{"report_id":"9c358e95-f1e8-417a-91e7-f6c49845654a","version":6,"status":"done","tags":[],"date":"2026-03-29T14:00:28Z","url":{"schema":"http","addr":"ymax-plus.com/","fqdn":"ymax-plus.com","domain":"ymax-plus.com","tld":"com"},"ip":{"addr":"184.94.213.169","port":0,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"final":{"url":{"schema":"https","addr":"ymax-plus.com/","fqdn":"ymax-plus.com","domain":"ymax-plus.com","tld":"com"},"title":"Ymax Plus » [OFFICIAL] Download","dom":{"size":71771,"mime_type":"text/html; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (10253)","md5":"87bd99cb7212107f99ad8b72e1dd43ba","sha1":"5def48880ec0b29d555f728cb6170707ab85170b","sha256":"2459e6afc9020ea127bccbdf681100472872297f2d71f07c2959aead63f7cde9","sha512":"d90f9f822787fa6ccdaa4dd0c85395be7d9fe1cf51541b9fc2c22d06e7b586bf970495a508ef2c0e1a4952e79cbab05139849abedb7ce755dcc5ea196af45e32","ssdeep":"1536:VcT3R0Ha5zIapLJ00RBuqj4QbeIlcKAKvMW15rw+mow2QCdEoVuQXGtbYMxxffN:VcT3R+a5jRJ00RT8slxAfwU+mZeEoVuX","tlshash":"f9634c62c2b8013a36bb43edd791f328729dd04ada0217f474f4d16852d6ef671b3a4a","dom_hash":"domhash76c9eb5acc5bc0df25d610fbe8b2c042","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"ymax-plus.com/","fqdn":"ymax-plus.com","domain":"ymax-plus.com","tld":"com"},"ip":{"addr":"184.94.213.169","port":0,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-05-03T14:00:28Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-29","alert":"Sinkholed","trigger":"ymax-plus.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"ymax-plus.com","ip":{"addr":"184.94.213.169","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"domain_registered":"2024-12-02","domain_rank":2736641,"first_seen":"2025-09-16T22:45:18.262088Z","last_seen":"2025-09-16T22:45:18.262088Z","alert_count":28,"request_count":28,"received_data":523140,"sent_data":13612,"comment":"","tags":null,"fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"WordPress:6.7.2","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"Google Analytics","description":"Google Analytics is a free web analytics service that tracks and reports website traffic.","website":"https://google.com/analytics","common_platform_enumeration":"","icon":"Google Analytics.svg","categories":["Analytics"]},{"name":"GenerateBlocks","description":"GenerateBlocks is a small collection of lightweight WordPress blocks for the WordPress Block Editor.","website":"https://generateblocks.com","common_platform_enumeration":"","icon":"GenerateBlocks.svg","categories":["WordPress plugins"]},{"name":"WordPress Block Editor","description":"Sites using the WordPress Block Editor, also known as Gutenberg.","website":"https://wordpress.org/gutenberg/","common_platform_enumeration":"","icon":"WordPress.svg","categories":["Page builders"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]}]},{"fqdn":"www.googletagmanager.com","ip":{"addr":"142.251.143.136","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2011-11-11","domain_rank":283,"first_seen":"2012-10-04T01:07:32Z","last_seen":"2026-03-22T22:23:33.61086Z","alert_count":0,"request_count":1,"received_data":465313,"sent_data":434,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"ymax-plus.com/wp-content/plugins/easy-table-of-contents/vendor/js-cookie/js.cookie.min_ver-2.2.1.js","fqdn":"ymax-plus.com","domain":"ymax-plus.com","tld":"com"},"ip":{"addr":"184.94.213.169","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"01306809ac90f94bce53c696d47a46fe","sha1":"84ff6e0d9e6ca7888398481645a26e93ac1f19e6","sha256":"ecb232f9b8e7c28a1078a8c9a35a25abb9c0cd34c25cb112037b6870d64049a6","sha512":"b8a8efb403c8b0e21471e4b4906fbb6d0a64df2174de510cc233a92a34c800bb7fff04d44419804cee2a76bbdca5be557b279d1f5c9749357f152d1f3220e34f","ssdeep":"","tlshash":"366154b471193a7b4e4f3470e13fa24ee23888ad489a0125915dd4f62cb680b25f7f9f","size":3257,"data":"","first_seen":"2026-02-27T07:07:07.147455Z","last_seen":"2026-04-30T11:47:39.152463Z","times_seen":5,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ymax-plus.com/wp-content/plugins/easy-table-of-contents/vendor/sticky-kit/jquery.sticky-kit.min_ver-1.9.2.js","fqdn":"ymax-plus.com","domain":"ymax-plus.com","tld":"com"},"ip":{"addr":"184.94.213.169","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"2d0747605c0dade464044a59b4e6d62b","sha1":"a936a5f58fcd472dedc47e6c3dbef57d4dd9d8fd","sha256":"a669e59b17316e6246c9f1a08889c96d7cc1e76af300d399981bcf133f26fec0","sha512":"1a6be67ff28eacfe47e5a8c56affa465a072137e3574736fb3221e76b66b756e463a5d128bdfa4f00d82b6d9141eaaa11226154a6e50bc61f03abb784f6a9a69","ssdeep":"","tlshash":"347162d87368753586ea7178816fb60e12ea94718ad3000ae61dd88817e2e4a60f3f9d","size":3614,"data":"","first_seen":"2026-02-27T07:07:07.115381Z","last_seen":"2026-04-30T11:47:39.177485Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ymax-plus.com/wp-content/plugins/easy-table-of-contents/assets/js/front.min_ver-2.0.73-1742577885.js","fqdn":"ymax-plus.com","domain":"ymax-plus.com","tld":"com"},"ip":{"addr":"184.94.213.169","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"75256c586537cdce446aedddf9c6fb6c","sha1":"6b1be137e2c96a486dfb978fd4f05c4af3f34203","sha256":"af89483121bb8bdb94868b2fef36b3f468027c027ff11f312c8a4fa9d904c446","sha512":"a0c7e7d5f2ba4b49adae69bf9d46fbe72b697beef3b4870768e6f104e1cc7186a052c789afb19e93d8823380f111909a4efc5d7997579bb12d953e05e6db5cea","ssdeep":"96:MssqFaWBtHE7lB3IHL+MIG3u3b3F3Ph0MZ9HYkY5FBk+H+ge:MssqFaWB1E7lKIN+MZ94kY5Fu","tlshash":"21a161a4f222743062fa746cc86b72097b5dfc2bc6c3405ab4d4d4c81d69d8936b7e39","size":4955,"data":"","first_seen":"2026-03-29T14:00:31.857694Z","last_seen":"2026-03-29T14:00:31.857694Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ymax-plus.com/","fqdn":"ymax-plus.com","domain":"ymax-plus.com","tld":"com"},"ip":{"addr":"184.94.213.169","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"fc4990b5ae59583343c8d0ef0fd228c2","sha1":"61340aea844bbffc5029f2546ac753487587b4f0","sha256":"206c560a6686bba3a8885fbbee6644761ff45959db7567d96a7a1fd9df4ff0d9","sha512":"056a8f735252d4c07611775eaf3ac34bd9166674fc3bb3e4855a7824977ed74f3d7739608f3804f6f1c576cf57ff09a7f20725e4cf1f6bc905083aa5e7d220e4","ssdeep":"","tlshash":"5061b69a3779388b317715d2aa2f0e07eb7698361688d034c9fab7141cb1863c37ad49","size":3198,"data":"","first_seen":"2025-09-07T21:38:36.053836Z","last_seen":"2026-05-02T00:34:03.844111Z","times_seen":7,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ymax-plus.com/","fqdn":"ymax-plus.com","domain":"ymax-plus.com","tld":"com"},"ip":{"addr":"184.94.213.169","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"c53bf6841960a607bd0fbe8c9acbfe88","sha1":"d4f2d5647102e98a6b43993aacd3d2507176dcf7","sha256":"de1f2ad749e5f401d97af1110eda772474d767fb9700c05e0587d6e775ec9e3f","sha512":"518b00bce15a5d0eca3292ba407ca027d212168ad64971bfb2f1b385fbce1802c7dadc5d47c5350508214424c91c8610f4611b6344eaa95405713b9706c9dd8a","ssdeep":"","tlshash":"c7c02b8c210a0c7092fb3740cb7fba00b003321896e1ea354c0d23048d30f03d7c4c14","size":152,"data":"","first_seen":"2026-03-29T14:00:31.890671Z","last_seen":"2026-03-29T14:00:31.890671Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ymax-plus.com/wp-content/themes/generatepress/assets/dist/modal_ver-3.5.1.js","fqdn":"ymax-plus.com","domain":"ymax-plus.com","tld":"com"},"ip":{"addr":"184.94.213.169","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"6a759d56558ff2ee7f9b0526666f9ad6","sha1":"0ba53e0803cea71b4cf40d80c2c2c6ff1c01cfa1","sha256":"93be22c12629fc02347f1e97bbe9df7dcd924784999c6773617df5dfd79d47c6","sha512":"e97bcee0f18cf3486dd60b115b0d7aa360275b3e11a494d6006891cc2227900f8be1d741bb558da9f6214759d03775b79b69eac54a8af06e34223822060c787f","ssdeep":"96:MssqFaDtDCpCUAOstCpM3ca6OnmnueHrJwXQYz6Jq:MssqFaDlCp2wpM32OnmnW3zX","tlshash":"398194ec7764b6311aebb1b5902fe60ea7751884988f14115439e88c3cbfd8e01e2e7d","size":4133,"data":"","first_seen":"2026-03-29T14:00:31.843123Z","last_seen":"2026-03-29T14:00:31.843123Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ymax-plus.com/","fqdn":"ymax-plus.com","domain":"ymax-plus.com","tld":"com"},"ip":{"addr":"184.94.213.169","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"9b78b28b396646badfc6017235ee4be9","sha1":"18103240bf0cb760cdf7febc628b56b8fca44319","sha256":"215f517010a20f2f4c55d34dd3c574568bd0fb83662f0b915ddb6561f97c3904","sha512":"6b82e20e99e8a57178afd50be19a2d5ecbf7062879808d851b3b5aa2b0a8a629ef06413f19dc9a6cd7a22d23e5d67e133fb70ff8030e0f6d6a494260d0085739","ssdeep":"","tlshash":"a9d0123a6b562b320997a7a266efb7413b6306b564c105135c75c8892f34dc981754ca","size":260,"data":"","first_seen":"2023-03-07T01:03:19Z","last_seen":"2026-06-11T01:16:58.594096Z","times_seen":8334,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ymax-plus.com/e-202512.js","fqdn":"ymax-plus.com","domain":"ymax-plus.com","tld":"com"},"ip":{"addr":"184.94.213.169","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"f4a7ab6c8de6024ea3b61ae1358ad707","sha1":"66c92bf85b68f69af03ffc3d14ec973b2ba03549","sha256":"4c568557b837ff266afed7c6846bd6f64fa9e2eb0565b9b7ff1f7f24e487dbad","sha512":"99c147ae537dd89e5af5fb63d2a341682201d95f77c1624dd1dc0430a64a3a407907df24e039f163bdb7c37bc9e3c343d778df9f408395fb6d26fc85eb5a0968","ssdeep":"192:MssqFaqZlmgfr243e6MpTXapkyN8jcpypscqDciqtiPh7C:jBZlnrZwXapkyN8jcpyioyh7C","tlshash":"e3f193a93240b13806f730b6665fb30bb1768e727e4b5045d27cc42069b2e8b9977f9d","size":8098,"data":"","first_seen":"2025-11-15T13:30:30.119891Z","last_seen":"2026-06-03T05:57:32.195429Z","times_seen":26,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ymax-plus.com/wp-includes/js/jquery/jquery-migrate.min_ver-3.4.1.js","fqdn":"ymax-plus.com","domain":"ymax-plus.com","tld":"com"},"ip":{"addr":"184.94.213.169","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"63464d