{"report_id":"a617eb29-6572-4f9f-a45d-1c856e8adf61","version":6,"status":"done","tags":[],"date":"2026-03-06T11:54:57Z","url":{"schema":"https","addr":"elgonfestival.com","fqdn":"elgonfestival.com","domain":"elgonfestival.com","tld":"com"},"ip":{"addr":"50.6.174.21","port":0,"asn":19871,"as":"NETWORK-SOLUTIONS-HOSTING","country":"United States","country_code":"US"},"final":{"url":{"schema":"https","addr":"elgonfestival.com/","fqdn":"elgonfestival.com","domain":"elgonfestival.com","tld":"com"},"title":"The Elgon Festival","dom":{"size":17562,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (8832)","md5":"f5c3181aeaabf7fe29480b23c04d8cba","sha1":"d97faa8f9c35dae0f828340649bd51198f73aa81","sha256":"7a5a397dd26e37c0ec6065f0d97cb836f8eae27d9bf5fdd761df2e8000c88a9a","sha512":"d6c7c4f6a2c8f707b9df484840d1c82827a11e3c718dbaab9e4fbeec8baa4cff78596dada5e78cd04dc3f1cda22d75e3c3d6cebb43d9ed93f915cb8305b7440d","ssdeep":"192:PEwLC6vMA78ALSRqIKrqwRXdSZsTaAg1BNslQCfEGHRmy4kWeOnETewhG5DVoi7N:BLXMgkRWr/ZdSZUaAskWwMy7s7","tlshash":"12728533d05a48137f4e676cc1d63218d5a89a1ac706e775b4f821bc87e89f710e7a1e","dom_hash":"domhashbba0283f77530a30f4b87bd82e53dc8d","first_seen":"2026-03-06T11:55:00.100626Z","last_seen":"2026-03-06T11:55:00.100626Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"elgonfestival.com","fqdn":"elgonfestival.com","domain":"elgonfestival.com","tld":"com"},"ip":{"addr":"50.6.174.21","port":0,"asn":19871,"as":"NETWORK-SOLUTIONS-HOSTING","country":"United States","country_code":"US"},"tags":null,"meta":null,"user":{"user_id":"akbkyowd9geqr98"}},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-04-10T11:54:57Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"elgonfestival.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null},"summary":[{"fqdn":"elgonfestival.com","ip":{"addr":"50.6.174.21","port":443,"asn":19871,"as":"NETWORK-SOLUTIONS-HOSTING","country":"United States","country_code":"US"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2026-03-06T11:17:26.683628Z","last_seen":"2026-03-06T11:17:26.683628Z","alert_count":33,"request_count":33,"received_data":1197465,"sent_data":16205,"comment":"","tags":null,"fingerprints":[{"name":"WordPress:6.9.1","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"Google Maps","description":"Google Maps is a web mapping service. It offers satellite imagery, aerial photography, street maps, 360° interactive panoramic views of streets, real-time traffic conditions, and route planning for traveling by foot, car, bicycle and air, or public transportation.","website":"https://maps.google.com","common_platform_enumeration":"","icon":"Google Maps.svg","categories":["Maps"]},{"name":"Elementor:3.21.8","description":"Elementor is a website builder platform for professionals on WordPress.","website":"https://elementor.com","common_platform_enumeration":"","icon":"Elementor.svg","categories":["Page builders","WordPress plugins"]},{"name":"wpBakery","description":"WPBakery is a drag and drop visual page builder plugin for WordPress.","website":"https://wpbakery.com","common_platform_enumeration":"","icon":"wpBakery.svg","categories":["Page builders","WordPress plugins"]},{"name":"YouTube","description":"YouTube is a video sharing service where users can create their own profile, upload videos, watch, like and comment on other videos.","website":"https://www.youtube.com","common_platform_enumeration":"","icon":"YouTube.png","categories":["Video players"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Slider Revolution:6.6.18","description":"Slider Revolution is a flexible and highly customisable slider.","website":"https://www.sliderrevolution.com","common_platform_enumeration":"","icon":"Slider Revolution.svg","categories":["Widgets","Photo galleries"]},{"name":"Modernizr","description":"Modernizr is a JavaScript library that detects the features available in a user's browser.","website":"https://modernizr.com","common_platform_enumeration":"","icon":"Modernizr.svg","categories":["JavaScript libraries"]},{"name":"jQuery Migrate:3.4.1","description":"Query Migrate is a javascript library that allows you to preserve the compatibility of your jQuery code developed for versions of jQuery older than 1.9.","website":"https://github.com/jquery/jquery-migrate","common_platform_enumeration":"","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"The Events Calendar","description":"The Events Calendar is a free event management plugin for WordPress.","website":"https://theeventscalendar.com","common_platform_enumeration":"","icon":"The Events Calendar.png","categories":["WordPress plugins"]},{"name":"WooCommerce:8.9.5","description":"WooCommerce is an open-source ecommerce plugin for WordPress.","website":"https://woocommerce.com","common_platform_enumeration":"","icon":"WooCommerce.svg","categories":["Ecommerce","WordPress plugins"]},{"name":"Contact Form 7:6.1.5","description":"Contact Form 7 is an WordPress plugin which can manage multiple contact forms. The form supports Ajax-powered submitting, CAPTCHA, Akismet spam filtering.","website":"https://contactform7.com","common_platform_enumeration":"","icon":"Contact Form 7.png","categories":["WordPress plugins","Form builders"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]}]},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.74.10","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-03-01T22:18:12.522658Z","alert_count":0,"request_count":1,"received_data":11630,"sent_data":511,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"maps.google.com","ip":{"addr":"142.251.143.142","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"1997-09-15","domain_rank":76,"first_seen":"2012-09-10T23:07:43Z","last_seen":"2026-03-02T04:34:02.772064Z","alert_count":0,"request_count":1,"received_data":310876,"sent_data":461,"comment":"","tags":null,"fingerprints":null}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":null,"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"elgonfestival.com/","fqdn":"elgonfestival.com","domain":"elgonfestival.com","tld":"com"},"ip":{"addr":"50.6.174.21","port":443,"asn":19871,"as":"NETWORK-SOLUTIONS-HOSTING","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-03-06T11:54:34.682Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.nilecom.co.ug","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 14 Jan 2026 09:49:24 GMT","end":"Tue, 14 Apr 2026 09:49:23 GMT"},"fingerprint":{"sha1":"BE:F3:32:EC:14:2D:25:8B:4F:91:F0:E8:34:DE:60:42:27:3E:E9:0F","sha256":"AF:36:E4:98:51:D1:99:FF:49:9D:5D:A2:32:94:E6:31:5A:4C:3E:EF:FC:99:DE:F3:C7:6B:56:24:DE:71:F0:9C"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: elgonfestival.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Fri, 06 Mar 2026 11:54:35 GMT\r\nServer: Apache\r\nLink: \u003chttps://elgonfestival.com/wp-json/\u003e; rel=\"https://api.w.org/\", \u003chttps://elgonfestival.com/wp-json/wp/v2/pages/2229\u003e; rel=\"alternate\"; title=\"JSON\"; type=\"application/json\", \u003chttps://elgonfestival.com/\u003e; rel=shortlink\r\nX-TEC-API-VERSION: v1\r\nX-TEC-API-ROOT: https://elgonfestival.com/wp-json/tribe/events/v1/\r\nX-TEC-API-ORIGIN: https://elgonfestival.com\r\nKeep-Alive: timeout=5, max=100\r\nConnection: Keep-Alive\r\nTransfer-Encoding: chunked\r\nContent-Type: text/html; charset=UTF-8\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"WordPress:6.9.1","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"Google Maps","description":"Google Maps is a web mapping service. It offers satellite imagery, aerial photography, street maps, 360° interactive panoramic views of streets, real-time traffic conditions, and route planning for traveling by foot, car, bicycle and air, or public transportation.","website":"https://maps.google.com","common_platform_enumeration":"","icon":"Google Maps.svg","categories":["Maps"]},{"name":"Elementor:3.21.8","description":"Elementor is a website builder platform for professionals on WordPress.","website":"https://elementor.com","common_platform_enumeration":"","icon":"Elementor.svg","categories":["Page builders","WordPress plugins"]},{"name":"wpBakery","description":"WPBakery is a drag and drop visual page builder plugin for WordPress.","website":"https://wpbakery.com","common_platform_enumeration":"","icon":"wpBakery.svg","categories":["Page builders","WordPress plugins"]},{"name":"YouTube","description":"YouTube is a video sharing service where users can create their own profile, upload videos, watch, like and comment on other videos.","website":"https://www.youtube.com","common_platform_enumeration":"","icon":"YouTube.png","categories":["Video players"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Slider Revolution:6.6.18","description":"Slider Revolution is a flexible and highly customisable slider.","website":"https://www.sliderrevolution.com","common_platform_enumeration":"","icon":"Slider Revolution.svg","categories":["Widgets","Photo galleries"]},{"name":"Modernizr","description":"Modernizr is a JavaScript library that detects the features available in a user's browser.","website":"https://modernizr.com","common_platform_enumeration":"","icon":"Modernizr.svg","categories":["JavaScript libraries"]},{"name":"jQuery Migrate:3.4.1","description":"Query Migrate is a javascript library that allows you to preserve the compatibility of your jQuery code developed for versions of jQuery older than 1.9.","website":"https://github.com/jquery/jquery-migrate","common_platform_enumeration":"","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"The Events Calendar","description":"The Events Calendar is a free event management plugin for WordPress.","website":"https://theeventscalendar.com","common_platform_enumeration":"","icon":"The Events Calendar.png","categories":["WordPress plugins"]},{"name":"WooCommerce:8.9.5","description":"WooCommerce is an open-source ecommerce plugin for WordPress.","website":"https://woocommerce.com","common_platform_enumeration":"","icon":"WooCommerce.svg","categories":["Ecommerce","WordPress plugins"]},{"name":"Contact Form 7:6.1.5","description":"Contact Form 7 is an WordPress plugin which can manage multiple contact forms. The form supports Ajax-powered submitting, CAPTCHA, Akismet spam filtering.","website":"https://contactform7.com","common_platform_enumeration":"","icon":"Contact Form 7.png","categories":["WordPress plugins","Form builders"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]}],"data":{"size":150693,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (8832)","md5":"3c35a48257fa61d8a134ad81dde91a3c","sha1":"18f6e2a0025a36f4c28b30bd66b14afadfea5425","sha256":"da46aaadc557152189ff0ab09fe782304300f427b63eff8f65d51f6fd40ca270","sha512":"0f71a9c846dab4b434961f13ca41ff6e3ca2b5d91da92e825c59b24f5002089afae7be7c8bb39218351d5939d87b266efe7be510f7f7f03f1b509475a9478431","ssdeep":"3072:OliQPelkTXk6kLRktKJDnxKtcyEWV+daCLrlllkDtXuKSloJiAupV7X0a7ySuQC2:puzkTDnxKtvEWnC0JaLX","tlshash":"5ee34c327999002ba223539dd0996b48d9ade433e742cafdf2fc54f88bd5cd66123718","first_seen":"2026-03-06T11:55:00.104763Z","last_seen":"2026-03-06T11:55:00.104763Z","times_seen":1,"resource_available":false,"data":null}},"time_used":7903,"timings":{"blocked":281,"dns":1,"connect":140,"send":0,"wait":1340,"receive":5994,"ssl":144},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"elgonfestival.