{"report_id":"a775cc4a-3760-4f96-8854-8643f4583070","version":6,"status":"done","tags":[],"date":"2025-10-18T08:00:05Z","url":{"schema":"http","addr":"getvelocity.org/velocity-executor-v0-5-2/","fqdn":"getvelocity.org","domain":"getvelocity.org","tld":"org"},"ip":{"addr":"161.35.143.48","port":0,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"United States","country_code":"US"},"final":{"url":{"schema":"https","addr":"getvelocity.org/velocity-executor-v0-5-2/","fqdn":"getvelocity.org","domain":"getvelocity.org","tld":"org"},"title":"Velocity Executor v0.5.2 - Velocity Executor v0.5.2"},"submit":{"url":{"schema":"http","addr":"getvelocity.org/velocity-executor-v0-5-2/","fqdn":"getvelocity.org","domain":"getvelocity.org","tld":"org"},"ip":{"addr":"161.35.143.48","port":0,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"United States","country_code":"US"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2026-11-22T08:00:05Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":12}},"detection":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-18","alert":"Sinkholed","trigger":"torchfriendlypay.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-18","alert":"Sinkholed","trigger":"torchfriendlypay.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-10-18","alert":"Sinkholed","trigger":"torchfriendlypay.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-18","alert":"Sinkholed","trigger":"clonecroak.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-18","alert":"Sinkholed","trigger":"clonecroak.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-10-18","alert":"Sinkholed","trigger":"clonecroak.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-18","alert":"Sinkholed","trigger":"rashcolonizeexpand.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-18","alert":"Sinkholed","trigger":"rashcolonizeexpand.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-10-18","alert":"Sinkholed","trigger":"rashcolonizeexpand.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-10-18","alert":"Sinkholed","trigger":"ukankingwithea.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-10-18","alert":"Sinkholed","trigger":"ukankingwithea.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-10-18","alert":"Sinkholed","trigger":"ukankingwithea.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null},"summary":[{"fqdn":"www.googletagmanager.com","ip":{"addr":"142.250.178.40","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2011-11-11","domain_rank":283,"first_seen":"2012-10-04T01:07:32Z","last_seen":"2025-10-12T22:12:10.358486Z","alert_count":0,"request_count":1,"received_data":427057,"sent_data":436,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"ukankingwithea.com","ip":{"addr":"172.67.192.190","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2024-01-01","domain_rank":32650,"first_seen":"2024-09-05T12:50:03Z","last_seen":"2025-10-13T02:21:43.47306Z","alert_count":3,"request_count":1,"received_data":829,"sent_data":436,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"getvelocity.org","ip":{"addr":"161.35.143.48","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"United States","country_code":"US"},"domain_registered":"2025-02-17","domain_rank":0,"first_seen":"2025-10-18T08:00:06.585957Z","last_seen":"2025-10-18T08:00:06.585957Z","alert_count":0,"request_count":39,"received_data":884998,"sent_data":20614,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"WordPress Block Editor","description":"Sites using the WordPress Block Editor, also known as Gutenberg.","website":"https://wordpress.org/gutenberg/","common_platform_enumeration":"","icon":"WordPress.svg","categories":["Page builders"]},{"name":"Yoast SEO:24.4","description":"Yoast SEO is a search engine optimisation plugin for WordPress and other platforms.","website":"https://yoast.com/wordpress/plugins/seo/","common_platform_enumeration":"","icon":"Yoast SEO.png","categories":["SEO","WordPress plugins"]},{"name":"jQuery Migrate:3.4.1","description":"Query Migrate is a javascript library that allows you to preserve the compatibility of your jQuery code developed for versions of jQuery older than 1.9.","website":"https://github.com/jquery/jquery-migrate","common_platform_enumeration":"","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Cloudways","description":"Cloudways offers managed cloud-hosting services for WordPress sites on a cloud server where multiple copies of your content will be replicated throughout your chosen data center.","website":"https://www.cloudways.com","common_platform_enumeration":"","icon":"Cloudways.png","categories":["PaaS"]},{"name":"WordPress:6.8.3","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"Google Analytics","description":"Google Analytics is a free web analytics service that tracks and reports website traffic.","website":"https://google.com/analytics","common_platform_enumeration":"","icon":"Google Analytics.svg","categories":["Analytics"]},{"name":"GeneratePress GP Premium:2.5.0","description":"GP Premium is a premium add-on plugin for the GeneratePress WordPress theme.","website":"https://docs.generatepress.com/article/installing-gp-premium/","common_platform_enumeration":"","icon":"generatepress.png","categories":["WordPress plugins"]},{"name":"GeneratePress","description":"GeneratePress is a lightweight WordPress theme that focuses on speed, stability, and accessibility","website":"https://generatepress.com","common_platform_enumeration":"","icon":"generatepress.png","categories":["WordPress themes"]},{"name":"Contact Form 7:6.0.3","description":"Contact Form 7 is an WordPress plugin which can manage multiple contact forms. The form supports Ajax-powered submitting, CAPTCHA, Akismet spam filtering.","website":"https://contactform7.com","common_platform_enumeration":"","icon":"Contact Form 7.png","categories":["WordPress plugins","Form builders"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]}]},{"fqdn":"s.w.org","ip":{"addr":"192.0.77.48","port":443,"asn":2635,"as":"AUTOMATTIC","country":"United States","country_code":"US"},"domain_registered":"1993-12-01","domain_rank":27695,"first_seen":"2017-01-30T04:56:16Z","last_seen":"2025-10-12T22:22:06.489623Z","alert_count":0,"request_count":2,"received_data":1842,"sent_data":910,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"professionaltrafficmonitor.com","ip":{"addr":"52.59.24.226","port":443,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"domain_registered":"2025-01-23","domain_rank":16376,"first_seen":"2025-01-25T08:56:07.448138Z","last_seen":"2025-10-12T22:34:05.876953Z","alert_count":0,"request_count":2,"received_data":724,"sent_data":964,"comment":"","tags":null,"fingerprints":null},{"fqdn":"accounts.google.com","ip":{"addr":"173.194.221.84","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"1997-09-15","domain_rank":103,"first_seen":"2012-05-23T06:57:57Z","last_seen":"2025-10-12T22:30:34.310669Z","alert_count":0,"request_count":6,"received_data":13868,"sent_data":3784,"comment":"","tags":null,"fingerprints":[{"name":"OpenGSE","description":"OpenGSE is a test suite used for testing servlet compliance. It is deployed by using WAR files that are deployed on the server engine.","website":"https://code.google.com/p/opengse","common_platform_enumeration":"","icon":"Google.svg","categories":["Web servers"]},{"name":"Java","description":"Java is a class-based, object-oriented programming language that is designed to have as few implementation dependencies as possible.","website":"https://java.com","common_platform_enumeration":"cpe:2.3:a:oracle:jre:*:*:*:*:*:*:*:*","icon":"Java.