242eafa0e027f1b491d3da7cde","sha1":"50decac34a33dffbb0307e48313edd48812aeeb4","sha256":"53c9ba73f4573429a25d9d820afa343363c867b82f0e9b02c23e8eb8e834b04c","sha512":"ce0090e2485d80abd4bc1e2f4277770279699ee265d06e2a2091bb7bca496856a15c11bd4837bc69c6cfe7e77ff047dcd3b1de8154c226202a244dc25f1558e9","ssdeep":"192:MssqFaBrprDN+sag6ifKIUpQI99P1tLm9kdgyq1+J3aCJQ+h4MPLORB:j4rprxaefKI0LP19m4q1WW+h4Mju","tlshash":"7e52b6adb56679714eb731b8f03be20f71b205c95a0d8940d1acc4f6286dc5e817bf68","size":14299,"data":"","first_seen":"2025-11-24T00:22:40.273986Z","last_seen":"2026-06-10T09:59:36.068718Z","times_seen":146,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ymax-plus.com/","fqdn":"ymax-plus.com","domain":"ymax-plus.com","tld":"com"},"ip":{"addr":"184.94.213.169","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"30ab7a5e8b9c7a491f5a6fbd672229c6","sha1":"1dcca2368dec88170c2b33dab4c14914d195a542","sha256":"99908dfca5119385898869240d1268e9dced5d2c5ded97651cc55aabed61b4dd","sha512":"fbe8b390905c7fdc49d09b732bd5644620047b529bfd1c2e78a4f533ef02d86f1655a0ec1cb9d3812964e57309b64c3903575e24d51bc4cd676fc2a5e9885954","ssdeep":"","tlshash":"2ab0120ed5515700d2a90000ccc91362f437a3172b1c4e95ddd84e5c4582fd96049143","size":99,"data":"","first_seen":"2025-04-26T12:26:25.934653Z","last_seen":"2026-05-22T07:21:25.471381Z","times_seen":105,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ymax-plus.com/wp-content/plugins/turn-rank-math-faq-block-to-accordion/assets/js/RMFA-JS.min_ver-1.1.0.js","fqdn":"ymax-plus.com","domain":"ymax-plus.com","tld":"com"},"ip":{"addr":"184.94.213.169","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"ec63739f20e0a1698ffba47ec9645cd1","sha1":"3f2f6a4e7ce443b92f4782c787910e797818af66","sha256":"b892c97e8d25831d86ab1245dccb295836e40f0711b68e895b71e1e51fa8bd92","sha512":"92611395998597fea90e4275c2bd03f76baec9adb446ae52aaacac7e45453cf474aa5599ddcd3ef42cc17e8c469d39b0bab63e8f6040a423e8327cf3c26ab8bb","ssdeep":"","tlshash":"ab41cde4700c27f8127f73a9b47be52d349a5010f6e2320a6a15a0fd2cb251c6bb6d5e","size":2017,"data":"","first_seen":"2026-03-29T14:00:31.871954Z","last_seen":"2026-03-29T14:00:31.871954Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ymax-plus.com/wp-content/plugins/easy-table-of-contents/assets/js/smooth_scroll.min_ver-2.0.73.js","fqdn":"ymax-plus.com","domain":"ymax-plus.com","tld":"com"},"ip":{"addr":"184.94.213.169","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"deb662a058b6a2b25104227b4e7004b9","sha1":"30d2e6535d3c3f9dcd304db60ef1930cdc08c034","sha256":"709633feeb66660957e34e05cc6a9969ff9e3e5a19ee6b6f18210267adc08bfd","sha512":"9d6d18687e1c35389c1c38fbc18584b133e41c859cafb1d0511c44c5bf5828ba9b48955542f8b066f3f2cfe8990a6054679de57f1f8c3a3fee7277bcebcd2e91","ssdeep":"","tlshash":"7941d5d8a715257ca1be30fcfc3fb21e626b5481a956200a116c94ca5c91f1d29f7e6c","size":1961,"data":"","first_seen":"2026-03-29T14:00:31.887661Z","last_seen":"2026-03-29T14:00:31.887661Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-13KE9KR162","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.251.143.136","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"bf92ca6484e726ef007bd7a4ca8dcb75","sha1":"c991c16504eed96b2084fdeab74b85ce9ecdc44a","sha256":"09efc87df8ebaf193fd69b76c26aa79ef732b0081ab0fa4d08c7230c69ab54ad","sha512":"282e4a576271541f0025a20b77e50f82bf16cdedb6e7d78ac41fa1418d941080ac1169d14c30c1e049214826d3cf950f1f0b24ac682fce2640f70d917901a347","ssdeep":"6144:R6ORjaFCE9VJlQGXHIzs8WVP1W+rwkQdqQtYTc0HdZgQ0:aCEfJlbIY8CmOp0","tlshash":"a3a40aceb3d674615296e478903f01cba57b29e2b44cc8a6f189cce02e7465a4277f7c","size":464709,"data":"","first_seen":"2026-03-29T14:00:31.848225Z","last_seen":"2026-03-29T14:00:31.848225Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ymax-plus.com/","fqdn":"ymax-plus.com","domain":"ymax-plus.com","tld":"com"},"ip":{"addr":"184.94.213.169","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"4c9131f0da2f7a4a85dacff933ce6280","sha1":"bc2d92b1dcf6f1ff7e89296285ba6bdd3c3967ac","sha256":"d0b65cc0394d6233c8333fab25652314a07c9bf2a9ab113d4ddd93e5e9c0e073","sha512":"0a5171175a2e135f8473bc6320acb74c8f355f1becc25ff65d6e1dcdcb033647d530de1f752ea7f1db6feb02d62255441a6edbe94e36342f109dc01f49e31c89","ssdeep":"","tlshash":"90110e31e0bc96274560c2fa8f4057b1b4bf70bc7be3874498d4e524235ee9a312a4d2","size":1042,"data":"","first_seen":"2025-10-26T20:53:07.347916Z","last_seen":"2026-03-29T14:00:31.893762Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ymax-plus.com/wp-includes/js/wp-emoji-release.min_ver-6.7.2.js","fqdn":"ymax-plus.com","domain":"ymax-plus.com","tld":"com"},"ip":{"addr":"184.94.213.169","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"c9cc939b206b4f143e99b0796dfa367b","sha1":"5147f61ae46751eff37e8f5784fe7d30083549b6","sha256":"a0ad2b9d30a6be60ed20c053a8b64664079707f8a867e5a3586f65a6fc262729","sha512":"61d8bbd6a1128ba20530492ea150ff7946c30923d3efc7e03158f6f921ca35002481001cb8368a1fb5214dea0d006d69a80e757438dc172c9ad986da13052764","ssdeep":"384:jdTbvzWuPTb9Uh3o//bEPjXgA2k1efAJmpc:jdX6U9Uh3o//YrXgAGfACc","tlshash":"ab92199bb33a4e9b343e3bd7cd968f4dc9da555321c0f079dbeeb28169a00568274c90","size":19448,"data":"","first_seen":"2025-11-16T04:09:33.390573Z","last_seen":"2026-06-08T09:48:59.420566Z","times_seen":30,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ymax-plus.com/","fqdn":"ymax-plus.com","domain":"ymax-plus.com","tld":"com"},"ip":{"addr":"184.94.213.169","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"e891393f0be3a6ffaa3923b307180e7e","sha1":"bc0a7332b9846a5762a71b9b9811c1a8b19df194","sha256":"2d1778345d3607ceb641cc5f21b0a2c045fa70052361ac91a17c39b2c9d96f71","sha512":"12674ec69eecfa043bcf9ee8529e5ec274a1bb55e068a2ae64a91d6362997f7e532325c77785b1bc980f42592cadbed487549bae0a5298077cb1cf9c02ff589f","ssdeep":"","tlshash":"eeb09b6c51439a33c19266445384d423e07509dc420d881ff195d0dc6945da31ccd457","size":127,"data":"","first_seen":"2023-03-07T01:03:19Z","last_seen":"2026-06-07T05:38:34.235217Z","times_seen":4517,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ymax-plus.com/wp-includes/js/jquery/jquery.min_ver-3.7.1.js","fqdn":"ymax-plus.com","domain":"ymax-plus.com","tld":"com"},"ip":{"addr":"184.94.213.169","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"5ae1272ca28872a18a307ec00920e5c0","sha1":"b5c701b3e47488815fe3ea75defd16a9c4f7f025","sha256":"713f19aa12bd1b034c4c114094ad0de6297bdb17346a516cc9ddab69329f3e3b","sha512":"b5af659bdcf4ed2aa5cd8cb43c2592cfedf24d38111f29b41054ab5d63ba6cd981354f7664355d280985cc35f969ceb6b29b5c3f21d6c8e1034e81e51126834d","ssdeep":"1536:fRUX9uDgwxcy2KVBNwchN6SLaHEk2BSrBESp+a/IEk4aAocVi8SMBQ47GK9:nHNwcv9VBQpLl88SMBQ47GK9","tlshash":"7183f8df73ca702247ab30b9406f550bf276199d684d4400f169d8e9bcb8a4a827bf7d","size":88275,"data":"","first_seen":"2025-11-24T00:22:40.245749Z","last_seen":"2026-06-10T09:59:36.026124Z","times_seen":152,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ymax-plus.com/wp-content/themes/generatepress/assets/js/menu.min_ver-3.5.1.js","fqdn":"ymax-plus.com","domain":"ymax-plus.com","tld":"com"},"ip":{"addr":"184.94.213.169","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"0d8a29dd2c427c78c330d14fbe7f4a9d","sha1":"a04bc3f6ee5903673f238d549646798898e0153e","sha256":"06c6a3efca02ea75210b9891934a39583c9029e1ed96815f6eed94c1d944a904","sha512":"f6cb8833498ab9e1c26e6484b9982fc634512bc3c6ed9eb25c63784069371041c5b755ee17e9b504ab3127559e71a2fc7b99dc169196fb662fbeb7375246c391","ssdeep":"192:MssqFa6QqHlWQZgROnqWgpkgJMhqDi92FY+alT/fnGtxTbv1:jgqHngROnvgJUqDi9cNYTnGvTbv1","tlshash":"4bf112fa5244227a04ef39d974e6e5c83b7568fdea4180212179c84d1ee9dc206f6ff4","size":8055,"data":"","first_seen":"2025-12-22T07:30:21.644363Z","last_seen":"2026-05-09T08:32:06.966988Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ymax-plus.com/","fqdn":"ymax-plus.com","domain":"ymax-plus.com","tld":"com"},"ip":{"addr":"184.94.213.169","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"719c6a80e42fa729394b1fb057b657a0","sha1":"35d2f68c8bb60b32ad5c65968e0bc5b8e5ecbfc1","sha256":"3a5919f1a43a112df5415b86ddd766814a8d4a3600d7548ebc9119fb0188790f","sha512":"74b5755de20ace42b190fc75fb7630ac1b85c2592e5647d61a755fdf113411c29740b878fc7f1c9bb88c13d8f11df65ef3b3dc97fbc5c1b469064eac9eebb081","ssdeep":"","tlshash":"fad0223a836cc57fe4742e1c31bc9c2090f4202781299f960f59f8e8b43d57310a3e04","size":232,"data":"","first_seen":"2026-03-29T14:00:31.896779Z","last_seen":"2026-03-29T14:00:31.896779Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"ymax-plus.com/wp-content/plugins/turn-rank-math-faq-block-to-accordion/assets/css/style.min_ver-1.1.0.css","fqdn":"ymax-plus.com","domain":"ymax-plus.com","tld":"com"},"ip":{"addr":"184.94.213.169","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://ymax-plus.com/","date":"2026-03-29T14:00:06.376Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ymax-plus.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Sat, 10 Jan 2026 00:00:00 GMT","end":"Sun, 10 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"76:B2:B2:18:99:6B:98:DE:AC:38:6E:D1:90:80:E7:68:65:85:DE:91","sha256":"24:64:DA:81:B8:61:E0:F5:D1:10:7B:6C:1E:6A:72:49:E6:A9:70:7D:A2:D5:99:08:AF:E9:35:67:DE:78:DC:90"}}},"request":{"raw":"GET /wp-content/plugins/turn-rank-math-faq-block-to-accordion/assets/css/style.min_ver-1.1.0.css HTTP/1.1\r\nHost: ymax-plus.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ymax-plus.