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"elgonfestival.com/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.4.1","fqdn":"elgonfestival.com","domain":"elgonfestival.com","tld":"com"},"ip":{"addr":"50.6.174.21","port":443,"asn":19871,"as":"NETWORK-SOLUTIONS-HOSTING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://elgonfestival.com/","date":"2026-03-06T11:54:36.554Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.nilecom.co.ug","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 14 Jan 2026 09:49:24 GMT","end":"Tue, 14 Apr 2026 09:49:23 GMT"},"fingerprint":{"sha1":"BE:F3:32:EC:14:2D:25:8B:4F:91:F0:E8:34:DE:60:42:27:3E:E9:0F","sha256":"AF:36:E4:98:51:D1:99:FF:49:9D:5D:A2:32:94:E6:31:5A:4C:3E:EF:FC:99:DE:F3:C7:6B:56:24:DE:71:F0:9C"}}},"request":{"raw":"GET /wp-includes/js/jquery/jquery-migrate.min.js?ver=3.4.1 HTTP/1.1\r\nHost: elgonfestival.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://elgonfestival.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Fri, 06 Mar 2026 11:54:49 GMT\r\nServer: Apache\r\nLast-Modified: Fri, 09 Jun 2023 05:49:24 GMT\r\nAccept-Ranges: bytes\r\nContent-Length: 13577\r\nKeep-Alive: timeout=5, max=100\r\nConnection: Keep-Alive\r\nContent-Type: text/javascript\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":13577,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (13479)","md5":"9ffeb32e2d9efbf8f70caabded242267","sha1":"3ad0c10e501ac2a9bfa18f9cd7e700219b378738","sha256":"5274f11e6fb32ae0cf2dfb9f8043272865c397a7c4223b4cfa7d50ea52fbde89","sha512":"8d6be545508a1c38278b8ad780c3758ae48a25e4e12eee443375aa56031d9b356f8c90f22d4f251140fa3f65603af40523165e33cae2e2d62fc78ec106e3d731","ssdeep":"192:5rprDN+sag6ifKIUpQI99P1tLm9kdgyq1+J3aCJQ+h4MPLORq:5rprxaefKI0LP19m4q1WW+h4Mjp","tlshash":"9952c8adb56679724eb721b8f03bd24f71b205de560d8940d19cc4f6282dc6e812bf78","first_seen":"2023-05-09T19:21:05Z","last_seen":"2026-08-07T01:07:05.142674Z","times_seen":923712,"resource_available":true,"data":null}},"time_used":13270,"timings":{"blocked":11745,"dns":0,"connect":1148,"send":0,"wait":141,"receive":280,"ssl":714},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"elgonfestival.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"elgonfestival.com/wp-content/plugins/woocommerce/assets/js/frontend/woocommerce.min.js?ver=8.9.5","fqdn":"elgonfestival.com","domain":"elgonfestival.com","tld":"com"},"ip":{"addr":"50.6.174.21","port":443,"asn":19871,"as":"NETWORK-SOLUTIONS-HOSTING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://elgonfestival.com/","date":"2026-03-06T11:54:36.557Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.nilecom.co.ug","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 14 Jan 2026 09:49:24 GMT","end":"Tue, 14 Apr 2026 09:49:23 GMT"},"fingerprint":{"sha1":"BE:F3:32:EC:14:2D:25:8B:4F:91:F0:E8:34:DE:60:42:27:3E:E9:0F","sha256":"AF:36:E4:98:51:D1:99:FF:49:9D:5D:A2:32:94:E6:31:5A:4C:3E:EF:FC:99:DE:F3:C7:6B:56:24:DE:71:F0:9C"}}},"request":{"raw":"GET /wp-content/plugins/woocommerce/assets/js/frontend/woocommerce.min.js?ver=8.9.5 HTTP/1.1\r\nHost: elgonfestival.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://elgonfestival.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Fri, 06 Mar 2026 11:54:53 GMT\r\nServer: Apache\r\nLast-Modified: Mon, 02 Mar 2026 21:21:04 GMT\r\nAccept-Ranges: bytes\r\nContent-Length: 2467\r\nKeep-Alive: timeout=5, max=98\r\nConnection: Keep-Alive\r\nContent-Type: text/javascript\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":2467,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (2467), with no line terminators","md5":"76f82678dda92158b4432a5db3292105","sha1":"3b50f16d3fc03ce62fe2f004f214d3b14edb6866","sha256":"c689efadb6d2747806d2fb3d2e365f6eb549c4f17419c932855b350f4fa2ac94","sha512":"049bd893177fba2750a0be9e2faa6104b7bb186fa381c5d657fb816b289ac10e714595bdb019a8c4eff0f4b2aa227220b644e92e7b59f11bb5010bc412df0723","ssdeep":"","tlshash":"0d51531bf4312d7361ffa6b55c9eee442923063988104501b555cb2c657a8c7763bf3e","first_seen":"2024-05-15T05:55:22Z","last_seen":"2026-08-07T01:21:46.362156Z","times_seen":7547,"resource_available":true,"data":null}},"time_used":17746,"timings":{"blocked":17055,"dns":0,"connect":0,"send":0,"wait":691,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"elgonfestival.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"elgonfestival.com/wp-content/plugins/essential-grid/public/assets/css/settings.css?ver=3.1.0","fqdn":"elgonfestival.com","domain":"elgonfestival.com","tld":"com"},"ip":{"addr":"50.6.174.21","port":443,"asn":19871,"as":"NETWORK-SOLUTIONS-HOSTING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://elgonfestival.com/","date":"2026-03-06T11:54:36.534Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.nilecom.co.ug","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 14 Jan 2026 09:49:24 GMT","end":"Tue, 14 Apr 2026 09:49:23 GMT"},"fingerprint":{"sha1":"BE:F3:32:EC:14:2D:25:8B:4F:91:F0:E8:34:DE:60:42:27:3E:E9:0F","sha256":"AF:36:E4:98:51:D1:99:FF:49:9D:5D:A2:32:94:E6:31:5A:4C:3E:EF:FC:99:DE:F3:C7:6B:56:24:DE:71:F0:9C"}}},"request":{"raw":"GET /wp-content/plugins/essential-grid/public/assets/css/settings.css?ver=3.1.0 HTTP/1.1\r\nHost: elgonfestival.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://elgonfestival.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Fri, 06 Mar 2026 11:54:38 GMT\r\nServer: Apache\r\nLast-Modified: Sat, 23 Mar 2024 15:41:32 GMT\r\nAccept-Ranges: bytes\r\nContent-Length: 32208\r\nKeep-Alive: timeout=5, max=97\r\nConnection: Keep-Alive\r\nContent-Type: text/css\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":32208,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (32208), with no line terminators","md5":"678842e82eba214a59aa594fe14d1cdd","sha1":"8c677bdc8abb22563dc62dd829ab030cb2b90795","sha256":"c4316f43861367b66ba122e1e35bdbc0e2b79d3ca24b37f1bd1917622018b378","sha512":"1594d2d7b7f2abfac2051d6ffe01469218e59fa5bacbda157bad736a16dd82c57f4971d33cfbc033854a03dbdb5a77a2fe8fc0a4905c0e7a39b506e9a942139b","ssdeep":"768:dR061xy+ODyRwtdXkRhaN2e+jv5V6E60OZn9ITy:dRx1DvitdXih42nv0n","tlshash":"f5e2707176a72119f177d32d6ec02a781d3fc022ead30e9ffe46a225c3d798d1256a48","first_seen":"2023-10-18T02:02:15Z","last_seen":"2026-08-04T21:37:02.815136Z","times_seen":570,"resource_available":false,"data":null}},"time_used":3923,"timings":{"blocked":1811,"dns":0,"connect":0,"send":0,"wait":320,"receive":1792,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"elgonfestival.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"elgonfestival.com/wp-content/themes/jarvis/css/fontello/css/fontello.css","fqdn":"elgonfestival.com","domain":"elgonfestival.com","tld":"com"},"ip":{"addr":"50.6.174.21","port":443,"asn":19871,"as":"NETWORK-SOLUTIONS-HOSTING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://elgonfestival.com/","date":"2026-03-06T11:54:36.542Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.nilecom.co.ug","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 14 Jan 2026 09:49:24 GMT","end":"Tue, 14 Apr 2026 09:49:23 GMT"},"fingerprint":{"sha1":"BE:F3:32:EC:14:2D:25:8B:4F:91:F0:E8:34:DE:60:42:27:3E:E9:0F","sha256":"AF:36:E4:98:51:D1:99:FF:49:9D:5D:A2:32:94:E6:31:5A:4C:3E:EF:FC:99:DE:F3:C7:6B:56:24:DE:71:F0:9C"}}},"request":{"raw":"GET /wp-content/themes/jarvis/css/fontello/css/fontello.css HTTP/1.1\r\nHost: elgonfestival.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://elgonfestival.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Fri, 06 Mar 2026 11:54:40 GMT\r\nServer: Apache\r\nLast-Modified: Wed, 08 Nov 2023 06:58:03 GMT\r\nAccept-Ranges: bytes\r\nContent-Length: 15171\r\nKeep-Alive: timeout=5, max=96\r\nConnection: Keep-Alive\r\nContent-Type: text/css\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":15171,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text","md5":"ccabc58726181a02a871e10445721116","sha1":"667085e6243048dc474c7b8cce408c06d9486dbb","sha256":"09010be7fbb9e62e57f26579a73b7e0a4b5b62c8aa3661a6777e33d6f05257a5","sha512":"e68bdee1c6481c56ea3a444e20757000ce81ebb7af9c11835110258c1250c7eb820b2a29ff5f64893d43f29da034a413cd6bf38dd161238826d988541af598b6","ssdeep":"192:HOLuJGePClADujQWPK+zityNt4WGLdzs9vWVP0l+uaG/SPFRm:XJfPCKDujQWPgit4L49uVsUua2P","tlshash":"0d6222f19c9801900ba6d3816bdbb6605b4df2189ac2ccd2f4435e5ce7ea27157fa2dc","first_seen":"2024-10-04T10:12:51.143273Z","last_seen":"2026-03-06T11:55:00.111304Z","times_seen":2,"resource_available":false,"data":null}},"time_used":4518,"timings":{"blocked":3915,"dns":0,"connect":0,"send":0,"wait":420,"receive":183,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"elgonfestival.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"elgonfestival.com/wp-content/themes/jarvis/skins/default/skin.responsive.css","fqdn":"elgonfestival.com","domain":"elgonfestival.com","tld":"com"},"ip":{"addr":"50.6.174.21","port":443,"asn":19871,"as":"NETWORK-SOLUTIONS-HOSTING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://elgonfestival.com/","date":"2026-03-06T11:54:36.550Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.nilecom.co.ug","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 14 Jan 2026 09:49:24 GMT","end":"Tue, 14 Apr 2026 09:49:23 GMT"},"fingerprint":{"sha1":"BE:F3:32:EC:14:2D:25:8B:4F:91:F0:E8:34:DE:60:42:27:3E:E9:0F","sha256":"AF:36:E4:98:51:D1:99:FF:49:9D:5D:A2:32:94:E6:31:5A:4C:3E:EF:FC:99:DE:F3:C7:6B:56:24:DE:71:F0:9C"}}},"request":{"raw":"GET /wp-content/themes/jarvis/skins/default/skin.responsive.css HTTP/1.1\r\nHost: elgonfestival.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://elgonfestival.