc3e3m9nrm0rqc4j1j0rcttrp5f\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=604800\r\nexpires: Thu, 17 Sep 2026 19:47:53 GMT\r\ncontent-type: image/png\r\nlast-modified: Thu, 05 Jan 2023 15:42:54 GMT\r\naccept-ranges: bytes\r\ncontent-length: 11734\r\ndate: Thu, 10 Sep 2026 19:47:53 GMT\r\nserver: LiteSpeed\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":11734,"size_decoded":12051,"mime_type":"image/png","magic":"PNG image data, 378 x 79, 8-bit/color RGBA, non-interlaced","md5":"ce7c69dcdbd4cd0ebeea038bf7bc9823","sha1":"5d075d11cd39f785bf222f2e378bc5536214cd87","sha256":"69ecabc5f0ed61de5ab6228567063a2ee025c53b6dc74c450dca0bd310bf05c9","sha512":"3c755c39e04f0245d8e1c98223d8de13b4f4ea04ff68cf3803fbb465eb3994c91f982ae3805da3ed8930ce0fa2496ccf8c1672c05bc377a68cd9a92e72b9f768","ssdeep":"192:itlUfxTPSKjBpnMTfqQrOJQbOAUP9oKgxrWMgoMBkRoaEmGqU3R9LVvQ617i9cWO:i3cZRjBNMjreiDShAxrMBkRoaENqUhD7","tlshash":"a932c05fe90c14625aac4cf3399204b66b2c8e04b9b659e2b92bd0d4df08de8558b1ca","first_seen":"2025-08-04T14:15:21.263055Z","last_seen":"2026-09-10T19:48:25.054535Z","times_seen":4,"resource_available":false,"data":null}},"time_used":462,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":462,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-10","alert":"Sinkholed","trigger":"essschools.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-10","alert":"Phishing Block","trigger":"essschools.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-10","alert":"Sinkholed","trigger":"essschools.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"essschools.com/backend/dist/css/dropify.min.css","fqdn":"essschools.com","domain":"essschools.com","tld":"com"},"ip":{"addr":"162.254.39.18","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://essschools.com/","date":"2026-09-10T19:47:53.244Z","timestamp":1789069673244,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"essschools.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Tue, 23 Jun 2026 00:00:00 GMT","end":"Thu, 07 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"42:2E:53:EA:2D:EC:EB:65:00:72:1B:90:A6:4C:9E:C6:CE:5C:EF:BA","sha256":"6F:74:11:89:40:F0:04:7B:21:36:9B:4F:F7:26:2C:D9:3F:A2:E3:C5:CB:B2:00:E0:22:5F:7D:C5:93:6B:27:57"}}},"request":{"raw":"GET /backend/dist/css/dropify.min.css HTTP/1.1\r\nHost: essschools.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://essschools.com/\r\nCookie: ci_session=5s6r3gc3e3m9nrm0rqc4j1j0rcttrp5f\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=604800\r\nexpires: Thu, 17 Sep 2026 19:47:53 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 03 Oct 2018 21:01:32 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 1831\r\ndate: Thu, 10 Sep 2026 19:47:53 GMT\r\nserver: LiteSpeed\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":9749,"size_decoded":2191,"mime_type":"text/css","magic":"ASCII text, with very long lines (9673), with CRLF line terminators","md5":"4e3b62a71fcc748411f7d78fb6696fce","sha1":"be35739e9a01dcdd6fdebd0fb037bc3293beb6f8","sha256":"d8208a9e5783e7fef99c4c51a11b7c86d5da7c19b5fca81c5476be79bd9b6f94","sha512":"b0a20d91cd14a4e576dc5002651ca70a0b0162b5587a0a6820b204b497a2d59bc3d2c4c135fa73f6ea5b29681db4399ccfbbd9cddedf7a76fb1d4a3597669464","ssdeep":"192:HegUHs3QtKElOa3M4giILRYnm7rjlAbP/L6/FGM9wZ:XKMpikZgHuYM9a","tlshash":"5b12caebc421a1c9ac23962e79cdd2683bb88da3b437469eb3c92149c75e75d130e305","first_seen":"2023-04-18T12:19:02Z","last_seen":"2026-09-10T19:48:25.055671Z","times_seen":55,"resource_available":false,"data":null}},"time_used":323,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":323,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-10","alert":"Sinkholed","trigger":"essschools.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-10","alert":"Phishing Block","trigger":"essschools.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-10","alert":"Sinkholed","trigger":"essschools.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}