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 05 Apr 2026 14:00:06 GMT\r\ncontent-type: text/css\r\nlast-modified: Fri, 09 Jan 2026 22:16:16 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 338\r\ndate: Sun, 29 Mar 2026 14:00:06 GMT\r\nserver: LiteSpeed\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1061,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (1061), with no line terminators","md5":"340df9cb2c8a1e5d5428a81637866c40","sha1":"759e7dffd2c0427030749b61e4193046b515f6ef","sha256":"d5d086ab8dd7703a41e01c913e225fafdc942be3bbd121dbd3c615f33091875f","sha512":"6690c375a3591d2d5905e4d76cec1424ee7212d28fdb1c094da21b4fe6780a63dd8e7d9932c4d6f532d5fc660f6827d30f5b36c5f73ba98eadc3d2437cbcf3d4","ssdeep":"","tlshash":"58118e73319e1214a21b833a5dd3ffa93c25e602ae554f14ee00519ec9862b5f31470a","first_seen":"2023-05-20T14:10:10Z","last_seen":"2026-06-11T02:23:39.465526Z","times_seen":700,"resource_available":false,"data":null}},"time_used":183,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":183,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-29","alert":"Sinkholed","trigger":"ymax-plus.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ymax-plus.com/wp-content/uploads/2024/12/Use-and-Activate-Ymax-Plus-Step-2.webp","fqdn":"ymax-plus.com","domain":"ymax-plus.com","tld":"com"},"ip":{"addr":"184.94.213.169","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://ymax-plus.com/","date":"2026-03-29T14:00:06.388Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ymax-plus.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Sat, 10 Jan 2026 00:00:00 GMT","end":"Sun, 10 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"76:B2:B2:18:99:6B:98:DE:AC:38:6E:D1:90:80:E7:68:65:85:DE:91","sha256":"24:64:DA:81:B8:61:E0:F5:D1:10:7B:6C:1E:6A:72:49:E6:A9:70:7D:A2:D5:99:08:AF:E9:35:67:DE:78:DC:90"}}},"request":{"raw":"GET /wp-content/uploads/2024/12/Use-and-Activate-Ymax-Plus-Step-2.webp HTTP/1.1\r\nHost: ymax-plus.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ymax-plus.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 05 Apr 2026 14:00:06 GMT\r\ncontent-type: image/webp\r\nlast-modified: Fri, 09 Jan 2026 22:16:44 GMT\r\naccept-ranges: bytes\r\ncontent-length: 11738\r\ndate: Sun, 29 Mar 2026 14:00:06 GMT\r\nserver: LiteSpeed\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":11738,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 648x235, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"1e6d4a1a971872676a024ff505acee06","sha1":"b1fbd8b0f68a407d93f6e4ad83b2929b21bfefdc","sha256":"b97b6501c5f3fdf1d99732144d07e4720b821bfdaaef7ca8b7737d9bc16d1bbd","sha512":"92d2188b10432955e5a7194b0425c84ae7016700e9d2459f352aee16b66ecc2aa20560e0cc15f7328751db913db2cc279fe55e5978240fa46ea1be3c9783d171","ssdeep":"192:uB9Ggpou9cXZSikQ4ZyquKZhSm1JsvKTf7yRPeA7c1DdMf6onENdKIII:I9DoHcGKim1JdTOMAoMf6o4Y/I","tlshash":"2932b04b976f6f6a8ed4fc730a77b0878b34b13469cb0ca24d9cb99843067487453329","first_seen":"2026-03-29T14:00:31.828779Z","last_seen":"2026-03-29T14:00:31.828779Z","times_seen":1,"resource_available":false,"data":null}},"time_used":524,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":524,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-29","alert":"Sinkholed","trigger":"ymax-plus.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ymax-plus.com/wp-content/themes/generatepress/assets/js/menu.min_ver-3.5.1.js","fqdn":"ymax-plus.com","domain":"ymax-plus.com","tld":"com"},"ip":{"addr":"184.94.213.169","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ymax-plus.com/","date":"2026-03-29T14:00:06.396Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ymax-plus.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Sat, 10 Jan 2026 00:00:00 GMT","end":"Sun, 10 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"76:B2:B2:18:99:6B:98:DE:AC:38:6E:D1:90:80:E7:68:65:85:DE:91","sha256":"24:64:DA:81:B8:61:E0:F5:D1:10:7B:6C:1E:6A:72:49:E6:A9:70:7D:A2:D5:99:08:AF:E9:35:67:DE:78:DC:90"}}},"request":{"raw":"GET /wp-content/themes/generatepress/assets/js/menu.min_ver-3.5.1.js HTTP/1.1\r\nHost: ymax-plus.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ymax-plus.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Fri, 09 Jan 2026 22:21:22 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 1867\r\ndate: Sun, 29 Mar 2026 14:00:06 GMT\r\nserver: LiteSpeed\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":8055,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (7333)","md5":"0d8a29dd2c427c78c330d14fbe7f4a9d","sha1":"a04bc3f6ee5903673f238d549646798898e0153e","sha256":"06c6a3efca02ea75210b9891934a39583c9029e1ed96815f6eed94c1d944a904","sha512":"f6cb8833498ab9e1c26e6484b9982fc634512bc3c6ed9eb25c63784069371041c5b755ee17e9b504ab3127559e71a2fc7b99dc169196fb662fbeb7375246c391","ssdeep":"192:MssqFa6QqHlWQZgROnqWgpkgJMhqDi92FY+alT/fnGtxTbv1:jgqHngROnvgJUqDi9cNYTnGvTbv1","tlshash":"4bf112fa5244227a04ef39d974e6e5c83b7568fdea4180212179c84d1ee9dc206f6ff4","first_seen":"2025-12-22T07:30:21.644363Z","last_seen":"2026-05-09T08:32:06.966988Z","times_seen":4,"resource_available":true,"data":null}},"time_used":522,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":522,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-29","alert":"Sinkholed","trigger":"ymax-plus.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ymax-plus.com/e-202512.js","fqdn":"ymax-plus.com","domain":"ymax-plus.com","tld":"com"},"ip":{"addr":"184.94.213.169","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ymax-plus.com/","date":"2026-03-29T14:00:06.398Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ymax-plus.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Sat, 10 Jan 2026 00:00:00 GMT","end":"Sun, 10 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"76:B2:B2:18:99:6B:98:DE:AC:38:6E:D1:90:80:E7:68:65:85:DE:91","sha256":"24:64:DA:81:B8:61:E0:F5:D1:10:7B:6C:1E:6A:72:49:E6:A9:70:7D:A2:D5:99:08:AF:E9:35:67:DE:78:DC:90"}}},"request":{"raw":"GET /e-202512.js HTTP/1.1\r\nHost: ymax-plus.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ymax-plus.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Fri, 09 Jan 2026 22:22:10 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 2690\r\ndate: Sun, 29 Mar 2026 14:00:06 GMT\r\nserver: LiteSpeed\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":8098,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (7376)","md5":"f4a7ab6c8de6024ea3b61ae1358ad707","sha1":"66c92bf85b68f69af03ffc3d14ec973b2ba03549","sha256":"4c568557b837ff266afed7c6846bd6f64fa9e2eb0565b9b7ff1f7f24e487dbad","sha512":"99c147ae537dd89e5af5fb63d2a341682201d95f77c1624dd1dc0430a64a3a407907df24e039f163bdb7c37bc9e3c343d778df9f408395fb6d26fc85eb5a0968","ssdeep":"192:MssqFaqZlmgfr243e6MpTXapkyN8jcpypscqDciqtiPh7C:jBZlnrZwXapkyN8jcpyioyh7C","tlshash":"e3f193a93240b13806f730b6665fb30bb1768e727e4b5045d27cc42069b2e8b9977f9d","first_seen":"2025-11-15T13:30:30.119891Z","last_seen":"2026-06-03T05:57:32.195429Z","times_seen":26,"resource_available":true,"data":null}},"time_used":522,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":522,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-29","alert":"Sinkholed","trigger":"ymax-plus.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ymax-plus.com/wp-includes/js/mediaelement/wp-mediaelement.min_ver-6.7.2.css","fqdn":"ymax-plus.com","domain":"ymax-plus.com","tld":"com"},"ip":{"addr":"184.94.213.169","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://ymax-plus.com/","date":"2026-03-29T14:00:06.375Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ymax-plus.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Sat, 10 Jan 2026 00:00:00 GMT","end":"Sun, 10 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"76:B2:B2:18:99:6B:98:DE:AC:38:6E:D1:90:80:E7:68:65:85:DE:91","sha256":"24:64:DA:81:B8:61:E0:F5:D1:10:7B:6C:1E:6A:72:49:E6:A9:70:7D:A2:D5:99:08:AF:E9:35:67:DE:78:DC:90"}}},"request":{"raw":"GET /wp-includes/js/mediaelement/wp-mediaelement.min_ver-6.7.2.css HTTP/1.1\r\nHost: ymax-plus.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ymax-plus.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 05 Apr 2026 14:00:06 GMT\r\ncontent-type: text/css\r\nlast-modified: Fri, 09 Jan 2026 22:16:10 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 982\r\ndate: Sun, 29 Mar 2026 14:00:06 GMT\r\nserver: LiteSpeed\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":4186,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (4186), with no line terminators","md5":"ea958276b7de454bd3c2873f0dc47e5f","sha1":"b143f6e8e8f79d8f104c26b0057ef5514d763219","sha256":"2e10d353ff038c2cad3492fc17801af3e6ef2669c9e9713bdb78b1dcb104c4fe","sha512":"2d40a1e713355eff88fa3bbf5471b4db5acc48fa2b978a555c034f2e5c7f131fcaf48e849d5d048df9d5dae068c4b6467a97b1dde99115e6b32f57e928569fc1","ssdeep":"48:wFfAeWkkqEsKO+TBxaBIIj+NqUFQW76d7JrOv2bN:wueWkkrLoI7U","tlshash":"d9810c1084149d2cf4eab33766cec75db43ad747fe75e7b86936e2b8c098a842073484","first_seen":"2023-04-05T04:06:46Z","last_seen":"2026-06-11T01:48:13.487717Z","times_seen":85211,"resource_available":false,"data":null}},"time_used":184,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":184,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-29","alert":"Sinkholed","trigger":"ymax-plus.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ymax-plus.com/wp-content/themes/generatepress/assets/css/main.min_ver-3.5.1.css","fqdn":"ymax-plus.com","domain":"ymax-plus.com","tld":"com"},"ip":{"addr":"184.94.213.169","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://ymax-plus.com/","date":"2026-03-29T14:00:06.379Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ymax-plus.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Sat, 10 Jan 2026 00:00:00 GMT","end":"Sun, 10 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"76:B2:B2:18:99:6B:98:DE:AC:38:6E:D1:90:80:E7:68:65:85:DE:91","sha256":"24:64:DA:81:B8:61:E0:F5:D1:10:7B:6C:1E:6A:72:49:E6:A9:70:7D:A2:D5:99:08:AF:E9:35:67:DE:78:DC:90"}}},"request":{"raw":"GET /wp-content/themes/generatepress/assets/css/main.min_ver-3.5.1.css HTTP/1.1\r\nHost: ymax-plus.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ymax-plus.