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Fri, 06 Mar 2026 11:54:46 GMT\r\nServer: Apache\r\nLast-Modified: Wed, 08 Nov 2023 06:58:03 GMT\r\nAccept-Ranges: bytes\r\nContent-Length: 4622\r\nKeep-Alive: timeout=5, max=100\r\nConnection: Keep-Alive\r\nContent-Type: text/css\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":4622,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"f8c2b819bfbfd1448cd193183dfb5960","sha1":"e9bc0f47a66ebaaaca95d012b212cff8f13e2c5d","sha256":"8afa661f573a609bd56a454f242880845529b965779ae52041bdc73198160066","sha512":"0f39488cff46f3feffef3e29dbe6b7a02c494b94e85f1931f33feb67437661833cbf65d8203f1af9809973f0f395520c0edd7daf210274bb04229012decb80e5","ssdeep":"96:a4zWOfPZtjVlWidsJUjEpu0y0WOfPZtjVl/id9wjEpuzy5WMfP2tjVBRGQpuzy5+:HycvW9UjEpu0gcv/KwjEpuzlvDRGQpuj","tlshash":"7f91be1baf645403370edc143be563a5a9548c51be8b9dbb505ac8bcffd123b06e8b18","first_seen":"2026-03-06T11:55:00.114226Z","last_seen":"2026-04-03T14:36:33.402337Z","times_seen":2,"resource_available":false,"data":null}},"time_used":10645,"timings":{"blocked":9494,"dns":0,"connect":140,"send":0,"wait":289,"receive":0,"ssl":722},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"elgonfestival.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"elgonfestival.com/wp-content/plugins/revslider/public/assets/fonts/revicons/revicons.woff?5510888","fqdn":"elgonfestival.com","domain":"elgonfestival.com","tld":"com"},"ip":{"addr":"50.6.174.21","port":443,"asn":19871,"as":"NETWORK-SOLUTIONS-HOSTING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://elgonfestival.com/","date":"2026-03-06T11:54:40.944Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.nilecom.co.ug","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 14 Jan 2026 09:49:24 GMT","end":"Tue, 14 Apr 2026 09:49:23 GMT"},"fingerprint":{"sha1":"BE:F3:32:EC:14:2D:25:8B:4F:91:F0:E8:34:DE:60:42:27:3E:E9:0F","sha256":"AF:36:E4:98:51:D1:99:FF:49:9D:5D:A2:32:94:E6:31:5A:4C:3E:EF:FC:99:DE:F3:C7:6B:56:24:DE:71:F0:9C"}}},"request":{"raw":"GET /wp-content/plugins/revslider/public/assets/fonts/revicons/revicons.woff?5510888 HTTP/1.1\r\nHost: elgonfestival.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://elgonfestival.com/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Fri, 06 Mar 2026 11:54:41 GMT\r\nServer: Apache\r\nLast-Modified: Thu, 09 May 2024 16:23:22 GMT\r\nAccept-Ranges: bytes\r\nContent-Length: 7536\r\nKeep-Alive: timeout=5, max=95\r\nConnection: Keep-Alive\r\nContent-Type: font/woff\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":7536,"size_decoded":0,"mime_type":"font/woff","magic":"Web Open Font Format, TrueType, length 7536, version 1.0","md5":"04eb8fc57f27498e5ae37523e3bfb2c7","sha1":"d942ae11706c3f7e511e3c49b0e4574d7ad199c4","sha256":"f7b9c3065e55fa3b9e320093612e7b30dcb14355a44ec461247b495a3e729686","sha512":"fa6508c8a1a822794036174b0b9dbc6e91b5afc1fd340381b868ede6d928dd0f3e66b5a91308d2c0c4c4c64b27dab7761a904c0b6e6b3c0e3e736e5d6342f365","ssdeep":"192:340F/mM4Oa0wA2jPOf2X62xqpjjjaT64iSNizw:34sxBwCujqpj/aT6nSYzw","tlshash":"20f18e14fec0f56dfd8f52702780e6f6b2646de260560dc52d48e65c14e291ae27d47c","first_seen":"2023-04-05T13:50:09Z","last_seen":"2026-08-07T00:06:06.464011Z","times_seen":32215,"resource_available":false,"data":null}},"time_used":434,"timings":{"blocked":117,"dns":0,"connect":0,"send":0,"wait":317,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"elgonfestival.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"elgonfestival.com/wp-content/plugins/the-events-calendar/build/css/tribe-events-single-skeleton.css?ver=6.15.17","fqdn":"elgonfestival.com","domain":"elgonfestival.com","tld":"com"},"ip":{"addr":"50.6.174.21","port":443,"asn":19871,"as":"NETWORK-SOLUTIONS-HOSTING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://elgonfestival.com/","date":"2026-03-06T11:54:36.539Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.nilecom.co.ug","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 14 Jan 2026 09:49:24 GMT","end":"Tue, 14 Apr 2026 09:49:23 GMT"},"fingerprint":{"sha1":"BE:F3:32:EC:14:2D:25:8B:4F:91:F0:E8:34:DE:60:42:27:3E:E9:0F","sha256":"AF:36:E4:98:51:D1:99:FF:49:9D:5D:A2:32:94:E6:31:5A:4C:3E:EF:FC:99:DE:F3:C7:6B:56:24:DE:71:F0:9C"}}},"request":{"raw":"GET /wp-content/plugins/the-events-calendar/build/css/tribe-events-single-skeleton.css?ver=6.15.17 HTTP/1.1\r\nHost: elgonfestival.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://elgonfestival.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Fri, 06 Mar 2026 11:54:39 GMT\r\nServer: Apache\r\nLast-Modified: Wed, 25 Feb 2026 21:20:14 GMT\r\nAccept-Ranges: bytes\r\nContent-Length: 18813\r\nKeep-Alive: timeout=5, max=99\r\nConnection: Keep-Alive\r\nContent-Type: text/css\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":18813,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (18812)","md5":"7816200b8ee0ebe7d38d0b346de2b663","sha1":"43f6eba622d83f6b35ad5728055d11c0e6b4cbc4","sha256":"27f3c6b23b6554006b0c0d6b59fa0f53a502ef26b4447beb148b236f86f895fb","sha512":"89f09d73643d3494867a675e0211cbe04a84a8e17ceb10696fa19bc6eb87ebbdf4ac95598a3e14a7882afcb26299e3b9de986094093711b59b54337008c80bf5","ssdeep":"192:B4SUcB8i8qZqAksnN7InXantHq9Gc7KF9dOssJ09qLOGA7D9i67asYK2A4E+ETGi:m7N7OIKGEMkBws6K","tlshash":"f582cbf0d012a5bead2fa33d83fdb11e137874edbaa96741d8811ca650cd79d01a249f","first_seen":"2025-11-05T14:41:32.683529Z","last_seen":"2026-08-06T22:22:07.677883Z","times_seen":3793,"resource_available":false,"data":null}},"time_used":3555,"timings":{"blocked":3144,"dns":0,"connect":0,"send":0,"wait":273,"receive":138,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"elgonfestival.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"elgonfestival.com/wp-content/themes/jarvis/style.css","fqdn":"elgonfestival.com","domain":"elgonfestival.com","tld":"com"},"ip":{"addr":"50.6.174.21","port":443,"asn":19871,"as":"NETWORK-SOLUTIONS-HOSTING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://elgonfestival.com/","date":"2026-03-06T11:54:36.543Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.nilecom.co.ug","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 14 Jan 2026 09:49:24 GMT","end":"Tue, 14 Apr 2026 09:49:23 GMT"},"fingerprint":{"sha1":"BE:F3:32:EC:14:2D:25:8B:4F:91:F0:E8:34:DE:60:42:27:3E:E9:0F","sha256":"AF:36:E4:98:51:D1:99:FF:49:9D:5D:A2:32:94:E6:31:5A:4C:3E:EF:FC:99:DE:F3:C7:6B:56:24:DE:71:F0:9C"}}},"request":{"raw":"GET /wp-content/themes/jarvis/style.css HTTP/1.1\r\nHost: elgonfestival.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://elgonfestival.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Fri, 06 Mar 2026 11:54:40 GMT\r\nServer: Apache\r\nLast-Modified: Wed, 08 Nov 2023 06:58:03 GMT\r\nAccept-Ranges: bytes\r\nContent-Length: 194726\r\nKeep-Alive: timeout=5, max=97\r\nConnection: Keep-Alive\r\nContent-Type: text/css\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":194726,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"37cd73c493bdf9a05d5eb58528c7af02","sha1":"266c179eabfeebe131b293535d816fbd2d0ccc56","sha256":"e0eeb43f9fee397e41baac59b9404d1f127e2077c3975e7c8385d2e59e1f43c5","sha512":"7dbf87afc6813232bac86fdcecafeaabc00352b4d6f3571108ae5ca41196543e141b740f4768599a8bb98743741364603007cce8433ce42d4c65141d91b36daf","ssdeep":"1536:66v+xpGKHsbO4oxx+G7ZUMXc5+O4roAEL8ayeTyOEvFhRx/GCrnl/ci5TbiWq:62oZZE5KFJy","tlshash":"771494160db31d40511fc1586befbb24f66c00939a4ecdecbbe0b5588f8969950bef89","first_seen":"2026-03-06T11:55:00.118937Z","last_seen":"2026-03-06T11:55:00.118937Z","times_seen":1,"resource_available":false,"data":null}},"time_used":17787,"timings":{"blocked":4029,"dns":0,"connect":0,"send":0,"wait":624,"receive":13134,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"elgonfestival.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"elgonfestival.com/wp-includes/css/dist/block-library/style.min.css?ver=6.9.1","fqdn":"elgonfestival.com","domain":"elgonfestival.com","tld":"com"},"ip":{"addr":"50.6.174.21","port":443,"asn":19871,"as":"NETWORK-SOLUTIONS-HOSTING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://elgonfestival.com/","date":"2026-03-06T11:54:36.506Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.nilecom.co.ug","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 14 Jan 2026 09:49:24 GMT","end":"Tue, 14 Apr 2026 09:49:23 GMT"},"fingerprint":{"sha1":"BE:F3:32:EC:14:2D:25:8B:4F:91:F0:E8:34:DE:60:42:27:3E:E9:0F","sha256":"AF:36:E4:98:51:D1:99:FF:49:9D:5D:A2:32:94:E6:31:5A:4C:3E:EF:FC:99:DE:F3:C7:6B:56:24:DE:71:F0:9C"}}},"request":{"raw":"GET /wp-includes/css/dist/block-library/style.min.css?ver=6.9.1 HTTP/1.1\r\nHost: elgonfestival.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://elgonfestival.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Fri, 06 Mar 2026 11:54:36 GMT\r\nServer: Apache\r\nLast-Modified: Wed, 04 Feb 2026 09:20:53 GMT\r\nAccept-Ranges: bytes\r\nContent-Length: 119358\r\nKeep-Alive: timeout=5, max=100\r\nConnection: Keep-Alive\r\nContent-Type: text/css\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":119358,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (55871)","md5":"b592e353685f2eabaf8f935e377a95a0","sha1":"30d4a0ff9561f9c96a0a29cce379dfbde9749a65","sha256":"3b44e208bba827e614cf1e36e639e3c7cfb849771fb17e99bb38e14022d30d16","sha512":"193686fe6c1766b540e311015484745ad2ceddb9ffc3f883ac3ae66f1d29e32bca94ba11d40f3d0f6689c306f7760ae167d8af73a22778aba93a772e076a9cd4","ssdeep":"3072:WoeJBCCUQg5MG7x+qehvP0xdclkWwbFpPu:CfUQg5MG7x+qehvP0xdclkWiF0","tlshash":"cfc3621417b4dcf935ffa73a5e4ee258a107aa41c68a67e6e066d190718ca490cf3f0f","first_seen":"2026-02-03T19:45:02.649878Z","last_seen":"2026-08-06T23:57:29.496347Z","times_seen":50053,"resource_available":false,"data":null}},"time_used":3461,"timings":{"blocked":265,"dns":1,"connect":138,"send":0,"wait":412,"receive":2500,"ssl":141},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"elgonfestival.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"elgonfestival.com/wp-content/plugins/date-time-picker-field/public/css/avdp-public.css?ver=3.0","fqdn":"elgonfestival.com","domain":"elgonfestival.com","tld":"com"},"ip":{"addr":"50.6.174.21","port":443,"asn":19871,"as":"NETWORK-SOLUTIONS-HOSTING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://elgonfestival.com/","date":"2026-03-06T11:54:36.533Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.nilecom.co.ug","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 14 Jan 2026 09:49:24 GMT","end":"Tue, 14 Apr 2026 09:49:23 GMT"},"fingerprint":{"sha1":"BE:F3:32:EC:14:2D:25:8B:4F:91:F0:E8:34:DE:60:42:27:3E:E9:0F","sha256":"AF:36:E4:98:51:D1:99:FF:49:9D:5D:A2:32:94:E6:31:5A:4C:3E:EF:FC:99:DE:F3:C7:6B:56:24:DE:71:F0:9C"}}},"request":{"raw":"GET /wp-content/plugins/date-time-picker-field/public/css/avdp-public.css?ver=3.0 HTTP/1.1\r\nHost: elgonfestival.