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"cdn.storageimagedisplay.com","ip":{"addr":"45.133.44.1","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"domain_registered":"2024-09-13","domain_rank":170153,"first_seen":"2024-09-13T12:56:32Z","last_seen":"2025-10-12T22:34:06.069164Z","alert_count":0,"request_count":2,"received_data":100677,"sent_data":924,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"yweakelandord.com","ip":{"addr":"104.21.47.91","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-06-11","domain_rank":0,"first_seen":"2025-10-12T08:53:14.358096Z","last_seen":"2025-10-12T08:53:14.358096Z","alert_count":0,"request_count":1,"received_data":519,"sent_data":577,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"torchfriendlypay.com","ip":{"addr":"172.240.108.84","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"domain_registered":"2024-09-01","domain_rank":191479,"first_seen":"2025-07-30T13:31:49.539518Z","last_seen":"2025-10-13T01:19:48.704284Z","alert_count":9,"request_count":3,"received_data":13857,"sent_data":5365,"comment":"","tags":null,"fingerprints":[{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"clonecroak.com","ip":{"addr":"172.240.108.76","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"domain_registered":"2025-01-09","domain_rank":3891553,"first_seen":"2025-01-17T20:53:39.553719Z","last_seen":"2025-08-03T05:55:35.431197Z","alert_count":6,"request_count":2,"received_data":94472,"sent_data":890,"comment":"","tags":null,"fingerprints":[{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"rashcolonizeexpand.com","ip":{"addr":"172.240.127.234","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"domain_registered":"2024-09-01","domain_rank":31106,"first_seen":"2025-06-27T17:12:36.133274Z","last_seen":"2025-10-13T03:04:24.143059Z","alert_count":9,"request_count":3,"received_data":13866,"sent_data":5369,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}]},{"fqdn":"d1jum8517nhtf1.cloudfront.net","ip":{"addr":"54.230.245.183","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"2008-04-25","domain_rank":0,"first_seen":"2025-10-01T08:44:21.030848Z","last_seen":"2025-10-08T15:59:38.517276Z","alert_count":0,"request_count":2,"received_data":192191,"sent_data":1147,"comment":"","tags":null,"fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":[{"sensor_name":"suricata","description":"Suricata /w Emerging Threats Pro","alerts":null}],"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"d1jum8517nhtf1.cloudfront.net/?nmujd=1218938","fqdn":"d1jum8517nhtf1.cloudfront.net","domain":"d1jum8517nhtf1.cloudfront.net","tld":"cloudfront.net"},"ip":{"addr":"54.230.245.183","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"d636ce64435a8cc27cb9c81f673c76e7","sha1":"aed5a3e2d6a3c584c361f2cda0689a79726d2c97","sha256":"5374c40bb9ce4e2559dd3c491b07822adb3ff934670c987c056e7110168019cd","sha512":"a6710e57e7fe55b93350586053ae360cf908ff58e949308bf34c97e7dd312ae493186dc8aea30b5faa4281317f729437bb1402cd358ccda5be5363f633891594","ssdeep":"3072:XBUNPgDYzi07L02raYDbe+Y5UKS+7L0x2ii:XuN4DUi07w2rnX4","tlshash":"47145dc9be92346d836374b540bf528a723f4a68b8184cd4e496d4d17db8d0a437bfac","size":190447,"data":"","first_seen":"2025-10-18T08:00:10.936035Z","last_seen":"2025-10-18T08:00:10.936035Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"getvelocity.org/wp-content/plugins/gp-premium/menu-plus/functions/js/offside.min.js?ver=2.5.0","fqdn":"getvelocity.org","domain":"getvelocity.org","tld":"org"},"ip":{"addr":"161.35.143.48","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"2c8d926d887909904dab4316508bacc6","sha1":"455db3d80b61fefab3797bacd140f95229fa7518","sha256":"50fe1014e82dd9acea2f5b26061c8f135cb11ea0aa5d5ad5985e6b265b7f50a8","sha512":"8281e2ec7632f785570764ece44bfdb308fde7664af663669feb6c72c496ccc44ced9b5b5f7cfd1d55313aefa4ff1e19d9aad733fa75284a53523604ee9f070f","ssdeep":"192:cVABvuAZzR3rNjHOYzh2AWGVpPK5NBiNizDN:IARRnrNjuYzh2AWGVpPK5WQ/N","tlshash":"b0e187647160223500bb16db31ffd2c936f558deac16901538eace8d2db99cb12a1fe9","size":6795,"data":"","first_seen":"2023-03-29T23:12:02Z","last_seen":"2026-04-06T05:06:20.041322Z","times_seen":2798,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"getvelocity.org/wp-content/themes/generatepress/assets/js/menu.min.js?ver=3.5.1","fqdn":"getvelocity.org","domain":"getvelocity.org","tld":"org"},"ip":{"addr":"161.35.143.48","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"67148b2ff82038d0faf6385f182c5644","sha1":"7452d643e468caf6db8ecf07618f1cb7ff3f7651","sha256":"5af760e4297b064a2150dcd5f63d748a06dfa8b618c9e9d43a87c4ac74fa3974","sha512":"24cb8e3c4f17abc7cf1ba96407ac1eda4e6c5d7c669ac213024a9b428e19cef574cefdb06c4dd28c013f1f8d3c775fb8f98c5a15c142783ba0f25b46f0c6e7ad","ssdeep":"192:iQqHlWQZgROnqWgpkgJMhqDi92FY+alT/fnGtxTbvm:bqHngROnvgJUqDi9cNYTnGvTbvm","tlshash":"6ee112fa964412bb04ef29ca74e6e5c07b7568fdea0184302579c84d1fe8dc202e6bf5","size":7333,"data":"","first_seen":"2024-08-31T11:00:29Z","last_seen":"2026-04-06T05:25:23.67858Z","times_seen":9950,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"getvelocity.org/wp-content/themes/generatepress/assets/js/dropdown-click.min.js?ver=3.5.1","fqdn":"getvelocity.org","domain":"getvelocity.org","tld":"org"},"ip":{"addr":"161.35.143.48","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"b5bc1c34654b921b29931202a2a1c21c","sha1":"c265ba248a2360ea3860b0aa6fc71d7a88e00c18","sha256":"961de1e60f1c5cf174f5b7994a3f23b03e3af679b011a5c3c19e7615ef473005","sha512":"42d358c868d702b0ab9cffc346cc07c59181e9af31af772d5ee6e8cbc20c04f7a507b6eb45ca64780b371f971ed3b38868cb0421510c886bb91f8b93bef0c307","ssdeep":"","tlshash":"f061efb99a4015bb14d939d625d6fcc16fa224fffe0588211165dc0e2aadd8111fcbf4","size":3196,"data":"","first_seen":"2024-09-11T01:27:06Z","last_seen":"2026-04-06T03:41:42.241458Z","times_seen":344,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"getvelocity.org/velocity-executor-v0-5-2/","fqdn":"getvelocity.org","domain":"getvelocity.org","tld":"org"},"ip":{"addr":"161.35.143.48","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"b950a3a47a8349ce6f495c23e36c2674","sha1":"fcc5d74bb4ec747c45d8c4cb110f90570a1be92e","sha256":"36321f3ccf5a05fa5223a12e4b1ffcd8bc1c0de7050e9eb1009885704fdf738c","sha512":"2f45521db895f8ed883c9cc6802f5e885c262472a53ef69506a1d7b77bca12a34e200c9d0edf20244ae9516763843424a898b0360103c7164aea18e882f6082d","ssdeep":"","tlshash":"44c02b8c211a0cb0d5f72700cb7fb600f0033224d4d4ad35480a23085f30e07d784814","size":153,"data":"","first_seen":"2025-10-18T08:00:10.982346Z","last_seen":"2025-11-23T11:54:40.22774Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"about","addr":"about:blank","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"eval","is_inline":false,"md5":"f162b06dfae0d71f19fc937b06925f3b","sha1":"a81c2c6df2462692cbebbd05f2b83bdeea9c035f","sha256":"0d12053a180db9f5baf475c62f18af0e49d2532d5b9b07dd01757be97f81b3d1","sha512":"26009d053c441742426c86f1637774f96b1c592ad06023ffe675d79647223c3f410b9b99d2c182b01bf088b9b4fe3f62ac99bced94e6ba1d5f54a109353634a7","ssdeep":"","tlshash":"6531b73581061da63fccc56b197c34ee1fda700ba982f281e868c55ee9d15610f792b4","size":1522,"data":"","first_seen":"2025-10-18T08:00:10.991341Z","last_seen":"2025-10-18T08:00:10.991341Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"about","addr":"about:blank","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"eval","is_inline":false,"md5":"aa3e19dd4e3835f7a11e5a20fa0bdd45","sha1":"73288bcda607afe0050906e36061544c483e96d7","sha256":"d0468d99903aa0b88246d8f610fb38df9057ff38d0b4f23446615c267ca15897","sha512":"7c3b59b8a292d18fe9360ed900a8d7b408755d95616682c2ed49d4c13ab4fd274f056b7e8caa6472bfc5af609c4442d108df74a7248562b56871a8780986253c","ssdeep":"","tlshash":"7331d7a6852719ca1ba5e4cae46a013d3d7b6b0fff03954496399c5fc260e04c6429f0","size":1524,"data":"","first_seen":"2025-10-18T08:00:10.995764Z","last_seen":"2025-10-18T08:00:10.995764Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"getvelocity.org/wp-content/plugins/social-icons-widget-by-wpzoom/assets/js/social-icons-widget-frontend.js?ver=1739758068","fqdn":"getvelocity.org","domain":"getvelocity.org","tld":"org"},"ip":{"addr":"161.35.143.48","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"6442171da4dc4093819153e31fe5d513","sha1":"8b4bb7223ce0e3ddf41fd16ac73430dc847fb69a","sha256":"6853d729a67593739860d399dc73e21340de4f57bda79cc930f536e428967b4f","sha512":"a6f17f0dcd6183d5c8faea966f7ab166603ad0660044637919e44b3dd9a1ddfae3b36e535dfbd9ab6f61e79268706ea21f5a447920c79dd284d01bf03db98746","ssdeep":"","tlshash":"f911704aa5ff189154b3319f4b5fca012216ac37410bd718793c95a08f50b3cbb7d1e9","size":860,"data":"","first_seen":"2023-03-07T12:01:50Z","last_seen":"2026-04-05T23:45:12.411745Z","times_seen":1800,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"clonecroak.com/998c325fdf1538cfd6230e572005f2c1/invoke.js","fqdn":"clonecroak.com","domain":"clonecroak.com","tld":"com"},"ip":{"addr":"172.240.108.76","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"0ccbff0b9d24f5aca36d6e68da556d8a","sha1":"7a0c3af43ecc454f445daf1b7c205faf39758e96","sha256":"16e11841106951b985326452436acb528c80917166ababa395ccf8f44c18b7a8","sha512":"ead1e59031db4fa1e1b5856f1f18d2da4a4ec36bf33d2b2d8ec12b687acfed0149ff84a199997a7210975ca12dc362a516c0859de4644eecd4b409ff8dd1df27","ssdeep":"768:H5/C6gfHBHuf0gCjEqeJMtQIHKmt2FgjS2Tm:HI6gfhHuf0geEqeMQIHKV27m","tlshash":"ed2308883fa0f66b07327437126fd11ffa6acc019888cc5cda46d5e52f68b19e536b45","size":46