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 05 Apr 2026 14:00:06 GMT\r\ncontent-type: text/css\r\nlast-modified: Fri, 09 Jan 2026 22:16:30 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 4410\r\ndate: Sun, 29 Mar 2026 14:00:06 GMT\r\nserver: LiteSpeed\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":19512,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (19512), with no line terminators","md5":"b7e067012db6249774c29e4c56b4f2c0","sha1":"7523574074e98d492a8da515f0daf7446cc504e0","sha256":"c839222ec3a5037179749a843610820436bf575a591a3e0b45404f1970a2cc56","sha512":"c77b609b39ddf4ab8b6a89aba1b8daa2e8824312b1032eed8270c82167794dd438ec9878dc5e5e19853565f3f95c24315e3f164b5919cbed8c772e84f7078bba","ssdeep":"384:sk1JAWvwWZ34igipTh3dGr5PL3NatuylxQp9svaQW4M+ght5NsKa4TqSD6CE:hAWvwWZ34igipTh3dGr5PL3NatuylxQo","tlshash":"3f9209a2aaf1242cb177831ffbd0e16c3565d522d30b95dab897d700c9cab67026379c","first_seen":"2024-08-28T15:41:57Z","last_seen":"2026-06-11T01:51:38.479585Z","times_seen":13480,"resource_available":false,"data":null}},"time_used":184,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":184,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-29","alert":"Sinkholed","trigger":"ymax-plus.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ymax-plus.com/wp-content/themes/generatepress/assets/dist/modal_ver-3.5.1.js","fqdn":"ymax-plus.com","domain":"ymax-plus.com","tld":"com"},"ip":{"addr":"184.94.213.169","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ymax-plus.com/","date":"2026-03-29T14:00:06.397Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ymax-plus.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Sat, 10 Jan 2026 00:00:00 GMT","end":"Sun, 10 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"76:B2:B2:18:99:6B:98:DE:AC:38:6E:D1:90:80:E7:68:65:85:DE:91","sha256":"24:64:DA:81:B8:61:E0:F5:D1:10:7B:6C:1E:6A:72:49:E6:A9:70:7D:A2:D5:99:08:AF:E9:35:67:DE:78:DC:90"}}},"request":{"raw":"GET /wp-content/themes/generatepress/assets/dist/modal_ver-3.5.1.js HTTP/1.1\r\nHost: ymax-plus.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ymax-plus.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Fri, 09 Jan 2026 22:21:22 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 1473\r\ndate: Sun, 29 Mar 2026 14:00:06 GMT\r\nserver: LiteSpeed\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":4133,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (3411)","md5":"6a759d56558ff2ee7f9b0526666f9ad6","sha1":"0ba53e0803cea71b4cf40d80c2c2c6ff1c01cfa1","sha256":"93be22c12629fc02347f1e97bbe9df7dcd924784999c6773617df5dfd79d47c6","sha512":"e97bcee0f18cf3486dd60b115b0d7aa360275b3e11a494d6006891cc2227900f8be1d741bb558da9f6214759d03775b79b69eac54a8af06e34223822060c787f","ssdeep":"96:MssqFaDtDCpCUAOstCpM3ca6OnmnueHrJwXQYz6Jq:MssqFaDlCp2wpM32OnmnW3zX","tlshash":"398194ec7764b6311aebb1b5902fe60ea7751884988f14115439e88c3cbfd8e01e2e7d","first_seen":"2026-03-29T14:00:31.843123Z","last_seen":"2026-03-29T14:00:31.843123Z","times_seen":1,"resource_available":true,"data":null}},"time_used":522,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":522,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-29","alert":"Sinkholed","trigger":"ymax-plus.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ymax-plus.com/https://pixel.wp.com/g.gif?v=ext\u0026blog=239614764\u0026post=11\u0026tz=0\u0026srv=ymax-plus.com\u0026j=1%3A14.4.1\u0026host=ymax-plus.com\u0026ref=\u0026fcp=1646\u0026rand=0.0345901927296659","fqdn":"ymax-plus.com","domain":"ymax-plus.com","tld":"com"},"ip":{"addr":"184.94.213.169","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ymax-plus.com/","date":"2026-03-29T14:00:06.924Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ymax-plus.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Sat, 10 Jan 2026 00:00:00 GMT","end":"Sun, 10 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"76:B2:B2:18:99:6B:98:DE:AC:38:6E:D1:90:80:E7:68:65:85:DE:91","sha256":"24:64:DA:81:B8:61:E0:F5:D1:10:7B:6C:1E:6A:72:49:E6:A9:70:7D:A2:D5:99:08:AF:E9:35:67:DE:78:DC:90"}}},"request":{"raw":"GET /https://pixel.wp.com/g.gif?v=ext\u0026blog=239614764\u0026post=11\u0026tz=0\u0026srv=ymax-plus.com\u0026j=1%3A14.4.1\u0026host=ymax-plus.com\u0026ref=\u0026fcp=1646\u0026rand=0.0345901927296659 HTTP/1.1\r\nHost: ymax-plus.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ymax-plus.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\ncache-control: private, no-cache, no-store, must-revalidate, max-age=0\r\npragma: no-cache\r\ncontent-type: text/html\r\ncontent-length: 1251\r\ndate: Sun, 29 Mar 2026 14:00:07 GMT\r\nserver: LiteSpeed\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":1251,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF, LF line terminators","md5":"8150f458ed6fb9b1db4e5cfa57a1a281","sha1":"6e5726854d28687b560d7fdcb5c782c425c7dfb9","sha256":"4c13d452dd5d49671bd93ca32f2b4f85c78e39b6ab0ad1f38d98ed267f8fd896","sha512":"4cc6a112673aef8bb8bb8a385c26791b805d43bb707b509880e894f1c83bab4e16f13de187036c5f660c3bec1d286258396b7bde65c5d7945c5019665196818c","ssdeep":"","tlshash":"c021353ec1c1560ae0271164fbc1f7a86669825291970f703b9eb176f6cd0bb56a36c8","first_seen":"2024-02-08T16:48:55Z","last_seen":"2026-06-11T01:56:26.766978Z","times_seen":133085,"resource_available":true,"data":null}},"time_used":263,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":262,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-29","alert":"Sinkholed","trigger":"ymax-plus.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ymax-plus.com/wp-includes/js/mediaelement/mediaelementplayer-legacy.min_ver-4.2.17.css","fqdn":"ymax-plus.com","domain":"ymax-plus.com","tld":"com"},"ip":{"addr":"184.94.213.169","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://ymax-plus.com/","date":"2026-03-29T14:00:06.373Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ymax-plus.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Sat, 10 Jan 2026 00:00:00 GMT","end":"Sun, 10 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"76:B2:B2:18:99:6B:98:DE:AC:38:6E:D1:90:80:E7:68:65:85:DE:91","sha256":"24:64:DA:81:B8:61:E0:F5:D1:10:7B:6C:1E:6A:72:49:E6:A9:70:7D:A2:D5:99:08:AF:E9:35:67:DE:78:DC:90"}}},"request":{"raw":"GET /wp-includes/js/mediaelement/mediaelementplayer-legacy.min_ver-4.2.17.css HTTP/1.1\r\nHost: ymax-plus.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ymax-plus.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 05 Apr 2026 14:00:06 GMT\r\ncontent-type: text/css\r\nlast-modified: Fri, 09 Jan 2026 22:15:58 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 2418\r\ndate: Sun, 29 Mar 2026 14:00:06 GMT\r\nserver: LiteSpeed\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":11406,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (11406), with no line terminators","md5":"9f471f16e86ac92218cb89b2a292bff9","sha1":"2b0550cb9755ca9e305f60d7b1233aa64d00a149","sha256":"cd667e5ad0f4478d893443c0ff76f90a4737714938b57ebb2ea2553280437946","sha512":"a8e22b12b6822688e444d007902012edada86a4750589c9a89a7a3616efb8762b44cac38983add18580131a93c3fe4a87e20d075f435d6e5843ce565876d1a17","ssdeep":"192:xthsVmeDXDanvgZenHANKdXSMpNO96hDIzL79V1QVSD1CNxn6fR31r:czDanvuenHAYNBhDInSwh31r","tlshash":"d03222929c88212cf43795645ac107ec923fc303fd62ededb73d7679caca58a516a903","first_seen":"2026-03-29T14:00:31.846483Z","last_seen":"2026-03-29T14:00:31.846483Z","times_seen":1,"resource_available":false,"data":null}},"time_used":181,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":181,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-29","alert":"Sinkholed","trigger":"ymax-plus.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-13KE9KR162","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.251.143.136","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ymax-plus.com/","date":"2026-03-29T14:00:06.383Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 09 Mar 2026 08:36:15 GMT","end":"Mon, 01 Jun 2026 08:36:14 GMT"},"fingerprint":{"sha1":"58:CB:88:A1:C4:55:4E:E5:46:DC:A0:9C:B3:54:25:79:20:1E:E8:09","sha256":"0B:B5:96:A2:57:57:EC:BA:63:14:8A:AF:4C:C2:32:63:18:8B:75:80:8F:78:1D:1F:5B:00:B7:B3:7E:C9:B7:18"}}},"request":{"raw":"GET /gtag/js?id=G-13KE9KR162 HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ymax-plus.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Sun, 29 Mar 2026 14:00:06 GMT\r\nexpires: Sun, 29 Mar 2026 14:00:06 GMT\r\ncache-control: private, max-age=900\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\nserver: Google Tag Manager\r\ncontent-length: 154310\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":464709,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (6031)","md5":"bf92ca6484e726ef007bd7a4ca8dcb75","sha1":"c991c16504eed96b2084fdeab74b85ce9ecdc44a","sha256":"09efc87df8ebaf193fd69b76c26aa79ef732b0081ab0fa4d08c7230c69ab54ad","sha512":"282e4a576271541f0025a20b77e50f82bf16cdedb6e7d78ac41fa1418d941080ac1169d14c30c1e049214826d3cf950f1f0b24ac682fce2640f70d917901a347","ssdeep":"6144:R6ORjaFCE9VJlQGXHIzs8WVP1W+rwkQdqQtYTc0HdZgQ0:aCEfJlbIY8CmOp0","tlshash":"a3a40aceb3d674615296e478903f01cba57b29e2b44cc8a6f189cce02e7465a4277f7c","first_seen":"2026-03-29T14:00:31.848225Z","last_seen":"2026-03-29T14:00:31.848225Z","times_seen":1,"resource_available":true,"data":null}},"time_used":233,"timings":{"blocked":75,"dns":0,"connect":8,"send":0,"wait":32,"receive":29,"ssl":86},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ymax-plus.com/wp-content/uploads/2024/12/Ymax-Plus-Site-Logo.webp","fqdn":"ymax-plus.com","domain":"ymax-plus.com","tld":"com"},"ip":{"addr":"184.94.213.169","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ymax-plus.com/","date":"2026-03-29T14:00:06.384Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ymax-plus.