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://elgonfestival.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Fri, 06 Mar 2026 11:54:37 GMT\r\nServer: Apache\r\nLast-Modified: Fri, 27 Feb 2026 21:20:06 GMT\r\nAccept-Ranges: bytes\r\nContent-Length: 2259\r\nKeep-Alive: timeout=5, max=98\r\nConnection: Keep-Alive\r\nContent-Type: text/css\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":2259,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"4467caabd593e01efa31529bc30a5ba7","sha1":"539560b20d3795cc3828e56e83b2245ba51ef8f7","sha256":"57af5a22148b6cfecfa77ac7fe5f10091313704cdcda12951e0df78a3a778b21","sha512":"6443f5e0ee1e8cdaa268b56d491ccfc221e94bf961596c422bb563676d640bc87669548c74120eeb494d053a1b21b610c79859fb0edeef7f512424b46e2d7185","ssdeep":"","tlshash":"0e41e0a144a31e0a7427c31c67d6bba3364e013f0316cd39bb4863584f9da5e939afc9","first_seen":"2026-03-05T19:17:39.338704Z","last_seen":"2026-08-03T22:55:01.766948Z","times_seen":104,"resource_available":false,"data":null}},"time_used":1810,"timings":{"blocked":1118,"dns":0,"connect":0,"send":0,"wait":692,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"elgonfestival.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"elgonfestival.com/wp-content/plugins/quicket-events-list/css/qckt-style.css?ver=6.9.1","fqdn":"elgonfestival.com","domain":"elgonfestival.com","tld":"com"},"ip":{"addr":"50.6.174.21","port":443,"asn":19871,"as":"NETWORK-SOLUTIONS-HOSTING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://elgonfestival.com/","date":"2026-03-06T11:54:36.536Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.nilecom.co.ug","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 14 Jan 2026 09:49:24 GMT","end":"Tue, 14 Apr 2026 09:49:23 GMT"},"fingerprint":{"sha1":"BE:F3:32:EC:14:2D:25:8B:4F:91:F0:E8:34:DE:60:42:27:3E:E9:0F","sha256":"AF:36:E4:98:51:D1:99:FF:49:9D:5D:A2:32:94:E6:31:5A:4C:3E:EF:FC:99:DE:F3:C7:6B:56:24:DE:71:F0:9C"}}},"request":{"raw":"GET /wp-content/plugins/quicket-events-list/css/qckt-style.css?ver=6.9.1 HTTP/1.1\r\nHost: elgonfestival.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://elgonfestival.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Fri, 06 Mar 2026 11:54:39 GMT\r\nServer: Apache\r\nLast-Modified: Sat, 08 Jun 2024 08:28:29 GMT\r\nAccept-Ranges: bytes\r\nContent-Length: 1233\r\nKeep-Alive: timeout=5, max=99\r\nConnection: Keep-Alive\r\nContent-Type: text/css\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":1233,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"e42ff7af84c7b948065d8728254ac7f1","sha1":"90dd8f1635eb3362326c35abd464e4a732a71138","sha256":"480aba496129478d0fb8523e5697a04c247f673d3a59d8629b452e1c2eaa87c2","sha512":"fdce0e72baf92a19bf6c90c17b3c7df2875500afa0446405fc3d66ebf2efe1ed2fb96a53632d37bf51a8b1378ef3689a6217a0a69511a956924d6c7552735e25","ssdeep":"","tlshash":"ba21ace9ee01080bb67bd83ab731a355d5341557c50644bc7e9cb6a28fb107c834de5c","first_seen":"2026-03-06T11:55:00.124104Z","last_seen":"2026-03-06T11:55:00.124104Z","times_seen":1,"resource_available":false,"data":null}},"time_used":2879,"timings":{"blocked":2739,"dns":0,"connect":0,"send":0,"wait":140,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"elgonfestival.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"elgonfestival.com/wp-content/plugins/the-events-calendar/build/css/integrations/plugins/elementor/widgets/widget-base.css?ver=6.15.17","fqdn":"elgonfestival.com","domain":"elgonfestival.com","tld":"com"},"ip":{"addr":"50.6.174.21","port":443,"asn":19871,"as":"NETWORK-SOLUTIONS-HOSTING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://elgonfestival.com/","date":"2026-03-06T11:54:36.541Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.nilecom.co.ug","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 14 Jan 2026 09:49:24 GMT","end":"Tue, 14 Apr 2026 09:49:23 GMT"},"fingerprint":{"sha1":"BE:F3:32:EC:14:2D:25:8B:4F:91:F0:E8:34:DE:60:42:27:3E:E9:0F","sha256":"AF:36:E4:98:51:D1:99:FF:49:9D:5D:A2:32:94:E6:31:5A:4C:3E:EF:FC:99:DE:F3:C7:6B:56:24:DE:71:F0:9C"}}},"request":{"raw":"GET /wp-content/plugins/the-events-calendar/build/css/integrations/plugins/elementor/widgets/widget-base.css?ver=6.15.17 HTTP/1.1\r\nHost: elgonfestival.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://elgonfestival.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Fri, 06 Mar 2026 11:54:40 GMT\r\nServer: Apache\r\nLast-Modified: Wed, 25 Feb 2026 21:20:14 GMT\r\nAccept-Ranges: bytes\r\nContent-Length: 1128\r\nKeep-Alive: timeout=5, max=99\r\nConnection: Keep-Alive\r\nContent-Type: text/css\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":1128,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (1127)","md5":"6fc7abd853ee796ccc1ea3dbd8e8cb5a","sha1":"3fedfb2eaed737569ed05aa6eb629758d94de032","sha256":"5ff68345e0bee4f776de5d3f6784da5828a660de85bf0ce45aade6929091077c","sha512":"dbc6f1242e559887fe0743ee84ee1af781337d630299126d542749324bd8f3bf2fbe1addc921e534a4343165b9fc013fe3fff87e9bf9cef987cbaeaa6144ff0f","ssdeep":"","tlshash":"39214ca6b652713e5c1f087b236a900db2602cc5f4164be1ddf36d5081e6de63399758","first_seen":"2025-05-29T14:30:54.996874Z","last_seen":"2026-08-06T22:22:07.692674Z","times_seen":5296,"resource_available":false,"data":null}},"time_used":4285,"timings":{"blocked":3646,"dns":0,"connect":0,"send":0,"wait":639,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"elgonfestival.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"elgonfestival.com/wp-content/plugins/trx_utils/shortcodes/theme.shortcodes.css","fqdn":"elgonfestival.com","domain":"elgonfestival.com","tld":"com"},"ip":{"addr":"50.6.174.21","port":443,"asn":19871,"as":"NETWORK-SOLUTIONS-HOSTING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://elgonfestival.com/","date":"2026-03-06T11:54:36.545Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.nilecom.co.ug","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 14 Jan 2026 09:49:24 GMT","end":"Tue, 14 Apr 2026 09:49:23 GMT"},"fingerprint":{"sha1":"BE:F3:32:EC:14:2D:25:8B:4F:91:F0:E8:34:DE:60:42:27:3E:E9:0F","sha256":"AF:36:E4:98:51:D1:99:FF:49:9D:5D:A2:32:94:E6:31:5A:4C:3E:EF:FC:99:DE:F3:C7:6B:56:24:DE:71:F0:9C"}}},"request":{"raw":"GET /wp-content/plugins/trx_utils/shortcodes/theme.shortcodes.css HTTP/1.1\r\nHost: elgonfestival.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://elgonfestival.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Fri, 06 Mar 2026 11:54:41 GMT\r\nServer: Apache\r\nLast-Modified: Sat, 23 Mar 2024 15:36:49 GMT\r\nAccept-Ranges: bytes\r\nContent-Length: 119096\r\nKeep-Alive: timeout=5, max=97\r\nConnection: Keep-Alive\r\nContent-Type: text/css\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":119096,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"2ea86a6ded1ba3695f4ec7d44eab1d88","sha1":"202cec05253f9794825d43f7ccd8b0308eeea9d5","sha256":"d2e6d3d39971eb5f0e13017c07b0c32b4db1b1df7203b1c8a79985d430cbfed8","sha512":"c44fa575346ae0a5d97728583d8df8bf1192b3a8878790bd569436bdc64cd6453649d5085ebbcced4f8fbdf95489ea45ce6f38479046571297099496d9434149","ssdeep":"1536:Ci6IRmtvqjeXi//BNVvlCeJH9xk5Cui/iWLrzNIpSgzGP6zzSpQLcP:kkvlRfui/iWLdX","tlshash":"0ac312611eb30404101fd5586bdab74df2a84083bacadc6dfac1e91cdf856b4a0aff95","first_seen":"2024-10-04T10:12:51.359537Z","last_seen":"2026-03-06T11:55:00.126914Z","times_seen":2,"resource_available":false,"data":null}},"time_used":11753,"timings":{"blocked":4557,"dns":0,"connect":0,"send":0,"wait":410,"receive":6786,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"elgonfestival.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"elgonfestival.com/wp-content/plugins/woocommerce/assets/css/woocommerce-layout.css?ver=8.9.5","fqdn":"elgonfestival.com","domain":"elgonfestival.com","tld":"com"},"ip":{"addr":"50.6.174.21","port":443,"asn":19871,"as":"NETWORK-SOLUTIONS-HOSTING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://elgonfestival.com/","date":"2026-03-06T11:54:36.537Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.nilecom.co.ug","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 14 Jan 2026 09:49:24 GMT","end":"Tue, 14 Apr 2026 09:49:23 GMT"},"fingerprint":{"sha1":"BE:F3:32:EC:14:2D:25:8B:4F:91:F0:E8:34:DE:60:42:27:3E:E9:0F","sha256":"AF:36:E4:98:51:D1:99:FF:49:9D:5D:A2:32:94:E6:31:5A:4C:3E:EF:FC:99:DE:F3:C7:6B:56:24:DE:71:F0:9C"}}},"request":{"raw":"GET /wp-content/plugins/woocommerce/assets/css/woocommerce-layout.css?ver=8.9.5 HTTP/1.1\r\nHost: elgonfestival.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://elgonfestival.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Fri, 06 Mar 2026 11:54:39 GMT\r\nServer: Apache\r\nLast-Modified: Mon, 02 Mar 2026 21:21:04 GMT\r\nAccept-Ranges: bytes\r\nContent-Length: 17688\r\nKeep-Alive: timeout=5, max=98\r\nConnection: Keep-Alive\r\nContent-Type: text/css\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":17688,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (17688), with no line terminators","md5":"279a41fe094a1c0ff59f6d84dc6ec0d2","sha1":"8da5b79f8c3f9463a3ebbe2b021ce430f2386ee8","sha256":"f3025cb2afeb54d4dcb1ca02606b0e2e48639ee78a9d55ef4e9a80767351e118","sha512":"079f86b6b0224365c316b6eeb4659a2c46b8cb9003590a6a4a91982026973a8543675f47739803490e6ee0da9bd3faddb39bcdbf650e20a40ef93821859fb012","ssdeep":"384:H3sXkEzOm9Oq/tThyIeGe0cGAyBigSpSgsVY8s:3GAyMh","tlshash":"1e8222e7c4381c2877edb49d7c4031d63c26c53cbb8521b9a8952b0d86da6db3ab170e","first_seen":"2023-12-13T03:53:21Z","last_seen":"2026-08-06T21:54:54.094209Z","times_seen":9876,"resource_available":false,"data":null}},"time_used":4036,"timings":{"blocked":2878,"dns":0,"connect":0,"send":0,"wait":418,"receive":740,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"elgonfestival.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"elgonfestival.com/wp-content/plugins/the-events-calendar/build/css/tribe-events-single-full.css?ver=6.15.17","fqdn":"elgonfestival.com","domain":"elgonfestival.com","tld":"com"},"ip":{"addr":"50.6.174.21","port":443,"asn":19871,"as":"NETWORK-SOLUTIONS-HOSTING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://elgonfestival.com/","date":"2026-03-06T11:54:36.540Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.nilecom.co.ug","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 14 Jan 2026 09:49:24 GMT","end":"Tue, 14 Apr 2026 09:49:23 GMT"},"fingerprint":{"sha1":"BE:F3:32:EC:14:2D:25:8B:4F:91:F0:E8:34:DE:60:42:27:3E:E9:0F","sha256":"AF:36:E4:98:51:D1:99:FF:49:9D:5D:A2:32:94:E6:31:5A:4C:3E:EF:FC:99:DE:F3:C7:6B:56:24:DE:71:F0:9C"}}},"request":{"raw":"GET /wp-content/plugins/the-events-calendar/build/css/tribe-events-single-full.css?ver=6.15.17 HTTP/1.1\r\nHost: elgonfestival.