393,"data":"","first_seen":"2025-10-18T08:00:10.832385Z","last_seen":"2025-10-18T08:00:10.832385Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"getvelocity.org/velocity-executor-v0-5-2/","fqdn":"getvelocity.org","domain":"getvelocity.org","tld":"org"},"ip":{"addr":"161.35.143.48","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"3944482b068bacad4f78d5361262c0de","sha1":"8a2098946a50203e19a80c7891f928753594f068","sha256":"e1b435fd4bbc19e9a054da48f6cc5520bbd1055a2330e9da743719dc6798d36e","sha512":"f52050eb052ec290b0fc7fee54e57a377c6be30fb99b5176cd81b16432cf669f64ce1ed39a196022c9336f552a1bd07076cf80e135a3581526ee37eb182e406c","ssdeep":"","tlshash":"9061b99e3775388b32b604d16a2f4e07fb7258361a88d034cab9a7541cb1463d37ae4a","size":3386,"data":"","first_seen":"2025-10-18T08:00:11.001613Z","last_seen":"2025-11-23T11:54:40.229059Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"getvelocity.org/velocity-executor-v0-5-2/","fqdn":"getvelocity.org","domain":"getvelocity.org","tld":"org"},"ip":{"addr":"161.35.143.48","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"5460c9c0f3232da9daf88a0edd597a38","sha1":"8231c5546b82e05ddd1227ef3c4e0a5922ec7a3a","sha256":"5b7599de5da3d54c0055b83d2c2f5ed689b476ebac8ec94090701279102349f1","sha512":"fdc1a72074873ed06daf23ff1466bcdfb3d8bda3ec5c446f9dd1797fefac41ff1de500a503b779de40f9ab24331225224e19077d80609555bedbe27a8a9811d7","ssdeep":"","tlshash":"8fc02b33350d0e020f9143e0fe0d6af044dc760200fcd14917389d4c0ccc1e40900467","size":137,"data":"","first_seen":"2025-10-18T08:00:11.009782Z","last_seen":"2025-11-23T11:54:40.231551Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-HVY92KN3QE","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.178.40","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"1deaaef82d0e41638bcb7b409c335342","sha1":"b2e315e295f89cf0d37f3890317218d9cdacc144","sha256":"2abbc23cb79241b0c3f0a3eadeb315b5d11433500642ee7a8a4eac586ec8ca2a","sha512":"e2fe60cf6c710129ac7254d79fc4846f2b31d373ce81496f65e8971652dfe608733a129eb25b2b9e8f0b4790050e1c18f89d35e3eda8dad9b9d9fd29bf368d43","ssdeep":"6144:jBipc6tQSyOe+hy4nkEt7F8KWjxSqpRjeWvkAX6HJLGy1tyyluxwuuSyv:VN6rRRhy4nkEt7F0EqPeKRy1bv","tlshash":"60941a8e73c674269396f078503f018ba57b29a2f45cc896f189cce42e7499a4277f7c","size":426453,"data":"","first_seen":"2025-10-18T08:00:10.891413Z","last_seen":"2025-10-18T08:00:10.891413Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"getvelocity.org/velocity-executor-v0-5-2/","fqdn":"getvelocity.org","domain":"getvelocity.org","tld":"org"},"ip":{"addr":"161.35.143.48","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"82ebd152be28e292587dd4060d764a98","sha1":"e1741f1848360b4682189ad0eecac970083ed2c4","sha256":"e672803ef7770f9e807d0f5980e289017c4280c2be9d9b6b5be0874c48204704","sha512":"cba5c8832ed8372c2e77ac9da43b211bbc7c7efff6957edfb5580e62a1e2c4948423fdc16d44c8dc33934111a03d02ad1a40f511ed927abee14888d4a20d6dd6","ssdeep":"96:DgWQEjiRG4cq4p3g6VCUB4Pxkt6/ARVlR/8aBOMHknqEx1AsQ1mWIcXgJs4ngaD:09Rcq4iinB4ZkcARVlR8UOUkqs1415I3","tlshash":"4fa130e935b219b14367756e2b5f50913b50506b8180ec14780fc2cd1ffaba0946fb8f","size":4741,"data":"","first_seen":"2025-10-18T08:00:11.019281Z","last_seen":"2025-10-18T08:00:11.019281Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"getvelocity.org/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.4.1","fqdn":"getvelocity.org","domain":"getvelocity.org","tld":"org"},"ip":{"addr":"161.35.143.48","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"9ffeb32e2d9efbf8f70caabded242267","sha1":"3ad0c10e501ac2a9bfa18f9cd7e700219b378738","sha256":"5274f11e6fb32ae0cf2dfb9f8043272865c397a7c4223b4cfa7d50ea52fbde89","sha512":"8d6be545508a1c38278b8ad780c3758ae48a25e4e12eee443375aa56031d9b356f8c90f22d4f251140fa3f65603af40523165e33cae2e2d62fc78ec106e3d731","ssdeep":"192:5rprDN+sag6ifKIUpQI99P1tLm9kdgyq1+J3aCJQ+h4MPLORq:5rprxaefKI0LP19m4q1WW+h4Mjp","tlshash":"9952c8adb56679724eb721b8f03bd24f71b205de560d8940d19cc4f6282dc6e812bf78","size":13577,"data":"","first_seen":"2023-05-09T19:21:05Z","last_seen":"2026-04-06T05:11:39.813655Z","times_seen":642369,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"getvelocity.org/velocity-executor-v0-5-2/","fqdn":"getvelocity.org","domain":"getvelocity.org","tld":"org"},"ip":{"addr":"161.35.143.48","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"e52cea7ad3e0c4e18615b38e163bb44a","sha1":"1d255867f3ce82f998ce35b276f91b14c03811ac","sha256":"191f25181a8cdb475979566a883071f7991f4a7c05cdc990d2e5e9817c7c3aa3","sha512":"eb436bd21ccc24e7e9b8b1a8690b7de341606fee993412b3dc85612a428ef30823d8945bb4d9a87fec9ca8976f06ff706fd347f7ced0c611236ce42614b344bf","ssdeep":"","tlshash":"c8c02bdd9408f36c003fcc112c2ce180c210cd10b988002331d008360250630449237d","size":139,"data":"","first_seen":"2025-10-18T08:00:11.031425Z","last_seen":"2025-11-23T11:54:40.232869Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"about","addr":"about:blank","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"395c78900778dbe4bed9284698f45e2f","sha1":"dc38b0389a4891a638ed1900f36e09fdf9d4d09b","sha256":"73b178c2feaf9bdd9c1d30fe337cec84394f2068d191a250a5dec4cc7c76719e","sha512":"db810e1435ec3c9c6170e92e1861c31093202c991dfdcc11abe803558e525e1159f3be61bfce3f2093d4d4f45df125cd53e9802b1c02e84808e3f5b8798cbd6d","ssdeep":"96:LoziYisBkZfXvYod2k/asm1lvXJwBm7ajqyuW1jD2CfMEDaH:8zlCZfXgockDSMBm8qyv2CkCaH","tlshash":"57911a567c9606fd24ae74eea4b752182c32c20baf01d901fb2cd6998f30fe80955d78","size":4540,"data":"","first_seen":"2025-10-18T08:00:11.041883Z","last_seen":"2025-10-18T08:00:11.041883Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"getvelocity.org/wp-includes/js/jquery/jquery.min.js?ver=3.7.1","fqdn":"getvelocity.org","domain":"getvelocity.org","tld":"org"},"ip":{"addr":"161.35.143.48","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"826eb77e86b02ab7724fe3d0141ff87c","sha1":"79cd3587d565afe290076a8d36c31c305a573d18","sha256":"cb6f2d32c49d1c2b25e9ffc9aaafa3f83075346c01bcd4ae6eb187392a4292cf","sha512":"fc79fdb76763025dc39fac045a215ff155ef2f492a0e9640079d6f089fa6218af2b3ab7c6eaf636827dee9294e6939a95ab24554e870c976679c25567ad6374c","ssdeep":"1536:0RUX9uDgwxcy2KVBNwchN6SLaHEk2BSrBESp+a/IEk4aAocVi8SMBQ47GKO:sHNwcv9VBQpLl88SMBQ47GKO","tlshash":"7483f8df77ca702247ab30b9006f550bf276199d684d4400f159d8e9bcb8a4a827bf7e","size":87553,"data":"","first_seen":"2023-11-03T09:26:43Z","last_seen":"2026-04-06T05:11:39.633896Z","times_seen":689466,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"about","addr":"about:blank","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"dd9f8f02680581f11cd3e19c329fad2a","sha1":"a2fb7d5e63a5519169deb6f41e066ca45fa27022","sha256":"5022c15abbd5fc4f8e00cdfaad6fc3a3899d53e21c17f25bc67e9eb158ce6503","sha512":"02dd9e0c5f88cb96f7cb627d6649346a67d245c9cd3380922023eddf7449977270eebe8b9a0f21bc8e4f9d5e1453bcd41873f26fa25ec8e33136d6777da75ae0","ssdeep":"96:Loz+OYo/A4k3BJMhe4vdD0k/m3FF03jtd1jD2CfMEDaH:8z7YRBAwkoFFKv2CkCaH","tlshash":"a6915c340c8a097a3d6d50ff153a62852d91700b6a40f503fc8cda59af202f40e7faf4","size":4540,"data":"","first_seen":"2025-10-18T08:00:11.052602Z","last_seen":"2025-10-18T08:00:11.052602Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"getvelocity.org/velocity-executor-v0-5-2/","fqdn":"getvelocity.org","domain":"getvelocity.org","tld":"org"},"ip":{"addr":"161.35.143.48","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"e52cea7ad3e0c4e18615b38e163bb44a","sha1":"1d255867f3ce82f998ce35b276f91b14c03811ac","sha256":"191f25181a8cdb475979566a883071f7991f4a7c05cdc990d2e5e9817c7c3aa3","sha512":"eb436bd21ccc24e7e9b8b1a8690b7de341606fee993412b3dc85612a428ef30823d8945bb4d9a87fec9ca8976f06ff706fd347f7ced0c611236ce42614b344bf","ssdeep":"","tlshash":"c8c02bdd9408f36c003fcc112c2ce180c210cd10b988002331d008360250630449237d","size":139,"data":"","first_seen":"2025-10-18T08:00:11.031425Z","last_seen":"2025-11-23T11:54:40.232869Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"getvelocity.org/wp-content/plugins/gp-premium/menu-plus/functions/js/sticky.min.js?ver=2.5.0","fqdn":"getvelocity.org","domain":"getvelocity.org","tld":"org"},"ip":{"addr":"161.35.143.48","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"b4054cf702149de2ebe6578b6c5e21d4","sha1":"898f2ff50a92069b4d5886ee0b378f36e8f0c906","sha256":"57d35f39158ef6990a75261c466b5c93e3f441b5b05426a35975fc3f31c19c45","sha512":"54fe82d5c65f91daa1cacfad3d996709098622731ed79e37b780f5ef8c07b30b92c9b66b7ec0c8c0c052085caa2fb281492bc125101b6e3086a6346ac8b36ff1","ssdeep":"96:BiLzZp1jH2BKyAWjjp9+1YYE7Aq5l0ok7yyAMGrrAU9gEuqOxVTHjiQzBSw6MCnk:B6jH2cK5IKD0Y3vm17iQz8VBAn06