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Sat, 10 Jan 2026 00:00:00 GMT","end":"Sun, 10 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"76:B2:B2:18:99:6B:98:DE:AC:38:6E:D1:90:80:E7:68:65:85:DE:91","sha256":"24:64:DA:81:B8:61:E0:F5:D1:10:7B:6C:1E:6A:72:49:E6:A9:70:7D:A2:D5:99:08:AF:E9:35:67:DE:78:DC:90"}}},"request":{"raw":"GET /wp-content/uploads/2024/12/Ymax-Plus-Site-Logo.webp HTTP/1.1\r\nHost: ymax-plus.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ymax-plus.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 05 Apr 2026 14:00:06 GMT\r\ncontent-type: image/webp\r\nlast-modified: Fri, 09 Jan 2026 22:16:40 GMT\r\naccept-ranges: bytes\r\ncontent-length: 18918\r\ndate: Sun, 29 Mar 2026 14:00:06 GMT\r\nserver: LiteSpeed\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":18918,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"85d613ab772d2a38ce7e3f12a8c58ebb","sha1":"588f0b2fc86c9f3a459f5b8c249ea09e42ac924f","sha256":"83b763fd7eec33596864fc30f72b1a5ef1c037b40d9e9f618279e289aa927b74","sha512":"cca0ad209cb1e9cc2a13cf0ef4588025a19186b9d0d1341197af24516458578a888db6076ade4ab771605c5272902af332214528d55eb4b2298f8fd8ac6b0e05","ssdeep":"384:nT8WE5T62hgfSH03h2PgtDnCdDZ5qBq8Uqq8OTjps7bepnwX6l+l:ndUqh2PQqFYKdMbepnwKl+l","tlshash":"4d82d0efa315c28ac5f2eec908921d11fd0d86551d1f8222297f9329e8eda549538bb2","first_seen":"2026-03-29T14:00:31.850041Z","last_seen":"2026-03-29T14:00:31.850041Z","times_seen":1,"resource_available":false,"data":null}},"time_used":362,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":361,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-29","alert":"Sinkholed","trigger":"ymax-plus.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ymax-plus.com/wp-content/plugins/easy-table-of-contents/assets/js/front.min_ver-2.0.73-1742577885.js","fqdn":"ymax-plus.com","domain":"ymax-plus.com","tld":"com"},"ip":{"addr":"184.94.213.169","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ymax-plus.com/","date":"2026-03-29T14:00:06.395Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ymax-plus.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Sat, 10 Jan 2026 00:00:00 GMT","end":"Sun, 10 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"76:B2:B2:18:99:6B:98:DE:AC:38:6E:D1:90:80:E7:68:65:85:DE:91","sha256":"24:64:DA:81:B8:61:E0:F5:D1:10:7B:6C:1E:6A:72:49:E6:A9:70:7D:A2:D5:99:08:AF:E9:35:67:DE:78:DC:90"}}},"request":{"raw":"GET /wp-content/plugins/easy-table-of-contents/assets/js/front.min_ver-2.0.73-1742577885.js HTTP/1.1\r\nHost: ymax-plus.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ymax-plus.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Fri, 09 Jan 2026 22:21:14 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 1522\r\ndate: Sun, 29 Mar 2026 14:00:06 GMT\r\nserver: LiteSpeed\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":4955,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (4233)","md5":"75256c586537cdce446aedddf9c6fb6c","sha1":"6b1be137e2c96a486dfb978fd4f05c4af3f34203","sha256":"af89483121bb8bdb94868b2fef36b3f468027c027ff11f312c8a4fa9d904c446","sha512":"a0c7e7d5f2ba4b49adae69bf9d46fbe72b697beef3b4870768e6f104e1cc7186a052c789afb19e93d8823380f111909a4efc5d7997579bb12d953e05e6db5cea","ssdeep":"96:MssqFaWBtHE7lB3IHL+MIG3u3b3F3Ph0MZ9HYkY5FBk+H+ge:MssqFaWB1E7lKIN+MZ94kY5Fu","tlshash":"21a161a4f222743062fa746cc86b72097b5dfc2bc6c3405ab4d4d4c81d69d8936b7e39","first_seen":"2026-03-29T14:00:31.857694Z","last_seen":"2026-03-29T14:00:31.857694Z","times_seen":1,"resource_available":true,"data":null}},"time_used":523,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":523,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-29","alert":"Sinkholed","trigger":"ymax-plus.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ymax-plus.com/wp-content/uploads/2024/12/Ymax-Plus-Site-Icon.webp","fqdn":"ymax-plus.com","domain":"ymax-plus.com","tld":"com"},"ip":{"addr":"184.94.213.169","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ymax-plus.com/","date":"2026-03-29T14:00:07.199Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ymax-plus.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Sat, 10 Jan 2026 00:00:00 GMT","end":"Sun, 10 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"76:B2:B2:18:99:6B:98:DE:AC:38:6E:D1:90:80:E7:68:65:85:DE:91","sha256":"24:64:DA:81:B8:61:E0:F5:D1:10:7B:6C:1E:6A:72:49:E6:A9:70:7D:A2:D5:99:08:AF:E9:35:67:DE:78:DC:90"}}},"request":{"raw":"GET /wp-content/uploads/2024/12/Ymax-Plus-Site-Icon.webp HTTP/1.1\r\nHost: ymax-plus.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ymax-plus.com/\r\nCookie: _ga_13KE9KR162=GS2.1.s1774792806$o1$g0$t1774792806$j60$l0$h0; _ga=GA1.1.939200388.1774792807\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 05 Apr 2026 14:00:07 GMT\r\ncontent-type: image/webp\r\nlast-modified: Fri, 09 Jan 2026 22:17:52 GMT\r\naccept-ranges: bytes\r\ncontent-length: 2226\r\ndate: Sun, 29 Mar 2026 14:00:07 GMT\r\nserver: LiteSpeed\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":2226,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"51385e038366163d2ba7722b9204ca04","sha1":"ef671805b67a458c6c10206f79496b6d1ce5fe18","sha256":"03bb588b1e9714f14bc52b725fe242b1cdac42d952fe1ac13118ad8effc80063","sha512":"8a2d6a96aff1d801417794235c8228c0ed17ab6478440a3b3ceca448c988fcb728a94e14122ceccec69fa2f68eef05c7e10d78ec69cd06a97df0d4445e43d350","ssdeep":"","tlshash":"af412b7c433c0d106f23b433772611a27f8277e1e4df3da65a2e58912b93100898c2da","first_seen":"2026-03-29T14:00:31.860659Z","last_seen":"2026-03-29T14:00:31.860659Z","times_seen":1,"resource_available":false,"data":null}},"time_used":191,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":190,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-29","alert":"Sinkholed","trigger":"ymax-plus.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ymax-plus.com/wp-includes/js/jquery/jquery.min_ver-3.7.1.js","fqdn":"ymax-plus.com","domain":"ymax-plus.com","tld":"com"},"ip":{"addr":"184.94.213.169","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ymax-plus.com/","date":"2026-03-29T14:00:06.381Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ymax-plus.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Sat, 10 Jan 2026 00:00:00 GMT","end":"Sun, 10 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"76:B2:B2:18:99:6B:98:DE:AC:38:6E:D1:90:80:E7:68:65:85:DE:91","sha256":"24:64:DA:81:B8:61:E0:F5:D1:10:7B:6C:1E:6A:72:49:E6:A9:70:7D:A2:D5:99:08:AF:E9:35:67:DE:78:DC:90"}}},"request":{"raw":"GET /wp-includes/js/jquery/jquery.min_ver-3.7.1.js HTTP/1.1\r\nHost: ymax-plus.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ymax-plus.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Fri, 09 Jan 2026 22:20:18 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 29935\r\ndate: Sun, 29 Mar 2026 14:00:06 GMT\r\nserver: LiteSpeed\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":88275,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (64727)","md5":"5ae1272ca28872a18a307ec00920e5c0","sha1":"b5c701b3e47488815fe3ea75defd16a9c4f7f025","sha256":"713f19aa12bd1b034c4c114094ad0de6297bdb17346a516cc9ddab69329f3e3b","sha512":"b5af659bdcf4ed2aa5cd8cb43c2592cfedf24d38111f29b41054ab5d63ba6cd981354f7664355d280985cc35f969ceb6b29b5c3f21d6c8e1034e81e51126834d","ssdeep":"1536:fRUX9uDgwxcy2KVBNwchN6SLaHEk2BSrBESp+a/IEk4aAocVi8SMBQ47GK9:nHNwcv9VBQpLl88SMBQ47GK9","tlshash":"7183f8df73ca702247ab30b9406f550bf276199d684d4400f169d8e9bcb8a4a827bf7d","first_seen":"2025-11-24T00:22:40.245749Z","last_seen":"2026-06-10T09:59:36.026124Z","times_seen":152,"resource_available":true,"data":null}},"time_used":341,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":340,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-29","alert":"Sinkholed","trigger":"ymax-plus.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ymax-plus.com/wp-content/uploads/2024/12/What-Is-Ymax-Plus.webp","fqdn":"ymax-plus.com","domain":"ymax-plus.com","tld":"com"},"ip":{"addr":"184.94.213.169","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://ymax-plus.com/","date":"2026-03-29T14:00:06.386Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ymax-plus.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Sat, 10 Jan 2026 00:00:00 GMT","end":"Sun, 10 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"76:B2:B2:18:99:6B:98:DE:AC:38:6E:D1:90:80:E7:68:65:85:DE:91","sha256":"24:64:DA:81:B8:61:E0:F5:D1:10:7B:6C:1E:6A:72:49:E6:A9:70:7D:A2:D5:99:08:AF:E9:35:67:DE:78:DC:90"}}},"request":{"raw":"GET /wp-content/uploads/2024/12/What-Is-Ymax-Plus.webp HTTP/1.1\r\nHost: ymax-plus.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ymax-plus.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 05 Apr 2026 14:00:06 GMT\r\ncontent-type: image/webp\r\nlast-modified: Fri, 09 Jan 2026 22:16:42 GMT\r\naccept-ranges: bytes\r\ncontent-length: 13776\r\ndate: Sun, 29 Mar 2026 14:00:06 GMT\r\nserver: LiteSpeed\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":13776,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"634bb194e02219cff83b312edb063280","sha1":"3ab0aaa269a78d2a576315835e094d2e7e567267","sha256":"473dfbf967dfc47fcd5103b07bc2f9833a444ef89686f705d002b5929e602a87","sha512":"c601e8a2eaed9d4ba857923627237343356111fbfd0717b76f7bc0c0fc52c0541810a6f6a37bf2a655d61f9aedd68f8cb822967ef8dc06c57c387b7ebd37a648","ssdeep":"384:WqxjeW+ERTdaYRjLXdvqP+Rd93Sdb7yA6d:JkW+7YR9yny","tlshash":"3b52d0e84cd9276c0b33918b19b8937113d3ba4e47beae02c541866da076ed3696047f","first_seen":"2026-03-29T14:00:31.863003Z","last_seen":"2026-03-29T14:00:31.863003Z","times_seen":1,"resource_available":false,"data":null}},"time_used":504,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":503,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-29","alert":"Sinkholed","trigger":"ymax-plus.