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://elgonfestival.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Fri, 06 Mar 2026 11:54:40 GMT\r\nServer: Apache\r\nLast-Modified: Wed, 25 Feb 2026 21:20:14 GMT\r\nAccept-Ranges: bytes\r\nContent-Length: 21027\r\nKeep-Alive: timeout=5, max=98\r\nConnection: Keep-Alive\r\nContent-Type: text/css\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":21027,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (21026)","md5":"b02b950ef2b84b63332f1161606b126c","sha1":"2834962b2aca3bc7d6673be652aa56abb714794b","sha256":"6e65de867e38e088506cd8748c3e6fc49317f1426950b7a69b323c438518f0be","sha512":"9ebfaa5220d74951d38ab806e32cbcdf546f58e013f4b5bdf4c169b5e8cd5a67157ecfa91f582cb475194fa8edce24a635609a12624ec320e20b105d6ced14dc","ssdeep":"192:B4SUcB8i8qnNttMeBWoenSmnUUFeKBtnAF1yZe49Zq3N4/2ghRZGT795UR+f+vB1:mBeFSo3adZR4+HyWH","tlshash":"eb92bbb5f242f17e6d2f463e63ecb12d532878eea9542766f8d04c9150c67ae214078f","first_seen":"2026-01-13T23:27:05.877099Z","last_seen":"2026-08-06T22:22:07.679289Z","times_seen":2580,"resource_available":false,"data":null}},"time_used":4562,"timings":{"blocked":3554,"dns":0,"connect":0,"send":0,"wait":563,"receive":445,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"elgonfestival.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"elgonfestival.com/wp-content/plugins/click-to-chat-for-whatsapp/new/inc/assets/css/main.css?ver=4.4","fqdn":"elgonfestival.com","domain":"elgonfestival.com","tld":"com"},"ip":{"addr":"50.6.174.21","port":443,"asn":19871,"as":"NETWORK-SOLUTIONS-HOSTING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://elgonfestival.com/","date":"2026-03-06T11:54:36.500Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.nilecom.co.ug","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 14 Jan 2026 09:49:24 GMT","end":"Tue, 14 Apr 2026 09:49:23 GMT"},"fingerprint":{"sha1":"BE:F3:32:EC:14:2D:25:8B:4F:91:F0:E8:34:DE:60:42:27:3E:E9:0F","sha256":"AF:36:E4:98:51:D1:99:FF:49:9D:5D:A2:32:94:E6:31:5A:4C:3E:EF:FC:99:DE:F3:C7:6B:56:24:DE:71:F0:9C"}}},"request":{"raw":"GET /wp-content/plugins/click-to-chat-for-whatsapp/new/inc/assets/css/main.css?ver=4.4 HTTP/1.1\r\nHost: elgonfestival.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://elgonfestival.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Fri, 06 Mar 2026 11:54:36 GMT\r\nServer: Apache\r\nLast-Modified: Sat, 08 Jun 2024 08:19:03 GMT\r\nAccept-Ranges: bytes\r\nContent-Length: 1548\r\nKeep-Alive: timeout=5, max=100\r\nConnection: Keep-Alive\r\nContent-Type: text/css\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":1548,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (1548), with no line terminators","md5":"88186537fbec36bfc29e3eba461ab3d9","sha1":"215fb94a8cfa1a683d7644df779375d5360d4f32","sha256":"67101d080092b55300df8f248ce62f05655d7bedce24c3cfa1959ee08ad81bf6","sha512":"e6bc52bcfa296d33c0c80e15e9f05953997d556f2b5adac3383e75d8930ca7a12d5d61681f7b0cbdf1b3e8dfc8e543d8554658924423ee7fec7a78e0bb891283","ssdeep":"","tlshash":"f131aacfb684f04c0263a846667e673c1abc80f0eb470a6d6658f33c47c83974062de9","first_seen":"2024-03-08T16:34:30Z","last_seen":"2026-08-05T01:52:58.361683Z","times_seen":672,"resource_available":false,"data":null}},"time_used":700,"timings":{"blocked":271,"dns":1,"connect":140,"send":0,"wait":140,"receive":0,"ssl":145},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"elgonfestival.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css?family=Montserrat:300,300italic,400,400italic,700,700italic\u0026subset=latin,latin-ext","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.74.10","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://elgonfestival.com/","date":"2026-03-06T11:54:36.541Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 08:38:01 GMT","end":"Mon, 27 Apr 2026 08:38:00 GMT"},"fingerprint":{"sha1":"AD:23:3E:9B:CF:2B:A1:EC:31:14:63:D1:58:73:BB:E7:C5:32:16:8C","sha256":"B1:5F:45:BF:00:8C:68:35:D3:42:B2:67:66:47:9D:BB:42:41:07:56:3A:C4:1C:D6:10:7B:B7:53:C2:71:81:33"}}},"request":{"raw":"GET /css?family=Montserrat:300,300italic,400,400italic,700,700italic\u0026subset=latin,latin-ext HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://elgonfestival.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Fri, 06 Mar 2026 11:54:37 GMT\r\ndate: Fri, 06 Mar 2026 11:54:37 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":10944,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"6724119c4ca717cbc1a9cbd6eb279895","sha1":"a04d979a4d5e3e7ee884723f15f5b1c85ea9727c","sha256":"f94baac18939c3066e96b45d02143baa88d3749a3b846750fe0459b50ed9706f","sha512":"c4884c61069dc1add5b5fa96bcb37e03b226cbea12f38e12635c04f9a753dedff75c3601ca6526c8d3f0eabbc7bc38284905f35d38da05c705256607da2e1493","ssdeep":"192:AlYwlNFlul3ulGkYwkNFkuk3ukGpYwpNFpup3upFRH7YQONu1Ra7h5OsuQRD7808:Aew3FsccLwgFx9dCw7FYIxb/SVnM","tlshash":"bd32ac51101ae500a7472cca23cf3d26ce4e726674a4d436bafe2ca8bde5c261361b7d","first_seen":"2025-09-26T21:25:09.450629Z","last_seen":"2026-08-01T15:19:25.026421Z","times_seen":79,"resource_available":false,"data":null}},"time_used":1752,"timings":{"blocked":838,"dns":0,"connect":341,"send":0,"wait":50,"receive":0,"ssl":520},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"maps.google.com/maps/api/js?key=AIzaSyD9qiNJYNI2moQfZhbcJ_XPiRdhxVcSAUM","fqdn":"maps.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.251.143.142","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://elgonfestival.com/","date":"2026-03-06T11:54:42.212Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 02 Feb 2026 08:36:38 GMT","end":"Mon, 27 Apr 2026 08:36:37 GMT"},"fingerprint":{"sha1":"72:34:3C:CB:18:C1:2B:09:8C:14:7C:8A:5E:F9:36:8E:AC:A5:39:BF","sha256":"B3:D4:27:15:99:07:11:68:02:2E:99:B1:A2:49:72:AA:3C:7A:B5:AA:E0:E1:F2:BF:0B:6D:81:F2:F6:81:3E:09"}}},"request":{"raw":"GET /maps/api/js?key=AIzaSyD9qiNJYNI2moQfZhbcJ_XPiRdhxVcSAUM HTTP/1.1\r\nHost: maps.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://elgonfestival.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=1800, stale-while-revalidate=12600\r\ncross-origin-resource-policy: cross-origin\r\nvary: Accept-Language, Origin, X-Origin, Referer\r\netag: 482e92e3\r\ncontent-type: text/javascript; charset=UTF-8\r\ncontent-encoding: gzip\r\ndate: Fri, 06 Mar 2026 11:54:42 GMT\r\nserver: scaffolding on HTTPServer2\r\ncontent-length: 102164\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nserver-timing: gfet4t7; dur=46\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":310299,"size_decoded":0,"mime_type":"text/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (11647)","md5":"260004acc7c336551356d56291a7fcc8","sha1":"4d47de028e56e65e04ef03fad502d970642a118a","sha256":"d0d5a548088a5d1cc62525e9724aee7b52cd7331de211f7cd4a335dcf0d4c506","sha512":"2dbca192e63d415326dc9c702540503d4e9f92f12699720ca3fcd016da1a58e7b0293bc73b47d6a5d05d3da89ccfd644f735b1a3987cf7753cb6ae10cadcbd78","ssdeep":"6144:jJfqfOOuk2MxHg6owCbsehwabACj42mHs/vPTPq9vauG2K3fd1rqainRIqjUvQ4f:jJfqfRuk2MxHg6owCbsehfUCj42mHs/V","tlshash":"10643c9873a2346687b2e4e450370106f27e549af04c8aecb69ccde3adf69464177f78","first_seen":"2026-03-06T11:55:00.132552Z","last_seen":"2026-03-06T11:55:00.132552Z","times_seen":1,"resource_available":false,"data":null}},"time_used":1524,"timings":{"blocked":506,"dns":58,"connect":304,"send":0,"wait":100,"receive":407,"ssl":147},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"elgonfestival.com/wp-content/plugins/woocommerce/assets/client/blocks/wc-blocks.css?ver=wc-8.9.5","fqdn":"elgonfestival.com","domain":"elgonfestival.com","tld":"com"},"ip":{"addr":"50.6.174.21","port":443,"asn":19871,"as":"NETWORK-SOLUTIONS-HOSTING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://elgonfestival.com/","date":"2026-03-06T11:54:36.507Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.nilecom.co.ug","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 14 Jan 2026 09:49:24 GMT","end":"Tue, 14 Apr 2026 09:49:23 GMT"},"fingerprint":{"sha1":"BE:F3:32:EC:14:2D:25:8B:4F:91:F0:E8:34:DE:60:42:27:3E:E9:0F","sha256":"AF:36:E4:98:51:D1:99:FF:49:9D:5D:A2:32:94:E6:31:5A:4C:3E:EF:FC:99:DE:F3:C7:6B:56:24:DE:71:F0:9C"}}},"request":{"raw":"GET /wp-content/plugins/woocommerce/assets/client/blocks/wc-blocks.css?ver=wc-8.9.5 HTTP/1.1\r\nHost: elgonfestival.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://elgonfestival.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Fri, 06 Mar 2026 11:54:37 GMT\r\nServer: Apache\r\nLast-Modified: Mon, 02 Mar 2026 21:21:04 GMT\r\nAccept-Ranges: bytes\r\nContent-Length: 12743\r\nKeep-Alive: timeout=5, max=100\r\nConnection: Keep-Alive\r\nContent-Type: text/css\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":12743,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (9186)","md5":"2408ade926b71fe4f88ffb508f01adbd","sha1":"185c156e0e01adfed7eba804eaa956965cf2dc9e","sha256":"9e8a3a012ab500ce90d9ad5c0fbeca46eaaa80780b944466a1c9a05ebf2e61f3","sha512":"bcfa20a0b5f979676d1d6b1a833439cc11a3c514b965e67a007bbf4fdbf579c487f9fe68c39723f78b6410a0e3f0ba52d718133089a59d3158e05fab01d9b501","ssdeep":"96:uG2c3bjY7BGKHxNDQUEr2xTul/JnJYNFvyadOoNyOOfyHW:57UtGKRNer2gkVu","tlshash":"d2429bb1e7b62cf8493949605b70b6e2f5f93081cad325d5d04ae580729f1aa0bd33db","first_seen":"2024-04-18T09:47:18Z","last_seen":"2026-08-05T23:47:16.809313Z","times_seen":2303,"resource_available":false,"data":null}},"time_used":2974,"timings":{"blocked":744,"dns":1,"connect":144,"send":0,"wait":1289,"receive":176,"ssl":618},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"elgonfestival.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"elgonfestival.com/wp-content/plugins/contact-form-7/includes/css/styles.css?ver=6.1.5","fqdn":"elgonfestival.com","domain":"elgonfestival.com","tld":"com"},"ip":{"addr":"50.6.174.21","port":443,"asn":19871,"as":"NETWORK-SOLUTIONS-HOSTING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://elgonfestival.com/","date":"2026-03-06T11:54:36.529Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.nilecom.co.ug","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 14 Jan 2026 09:49:24 GMT","end":"Tue, 14 Apr 2026 09:49:23 GMT"},"fingerprint":{"sha1":"BE:F3:32:EC:14:2D:25:8B:4F:91:F0:E8:34:DE:60:42:27:3E:E9:0F","sha256":"AF:36:E4:98:51:D1:99:FF:49:9D:5D:A2:32:94:E6:31:5A:4C:3E:EF:FC:99:DE:F3:C7:6B:56:24:DE:71:F0:9C"}}},"request":{"raw":"GET /wp-content/plugins/contact-form-7/includes/css/styles.css?ver=6.1.5 HTTP/1.1\r\nHost: elgonfestival.