kY","tlshash":"f602d88cf71034b548bfc69e81dba500d1bbc92596439086f69d8c4e1949f6813e7fdd","size":8524,"data":"","first_seen":"2023-03-29T21:09:46Z","last_seen":"2026-04-06T04:58:55.775594Z","times_seen":2705,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"getvelocity.org/velocity-executor-v0-5-2/","fqdn":"getvelocity.org","domain":"getvelocity.org","tld":"org"},"ip":{"addr":"161.35.143.48","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"9b78b28b396646badfc6017235ee4be9","sha1":"18103240bf0cb760cdf7febc628b56b8fca44319","sha256":"215f517010a20f2f4c55d34dd3c574568bd0fb83662f0b915ddb6561f97c3904","sha512":"6b82e20e99e8a57178afd50be19a2d5ecbf7062879808d851b3b5aa2b0a8a629ef06413f19dc9a6cd7a22d23e5d67e133fb70ff8030e0f6d6a494260d0085739","ssdeep":"","tlshash":"a9d0123a6b562b320997a7a266efb7413b6306b564c105135c75c8892f34dc981754ca","size":260,"data":"","first_seen":"2023-03-07T01:03:19Z","last_seen":"2026-04-06T05:23:08.339685Z","times_seen":7080,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"getvelocity.org/wp-includes/js/wp-emoji-release.min.js?ver=6.8.3","fqdn":"getvelocity.org","domain":"getvelocity.org","tld":"org"},"ip":{"addr":"161.35.143.48","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"c4b50535f3e989a77d537d5486342d47","sha1":"2a1cc988298c022def9376bd54f608f44154071a","sha256":"db8ee8be2b2456c191fc0739f34f6ac675af8ba4782380cf233024498e0eb968","sha512":"be3b974332c4dadc30025aa911fde008442c9f4966ade014a7b8f05926688e30b9fdc32ebdbdd53fe32fc3f4d9c6ac2310b98dc6602843f2d8f00b1ded4e9b83","ssdeep":"384:WAevzW+ZTbXUH3o//bEPhXgA5H1efAJmpr:WF6UXUH3o//YpXgAGfACr","tlshash":"d782fa9bb33a4e8f343e3bd7cd968f4dc9da555321c0e078dbeeb68169a00568274c90","size":19251,"data":"","first_seen":"2025-05-09T23:23:48.206606Z","last_seen":"2026-04-06T05:06:18.003558Z","times_seen":196065,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"about","addr":"about:blank","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"eval","is_inline":false,"md5":"74b17057b9e71fa40fbaa42a32cf291d","sha1":"2f045a864ceb10e021d1ef02277af588191a92d7","sha256":"ee0bb3b4508c7f63bb93187e4e31afa50a03d73e0604d58231f1a6c914183a4d","sha512":"72cfa98455e87247960afb798fba2b37e9a7b70c24a7a1d87f57aa85d92c314ba8a0933d33830634fbbdefa520302c413af52793e7a43234caee3ed2f3f7a9d2","ssdeep":"","tlshash":"6d31e93b305913be94ee3af1a5e337641d31ca525e109102eb2983d8d868bcd121cd0f","size":1784,"data":"","first_seen":"2025-10-18T08:00:11.061773Z","last_seen":"2025-10-18T08:00:11.061773Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"d1jum8517nhtf1.cloudfront.net/sbnNVVFoNHDsyZRoaMWlrXEJtbWlWVSUmPwhOMjEuGBY5OzkHByx6NRwUcz4pAR0laSACHhkkKFwrGxUwAwMYci4UF2hkfAISOzNnSBY7N2dfVTQwOFNDcyAqARhoMzQZGSQsNRsFN3IvD044OyAHHzk1f1w1YHpqS0FlfC0HHTE7LR1WZ2Q0GlZnZGteXW-VxaSxWZ2QtBx1jYH9dMXBmahZFYXFpLFZnZCgYVmYVa11He2RzS0FlMz8NGDpxaChBZWVqXkJlZX9cQzM9KAsVOix/XDVkZ25AQ3MhZ18","fqdn":"d1jum8517nhtf1.cloudfront.net","domain":"d1jum8517nhtf1.cloudfront.net","tld":"cloudfront.net"},"ip":{"addr":"54.230.245.183","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"111e0908f64bb39895023cf6b3b3b7d4","sha1":"22a049b3b4b9e4ebab07ddd3a3c9d4c71c550cc4","sha256":"eaa913127c5924f701af15040b73e77af766d931b1b4b42ce0245406f3e9dd16","sha512":"f362863ab5e348eeb9622dde15e6848456b2cf40d5000196f7c7212a8efcb7daee2b9384f1df13222069b9731d412cb3759db4f27b3059dd19d48184bc31f39f","ssdeep":"","tlshash":"b611bbae65548e235869a1b533f3f45253c8908d21b95265b8024f73e30ce4b4510721","size":902,"data":"","first_seen":"2025-10-18T08:00:10.865814Z","last_seen":"2025-10-18T08:00:10.865814Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"getvelocity.org/wp-content/plugins/breeze/assets/js/js-front-end/breeze-prefetch-links.min.js?ver=2.2.2","fqdn":"getvelocity.org","domain":"getvelocity.org","tld":"org"},"ip":{"addr":"161.35.143.48","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"496a14cf382a27af8cbc49bfa99584bb","sha1":"ae328b516de9a4a1836b897f4b4a5c9deeeb51d4","sha256":"fb08df814c344a8e54c8c1869a160670bb397a20a68ca8e2d997aee849632c60","sha512":"172ea48bd3216f24fa74482ddc1473f8dddfd58a2e7159ce27c50a21647ff6073f4ca0fcc76d39b9ad04974646e90aca687ab39f4f5bfb4026d27147f48f5397","ssdeep":"","tlshash":"8e2166a5ffe410f755c24df4d26ea700707aa4951849c1e0b918fa055d2cfd7201bceb","size":1369,"data":"","first_seen":"2025-02-06T17:25:32.640758Z","last_seen":"2026-04-06T00:59:40.854111Z","times_seen":442,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"getvelocity.org/velocity-executor-v0-5-2/","fqdn":"getvelocity.org","domain":"getvelocity.org","tld":"org"},"ip":{"addr":"161.35.143.48","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"36b6264c7cef7454ab66f28e63fc0b1a","sha1":"47a2ff8432203e340aa1b1d2596bdb461007ab54","sha256":"000e580fb5f0233300ffd016893fa214ae25f735fc3655ab18a1037a6823d815","sha512":"d58defa78dea0e8ddc326c077c2d1abbd48db733a5420b13f08f8a5786d99ff94172819c3aa0ef9db557e974b0fb76016bd9e25a2e572055ac8dc205534c2f4f","ssdeep":"","tlshash":"b38000a382082c082300b00e2008000028308000a0808a8020888b283c0820cc0088c8","size":32,"data":"","first_seen":"2023-03-07T12:03:46Z","last_seen":"2026-04-04T20:13:22.016594Z","times_seen":1553,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"getvelocity.org/velocity-executor-v0-5-2/","fqdn":"getvelocity.org","domain":"getvelocity.org","tld":"org"},"ip":{"addr":"161.35.143.48","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"d30f13da1f424ee0383b76edc55881e1","sha1":"7e348a5f57ab13eedbc4ed917cdeee5bb9f9bd46","sha256":"cf01a621447e67a81629bc28276677c86c48fd72c44cba83a82448574aadfd60","sha512":"06571ea850a1ff105d50dd65340b1109e07dba2915279d549f0880e161c5487e0462e63f5bcf3daa1feb9ebd6fc00f84d552fb806f5f5405ebac203f097b89b8","ssdeep":"","tlshash":"daa0244530471400c04dc1504d13fc00041010c7034fc50435d05d30d550440744331f","size":68,"data":"","first_seen":"2023-03-07T01:02:08Z","last_seen":"2026-04-06T04:58:55.832765Z","times_seen":109855,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"getvelocity.org/wp-includes/js/dist/i18n.min.js?ver=5e580eb46a90c2b997e6","fqdn":"getvelocity.org","domain":"getvelocity.org","tld":"org"},"ip":{"addr":"161.35.143.48","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"a8127c1a87bb4f99edbeec7c37311dcd","sha1":"9997a1745f48bdd233dbe9bd8164daa53eba105b","sha256":"f313d12ea6124bd28fc4a6b7163d253bb83d5aeab5edce594880c5c3df475cbc","sha512":"aa10ddc5b29905c60a058faed3f5f195f7577ceac46489e02461b5135732194daa3aef4aa473127bf8c753312e02074cfdac8d0f8f0cc8aa544c7f8e02bebd08","ssdeep":"192:s6zoFrnW4iaX3LzDk1jpJLB2hlq717+3uClD2tFtJ7bykd+SHS+F:s6Udn3LzoJphH8uClD2tFtJ7byTwtF","tlshash":"8612d8ac30deb021239a11e1586fb101f13aaf6532d99ce0da81d9e57db19c960b3ff5","size":9141,"data":"","first_seen":"2024-04-03T08:25:07Z","last_seen":"2026-04-06T04:58:55.782426Z","times_seen":237366,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"getvelocity.org/wp-includes/js/comment-reply.min.js?ver=6.8.3","fqdn":"getvelocity.org","domain":"getvelocity.org","tld":"org"},"ip":{"addr":"161.35.143.48","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"e4a49df71f8b98c1d9f9d8fce74d89e8","sha1":"b95fcda0c8c26305ad94e80343d0cfca8a048a10","sha256":"9d4687a19cab8f7442a3bda40c45be4d10e42488e091ddd706c3caed83c3ee1f","sha512":"42cd5f854779886f24c43ed14617380110c946d1b430b454060c3b391de6fbae6d0ed8ab7cdd7cfdc9726b2d6142a4e01c4448e36088dfcee7fdd00b60909f89","ssdeep":"","tlshash":"5051a7d437c95d762a83b3395efe930271712709a50805608826c86931bcfea63b67fe","size":3026,"data":"","first_seen":"2024-11-13T06:33:24.856382Z","last_seen":"2026-04-06T05:16:18.606004Z","times_seen":57490,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"getvelocity.org/wp-content/plugins/contact-form-7/includes/swv/js/index.js?ver=6.0.3","fqdn":"getvelocity.org","domain":"getvelocity.org","tld":"org"},"ip":{"addr":"161.35.143.48","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"2e187162915b1d22fd4558fee30f5613","sha1":"3c76d4209fdbcbd3650655852ad4ed73846e15ff","sha256":"6d60e3b25e56d35148888b5a08c8eb0ff3806f9698d4f6f54a35eab7d27f4c2f","sha512":"01948a902de67801566637ec99d82302a8da9b80a31de08fb1f2c0d52aea3beafa804188471320410850f0e96f4ba4c34f6cac6ebb6081359f2e959a2c6027c5","ssdeep":"384:wwuf8OQL0sARrAZcNWL//+Ffm/hibLexa2VautyX2fsL3ZHO1O9H:wwuf8OQL0sAZAGNWrGcibLexa2Vau0XD","tlshash":"484235e16197e0f0cbc338a48816c051f2bf866cb9898054fb5dcdd22d5de07626b77a","size":12512,"data":"","first_seen":"2024-11-04T17:50:00.017227Z","last_seen":"2026-04-06T05:57:43.287404Z","times_seen":14438,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"getvelocity.org/wp-content/plugins/contact