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ymax-plus.com/wp-content/plugins/easy-table-of-contents/vendor/js-cookie/js.cookie.min_ver-2.2.1.js","fqdn":"ymax-plus.com","domain":"ymax-plus.com","tld":"com"},"ip":{"addr":"184.94.213.169","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ymax-plus.com/","date":"2026-03-29T14:00:06.392Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ymax-plus.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Sat, 10 Jan 2026 00:00:00 GMT","end":"Sun, 10 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"76:B2:B2:18:99:6B:98:DE:AC:38:6E:D1:90:80:E7:68:65:85:DE:91","sha256":"24:64:DA:81:B8:61:E0:F5:D1:10:7B:6C:1E:6A:72:49:E6:A9:70:7D:A2:D5:99:08:AF:E9:35:67:DE:78:DC:90"}}},"request":{"raw":"GET /wp-content/plugins/easy-table-of-contents/vendor/js-cookie/js.cookie.min_ver-2.2.1.js HTTP/1.1\r\nHost: ymax-plus.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ymax-plus.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Fri, 09 Jan 2026 22:20:58 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 1175\r\ndate: Sun, 29 Mar 2026 14:00:06 GMT\r\nserver: LiteSpeed\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":3257,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (2369)","md5":"01306809ac90f94bce53c696d47a46fe","sha1":"84ff6e0d9e6ca7888398481645a26e93ac1f19e6","sha256":"ecb232f9b8e7c28a1078a8c9a35a25abb9c0cd34c25cb112037b6870d64049a6","sha512":"b8a8efb403c8b0e21471e4b4906fbb6d0a64df2174de510cc233a92a34c800bb7fff04d44419804cee2a76bbdca5be557b279d1f5c9749357f152d1f3220e34f","ssdeep":"","tlshash":"366154b471193a7b4e4f3470e13fa24ee23888ad489a0125915dd4f62cb680b25f7f9f","first_seen":"2026-02-27T07:07:07.147455Z","last_seen":"2026-04-30T11:47:39.152463Z","times_seen":5,"resource_available":true,"data":null}},"time_used":523,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":523,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-29","alert":"Sinkholed","trigger":"ymax-plus.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ymax-plus.com/wp-includes/css/dist/block-library/style.min_ver-6.7.2.css","fqdn":"ymax-plus.com","domain":"ymax-plus.com","tld":"com"},"ip":{"addr":"184.94.213.169","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://ymax-plus.com/","date":"2026-03-29T14:00:06.368Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ymax-plus.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Sat, 10 Jan 2026 00:00:00 GMT","end":"Sun, 10 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"76:B2:B2:18:99:6B:98:DE:AC:38:6E:D1:90:80:E7:68:65:85:DE:91","sha256":"24:64:DA:81:B8:61:E0:F5:D1:10:7B:6C:1E:6A:72:49:E6:A9:70:7D:A2:D5:99:08:AF:E9:35:67:DE:78:DC:90"}}},"request":{"raw":"GET /wp-includes/css/dist/block-library/style.min_ver-6.7.2.css HTTP/1.1\r\nHost: ymax-plus.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ymax-plus.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 05 Apr 2026 14:00:06 GMT\r\ncontent-type: text/css\r\nlast-modified: Fri, 09 Jan 2026 22:15:26 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 14225\r\ndate: Sun, 29 Mar 2026 14:00:06 GMT\r\nserver: LiteSpeed\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":114706,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (59458)","md5":"8c9f31823282e4e056eb0aa7fac262a9","sha1":"dc3b1a37381e079fda8db59c1a9469852cd18b80","sha256":"3bb38d0f302677ff4104564454f60f495133579d6e6dfb722b3de850df596502","sha512":"39f239c875550bf9a31254eed1f0358ea3c6309d9fcbf6005d8852843eaf60bc20b8626d169f810a6c71b7dcdb769b8512314b89ba1fdeea2cb3089be9d21ae0","ssdeep":"3072:HaeJuf7Qg5MG7H+qehvP0x2pUk44Q03Pm:Qf7Qg5MG7H+qehvP0x2pUk4T0O","tlshash":"2fb3625417b4dcf935ffa73a5e4ee258a103aa41c68a67e7e066d190618ca490cf3f0f","first_seen":"2024-11-13T05:08:51.610493Z","last_seen":"2026-06-11T02:15:41.761892Z","times_seen":32161,"resource_available":false,"data":null}},"time_used":183,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":182,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-29","alert":"Sinkholed","trigger":"ymax-plus.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ymax-plus.com/wp-content/plugins/easy-table-of-contents/assets/css/screen.min_ver-2.0.73.css","fqdn":"ymax-plus.com","domain":"ymax-plus.com","tld":"com"},"ip":{"addr":"184.94.213.169","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://ymax-plus.com/","date":"2026-03-29T14:00:06.377Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ymax-plus.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Sat, 10 Jan 2026 00:00:00 GMT","end":"Sun, 10 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"76:B2:B2:18:99:6B:98:DE:AC:38:6E:D1:90:80:E7:68:65:85:DE:91","sha256":"24:64:DA:81:B8:61:E0:F5:D1:10:7B:6C:1E:6A:72:49:E6:A9:70:7D:A2:D5:99:08:AF:E9:35:67:DE:78:DC:90"}}},"request":{"raw":"GET /wp-content/plugins/easy-table-of-contents/assets/css/screen.min_ver-2.0.73.css HTTP/1.1\r\nHost: ymax-plus.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ymax-plus.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 05 Apr 2026 14:00:06 GMT\r\ncontent-type: text/css\r\nlast-modified: Fri, 09 Jan 2026 22:16:26 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 1431\r\ndate: Sun, 29 Mar 2026 14:00:06 GMT\r\nserver: LiteSpeed\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":5892,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (5892), with no line terminators","md5":"a5041cf01d238b78b60d276f0c02127a","sha1":"02e5c83e7cd98881ca3223563069c8591d6e8c28","sha256":"2fdf5f9a856940c379e8cc777e289f5b58d179a3edb5ef3e1e0cff46f7dd670c","sha512":"4cee0b5c1481c7927ad0a9ef61e37c096d3e3ba44cb986b3ef538c5d7f6cc0c2966e68af418fa04c99dd4754b027e2f3b0158ebb3cbde359b2eeea5edf6d85be","ssdeep":"96:rz8JLTnCNWPAKwUDwAcZoZ6dOxdOdZoT3OdFDsYZoZnOQMvDBjkGQ6:/uLYWB/DguAdOxdOFhsYuCrBjkP6","tlshash":"6ec1fe31d6421125f9ab841efc5075c92f3dd08bc953aeecace1eaa0cbd6495363f261","first_seen":"2024-10-19T14:55:04.704312Z","last_seen":"2026-06-10T16:37:17.167463Z","times_seen":4136,"resource_available":false,"data":null}},"time_used":184,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":184,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-29","alert":"Sinkholed","trigger":"ymax-plus.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ymax-plus.com/wp-includes/js/jquery/jquery-migrate.min_ver-3.4.1.js","fqdn":"ymax-plus.com","domain":"ymax-plus.com","tld":"com"},"ip":{"addr":"184.94.213.169","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ymax-plus.com/","date":"2026-03-29T14:00:06.382Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ymax-plus.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Sat, 10 Jan 2026 00:00:00 GMT","end":"Sun, 10 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"76:B2:B2:18:99:6B:98:DE:AC:38:6E:D1:90:80:E7:68:65:85:DE:91","sha256":"24:64:DA:81:B8:61:E0:F5:D1:10:7B:6C:1E:6A:72:49:E6:A9:70:7D:A2:D5:99:08:AF:E9:35:67:DE:78:DC:90"}}},"request":{"raw":"GET /wp-includes/js/jquery/jquery-migrate.min_ver-3.4.1.js HTTP/1.1\r\nHost: ymax-plus.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ymax-plus.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Fri, 09 Jan 2026 22:20:18 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 4866\r\ndate: Sun, 29 Mar 2026 14:00:06 GMT\r\nserver: LiteSpeed\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":14299,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (13479)","md5":"63464d242eafa0e027f1b491d3da7cde","sha1":"50decac34a33dffbb0307e48313edd48812aeeb4","sha256":"53c9ba73f4573429a25d9d820afa343363c867b82f0e9b02c23e8eb8e834b04c","sha512":"ce0090e2485d80abd4bc1e2f4277770279699ee265d06e2a2091bb7bca496856a15c11bd4837bc69c6cfe7e77ff047dcd3b1de8154c226202a244dc25f1558e9","ssdeep":"192:MssqFaBrprDN+sag6ifKIUpQI99P1tLm9kdgyq1+J3aCJQ+h4MPLORB:j4rprxaefKI0LP19m4q1WW+h4Mju","tlshash":"7e52b6adb56679714eb731b8f03be20f71b205c95a0d8940d1acc4f6286dc5e817bf68","first_seen":"2025-11-24T00:22:40.273986Z","last_seen":"2026-06-10T09:59:36.068718Z","times_seen":146,"resource_available":true,"data":null}},"time_used":341,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":341,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-29","alert":"Sinkholed","trigger":"ymax-plus.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ymax-plus.com/wp-content/plugins/turn-rank-math-faq-block-to-accordion/assets/js/RMFA-JS.min_ver-1.1.0.js","fqdn":"ymax-plus.com","domain":"ymax-plus.com","tld":"com"},"ip":{"addr":"184.94.213.169","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ymax-plus.com/","date":"2026-03-29T14:00:06.390Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ymax-plus.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Sat, 10 Jan 2026 00:00:00 GMT","end":"Sun, 10 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"76:B2:B2:18:99:6B:98:DE:AC:38:6E:D1:90:80:E7:68:65:85:DE:91","sha256":"24:64:DA:81:B8:61:E0:F5:D1:10:7B:6C:1E:6A:72:49:E6:A9:70:7D:A2:D5:99:08:AF:E9:35:67:DE:78:DC:90"}}},"request":{"raw":"GET /wp-content/plugins/turn-rank-math-faq-block-to-accordion/assets/js/RMFA-JS.min_ver-1.1.0.js HTTP/1.1\r\nHost: ymax-plus.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ymax-plus.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Fri, 09 Jan 2026 22:20:22 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 532\r\ndate: Sun, 29 Mar 2026 14:00:06 GMT\r\nserver: LiteSpeed\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":2017,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (1295)","md5":"ec63739f20e0a1698ffba47ec9645cd1","sha1":"3f2f6a4e7ce443b92f4782c787910e797818af66","sha256":"b892c97e8d25831d86ab1245dccb295836e40f0711b68e895b71e1e51fa8bd92","sha512":"92611395998597fea90e4275c2bd03f76baec9adb446ae52aaacac7e45453cf474aa5599ddcd3ef42cc17e8c469d39b0bab63e8f6040a423e8327cf3c26ab8bb","ssdeep":"","tlshash":"ab41cde4700c27f8127f73a9b47be52d349a5010f6e2320a6a15a0fd2cb251c6bb6d5e","first_seen":"2026-03-29T14:00:31.871954Z","last_seen":"2026-03-29T14:00:31.871954Z","times_seen":1,"resource_available":true,"data":null}},"time_used":524,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":524,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-29","alert":"Sinkholed","trigger":"ymax-plus.