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://elgonfestival.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Fri, 06 Mar 2026 11:54:37 GMT\r\nServer: Apache\r\nLast-Modified: Mon, 09 Feb 2026 09:18:57 GMT\r\nAccept-Ranges: bytes\r\nContent-Length: 2947\r\nKeep-Alive: timeout=5, max=100\r\nConnection: Keep-Alive\r\nContent-Type: text/css\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":2947,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"64ac31699f5326cb3c76122498b76f66","sha1":"cc0a5a1741b8257001f89b331378d8aa7c30094a","sha256":"4048fd0e6c44412465449ba4f5c7272349ee1574401cec755d6b8d9c0ccc28dd","sha512":"23ad865e63544ee039221161083510346b01b8be56fa7a83540036c51dceb3f0171adf8f932cf77a457240427c0c3ccbad1f9f371e977c5b6a01e9fe316a878f","ssdeep":"","tlshash":"d0510164660028504bff92db6ea9db047b6e7481cd1faf97b0c21a7c5b782851223e5e","first_seen":"2025-06-26T12:36:15.124007Z","last_seen":"2026-08-07T00:55:29.403789Z","times_seen":138946,"resource_available":false,"data":null}},"time_used":4736,"timings":{"blocked":1053,"dns":1,"connect":166,"send":0,"wait":2605,"receive":0,"ssl":909},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"elgonfestival.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"elgonfestival.com/wp-content/plugins/woocommerce/assets/css/woocommerce.css?ver=8.9.5","fqdn":"elgonfestival.com","domain":"elgonfestival.com","tld":"com"},"ip":{"addr":"50.6.174.21","port":443,"asn":19871,"as":"NETWORK-SOLUTIONS-HOSTING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://elgonfestival.com/","date":"2026-03-06T11:54:36.538Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.nilecom.co.ug","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 14 Jan 2026 09:49:24 GMT","end":"Tue, 14 Apr 2026 09:49:23 GMT"},"fingerprint":{"sha1":"BE:F3:32:EC:14:2D:25:8B:4F:91:F0:E8:34:DE:60:42:27:3E:E9:0F","sha256":"AF:36:E4:98:51:D1:99:FF:49:9D:5D:A2:32:94:E6:31:5A:4C:3E:EF:FC:99:DE:F3:C7:6B:56:24:DE:71:F0:9C"}}},"request":{"raw":"GET /wp-content/plugins/woocommerce/assets/css/woocommerce.css?ver=8.9.5 HTTP/1.1\r\nHost: elgonfestival.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://elgonfestival.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Fri, 06 Mar 2026 11:54:39 GMT\r\nServer: Apache\r\nLast-Modified: Mon, 02 Mar 2026 21:21:04 GMT\r\nAccept-Ranges: bytes\r\nContent-Length: 77980\r\nKeep-Alive: timeout=5, max=98\r\nConnection: Keep-Alive\r\nContent-Type: text/css\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":77980,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (65534), with no line terminators","md5":"37b03431b5d0e4bab2f0f5def1f3b553","sha1":"8e0af4e333a496465f8a7eaba32b7522792ca5e5","sha256":"c3e6a34572d5ad0d04304456cf7a1e31bd856a927bfba381cb902ce8505846f0","sha512":"c978e71d0821ca39cd71abf99ab3554393d8acbf5327e96c4d47b4d78f4a750ad76f76791ea6e8458215c97c60c63d940984e920ab2496331dadc2024d34f9e7","ssdeep":"768:ZI0zYte3RcXQ6KmdbqmMk8iBs0Db37ihxhBm9:K0zYthQ6/dbqmMkRNH","tlshash":"16731dab95b42d787bdaf5899c84b1d93e11d074b3801035ede50f9d81ce9eb381ab0e","first_seen":"2024-05-15T05:55:22Z","last_seen":"2026-08-06T21:54:54.112826Z","times_seen":1112,"resource_available":false,"data":null}},"time_used":10411,"timings":{"blocked":3055,"dns":0,"connect":0,"send":0,"wait":486,"receive":6870,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"elgonfestival.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"elgonfestival.com/wp-includes/js/jquery/jquery.min.js?ver=3.7.1","fqdn":"elgonfestival.com","domain":"elgonfestival.com","tld":"com"},"ip":{"addr":"50.6.174.21","port":443,"asn":19871,"as":"NETWORK-SOLUTIONS-HOSTING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://elgonfestival.com/","date":"2026-03-06T11:54:36.553Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.nilecom.co.ug","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 14 Jan 2026 09:49:24 GMT","end":"Tue, 14 Apr 2026 09:49:23 GMT"},"fingerprint":{"sha1":"BE:F3:32:EC:14:2D:25:8B:4F:91:F0:E8:34:DE:60:42:27:3E:E9:0F","sha256":"AF:36:E4:98:51:D1:99:FF:49:9D:5D:A2:32:94:E6:31:5A:4C:3E:EF:FC:99:DE:F3:C7:6B:56:24:DE:71:F0:9C"}}},"request":{"raw":"GET /wp-includes/js/jquery/jquery.min.js?ver=3.7.1 HTTP/1.1\r\nHost: elgonfestival.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://elgonfestival.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Fri, 06 Mar 2026 11:54:47 GMT\r\nServer: Apache\r\nLast-Modified: Mon, 28 Aug 2023 17:14:23 GMT\r\nAccept-Ranges: bytes\r\nContent-Length: 87553\r\nKeep-Alive: timeout=5, max=98\r\nConnection: Keep-Alive\r\nContent-Type: text/javascript\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":87553,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (65447)","md5":"826eb77e86b02ab7724fe3d0141ff87c","sha1":"79cd3587d565afe290076a8d36c31c305a573d18","sha256":"cb6f2d32c49d1c2b25e9ffc9aaafa3f83075346c01bcd4ae6eb187392a4292cf","sha512":"fc79fdb76763025dc39fac045a215ff155ef2f492a0e9640079d6f089fa6218af2b3ab7c6eaf636827dee9294e6939a95ab24554e870c976679c25567ad6374c","ssdeep":"1536:0RUX9uDgwxcy2KVBNwchN6SLaHEk2BSrBESp+a/IEk4aAocVi8SMBQ47GKO:sHNwcv9VBQpLl88SMBQ47GKO","tlshash":"7483f8df77ca702247ab30b9006f550bf276199d684d4400f159d8e9bcb8a4a827bf7e","first_seen":"2023-11-03T09:26:43Z","last_seen":"2026-08-07T01:07:05.102249Z","times_seen":1008078,"resource_available":true,"data":null}},"time_used":16181,"timings":{"blocked":11102,"dns":0,"connect":0,"send":0,"wait":421,"receive":4658,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"elgonfestival.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"elgonfestival.com/wp-content/themes/jarvis/css/plugin.contact-form-7.css","fqdn":"elgonfestival.com","domain":"elgonfestival.com","tld":"com"},"ip":{"addr":"50.6.174.21","port":443,"asn":19871,"as":"NETWORK-SOLUTIONS-HOSTING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://elgonfestival.com/","date":"2026-03-06T11:54:36.547Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.nilecom.co.ug","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 14 Jan 2026 09:49:24 GMT","end":"Tue, 14 Apr 2026 09:49:23 GMT"},"fingerprint":{"sha1":"BE:F3:32:EC:14:2D:25:8B:4F:91:F0:E8:34:DE:60:42:27:3E:E9:0F","sha256":"AF:36:E4:98:51:D1:99:FF:49:9D:5D:A2:32:94:E6:31:5A:4C:3E:EF:FC:99:DE:F3:C7:6B:56:24:DE:71:F0:9C"}}},"request":{"raw":"GET /wp-content/themes/jarvis/css/plugin.contact-form-7.css HTTP/1.1\r\nHost: elgonfestival.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://elgonfestival.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Fri, 06 Mar 2026 11:54:42 GMT\r\nServer: Apache\r\nLast-Modified: Wed, 08 Nov 2023 06:58:03 GMT\r\nAccept-Ranges: bytes\r\nContent-Length: 2062\r\nKeep-Alive: timeout=5, max=100\r\nConnection: Keep-Alive\r\nContent-Type: text/css\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":2062,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"626c1c456debb390388c701b70de246f","sha1":"02467ddcd70793c60f11c43995d2eaef4d839762","sha256":"ed63b2712fa2bc5259fe8c680adeb351af1441eaee41754bc355172937e2ea64","sha512":"ebd66ce27d966b06b3495a2f8b854535fac40d71e066f673ef477892f36a135071d2a5d4b0082cc7f651710c31fdef129941df5ed0340569bf39cc23b3df1fdd","ssdeep":"","tlshash":"e241ed646c22c40466bac5ccbfd5db54bb5d6661c80baffb70c0593517acac6044fb8b","first_seen":"2026-03-06T11:55:00.137708Z","last_seen":"2026-03-06T11:55:00.137708Z","times_seen":1,"resource_available":false,"data":null}},"time_used":6325,"timings":{"blocked":5750,"dns":0,"connect":141,"send":0,"wait":285,"receive":0,"ssl":148},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"elgonfestival.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"elgonfestival.com/wp-content/plugins/woocommerce/assets/js/js-cookie/js.cookie.min.js?ver=2.1.4-wc.8.9.5","fqdn":"elgonfestival.com","domain":"elgonfestival.com","tld":"com"},"ip":{"addr":"50.6.174.21","port":443,"asn":19871,"as":"NETWORK-SOLUTIONS-HOSTING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://elgonfestival.com/","date":"2026-03-06T11:54:36.557Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.nilecom.co.ug","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 14 Jan 2026 09:49:24 GMT","end":"Tue, 14 Apr 2026 09:49:23 GMT"},"fingerprint":{"sha1":"BE:F3:32:EC:14:2D:25:8B:4F:91:F0:E8:34:DE:60:42:27:3E:E9:0F","sha256":"AF:36:E4:98:51:D1:99:FF:49:9D:5D:A2:32:94:E6:31:5A:4C:3E:EF:FC:99:DE:F3:C7:6B:56:24:DE:71:F0:9C"}}},"request":{"raw":"GET /wp-content/plugins/woocommerce/assets/js/js-cookie/js.cookie.min.js?ver=2.1.4-wc.8.9.5 HTTP/1.1\r\nHost: elgonfestival.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://elgonfestival.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Fri, 06 Mar 2026 11:54:53 GMT\r\nServer: Apache\r\nLast-Modified: Mon, 02 Mar 2026 21:21:04 GMT\r\nAccept-Ranges: bytes\r\nContent-Length: 1720\r\nKeep-Alive: timeout=5, max=99\r\nConnection: Keep-Alive\r\nContent-Type: text/javascript\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":1720,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (1690)","md5":"691a1e43450e7cda541a3bd6f10fd5db","sha1":"d3a78cb77ccec297c9d32fee99a2a4761f604a8c","sha256":"8b083f64f2e9e8ac445c730dfce7013cc6449ce155fd1c2f42b60edba4ecb4b1","sha512":"a32ebe942e704da64381e392ffc20ed4f9d8daf71227a06f2dc0ca5c037675ab67e5b5a5ddf9bcb77b1872308daa780cc0e6ec5a2469bcd51444ece4f3b3de0d","ssdeep":"","tlshash":"c031b6d93095a8da06071490463f1207f2f91e27eecd98906264e8f50ab077a01ebf6b","first_seen":"2024-03-20T13:06:17Z","last_seen":"2026-08-07T00:59:41.655125Z","times_seen":149960,"resource_available":true,"data":null}},"time_used":17055,"timings":{"blocked":16915,"dns":0,"connect":0,"send":0,"wait":140,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"elgonfestival.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"elgonfestival.com/wp-content/themes/jarvis/fw/css/core.animation.css","fqdn":"elgonfestival.com","domain":"elgonfestival.com","tld":"com"},"ip":{"addr":"50.6.174.21","port":443,"asn":19871,"as":"NETWORK-SOLUTIONS-HOSTING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://elgonfestival.com/","date":"2026-03-06T11:54:36.544Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.nilecom.co.ug","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 14 Jan 2026 09:49:24 GMT","end":"Tue, 14 Apr 2026 09:49:23 GMT"},"fingerprint":{"sha1":"BE:F3:32:EC:14:2D:25:8B:4F:91:F0:E8:34:DE:60:42:27:3E:E9:0F","sha256":"AF:36:E4:98:51:D1:99:FF:49:9D:5D:A2:32:94:E6:31:5A:4C:3E:EF:FC:99:DE:F3:C7:6B:56:24:DE:71:F0:9C"}}},"request":{"raw":"GET /wp-content/themes/jarvis/fw/css/core.animation.css HTTP/1.1\r\nHost: elgonfestival.