-form-7/includes/js/index.js?ver=6.0.3","fqdn":"getvelocity.org","domain":"getvelocity.org","tld":"org"},"ip":{"addr":"161.35.143.48","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"2912c657d0592cc532dff73d0d2ce7bb","sha1":"70a679e2769825236f83bcc56965a9d0bd86c4e9","sha256":"ddcce687729cb358abf9d0d8e1217a097859be2b0d18c23d7c851b38c87bc9c0","sha512":"9646384e65d09bf00cb20365f43e06dd41e7428e3fc6cc2737f4e69b50f006ebb25bd24a566fcd9faec2f0dcb24404e25d57ba7b8c6aba61797a29c515ad5144","ssdeep":"384:IsIRHeFJ1yQ7QdfnJgeYh7MXlsNqrBp1pgQpwOjNtqohIQ/5Z:IsIR+L1yQ7QdpYh7M1iqrBp1pgQpwOjn","tlshash":"0a52d7a1472955321eb506e391e513c1769075aef44b8aa1a898dc2e18bdcc328f3ff7","size":13452,"data":"","first_seen":"2024-11-04T17:50:00.022634Z","last_seen":"2026-04-06T05:02:14.404212Z","times_seen":156076,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"about","addr":"about:blank","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"f06de510b8b1d2e13e7baa47f69839f7","sha1":"e2e7b4904accd8e3de9577580a955a3e681dccbe","sha256":"6aeac632dae229f25e07c61a20daa051a6c5983bdd8a07e34a901f48709f71ec","sha512":"63ed320aaaa575d4ad6fabe367b64783184abfb0b3f49f7226c130ee41dedef94c8bc6cee163c18000e8ee0b908590c14e4540082456c0a1a8c4bacc7ee76a3d","ssdeep":"","tlshash":"4fc08cc83b0e0b2ab13d3c8eaa0b13c088c10706eaf189226294483070a303600910ba","size":145,"data":"","first_seen":"2025-10-18T08:00:11.084024Z","last_seen":"2025-11-23T11:54:40.230249Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"about","addr":"about:blank","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"f06de510b8b1d2e13e7baa47f69839f7","sha1":"e2e7b4904accd8e3de9577580a955a3e681dccbe","sha256":"6aeac632dae229f25e07c61a20daa051a6c5983bdd8a07e34a901f48709f71ec","sha512":"63ed320aaaa575d4ad6fabe367b64783184abfb0b3f49f7226c130ee41dedef94c8bc6cee163c18000e8ee0b908590c14e4540082456c0a1a8c4bacc7ee76a3d","ssdeep":"","tlshash":"4fc08cc83b0e0b2ab13d3c8eaa0b13c088c10706eaf189226294483070a303600910ba","size":145,"data":"","first_seen":"2025-10-18T08:00:11.084024Z","last_seen":"2025-11-23T11:54:40.230249Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"getvelocity.org/velocity-executor-v0-5-2/","fqdn":"getvelocity.org","domain":"getvelocity.org","tld":"org"},"ip":{"addr":"161.35.143.48","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"f34f510ebb3650c66c8af307d0c30dd1","sha1":"31b5ff677b9ca9ebf05114874785757dfcdf4ff5","sha256":"dba48afc7bee78bd5210d0cdbd48e61250365c018ef4cdef37cb2d8234f9a39e","sha512":"ec905abcad7b92e5cd4e224303eb1ea4bc805f8c699a9a78122d293e8b1a00f3bbb9cb4c288df677893f55ffd9b3f28f8e256fa4580d5bfcb19ca8e6a5230bd0","ssdeep":"","tlshash":"50c02b66ded05c0a14d5c248033c1635b01045030f1b6f55765c004c2f8c03cb4349cb","size":152,"data":"","first_seen":"2025-10-18T08:00:11.094647Z","last_seen":"2025-11-23T11:54:40.239871Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"clonecroak.com/998c325fdf1538cfd6230e572005f2c1/invoke.js","fqdn":"clonecroak.com","domain":"clonecroak.com","tld":"com"},"ip":{"addr":"172.240.108.76","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"7dc4e40dd7e3da893bac079db1cce379","sha1":"9f9e076df5a08db603a0348f31e1f3d277e29cef","sha256":"a4bfe5c7768a0d21fcb8ef222c4ec6d14453f0d130e60ba43882c50e8adbe0b1","sha512":"8d72a7af78ce0ae630eb13eacf78950e42297e2b5eb9a69269d720b1e3a9f2dbfdabdda617be6a84599453f6b81cb873807562f5f958d3f36a04ec131dc8dd0a","ssdeep":"768:H5/C6gfHBHuf0gCjEqeJMtQIHKmt2FYjS2Tm:HI6gfhHuf0geEqeMQIHKVe7m","tlshash":"0d2308883fa0f66b07327437126fd11ffa6acc019888cc5cca46d5e52f68b19e536b49","size":46399,"data":"","first_seen":"2025-10-18T08:00:10.759861Z","last_seen":"2025-10-18T08:00:10.759861Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"getvelocity.org/velocity-executor-v0-5-2/","fqdn":"getvelocity.org","domain":"getvelocity.org","tld":"org"},"ip":{"addr":"161.35.143.48","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"e891393f0be3a6ffaa3923b307180e7e","sha1":"bc0a7332b9846a5762a71b9b9811c1a8b19df194","sha256":"2d1778345d3607ceb641cc5f21b0a2c045fa70052361ac91a17c39b2c9d96f71","sha512":"12674ec69eecfa043bcf9ee8529e5ec274a1bb55e068a2ae64a91d6362997f7e532325c77785b1bc980f42592cadbed487549bae0a5298077cb1cf9c02ff589f","ssdeep":"","tlshash":"eeb09b6c51439a33c19266445384d423e07509dc420d881ff195d0dc6945da31ccd457","size":127,"data":"","first_seen":"2023-03-07T01:03:19Z","last_seen":"2026-04-06T05:06:20.061807Z","times_seen":4237,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"getvelocity.org/wp-includes/js/dist/hooks.min.js?ver=4d63a3d491d11ffd8ac6","fqdn":"getvelocity.org","domain":"getvelocity.org","tld":"org"},"ip":{"addr":"161.35.143.48","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"c6fddbb6be69793478de26fc245b2acf","sha1":"a136ebf5054fdc19729b3592005fe0fefec4bb4c","sha256":"9a1e0d38b691f1d22a92cff65ec0439b428170ac39a4493c7ecb06d5585f56a3","sha512":"8a766304caa9c888cfcab64eabab906905965e7fbcfc4f79c74ab122b892456abad215d0883df17023a16a18ba15a6a4b3d0fa5345cab7173d778f725b827c33","ssdeep":"96:vmK40IdSs6c7DE/3sc/YrEBnUBPwKxbqe/Ds91sBYt1Em4kCofWQRemN:OK40IdS/cHg3NZBnUJbqe/DeGYtu7kC6","tlshash":"b4a161c47482b870a2237457e0bb1485757eabb5743990c5a24dd8a02db3dcfe0a7a3e","size":4776,"data":"","first_seen":"2024-11-13T05:08:51.627546Z","last_seen":"2026-04-06T04:58:55.790664Z","times_seen":210372,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"getvelocity.org/wp-content/themes/generatepress/assets/dist/modal.js?ver=3.5.1","fqdn":"getvelocity.org","domain":"getvelocity.org","tld":"org"},"ip":{"addr":"161.35.143.48","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"db4289d20dbe7678af484164bba0e0d7","sha1":"2c9ece38bf669afab2664b070c93d0db7ad04e77","sha256":"a9f274a3031a6cff458b190e7481882b6c1a17d55375a21d13c3a1c477836ee5","sha512":"33d1a8e4b1f3685821925cc2356e27b6609538cc203cb8979778143c883a655f7da2f5fe84e5e0922ec52582622b2ea594b23baa9835cc7ea25aebe4f3555e74","ssdeep":"","tlshash":"8a61c9dc7764b67219fbe2b1906faa07b7711848a84f18204436ec583c7edda0152e7d","size":3411,"data":"","first_seen":"2024-09-06T09:39:39Z","last_seen":"2026-04-05T22:36:52.053619Z","times_seen":337,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"getvelocity.org/velocity-executor-v0-5-2/","fqdn":"getvelocity.org","domain":"getvelocity.org","tld":"org"},"ip":{"addr":"161.35.143.48","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"d5070655e8fdcc3fd8aa208d4d5eb158","sha1":"a1029089132c143c7d732492f228fef2cf6c5435","sha256":"d44e7f9e7735d000f196ca2fd219f3c5e9c7a5c7b95ae59d54ae468025a82d0a","sha512":"04700d1b61326390ed0102ccb2a85bc03771fef1e66d27dbad26f3409ef8b9c41dc93cc346f05fec199b0cb2fe10d38758088abb627f83b503067dfa8f7ebfd3","ssdeep":"","tlshash":"56b0927c8283aa22819229892380e872a4320c9c8308886fe29880ada555d9328ce14b","size":109,"data":"","first_seen":"2024-09-19T21:20:08.369715Z","last_seen":"2026-03-28T15:02:19.564678Z","times_seen":182,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"about","addr":"about:blank","fqdn":"","domain":"","tld":""},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"eval","is_inline":false,"md5":"ac5d7394f4e9c5499d739a4ebd4cb73a","sha1":"bf27ad8da5b5e4c058a17cdfd938645bde2813a0","sha256":"dbc7f6290b42079e476fcda3b924fe21556fa0ec0308de6e3ee551be3b02c2de","sha512":"21f66370743f1cb865d273f005521dfbd009c54e08a6238650505e9c67b3469750a941c077f54ee5c89c76443483102e883b4359e11007714ccfd441a5c535ad","ssdeep":"","tlshash":"3a314d39380e0137dc7ca0f751059311ec95718516803143ac558d8cd8190fea67ff47","size":1786,"data":"","first_seen":"2025-10-18T08:00:11.12266Z","last_seen":"2025-10-18T08:00:11.12266Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null},"http":[{"url":{"schema":"https","addr":"getvelocity.org/wp-content/plugins/contact-form-7/includes/swv/js/index.js?ver=6.0.3","fqdn":"getvelocity.org","domain":"getvelocity.org","tld":"org"},"ip":{"addr":"161.35.143.48","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://getvelocity.org/velocity-executor-v0-5-2/","date":"2025-10-18T07:59:42.847Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"getvelocity.org","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Tue, 19 Aug 2025 09:34:44 GMT","end":"Mon, 17 Nov 2025 09:34:43 GMT"},"fingerprint":{"sha1":"7C:89:FF:97:D8:58:E5:1E:42:78:4C:C7:09:29:5D:00:D5:C2:08:19","sha256":"79:0D:D7:E1:DB:7B:45:5D:69:CD:03:2A:99:2C:47:7F:26:53:62:85:BC:05:15:A2:F5:3A:8A:0C:4B:B2:49:93"}}},"request":{"raw":"GET /wp-content/plugins/contact-form-7/includes/swv/js/index.js?ver=6.0.3 HTTP/1.1\r\nHost: getvelocity.