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ymax-plus.com/wp-content/uploads/2024/12/Ymax-Plus-Site-Icon.webp","fqdn":"ymax-plus.com","domain":"ymax-plus.com","tld":"com"},"ip":{"addr":"184.94.213.169","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ymax-plus.com/","date":"2026-03-29T14:00:07.197Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ymax-plus.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Sat, 10 Jan 2026 00:00:00 GMT","end":"Sun, 10 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"76:B2:B2:18:99:6B:98:DE:AC:38:6E:D1:90:80:E7:68:65:85:DE:91","sha256":"24:64:DA:81:B8:61:E0:F5:D1:10:7B:6C:1E:6A:72:49:E6:A9:70:7D:A2:D5:99:08:AF:E9:35:67:DE:78:DC:90"}}},"request":{"raw":"GET /wp-content/uploads/2024/12/Ymax-Plus-Site-Icon.webp HTTP/1.1\r\nHost: ymax-plus.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ymax-plus.com/\r\nCookie: _ga_13KE9KR162=GS2.1.s1774792806$o1$g0$t1774792806$j60$l0$h0; _ga=GA1.1.939200388.1774792807\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 05 Apr 2026 14:00:07 GMT\r\ncontent-type: image/webp\r\nlast-modified: Fri, 09 Jan 2026 22:17:52 GMT\r\naccept-ranges: bytes\r\ncontent-length: 2226\r\ndate: Sun, 29 Mar 2026 14:00:07 GMT\r\nserver: LiteSpeed\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":2226,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"51385e038366163d2ba7722b9204ca04","sha1":"ef671805b67a458c6c10206f79496b6d1ce5fe18","sha256":"03bb588b1e9714f14bc52b725fe242b1cdac42d952fe1ac13118ad8effc80063","sha512":"8a2d6a96aff1d801417794235c8228c0ed17ab6478440a3b3ceca448c988fcb728a94e14122ceccec69fa2f68eef05c7e10d78ec69cd06a97df0d4445e43d350","ssdeep":"","tlshash":"af412b7c433c0d106f23b433772611a27f8277e1e4df3da65a2e58912b93100898c2da","first_seen":"2026-03-29T14:00:31.860659Z","last_seen":"2026-03-29T14:00:31.860659Z","times_seen":1,"resource_available":false,"data":null}},"time_used":219,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":219,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-29","alert":"Sinkholed","trigger":"ymax-plus.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ymax-plus.com/wp-content/plugins/easy-table-of-contents/vendor/sticky-kit/jquery.sticky-kit.min_ver-1.9.2.js","fqdn":"ymax-plus.com","domain":"ymax-plus.com","tld":"com"},"ip":{"addr":"184.94.213.169","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ymax-plus.com/","date":"2026-03-29T14:00:06.394Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ymax-plus.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Sat, 10 Jan 2026 00:00:00 GMT","end":"Sun, 10 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"76:B2:B2:18:99:6B:98:DE:AC:38:6E:D1:90:80:E7:68:65:85:DE:91","sha256":"24:64:DA:81:B8:61:E0:F5:D1:10:7B:6C:1E:6A:72:49:E6:A9:70:7D:A2:D5:99:08:AF:E9:35:67:DE:78:DC:90"}}},"request":{"raw":"GET /wp-content/plugins/easy-table-of-contents/vendor/sticky-kit/jquery.sticky-kit.min_ver-1.9.2.js HTTP/1.1\r\nHost: ymax-plus.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ymax-plus.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Fri, 09 Jan 2026 22:21:04 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 1355\r\ndate: Sun, 29 Mar 2026 14:00:06 GMT\r\nserver: LiteSpeed\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":3614,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text","md5":"2d0747605c0dade464044a59b4e6d62b","sha1":"a936a5f58fcd472dedc47e6c3dbef57d4dd9d8fd","sha256":"a669e59b17316e6246c9f1a08889c96d7cc1e76af300d399981bcf133f26fec0","sha512":"1a6be67ff28eacfe47e5a8c56affa465a072137e3574736fb3221e76b66b756e463a5d128bdfa4f00d82b6d9141eaaa11226154a6e50bc61f03abb784f6a9a69","ssdeep":"","tlshash":"347162d87368753586ea7178816fb60e12ea94718ad3000ae61dd88817e2e4a60f3f9d","first_seen":"2026-02-27T07:07:07.115381Z","last_seen":"2026-04-30T11:47:39.177485Z","times_seen":3,"resource_available":true,"data":null}},"time_used":523,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":523,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-29","alert":"Sinkholed","trigger":"ymax-plus.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ymax-plus.com/wp-content/uploads/2024/12/Ymax-Plus-Images.webp","fqdn":"ymax-plus.com","domain":"ymax-plus.com","tld":"com"},"ip":{"addr":"184.94.213.169","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://ymax-plus.com/","date":"2026-03-29T14:00:06.755Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ymax-plus.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Sat, 10 Jan 2026 00:00:00 GMT","end":"Sun, 10 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"76:B2:B2:18:99:6B:98:DE:AC:38:6E:D1:90:80:E7:68:65:85:DE:91","sha256":"24:64:DA:81:B8:61:E0:F5:D1:10:7B:6C:1E:6A:72:49:E6:A9:70:7D:A2:D5:99:08:AF:E9:35:67:DE:78:DC:90"}}},"request":{"raw":"GET /wp-content/uploads/2024/12/Ymax-Plus-Images.webp HTTP/1.1\r\nHost: ymax-plus.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ymax-plus.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 05 Apr 2026 14:00:06 GMT\r\ncontent-type: image/webp\r\nlast-modified: Fri, 09 Jan 2026 22:18:36 GMT\r\naccept-ranges: bytes\r\ncontent-length: 60314\r\ndate: Sun, 29 Mar 2026 14:00:06 GMT\r\nserver: LiteSpeed\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":60314,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 700x400, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"d317f89bef131c621f8a8e71cc21b973","sha1":"7f33beb3326a9ec354760912f7993d885503b522","sha256":"73e36bce287abdca408d4f7271ffeb048dae2ac0156e1cd2a02da18816d77d10","sha512":"bef6843775766a7c9a05d30598e08613a98647d39baa7d7d0dd507d6b17e56d0c56f0ab3174d7d27242eddc29e75c0d46dc68b659302e07c8cb9c3a69fce63fd","ssdeep":"1536:RU3K15it1LfiWRKHbTRgxyWwJUI6QVo6nzJcYlLWt10VT:RUaK1/KqxFeVRVoKJHlqil","tlshash":"6243f21b3f66c5cce6089bf79567efedacfe33a3901446762d903a8c5895000a4ab44f","first_seen":"2026-03-29T14:00:31.876821Z","last_seen":"2026-03-29T14:00:31.876821Z","times_seen":1,"resource_available":false,"data":null}},"time_used":199,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":197,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-29","alert":"Sinkholed","trigger":"ymax-plus.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ymax-plus.com/","fqdn":"ymax-plus.com","domain":"ymax-plus.com","tld":"com"},"ip":{"addr":"184.94.213.169","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-03-29T14:00:05.176Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ymax-plus.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Sat, 10 Jan 2026 00:00:00 GMT","end":"Sun, 10 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"76:B2:B2:18:99:6B:98:DE:AC:38:6E:D1:90:80:E7:68:65:85:DE:91","sha256":"24:64:DA:81:B8:61:E0:F5:D1:10:7B:6C:1E:6A:72:49:E6:A9:70:7D:A2:D5:99:08:AF:E9:35:67:DE:78:DC:90"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: ymax-plus.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/html\r\nlast-modified: Fri, 09 Jan 2026 22:22:12 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 16205\r\ndate: Sun, 29 Mar 2026 14:00:05 GMT\r\nserver: LiteSpeed\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"WordPress:6.7.2","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"Google Analytics","description":"Google Analytics is a free web analytics service that tracks and reports website traffic.","website":"https://google.com/analytics","common_platform_enumeration":"","icon":"Google Analytics.svg","categories":["Analytics"]},{"name":"GenerateBlocks","description":"GenerateBlocks is a small collection of lightweight WordPress blocks for the WordPress Block Editor.","website":"https://generateblocks.com","common_platform_enumeration":"","icon":"GenerateBlocks.svg","categories":["WordPress plugins"]},{"name":"WordPress Block Editor","description":"Sites using the WordPress Block Editor, also known as Gutenberg.","website":"https://wordpress.org/gutenberg/","common_platform_enumeration":"","icon":"WordPress.svg","categories":["Page builders"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]}],"data":{"size":70074,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (10253)","md5":"6aeea36fb4ee3e50bacb77cfd3c8d302","sha1":"939d826d270905299a730605bcda933f5f93b620","sha256":"434ddc579381b0994e27fbc5d2a811d4b57d220ef27791ac41da71f1f120171d","sha512":"fd68035ea97ce9286fc984711ec2dca73459b45c6229d81bcc029ef051fbbaa261a52462e328ebde427f0021b61e4d1805fcd43b231aee7417bd45367bbd871b","ssdeep":"1536:m9YxZlHa5zaapHJ0DMjMZj4OoeIloKxqvsW1kr4xwox5eyMETVuQXGtbYMxxfut:m9YxZxa55NJ0DMC8Jltxf1ExwwyETVui","tlshash":"7c633d72c2b4013a36ab43ee9691b329729dd04ada0217f474f4d16c42d6ef671b3b89","first_seen":"2026-03-29T14:00:31.878781Z","last_seen":"2026-03-29T14:00:31.878781Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1527,"timings":{"blocked":596,"dns":26,"connect":165,"send":0,"wait":333,"receive":1,"ssl":402},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-29","alert":"Sinkholed","trigger":"ymax-plus.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ymax-plus.com/wp-content/uploads/2024/12/Use-and-Activate-Ymax-Plus-Step-1.webp","fqdn":"ymax-plus.com","domain":"ymax-plus.com","tld":"com"},"ip":{"addr":"184.94.213.169","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://ymax-plus.com/","date":"2026-03-29T14:00:06.386Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ymax-plus.