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://elgonfestival.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Fri, 06 Mar 2026 11:54:40 GMT\r\nServer: Apache\r\nLast-Modified: Wed, 08 Nov 2023 06:58:03 GMT\r\nAccept-Ranges: bytes\r\nContent-Length: 73142\r\nKeep-Alive: timeout=5, max=98\r\nConnection: Keep-Alive\r\nContent-Type: text/css\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":73142,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"0286f909089ec1c3277e298b3673d166","sha1":"6704ee224b66ba409bbfd2fc9d3ca774b92443b1","sha256":"73d9163f984138f55ade04d12ccc75c05fd50f4ba6c924f873d5932db37b6670","sha512":"58cfd6a321b7cbfa977a8ca35666a47cdd3717b7c314e8ab25ded989d84708408f2acc51e9304fe3c3fb9adf7be373ae90b060f16ca6ae868d5d49a12e26b265","ssdeep":"384:8vrOmOo/x/SOmOw/l//FkFsmXmknz/S/cySy+/Z/V+/9Z4jHGJlMN3t4b:erOmOo/x/SOmOw/l/Unz/S/cySy+/Z/+","tlshash":"db635d6d2991114452678a1983df9e78263cd1b3182aacef73ce5c8bcf86fac63c5507","first_seen":"2023-05-03T04:10:43Z","last_seen":"2026-08-01T18:25:57.490751Z","times_seen":278,"resource_available":false,"data":null}},"time_used":9500,"timings":{"blocked":4282,"dns":0,"connect":0,"send":0,"wait":406,"receive":4812,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"elgonfestival.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"elgonfestival.com/wp-content/plugins/essential-grid/public/assets/font/fontello/css/fontello.css?ver=3.1.0","fqdn":"elgonfestival.com","domain":"elgonfestival.com","tld":"com"},"ip":{"addr":"50.6.174.21","port":443,"asn":19871,"as":"NETWORK-SOLUTIONS-HOSTING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://elgonfestival.com/","date":"2026-03-06T11:54:36.535Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.nilecom.co.ug","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 14 Jan 2026 09:49:24 GMT","end":"Tue, 14 Apr 2026 09:49:23 GMT"},"fingerprint":{"sha1":"BE:F3:32:EC:14:2D:25:8B:4F:91:F0:E8:34:DE:60:42:27:3E:E9:0F","sha256":"AF:36:E4:98:51:D1:99:FF:49:9D:5D:A2:32:94:E6:31:5A:4C:3E:EF:FC:99:DE:F3:C7:6B:56:24:DE:71:F0:9C"}}},"request":{"raw":"GET /wp-content/plugins/essential-grid/public/assets/font/fontello/css/fontello.css?ver=3.1.0 HTTP/1.1\r\nHost: elgonfestival.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://elgonfestival.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Fri, 06 Mar 2026 11:54:38 GMT\r\nServer: Apache\r\nLast-Modified: Sat, 23 Mar 2024 15:41:32 GMT\r\nAccept-Ranges: bytes\r\nContent-Length: 13191\r\nKeep-Alive: timeout=5, max=99\r\nConnection: Keep-Alive\r\nContent-Type: text/css\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":13191,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text","md5":"8433ae5943c2538ace739ca94f6accb9","sha1":"57995d9923acc69d614e0dc3eb389eaa7e8ad4d5","sha256":"0ebde7e1f6234e35a8b9c2fcf43a6bf50564f33d4abd1d92928c10494b57f1ec","sha512":"eca780fd228aa87cd2c136734655e3a50fc215aa4cb034ac55aad2435763ff310e55b3a3202ed05e8d2edb94702a013eee4f60775057fbb4a9b664caf48f8171","ssdeep":"192:u+7Ev5xlmvdXjpTY6zvPEiaVuNSYq9mCpdXAbmRks0E7kq6:Iv5xYvdXjpfzvMiaV6S39miXAeDkR","tlshash":"d042ecf3945b04400b66d3552bdbb1601b49f178dbc19dc1d002eabca6fa275a7d62fc","first_seen":"2025-04-10T15:19:14.882896Z","last_seen":"2026-08-06T22:24:44.998265Z","times_seen":1648,"resource_available":false,"data":null}},"time_used":3058,"timings":{"blocked":2181,"dns":0,"connect":0,"send":0,"wait":455,"receive":422,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"elgonfestival.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"elgonfestival.com/wp-includes/js/mediaelement/wp-mediaelement.min.css?ver=6.9.1","fqdn":"elgonfestival.com","domain":"elgonfestival.com","tld":"com"},"ip":{"addr":"50.6.174.21","port":443,"asn":19871,"as":"NETWORK-SOLUTIONS-HOSTING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://elgonfestival.com/","date":"2026-03-06T11:54:36.552Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.nilecom.co.ug","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 14 Jan 2026 09:49:24 GMT","end":"Tue, 14 Apr 2026 09:49:23 GMT"},"fingerprint":{"sha1":"BE:F3:32:EC:14:2D:25:8B:4F:91:F0:E8:34:DE:60:42:27:3E:E9:0F","sha256":"AF:36:E4:98:51:D1:99:FF:49:9D:5D:A2:32:94:E6:31:5A:4C:3E:EF:FC:99:DE:F3:C7:6B:56:24:DE:71:F0:9C"}}},"request":{"raw":"GET /wp-includes/js/mediaelement/wp-mediaelement.min.css?ver=6.9.1 HTTP/1.1\r\nHost: elgonfestival.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://elgonfestival.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Fri, 06 Mar 2026 11:54:47 GMT\r\nServer: Apache\r\nLast-Modified: Fri, 07 Jun 2019 20:45:02 GMT\r\nAccept-Ranges: bytes\r\nContent-Length: 4186\r\nKeep-Alive: timeout=5, max=99\r\nConnection: Keep-Alive\r\nContent-Type: text/css\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":4186,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (4186), with no line terminators","md5":"ea958276b7de454bd3c2873f0dc47e5f","sha1":"b143f6e8e8f79d8f104c26b0057ef5514d763219","sha256":"2e10d353ff038c2cad3492fc17801af3e6ef2669c9e9713bdb78b1dcb104c4fe","sha512":"2d40a1e713355eff88fa3bbf5471b4db5acc48fa2b978a555c034f2e5c7f131fcaf48e849d5d048df9d5dae068c4b6467a97b1dde99115e6b32f57e928569fc1","ssdeep":"48:wFfAeWkkqEsKO+TBxaBIIj+NqUFQW76d7JrOv2bN:wueWkkrLoI7U","tlshash":"d9810c1084149d2cf4eab33766cec75db43ad747fe75e7b86936e2b8c098a842073484","first_seen":"2023-04-05T04:06:46Z","last_seen":"2026-08-07T00:05:43.883419Z","times_seen":92265,"resource_available":false,"data":null}},"time_used":11103,"timings":{"blocked":10645,"dns":0,"connect":0,"send":0,"wait":458,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"elgonfestival.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"elgonfestival.com/wp-content/themes/jarvis/css/tribe-style.css","fqdn":"elgonfestival.com","domain":"elgonfestival.com","tld":"com"},"ip":{"addr":"50.6.174.21","port":443,"asn":19871,"as":"NETWORK-SOLUTIONS-HOSTING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://elgonfestival.com/","date":"2026-03-06T11:54:36.546Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.nilecom.co.ug","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 14 Jan 2026 09:49:24 GMT","end":"Tue, 14 Apr 2026 09:49:23 GMT"},"fingerprint":{"sha1":"BE:F3:32:EC:14:2D:25:8B:4F:91:F0:E8:34:DE:60:42:27:3E:E9:0F","sha256":"AF:36:E4:98:51:D1:99:FF:49:9D:5D:A2:32:94:E6:31:5A:4C:3E:EF:FC:99:DE:F3:C7:6B:56:24:DE:71:F0:9C"}}},"request":{"raw":"GET /wp-content/themes/jarvis/css/tribe-style.css HTTP/1.1\r\nHost: elgonfestival.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://elgonfestival.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Fri, 06 Mar 2026 11:54:41 GMT\r\nServer: Apache\r\nLast-Modified: Wed, 08 Nov 2023 06:58:03 GMT\r\nAccept-Ranges: bytes\r\nContent-Length: 31657\r\nKeep-Alive: timeout=5, max=94\r\nConnection: Keep-Alive\r\nContent-Type: text/css\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":31657,"size_decoded":0,"mime_type":"text/css","magic":"assembler source, ASCII text, with very long lines (559)","md5":"0b17b55ce9b5b0914b4d7f9090815554","sha1":"470d49c4dfb2b470d2bb81ae7bff28eed1733467","sha256":"29c7c1303d584db80f71ffedc6092ea086258da70023411996fa85830eba0c0b","sha512":"b239dd79531cce48cb85748dd8240d9a45a54dddf3dcd6a6455feccb389b4e2c0ca31b26072ef4d263558dbf3c63a65bc37fc6267a8a94a5ca7e57de056a2e7b","ssdeep":"768:9uccb/THU5BCk7BGjNOj7AasJK8TjDC9ts:scU//k7QjNOj7AasJK8vDC9ts","tlshash":"4ae22170da9314e2ac2e432c137e758f633c71ff7805a81539896d1a8fcda5da0a56cb","first_seen":"2026-03-06T11:55:00.143029Z","last_seen":"2026-03-06T11:55:00.143029Z","times_seen":1,"resource_available":false,"data":null}},"time_used":6518,"timings":{"blocked":4831,"dns":0,"connect":0,"send":0,"wait":419,"receive":1268,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"elgonfestival.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"elgonfestival.com/wp-content/themes/jarvis/fw/css/custom-style.css","fqdn":"elgonfestival.com","domain":"elgonfestival.com","tld":"com"},"ip":{"addr":"50.6.174.21","port":443,"asn":19871,"as":"NETWORK-SOLUTIONS-HOSTING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://elgonfestival.com/","date":"2026-03-06T11:54:36.549Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.nilecom.co.ug","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 14 Jan 2026 09:49:24 GMT","end":"Tue, 14 Apr 2026 09:49:23 GMT"},"fingerprint":{"sha1":"BE:F3:32:EC:14:2D:25:8B:4F:91:F0:E8:34:DE:60:42:27:3E:E9:0F","sha256":"AF:36:E4:98:51:D1:99:FF:49:9D:5D:A2:32:94:E6:31:5A:4C:3E:EF:FC:99:DE:F3:C7:6B:56:24:DE:71:F0:9C"}}},"request":{"raw":"GET /wp-content/themes/jarvis/fw/css/custom-style.css HTTP/1.1\r\nHost: elgonfestival.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://elgonfestival.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Fri, 06 Mar 2026 11:54:43 GMT\r\nServer: Apache\r\nLast-Modified: Wed, 08 Nov 2023 06:58:03 GMT\r\nAccept-Ranges: bytes\r\nContent-Length: 109\r\nKeep-Alive: timeout=5, max=93\r\nConnection: Keep-Alive\r\nContent-Type: text/css\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":109,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"7bac6f9066f069aca258bf671c8125a5","sha1":"72d993873bafb249dd389843517c98d2288b09c1","sha256":"50a4e64fad6879eef7766aa49dc8117f0378ace9c5ddf5fc9ba0443a956337eb","sha512":"03fc6c913f6995200faa7e55c4f0fa9ae48ad5b9a1893c244473a53636b32e214041691e42c1748333f7e7ce60ab688ff9a2f1555e24b33fff8f2239cc528173","ssdeep":"","tlshash":"fdb0126f97d00a715576d443e94d81421405a15d23b54b083cb2007a0f8087c83ccff4","first_seen":"2023-04-18T10:35:10Z","last_seen":"2026-08-01T18:25:57.449616Z","times_seen":256,"resource_available":false,"data":null}},"time_used":7035,"timings":{"blocked":6516,"dns":0,"connect":0,"send":0,"wait":519,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"elgonfestival.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"elgonfestival.com/wp-content/themes/jarvis/css/responsive.css","fqdn":"elgonfestival.com","domain":"elgonfestival.com","tld":"com"},"ip":{"addr":"50.6.174.21","port":443,"asn":19871,"as":"NETWORK-SOLUTIONS-HOSTING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://elgonfestival.com/","date":"2026-03-06T11:54:36.549Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.nilecom.co.ug","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 14 Jan 2026 09:49:24 GMT","end":"Tue, 14 Apr 2026 09:49:23 GMT"},"fingerprint":{"sha1":"BE:F3:32:EC:14:2D:25:8B:4F:91:F0:E8:34:DE:60:42:27:3E:E9:0F","sha256":"AF:36:E4:98:51:D1:99:FF:49:9D:5D:A2:32:94:E6:31:5A:4C:3E:EF:FC:99:DE:F3:C7:6B:56:24:DE:71:F0:9C"}}},"request":{"raw":"GET /wp-content/themes/jarvis/css/responsive.css HTTP/1.1\r\nHost: elgonfestival.