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://getvelocity.org/velocity-executor-v0-5-2/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 18 Oct 2025 07:59:42 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 17 Feb 2025 02:05:53 GMT\r\nvary: Accept-Encoding\r\netag: W/\"67b29981-30e0\"\r\ncache-control: public, max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":12512,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (12512), with no line terminators","md5":"2e187162915b1d22fd4558fee30f5613","sha1":"3c76d4209fdbcbd3650655852ad4ed73846e15ff","sha256":"6d60e3b25e56d35148888b5a08c8eb0ff3806f9698d4f6f54a35eab7d27f4c2f","sha512":"01948a902de67801566637ec99d82302a8da9b80a31de08fb1f2c0d52aea3beafa804188471320410850f0e96f4ba4c34f6cac6ebb6081359f2e959a2c6027c5","ssdeep":"384:wwuf8OQL0sARrAZcNWL//+Ffm/hibLexa2VautyX2fsL3ZHO1O9H:wwuf8OQL0sAZAGNWrGcibLexa2Vau0XD","tlshash":"484235e16197e0f0cbc338a48816c051f2bf866cb9898054fb5dcdd22d5de07626b77a","first_seen":"2024-11-04T17:50:00.017227Z","last_seen":"2026-04-06T05:57:43.287404Z","times_seen":14438,"resource_available":true,"data":null}},"time_used":264,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":264,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"getvelocity.org/wp-content/themes/generatepress/assets/dist/modal.js?ver=3.5.1","fqdn":"getvelocity.org","domain":"getvelocity.org","tld":"org"},"ip":{"addr":"161.35.143.48","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://getvelocity.org/velocity-executor-v0-5-2/","date":"2025-10-18T07:59:42.851Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"getvelocity.org","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Tue, 19 Aug 2025 09:34:44 GMT","end":"Mon, 17 Nov 2025 09:34:43 GMT"},"fingerprint":{"sha1":"7C:89:FF:97:D8:58:E5:1E:42:78:4C:C7:09:29:5D:00:D5:C2:08:19","sha256":"79:0D:D7:E1:DB:7B:45:5D:69:CD:03:2A:99:2C:47:7F:26:53:62:85:BC:05:15:A2:F5:3A:8A:0C:4B:B2:49:93"}}},"request":{"raw":"GET /wp-content/themes/generatepress/assets/dist/modal.js?ver=3.5.1 HTTP/1.1\r\nHost: getvelocity.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://getvelocity.org/velocity-executor-v0-5-2/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 18 Oct 2025 07:59:42 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 17 Feb 2025 02:05:00 GMT\r\nvary: Accept-Encoding\r\netag: W/\"67b2994c-d53\"\r\ncache-control: public, max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3411,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (3411), with no line terminators","md5":"db4289d20dbe7678af484164bba0e0d7","sha1":"2c9ece38bf669afab2664b070c93d0db7ad04e77","sha256":"a9f274a3031a6cff458b190e7481882b6c1a17d55375a21d13c3a1c477836ee5","sha512":"33d1a8e4b1f3685821925cc2356e27b6609538cc203cb8979778143c883a655f7da2f5fe84e5e0922ec52582622b2ea594b23baa9835cc7ea25aebe4f3555e74","ssdeep":"","tlshash":"8a61c9dc7764b67219fbe2b1906faa07b7711848a84f18204436ec583c7edda0152e7d","first_seen":"2024-09-06T09:39:39Z","last_seen":"2026-04-05T22:36:52.053619Z","times_seen":337,"resource_available":true,"data":null}},"time_used":159,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":159,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"torchfriendlypay.com/watch.115592109238.js?key=998c325fdf1538cfd6230e572005f2c1\u0026kw=%5B%22velocity%22%2C%22executor%22%2C%22v0%22%2C%225%22%2C%222%22%2C%22-%22%5D\u0026refer=https%3A%2F%2Fgetvelocity.org%2Fvelocity-executor-v0-5-2%2F\u0026tz=0\u0026dev=e\u0026res=14.3095\u0026rb=\u0026uuid=096ad184-1e70-4034-a2ae-c740f1e427e9%3A3%3A1","fqdn":"torchfriendlypay.com","domain":"torchfriendlypay.com","tld":"com"},"ip":{"addr":"172.240.108.84","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://getvelocity.org/velocity-executor-v0-5-2/","date":"2025-10-18T07:59:43.742Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"torchfriendlypay.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 27 Aug 2025 22:09:22 GMT","end":"Tue, 25 Nov 2025 22:09:21 GMT"},"fingerprint":{"sha1":"11:D6:40:9F:C0:3E:93:5F:D7:10:AB:88:ED:35:EF:8D:BC:BA:B6:BE","sha256":"46:DD:4D:E7:2C:ED:72:DC:3F:71:6D:46:29:34:DC:D7:AC:E1:73:91:92:2F:5C:B4:86:3E:AE:F7:FB:A4:58:10"}}},"request":{"raw":"GET /watch.115592109238.js?key=998c325fdf1538cfd6230e572005f2c1\u0026kw=%5B%22velocity%22%2C%22executor%22%2C%22v0%22%2C%225%22%2C%222%22%2C%22-%22%5D\u0026refer=https%3A%2F%2Fgetvelocity.org%2Fvelocity-executor-v0-5-2%2F\u0026tz=0\u0026dev=e\u0026res=14.3095\u0026rb=\u0026uuid=096ad184-1e70-4034-a2ae-c740f1e427e9%3A3%3A1 HTTP/1.1\r\nHost: torchfriendlypay.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://getvelocity.org\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://getvelocity.org/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 307 Temporary Redirect\r\nServer: nginx/1.21.6\r\nDate: Sat, 18 Oct 2025 07:59:44 GMT\r\nContent-Type: text/html\r\nContent-Length: 0\r\nConnection: keep-alive\r\np3p: CP=\"IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT\"\r\naccept-ch: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA\r\naccess-control-allow-origin: https://getvelocity.org\r\naccess-control-allow-credentials: true\r\nlocation: https://torchfriendlypay.com/watch.115592109238.js?dev=e\u0026key=998c325fdf1538cfd6230e572005f2c1\u0026kw=%5B%22velocity%22%2C%22executor%22%2C%22v0%22%2C%225%22%2C%222%22%2C%22-%22%5D\u0026pst=1760774444\u0026rb=\u0026refer=https%3A%2F%2Fgetvelocity.org%2Fvelocity-executor-v0-5-2%2F\u0026res=14.3095\u0026rmtc=t\u0026shu=6818862266248f9fb99e6bbedc2185d40cdf233300c3050b9e0ec7498fd629a269e70ac48eb08a1f24787ad862d942456067dcb401ce7ffb4ce0a0be282a6f460485ee2c6cb7d717494b758f560f704d67ab3020ad5851157cadcc\u0026tz=0\u0026uuid=096ad184-1e70-4034-a2ae-c740f1e427e9%3A3%3A1\r\nset-cookie: ain=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJwIjp7ImlkIjoyNTgzMDUxMywiayI6Ijk5OGMzMjVmZGYxNTM4Y2ZkNjIzMGU1NzIwMDVmMmMxIiwic2lkIjoiIiwiaXNpZCI6MiwiYXNpZCI6MSwiemlkIjo0NzAzMTcyLCJwaWQiOjIzOTc2OTAsImFuIjp0cnVlLCJsYW4iOnRydWUsImNpZCI6MywiYWlkIjoyMywicHQiOjQsInBrIjoidHBmM3R5OXd6YiIsInQiOjF9LCJ1Ijp7InUiOjEsImF1IjoxLCJkIjp7ImlkIjoyNjY1NjExMTUsImlkcyI6IiIsImljIjpmYWxzZSwibiI6IkRlc2t0b3AsRW11bGF0b3IiLCJ2IjoiVW5rbm93biIsIm0iOiJVbmtub3duIiwiZiI6MSwiZm4iOiJEZXNrdG9wIiwib2lkIjozODkxNCwib24iOiJXaW5kb3dzIiwib3YiOiIxMC4wIiwiYmlkIjoxMzY5MjUsImJuIjoiRmlyZWZveCIsImJ2IjoiMTM0LjAiLCJ3diI6ZmFsc2UsImUiOnRydWUsImFiIjpmYWxzZX0sImMiOnsiaWQiOjE2MiwiYyI6Ik5PIiwibiI6Ik5vcndheSJ9LCJhIjpmYWxzZSwiY3IiOnsibiI6IkJsaXggU29sdXRpb25zIn0sInhmIjoiIiwiaXhmIjpmYWxzZSwiaWd4ZiI6ZmFsc2UsInVwIjp0cnVlLCJyIjoiaHR0cHM6Ly9nZXR2ZWxvY2l0eS5vcmcvdmVsb2NpdHktZXhlY3V0b3ItdjAtNS0yLyIsImFyIjpbXX19.AeIGOPorg_sZBlmbIkyEoxsniynLf_G2a7-CHOvP_WY; expires=Sat, 18 Oct 2025 08:00:44 GMT; path=/; secure; SameSite=None\r\nx-envoy-upstream-service-time: 1\r\nHost: torchfriendlypay.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: 7b0a6eb29a822bc5bcf2b800a1603918\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"307","status_text":"Temporary Redirect","fingerprints":[{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":4572,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-06T05:11:47.473796Z","times_seen":13406904,"resource_available":true,"data":null}},"time_used":767,"timings":{"blocked":334,"dns":51,"connect":93,"send":0,"wait":96,"receive":1,"ssl":189},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-18","alert":"Sinkholed","trigger":"torchfriendlypay.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-18","alert":"Sinkholed","trigger":"torchfriendlypay.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-10-18","alert":"Sinkholed","trigger":"torchfriendlypay.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"s.w.org/images/core/emoji/16.0.1/svg/1f534.svg","fqdn":"s.w.org","domain":"w.org","tld":"org"},"ip":{"addr":"192.0.77.48","port":443,"asn":2635,"as":"AUTOMATTIC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://getvelocity.org/velocity-executor-v0-5-2/","date":"2025-10-18T07:59:43.806Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"s.w.org","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 27 Aug 2025 19:44:40 GMT","end":"Tue, 25 Nov 2025 19:44:39 GMT"},"fingerprint":{"sha1":"1F:8D:28:3F:BE:E3:7F:80:0F:AA:45:06:98:87:1D:E9:CA:E1:11:4F","sha256":"AD:CC:CD:64:B6:6F:C9:5B:27:CA:75:DA:4D:1D:57:41:30:6E:12:A2:0D:2E:E8:69:49:40:DD:EE:56:9E:7F:9E"}}},"request":{"raw":"GET /images/core/emoji/16.0.1/svg/1f534.svg HTTP/1.1\r\nHost: s.w.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://getvelocity.