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Sat, 10 Jan 2026 00:00:00 GMT","end":"Sun, 10 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"76:B2:B2:18:99:6B:98:DE:AC:38:6E:D1:90:80:E7:68:65:85:DE:91","sha256":"24:64:DA:81:B8:61:E0:F5:D1:10:7B:6C:1E:6A:72:49:E6:A9:70:7D:A2:D5:99:08:AF:E9:35:67:DE:78:DC:90"}}},"request":{"raw":"GET /wp-content/uploads/2024/12/Use-and-Activate-Ymax-Plus-Step-1.webp HTTP/1.1\r\nHost: ymax-plus.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ymax-plus.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 05 Apr 2026 14:00:06 GMT\r\ncontent-type: image/webp\r\nlast-modified: Fri, 09 Jan 2026 22:16:44 GMT\r\naccept-ranges: bytes\r\ncontent-length: 12356\r\ndate: Sun, 29 Mar 2026 14:00:06 GMT\r\nserver: LiteSpeed\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":12356,"size_decoded":0,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 803x301, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"6f7060c5cd6ce1b43af16538929bc946","sha1":"983063084d4248f105b109ba34e6e60260685276","sha256":"038835d318b9ada25493cf4ab577b27dd4ec15904dccf50a5096383ffcece838","sha512":"2c4d422f690b651e38780c4a9e4393094638cfb6690c0aa1344af213256542eee36a994a07cff9d54382bed4a274277b6922067faeeebebec5efb53cbd6faf14","ssdeep":"192:wmd4f+vo7HpcJg3wwXCuZksPq614/+YB5QuEzu7ZhChBpwMi1KdVVJ6JBltY3dlf:Td4FHmjwXJi6fcYpwMio7JUGjJS","tlshash":"0e42af0f96324d67cbe2a03e7072060aad3132122ea1a52667ef519dc3c92e457bd2d5","first_seen":"2026-03-29T14:00:31.880138Z","last_seen":"2026-03-29T14:00:31.880138Z","times_seen":1,"resource_available":false,"data":null}},"time_used":504,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":503,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-29","alert":"Sinkholed","trigger":"ymax-plus.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ymax-plus.com/wp-includes/js/wp-emoji-release.min_ver-6.7.2.js","fqdn":"ymax-plus.com","domain":"ymax-plus.com","tld":"com"},"ip":{"addr":"184.94.213.169","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ymax-plus.com/","date":"2026-03-29T14:00:06.926Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ymax-plus.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Sat, 10 Jan 2026 00:00:00 GMT","end":"Sun, 10 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"76:B2:B2:18:99:6B:98:DE:AC:38:6E:D1:90:80:E7:68:65:85:DE:91","sha256":"24:64:DA:81:B8:61:E0:F5:D1:10:7B:6C:1E:6A:72:49:E6:A9:70:7D:A2:D5:99:08:AF:E9:35:67:DE:78:DC:90"}}},"request":{"raw":"GET /wp-includes/js/wp-emoji-release.min_ver-6.7.2.js HTTP/1.1\r\nHost: ymax-plus.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ymax-plus.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Fri, 09 Jan 2026 22:22:12 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 4876\r\ndate: Sun, 29 Mar 2026 14:00:07 GMT\r\nserver: LiteSpeed\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":19448,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (15752)","md5":"c9cc939b206b4f143e99b0796dfa367b","sha1":"5147f61ae46751eff37e8f5784fe7d30083549b6","sha256":"a0ad2b9d30a6be60ed20c053a8b64664079707f8a867e5a3586f65a6fc262729","sha512":"61d8bbd6a1128ba20530492ea150ff7946c30923d3efc7e03158f6f921ca35002481001cb8368a1fb5214dea0d006d69a80e757438dc172c9ad986da13052764","ssdeep":"384:jdTbvzWuPTb9Uh3o//bEPjXgA2k1efAJmpc:jdX6U9Uh3o//YrXgAGfACc","tlshash":"ab92199bb33a4e9b343e3bd7cd968f4dc9da555321c0f079dbeeb28169a00568274c90","first_seen":"2025-11-16T04:09:33.390573Z","last_seen":"2026-06-08T09:48:59.420566Z","times_seen":30,"resource_available":true,"data":null}},"time_used":262,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":262,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-29","alert":"Sinkholed","trigger":"ymax-plus.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ymax-plus.com/wp-content/themes/generatepress/assets/css/components/widget-areas.min_ver-3.5.1.css","fqdn":"ymax-plus.com","domain":"ymax-plus.com","tld":"com"},"ip":{"addr":"184.94.213.169","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://ymax-plus.com/","date":"2026-03-29T14:00:06.378Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ymax-plus.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Sat, 10 Jan 2026 00:00:00 GMT","end":"Sun, 10 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"76:B2:B2:18:99:6B:98:DE:AC:38:6E:D1:90:80:E7:68:65:85:DE:91","sha256":"24:64:DA:81:B8:61:E0:F5:D1:10:7B:6C:1E:6A:72:49:E6:A9:70:7D:A2:D5:99:08:AF:E9:35:67:DE:78:DC:90"}}},"request":{"raw":"GET /wp-content/themes/generatepress/assets/css/components/widget-areas.min_ver-3.5.1.css HTTP/1.1\r\nHost: ymax-plus.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ymax-plus.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 05 Apr 2026 14:00:06 GMT\r\ncontent-type: text/css\r\nlast-modified: Fri, 09 Jan 2026 22:16:30 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 628\r\ndate: Sun, 29 Mar 2026 14:00:06 GMT\r\nserver: LiteSpeed\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":3356,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (3356), with no line terminators","md5":"f9b0b1948dca272b16005165ab098f29","sha1":"6e6ae044e8392eb26831476b5340808d076ff76f","sha256":"f67e99114807ecac9bba6fbb9f81eea467c50c9f03b59974fe696bdfab6ba227","sha512":"ef44daa0524b9154a0d83b57e66accc70284c318893df7ccee6de0bcb7e9f537d1fd47ca4e52c88de7d519290f53c76641812f1cdd0ddb4b5e90b6acb5718477","ssdeep":"","tlshash":"1b61ac2078759d2eb937450676f120086450a6ebea5a9cfb7cbeff76c4825c04c364ed","first_seen":"2024-02-10T03:24:26Z","last_seen":"2026-06-11T02:23:39.466499Z","times_seen":5761,"resource_available":false,"data":null}},"time_used":184,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":184,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-29","alert":"Sinkholed","trigger":"ymax-plus.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ymax-plus.com/wp-content/uploads/generateblocks/style-11_ver-1741273587.css","fqdn":"ymax-plus.com","domain":"ymax-plus.com","tld":"com"},"ip":{"addr":"184.94.213.169","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://ymax-plus.com/","date":"2026-03-29T14:00:06.380Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ymax-plus.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Sat, 10 Jan 2026 00:00:00 GMT","end":"Sun, 10 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"76:B2:B2:18:99:6B:98:DE:AC:38:6E:D1:90:80:E7:68:65:85:DE:91","sha256":"24:64:DA:81:B8:61:E0:F5:D1:10:7B:6C:1E:6A:72:49:E6:A9:70:7D:A2:D5:99:08:AF:E9:35:67:DE:78:DC:90"}}},"request":{"raw":"GET /wp-content/uploads/generateblocks/style-11_ver-1741273587.css HTTP/1.1\r\nHost: ymax-plus.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ymax-plus.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Sun, 05 Apr 2026 14:00:06 GMT\r\ncontent-type: text/css\r\nlast-modified: Fri, 09 Jan 2026 22:16:32 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 590\r\ndate: Sun, 29 Mar 2026 14:00:06 GMT\r\nserver: LiteSpeed\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":3157,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (3157), with no line terminators","md5":"7146c472ef94cacd52b317d50f73b2ab","sha1":"364e9a421c02814adee74ae3dce4778693cde551","sha256":"34badcb8bfe9cdb2c6b2a5abb0ff6d009189d43df20169c43f7e232a5a610dc6","sha512":"beba7941bfa1122d3776e76dcb9d1d25da1d4ad9b591c7f0f2e0fdb81339ef9e299569ffe25c0cba5bc93fef1c720e95422c79af0a9e19fee0f3017d8196dc0c","ssdeep":"","tlshash":"d451ed27de94521df93e9ca52f057ad63920d863c47d73f8f8d1f22588a9431b9b820b","first_seen":"2026-03-29T14:00:31.885338Z","last_seen":"2026-03-29T14:00:31.885338Z","times_seen":1,"resource_available":false,"data":null}},"time_used":184,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":184,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-29","alert":"Sinkholed","trigger":"ymax-plus.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"ymax-plus.com/wp-content/plugins/easy-table-of-contents/assets/js/smooth_scroll.min_ver-2.0.73.js","fqdn":"ymax-plus.com","domain":"ymax-plus.com","tld":"com"},"ip":{"addr":"184.94.213.169","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://ymax-plus.com/","date":"2026-03-29T14:00:06.391Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ymax-plus.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Sat, 10 Jan 2026 00:00:00 GMT","end":"Sun, 10 Jan 2027 23:59:59 GMT"},"fingerprint":{"sha1":"76:B2:B2:18:99:6B:98:DE:AC:38:6E:D1:90:80:E7:68:65:85:DE:91","sha256":"24:64:DA:81:B8:61:E0:F5:D1:10:7B:6C:1E:6A:72:49:E6:A9:70:7D:A2:D5:99:08:AF:E9:35:67:DE:78:DC:90"}}},"request":{"raw":"GET /wp-content/plugins/easy-table-of-contents/assets/js/smooth_scroll.min_ver-2.0.73.js HTTP/1.1\r\nHost: ymax-plus.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://ymax-plus.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Fri, 09 Jan 2026 22:20:56 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 665\r\ndate: Sun, 29 Mar 2026 14:00:06 GMT\r\nserver: LiteSpeed\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":1961,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (1239)","md5":"deb662a058b6a2b25104227b4e7004b9","sha1":"30d2e6535d3c3f9dcd304db60ef1930cdc08c034","sha256":"709633feeb66660957e34e05cc6a9969ff9e3e5a19ee6b6f18210267adc08bfd","sha512":"9d6d18687e1c35389c1c38fbc18584b133e41c859cafb1d0511c44c5bf5828ba9b48955542f8b066f3f2cfe8990a6054679de57f1f8c3a3fee7277bcebcd2e91","ssdeep":"","tlshash":"7941d5d8a715257ca1be30fcfc3fb21e626b5481a956200a116c94ca5c91f1d29f7e6c","first_seen":"2026-03-29T14:00:31.887661Z","last_seen":"2026-03-29T14:00:31.887661Z","times_seen":1,"resource_available":true,"data":null}},"time_used":523,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":523,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-29","alert":"Sinkholed","trigger":"ymax-plus.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}