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://elgonfestival.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Fri, 06 Mar 2026 11:54:43 GMT\r\nServer: Apache\r\nLast-Modified: Wed, 08 Nov 2023 06:58:03 GMT\r\nAccept-Ranges: bytes\r\nContent-Length: 86034\r\nKeep-Alive: timeout=5, max=92\r\nConnection: Keep-Alive\r\nContent-Type: text/css\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":86034,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"c4a7a22dff6b09ee2f18908813661f61","sha1":"ac9c176dd1662da877428d3c0d39e7c78da02050","sha256":"ad561d39c90c812dd862707c16a0721ca0412ce4a2d4c2c1baa1d37186e58afb","sha512":"aa7b177c2918f61b12bd2310f8b2f90e867a5abd0ce0faf07788c0154168a8def6f63f92b00741ed9419b4b4ca39d6729b6ebf1fcb15b76eddae8b4949413cb1","ssdeep":"768:U7F/w73/D7g/Lw7B/I7WjMrj+SfBGefXIK9N4Y53ogpVS4vXiOj9KSDjgtXo7RBP:jXyBkLyIxfkyqcFiuu","tlshash":"a483209b49f318042e4f70ba57eb31503854c05bfac9dcd8bdace654cfc8a6a5831b99","first_seen":"2026-03-06T11:55:00.146261Z","last_seen":"2026-03-06T11:55:00.146261Z","times_seen":1,"resource_available":false,"data":null}},"time_used":10899,"timings":{"blocked":7035,"dns":0,"connect":0,"send":0,"wait":422,"receive":3442,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"elgonfestival.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"elgonfestival.com/wp-content/plugins/date-time-picker-field/assets/vendor/xdsoft-datetimepicker/jquery.datetimepicker.min.css?ver=2.5.20","fqdn":"elgonfestival.com","domain":"elgonfestival.com","tld":"com"},"ip":{"addr":"50.6.174.21","port":443,"asn":19871,"as":"NETWORK-SOLUTIONS-HOSTING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://elgonfestival.com/","date":"2026-03-06T11:54:36.531Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.nilecom.co.ug","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 14 Jan 2026 09:49:24 GMT","end":"Tue, 14 Apr 2026 09:49:23 GMT"},"fingerprint":{"sha1":"BE:F3:32:EC:14:2D:25:8B:4F:91:F0:E8:34:DE:60:42:27:3E:E9:0F","sha256":"AF:36:E4:98:51:D1:99:FF:49:9D:5D:A2:32:94:E6:31:5A:4C:3E:EF:FC:99:DE:F3:C7:6B:56:24:DE:71:F0:9C"}}},"request":{"raw":"GET /wp-content/plugins/date-time-picker-field/assets/vendor/xdsoft-datetimepicker/jquery.datetimepicker.min.css?ver=2.5.20 HTTP/1.1\r\nHost: elgonfestival.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://elgonfestival.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Fri, 06 Mar 2026 11:54:36 GMT\r\nServer: Apache\r\nLast-Modified: Fri, 27 Feb 2026 21:20:06 GMT\r\nAccept-Ranges: bytes\r\nContent-Length: 16503\r\nKeep-Alive: timeout=5, max=99\r\nConnection: Keep-Alive\r\nContent-Type: text/css\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":16503,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (16502)","md5":"868fad89fd813e6b1735ea15a6e8433e","sha1":"bb6c9caa734240f38da28a310ab1658be68f96ba","sha256":"0ce4bd5ba351f8d15ed5f521104d0f18a63f7ee6db5029ce7d38ded89303c376","sha512":"7f4b735a10b05454b759e61aa1fa0b5a44cfeb639b85ec10d44667eb9a12603654835f82cb2c062a45b39bc0716898f91c6288ef63e7307f63632205cfe187ee","ssdeep":"192:Zai3m4LQDGcn3Z7qvum+VHB2a9IfxS8mf4L4LQDgn+v0:EfDGc3c8RofDg1","tlshash":"cc7232f314611f5a687b435dd8807fde3edf282f86425e3cdab46b208e69c4b108e155","first_seen":"2023-04-07T05:23:40Z","last_seen":"2026-08-06T20:54:52.354387Z","times_seen":4466,"resource_available":false,"data":null}},"time_used":1121,"timings":{"blocked":382,"dns":0,"connect":0,"send":0,"wait":319,"receive":420,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"elgonfestival.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"elgonfestival.com/wp-includes/js/mediaelement/mediaelementplayer-legacy.min.css?ver=4.2.17","fqdn":"elgonfestival.com","domain":"elgonfestival.com","tld":"com"},"ip":{"addr":"50.6.174.21","port":443,"asn":19871,"as":"NETWORK-SOLUTIONS-HOSTING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://elgonfestival.com/","date":"2026-03-06T11:54:36.551Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.nilecom.co.ug","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 14 Jan 2026 09:49:24 GMT","end":"Tue, 14 Apr 2026 09:49:23 GMT"},"fingerprint":{"sha1":"BE:F3:32:EC:14:2D:25:8B:4F:91:F0:E8:34:DE:60:42:27:3E:E9:0F","sha256":"AF:36:E4:98:51:D1:99:FF:49:9D:5D:A2:32:94:E6:31:5A:4C:3E:EF:FC:99:DE:F3:C7:6B:56:24:DE:71:F0:9C"}}},"request":{"raw":"GET /wp-includes/js/mediaelement/mediaelementplayer-legacy.min.css?ver=4.2.17 HTTP/1.1\r\nHost: elgonfestival.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://elgonfestival.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Fri, 06 Mar 2026 11:54:47 GMT\r\nServer: Apache\r\nLast-Modified: Tue, 29 Sep 2020 15:53:06 GMT\r\nAccept-Ranges: bytes\r\nContent-Length: 11256\r\nKeep-Alive: timeout=5, max=100\r\nConnection: Keep-Alive\r\nContent-Type: text/css\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":11256,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (11256), with no line terminators","md5":"2b0dd7eecea03b4bdedb94ba622fdb03","sha1":"703becba85161118dd6fc66af465428ef43f561c","sha256":"b7908a015a567ec2363011df2475368dbff34360e9da3fdff50604d6395fb646","sha512":"fe64cff950921bdf83ec09fe79ca5ce52de40f5b8788697eb1d7b28055f2817778347d5d3c81a324801c7ec7151b3ee0eee99b2882c3c3b10bd760342d3bf3e7","ssdeep":"192:xthsVmeDXDanvgZenjAJKdXSMpNO96hDIzL79V1QVSD1CNxn6fR31r:czDanvuenjAkNBhDInSwh31r","tlshash":"713223929c88212cf43795645ac107ec923fc303fd62ededb73c7679caca58a516a943","first_seen":"2023-04-05T04:06:46Z","last_seen":"2026-08-07T00:05:43.915584Z","times_seen":91204,"resource_available":false,"data":null}},"time_used":12338,"timings":{"blocked":10398,"dns":0,"connect":189,"send":0,"wait":1221,"receive":1,"ssl":529},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"elgonfestival.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"elgonfestival.com/wp-content/plugins/instagram-feed/css/sbi-styles.min.css?ver=6.10.0","fqdn":"elgonfestival.com","domain":"elgonfestival.com","tld":"com"},"ip":{"addr":"50.6.174.21","port":443,"asn":19871,"as":"NETWORK-SOLUTIONS-HOSTING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://elgonfestival.com/","date":"2026-03-06T11:54:36.504Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.nilecom.co.ug","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 14 Jan 2026 09:49:24 GMT","end":"Tue, 14 Apr 2026 09:49:23 GMT"},"fingerprint":{"sha1":"BE:F3:32:EC:14:2D:25:8B:4F:91:F0:E8:34:DE:60:42:27:3E:E9:0F","sha256":"AF:36:E4:98:51:D1:99:FF:49:9D:5D:A2:32:94:E6:31:5A:4C:3E:EF:FC:99:DE:F3:C7:6B:56:24:DE:71:F0:9C"}}},"request":{"raw":"GET /wp-content/plugins/instagram-feed/css/sbi-styles.min.css?ver=6.10.0 HTTP/1.1\r\nHost: elgonfestival.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://elgonfestival.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Fri, 06 Mar 2026 11:54:37 GMT\r\nServer: Apache\r\nLast-Modified: Thu, 13 Nov 2025 09:22:06 GMT\r\nAccept-Ranges: bytes\r\nContent-Length: 41838\r\nKeep-Alive: timeout=5, max=100\r\nConnection: Keep-Alive\r\nContent-Type: text/css\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":41838,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (41838), with no line terminators","md5":"d7a4c70f2290eb83f8a5da68c20cb2c4","sha1":"f735afe075418af0aa73dd21a4e128ae1df9c017","sha256":"3a9792f0f57cf88966313443d575df8f7d2faa1f84e931655fbf878827c7e419","sha512":"756442be79926f6b59a562db4d6b27934ef3a07309f84bf5ffcef631c7e19f06b12186f858b5d9ab0c68eb885bf64d27558db2343c2962c40ec56d5bd1a47905","ssdeep":"384:1HF+F3QZHy/j/JCFTDAoEH1uujy9zF0i8lODACJwc06025M:1HaQZH8KS1yzyBarw97J","tlshash":"16139775b5c03538649a974198949bbf973ca0f3fab14a69f348b53bc1c2fa91c32d09","first_seen":"2025-05-10T17:29:19.769909Z","last_seen":"2026-08-07T01:12:53.923493Z","times_seen":20828,"resource_available":false,"data":null}},"time_used":3803,"timings":{"blocked":1013,"dns":1,"connect":141,"send":0,"wait":326,"receive":1431,"ssl":889},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"elgonfestival.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"elgonfestival.com/wp-content/plugins/woocommerce/assets/js/frontend/add-to-cart.min.js?ver=8.9.5","fqdn":"elgonfestival.com","domain":"elgonfestival.com","tld":"com"},"ip":{"addr":"50.6.174.21","port":443,"asn":19871,"as":"NETWORK-SOLUTIONS-HOSTING","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://elgonfestival.com/","date":"2026-03-06T11:54:36.556Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.nilecom.co.ug","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 14 Jan 2026 09:49:24 GMT","end":"Tue, 14 Apr 2026 09:49:23 GMT"},"fingerprint":{"sha1":"BE:F3:32:EC:14:2D:25:8B:4F:91:F0:E8:34:DE:60:42:27:3E:E9:0F","sha256":"AF:36:E4:98:51:D1:99:FF:49:9D:5D:A2:32:94:E6:31:5A:4C:3E:EF:FC:99:DE:F3:C7:6B:56:24:DE:71:F0:9C"}}},"request":{"raw":"GET /wp-content/plugins/woocommerce/assets/js/frontend/add-to-cart.min.js?ver=8.9.5 HTTP/1.1\r\nHost: elgonfestival.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://elgonfestival.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nDate: Fri, 06 Mar 2026 11:54:52 GMT\r\nServer: Apache\r\nLast-Modified: Mon, 02 Mar 2026 21:21:04 GMT\r\nAccept-Ranges: bytes\r\nContent-Length: 3058\r\nKeep-Alive: timeout=5, max=100\r\nConnection: Keep-Alive\r\nContent-Type: text/javascript\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":3058,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (3058), with no line terminators","md5":"e56bc891d47a0687c80dbe086a5b1e90","sha1":"a9e643e186e62cbb3f0e518f473b8702c2945802","sha256":"4f0a4e5ff7378b48f06c23a8ff4e52633c828fee56f2495085eeea5c1a7f8aba","sha512":"869cc24f825e325c494d3b81fd7a8803f1c4b417f7db3b9aaa9aad41cca90a910a898f9136ad5468828cf9c0a78416b3a599fb32b1fdf15a0bee55bc62651698","ssdeep":"","tlshash":"5e5171ceb122f07247e62981a41bd6865432287af19aa4fc308d71d58f74a066463f3f","first_seen":"2024-01-21T00:01:31Z","last_seen":"2026-08-06T22:56:21.74009Z","times_seen":10493,"resource_available":true,"data":null}},"time_used":16915,"timings":{"blocked":16245,"dns":0,"connect":0,"send":0,"wait":669,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-03-06","alert":"Sinkholed","trigger":"elgonfestival.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}}]}