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 18 Oct 2025 07:59:43 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 113\r\nlast-modified: Tue, 27 May 2025 09:57:55 GMT\r\nx-frame-options: SAMEORIGIN\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\naccess-control-allow-methods: GET, HEAD\r\naccess-control-allow-origin: *\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-nc: HIT arn 13\r\nserver-timing: a8c-cdn, dc;desc=arn, cache;desc=HIT;dur=0.0\r\nx-content-type-options: nosniff\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":113,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"a0a7f6cf67b863940eceaa40397e2030","sha1":"3e9457079c5737f33b7b6482121da9d6b274624e","sha256":"93f28a18a1df638b539f6bde99c048a50ad7b8a5643c6966a0546a0c50f7cace","sha512":"d5797616e4b7665cb0faf0fd7e02676a98c993ecc8bf414b60a6f07429d5f9c1b287007442c41277fe961a24684a7cf48707e50aa8676a0acb7fcd6dc14e706a","ssdeep":"","tlshash":"39b01279506ddd095c54c82828f77c5460df8017428d0779f0c41e1aed446df7115278","first_seen":"2023-04-16T02:00:30Z","last_seen":"2026-04-06T04:59:13.964137Z","times_seen":336,"resource_available":false,"data":null}},"time_used":156,"timings":{"blocked":73,"dns":32,"connect":11,"send":0,"wait":10,"receive":0,"ssl":24},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"getvelocity.org/wp-content/themes/generatepress/assets/css/components/comments.min.css?ver=3.5.1","fqdn":"getvelocity.org","domain":"getvelocity.org","tld":"org"},"ip":{"addr":"161.35.143.48","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://getvelocity.org/velocity-executor-v0-5-2/","date":"2025-10-18T07:59:42.806Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"getvelocity.org","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Tue, 19 Aug 2025 09:34:44 GMT","end":"Mon, 17 Nov 2025 09:34:43 GMT"},"fingerprint":{"sha1":"7C:89:FF:97:D8:58:E5:1E:42:78:4C:C7:09:29:5D:00:D5:C2:08:19","sha256":"79:0D:D7:E1:DB:7B:45:5D:69:CD:03:2A:99:2C:47:7F:26:53:62:85:BC:05:15:A2:F5:3A:8A:0C:4B:B2:49:93"}}},"request":{"raw":"GET /wp-content/themes/generatepress/assets/css/components/comments.min.css?ver=3.5.1 HTTP/1.1\r\nHost: getvelocity.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://getvelocity.org/velocity-executor-v0-5-2/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 18 Oct 2025 07:59:42 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 17 Feb 2025 02:05:00 GMT\r\nvary: Accept-Encoding\r\netag: W/\"67b2994c-5d7\"\r\ncache-control: public, max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1495,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (1495), with no line terminators","md5":"c77d62e5470632c2c036f1802117399a","sha1":"a37985eeec4c561cfacb08e6f50fddb50c389440","sha256":"c7308904efc8da3847aab82f9ab35918e8faccef6a04a6c657251759f30a8fb5","sha512":"94e039ac32777eaccdc832ddd9bf8a19e1c1e2325074f1853f23d0b108823d1b5d13efda84953ce2693759cd38fa2b2c8e718b31f6276a93f0f4af04286f64c9","ssdeep":"","tlshash":"0e31b7e124e40899b5abfa497cc1e295f065ab32c255e0dfeeb00610cf4af770682b5c","first_seen":"2023-04-07T05:53:57Z","last_seen":"2026-04-06T03:41:42.280563Z","times_seen":1944,"resource_available":false,"data":null}},"time_used":106,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":106,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"getvelocity.org/wp-includes/css/dashicons.min.css?ver=6.8.3","fqdn":"getvelocity.org","domain":"getvelocity.org","tld":"org"},"ip":{"addr":"161.35.143.48","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://getvelocity.org/velocity-executor-v0-5-2/","date":"2025-10-18T07:59:42.818Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"getvelocity.org","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Tue, 19 Aug 2025 09:34:44 GMT","end":"Mon, 17 Nov 2025 09:34:43 GMT"},"fingerprint":{"sha1":"7C:89:FF:97:D8:58:E5:1E:42:78:4C:C7:09:29:5D:00:D5:C2:08:19","sha256":"79:0D:D7:E1:DB:7B:45:5D:69:CD:03:2A:99:2C:47:7F:26:53:62:85:BC:05:15:A2:F5:3A:8A:0C:4B:B2:49:93"}}},"request":{"raw":"GET /wp-includes/css/dashicons.min.css?ver=6.8.3 HTTP/1.1\r\nHost: getvelocity.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://getvelocity.org/velocity-executor-v0-5-2/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 18 Oct 2025 07:59:42 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 17 Feb 2025 01:54:09 GMT\r\nvary: Accept-Encoding\r\netag: W/\"67b296c1-e688\"\r\ncache-control: public, max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":59016,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (58981)","md5":"d68d6bf519169d86e155bad0bed833f8","sha1":"27ba9c67d0e775fc4e6dd62011daf4c3902698fc","sha256":"c21e5a2b32c47bc5f9d9efc97bc0e29fd081946d1d3ebffc5621cfafb1d3960e","sha512":"fd0956d1a7165e61348fda53d859493a094d5a669aa0ba648be3381b02ed170efd776704af6965f1e31143f510172ee941d4f2fc32c4751d9b8763b66301486d","ssdeep":"768:oey/Z24B3P3aXOhUzSv16CAyLquqSfurIdUMbs73KO08QSJ2BQH02CRqxMWs5rJq:ox/ZvB/qPWMiquqioMUXQSJYIMW+rJq","tlshash":"9c43c2b1a74a40d677b0c843af65b26a5582bd7df8409cdef40b821c1af3635069dfb8","first_seen":"2023-04-05T05:16:42Z","last_seen":"2026-04-06T04:58:55.785305Z","times_seen":123912,"resource_available":true,"data":null}},"time_used":192,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":192,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"getvelocity.org/wp-includes/js/dist/hooks.min.js?ver=4d63a3d491d11ffd8ac6","fqdn":"getvelocity.org","domain":"getvelocity.org","tld":"org"},"ip":{"addr":"161.35.143.48","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://getvelocity.org/velocity-executor-v0-5-2/","date":"2025-10-18T07:59:42.845Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"getvelocity.org","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Tue, 19 Aug 2025 09:34:44 GMT","end":"Mon, 17 Nov 2025 09:34:43 GMT"},"fingerprint":{"sha1":"7C:89:FF:97:D8:58:E5:1E:42:78:4C:C7:09:29:5D:00:D5:C2:08:19","sha256":"79:0D:D7:E1:DB:7B:45:5D:69:CD:03:2A:99:2C:47:7F:26:53:62:85:BC:05:15:A2:F5:3A:8A:0C:4B:B2:49:93"}}},"request":{"raw":"GET /wp-includes/js/dist/hooks.min.js?ver=4d63a3d491d11ffd8ac6 HTTP/1.1\r\nHost: getvelocity.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://getvelocity.org/velocity-executor-v0-5-2/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 18 Oct 2025 07:59:42 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 17 Feb 2025 01:54:08 GMT\r\nvary: Accept-Encoding\r\netag: W/\"67b296c0-12a8\"\r\ncache-control: public, max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":4776,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (4741)","md5":"c6fddbb6be69793478de26fc245b2acf","sha1":"a136ebf5054fdc19729b3592005fe0fefec4bb4c","sha256":"9a1e0d38b691f1d22a92cff65ec0439b428170ac39a4493c7ecb06d5585f56a3","sha512":"8a766304caa9c888cfcab64eabab906905965e7fbcfc4f79c74ab122b892456abad215d0883df17023a16a18ba15a6a4b3d0fa5345cab7173d778f725b827c33","ssdeep":"96:vmK40IdSs6c7DE/3sc/YrEBnUBPwKxbqe/Ds91sBYt1Em4kCofWQRemN:OK40IdS/cHg3NZBnUJbqe/DeGYtu7kC6","tlshash":"b4a161c47482b870a2237457e0bb1485757eabb5743990c5a24dd8a02db3dcfe0a7a3e","first_seen":"2024-11-13T05:08:51.627546Z","last_seen":"2026-04-06T04:58:55.790664Z","times_seen":210372,"resource_available":true,"data":null}},"time_used":266,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":266,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"professionaltrafficmonitor.com/stats","fqdn":"professionaltrafficmonitor.com","domain":"professionaltrafficmonitor.com","tld":"com"},"ip":{"addr":"52.59.24.226","port":443,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://getvelocity.org/velocity-executor-v0-5-2/","date":"2025-10-18T07:59:43.426Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"protrafficinspector.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 01 Jul 2025 00:00:00 GMT","end":"Thu, 30 Jul 2026 23:59:59 GMT"},"fingerprint":{"sha1":"5D:D5:8D:EB:A4:50:13:0D:7C:33:71:82:B8:02:49:4F:D6:31:B6:E6","sha256":"49:03:4C:2C:1B:23:D8:D6:CB:AE:F0:54:61:99:C2:20:F4:FF:87:5E:0B:72:B1:6B:D8:AB:21:49:2D:F2:EC:4A"}}},"request":{"raw":"GET /stats HTTP/1.1\r\nHost: professionaltrafficmonitor.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://getvelocity.org\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://getvelocity.org/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 18 Oct 2025 07:59:43 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-length: 40\r\nserver: fasthttp\r\naccess-control-allow-origin: https://getvelocity.org\r\nvary: Origin\r\naccess-control-allow-credentials: true\r\nset-cookie: uid_id2=096ad184-1e70-4034-a2ae-c740f1e427e9:3:1; expires=Tue, 16 Oct 2035 07:59:43 GMT; secure; SameSite=None\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":40,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"ASCII text, with no line terminators","md5":"4fe55c0feab3f0eb245851ef3d07390d","sha1":"fbd98285ba595e5c738cfb014c4e3742aab1ef6f","sha256":"e19d691439a44d50c882a4ffb8a73ce18a36f618ce724f547984bd3e3c1a990c","sha512":"04aefcba61394b8e11b23e6656c3c3dded19e929978ff8c0be63e9c5dae24d8629f39fadc312dfbf39e7d2c599a9dcf6d305c32d00d9e0ddc6b79b6d8deb2e59","ssdeep":"","tlshash":"74900450311441c0c05c4f007401315dc4045434443c101c0503d7d41d0ff01505cd55","first_seen":"2025-10-18T08:00:10.720547Z","last_seen":"2025-10-18T08:00:10.720547Z","times_seen":1,"resource_available":false,"data":null}},"time_used":210,"timings":{"blocked":94,"dns":11,"connect":21,"send":0,"wait":22,"receive":0,"ssl":59},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"getvelocity.org/wp-content/uploads/2025/02/cropped-velocity-executor-logo-192x192.png","fqdn":"getvelocity.org","domain":"getvelocity.org","tld":"org"},"ip":{"addr":"161.35.143.48","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://getvelocity.org/velocity-executor-v0-5-2/","date":"2025-10-18T07:59:44.368Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"getvelocity.org","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Tue, 19 Aug 2025 09:34:44 GMT","end":"Mon, 17 Nov 2025 09:34:43 GMT"},"fingerprint":{"sha1":"7C:89:FF:97:D8:58:E5:1E:42:78:4C:C7:09:29:5D:00:D5:C2:08:19","sha256":"79:0D:D7:E1:DB:7B:45:5D:69:CD:03:2A:99:2C:47:7F:26:53:62:85:BC:05:15:A2:F5:3A:8A:0C:4B:B2:49:93"}}},"request":{"raw":"GET /wp-content/uploads/2025/02/cropped-velocity-executor-logo-192x192.png HTTP/1.1\r\nHost: getvelocity.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://getvelocity.org/velocity-executor-v0-5-2/\r\nCookie: _ga_HVY92KN3QE=GS2.1.s1760774383$o1$g0$t1760774383$j60$l0$h0; _ga=GA1.1.2111870290.1760774383; dom3ic8zudi28v8lr6fgphwffqoz0j6c=096ad184-1e70-4034-a2ae-c740f1e427e9%3A3%3A1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 18 Oct 2025 07:59:44 GMT\r\ncontent-type: image/png\r\ncontent-length: 27535\r\nlast-modified: Tue, 18 Feb 2025 08:18:20 GMT\r\netag: \"67b4424c-6b8f\"\r\ncache-control: public, max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27535,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 192 x 192, 8-bit/color RGBA, non-interlaced","md5":"669521d9f95d66cb9e75408669721362","sha1":"5c084d5793c33ac11d0441fcc76498cdae202d04","sha256":"949dc6c4206a2755a93cc3d5d044ad908b9f47587cce02505f44ce277c3cc467","sha512":"c82a655a2beb8234821c42ce0fe15c0a8735184b1b8b7d4d32366c9a78dc43762d6f4eb7ce29235278a467b599b67d8e81893c9434dfd23f9d42368946b52ab1","ssdeep":"384:7WWkfQM2s+WjtM4M/gor4dqILaMO1px+MoMVjAKosjsJJQQebkBnlB47K1FHk:iWkfPtRM4dMPvoKvjsjebkBliK3E","tlshash":"86c2f1910a82ce0686d7c800b5bf1b897849488b80ff95871cebdd5f4cb7773d665d22","first_seen":"2025-10-18T08:00:10.727683Z","last_seen":"2025-11-23T11:54:40.202644Z","times_seen":2,"resource_available":false,"data":null}},"time_used":103,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":102,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"accounts.google.com/InteractiveLogin?continue=https://www.google.com/favicon.ico\u0026hl=en\u0026passive=true\u0026service=mail\u0026uilel=3\u0026dsh=S2015982656:1760774384537136\u0026ifkv=AfYwgwVwx3Rpy-i6hugpar2A2-fOxSkOhVu2YytpQo1YdsEi_7gQIKbXvftF32bgLEjL8AuUQ8G1Mw","fqdn":"accounts.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"173.194.221.84","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://getvelocity.org/velocity-executor-v0-5-2/","date":"2025-10-18T07:59:44.562Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"accounts.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 22 Sep 2025 08:42:48 GMT","end":"Mon, 15 Dec 2025 08:42:47 GMT"},"fingerprint":{"sha1":"B8:19:CD:6B:C9:17:D6:19:47:43:3F:1E:4F:ED:FC:03:B7:CA:02:F6","sha256":"B2:36:8A:F6:ED:83:58:AB:24:95:A4:DA:77:3B:10:3C:CB:CB:99:B1:2A:25:1B:AB:51:A5:E7:2A:DD:6F:68:D6"}}},"request":{"raw":"GET /InteractiveLogin?continue=https://www.google.com/favicon.ico\u0026hl=en\u0026passive=true\u0026service=mail\u0026uilel=3\u0026dsh=S2015982656:1760774384537136\u0026ifkv=AfYwgwVwx3Rpy-i6hugpar2A2-fOxSkOhVu2YytpQo1YdsEi_7gQIKbXvftF32bgLEjL8AuUQ8G1Mw HTTP/1.1\r\nHost: accounts.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://getvelocity.org/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\ncontent-type: text/html; charset=UTF-8\r\nset-cookie: __Host-GAPS=1:OeOBmYVkesZcDoEtz3DIQeKWcFxADQ:SREfWiL3wpzAqTdG;Path=/;Expires=Mon, 18-Oct-2027 07:59:44 GMT;Secure;HttpOnly;Priority=HIGH\r\nx-frame-options: DENY\r\ncache-control: no-cache, no-store, max-age=0, must-revalidate\r\npragma: no-cache\r\nexpires: Mon, 01 Jan 1990 00:00:00 GMT\r\ndate: Sat, 18 Oct 2025 07:59:44 GMT\r\nlocation: https://accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fwww.google.com%2Ffavicon.ico\u0026dsh=S2015982656%3A1760774384537136\u0026hl=en\u0026ifkv=AfYwgwU63KK3-Cj_b2z1vR9rKpBXFlsWBdvVZqaAoFkhYCCjnWDj-Pwx43slQjSidaSvknQUotWqJg\u0026passive=true\u0026service=mail\u0026uilel=3\u0026flowName=GlifWebSignIn\u0026flowEntry=ServiceLogin\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncontent-security-policy: require-trusted-types-for 'script';report-uri /cspreport, script-src 'nonce-JZswp5RhBoewJKdlotrhMQ' 'unsafe-inline' 'unsafe-eval';object-src 'none';base-uri 'self';report-uri /cspreport\r\nreport-to: {\"group\":\"coop_gse_qebhlk\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/gse_qebhlk\"}]}\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"coop_gse_qebhlk\"\r\ncontent-encoding: gzip\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncontent-length: 419\r\nserver: GSE\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"OpenGSE","description":"OpenGSE is a test suite used for testing servlet compliance. It is deployed by using WAR files that are deployed on the server engine.","website":"https://code.google.com/p/opengse","common_platform_enumeration":"","icon":"Google.svg","categories":["Web servers"]},{"name":"Java","description":"Java is a class-based, object-oriented programming language that is designed to have as few implementation dependencies as possible.","website":"https://java.com","common_platform_enumeration":"cpe:2.3:a:oracle:jre:*:*:*:*:*:*:*:*","icon":"Java.svg","categories":["Programming languages"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-06T05:11:47.473796Z","times_seen":13406904,"resource_available":true,"data":null}},"time_used":49,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":49,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"getvelocity.org/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.4.1","fqdn":"getvelocity.org","domain":"getvelocity.org","tld":"org"},"ip":{"addr":"161.35.143.48","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://getvelocity.org/velocity-executor-v0-5-2/","date":"2025-10-18T07:59:42.834Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"getvelocity.org","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Tue, 19 Aug 2025 09:34:44 GMT","end":"Mon, 17 Nov 2025 09:34:43 GMT"},"fingerprint":{"sha1":"7C:89:FF:97:D8:58:E5:1E:42:78:4C:C7:09:29:5D:00:D5:C2:08:19","sha256":"79:0D:D7:E1:DB:7B:45:5D:69:CD:03:2A:99:2C:47:7F:26:53:62:85:BC:05:15:A2:F5:3A:8A:0C:4B:B2:49:93"}}},"request":{"raw":"GET /wp-includes/js/jquery/jquery-migrate.min.js?ver=3.4.1 HTTP/1.1\r\nHost: getvelocity.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://getvelocity.org/velocity-executor-v0-5-2/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 18 Oct 2025 07:59:42 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 17 Feb 2025 01:54:09 GMT\r\nvary: Accept-Encoding\r\netag: W/\"67b296c1-3509\"\r\ncache-control: public, max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":13577,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (13479)","md5":"9ffeb32e2d9efbf8f70caabded242267","sha1":"3ad0c10e501ac2a9bfa18f9cd7e700219b378738","sha256":"5274f11e6fb32ae0cf2dfb9f8043272865c397a7c4223b4cfa7d50ea52fbde89","sha512":"8d6be545508a1c38278b8ad780c3758ae48a25e4e12eee443375aa56031d9b356f8c90f22d4f251140fa3f65603af40523165e33cae2e2d62fc78ec106e3d731","ssdeep":"192:5rprDN+sag6ifKIUpQI99P1tLm9kdgyq1+J3aCJQ+h4MPLORq:5rprxaefKI0LP19m4q1WW+h4Mjp","tlshash":"9952c8adb56679724eb721b8f03bd24f71b205de560d8940d19cc4f6282dc6e812bf78","first_seen":"2023-05-09T19:21:05Z","last_seen":"2026-04-06T05:11:39.813655Z","times_seen":642369,"resource_available":true,"data":null}},"time_used":284,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":284,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"getvelocity.org/wp-includes/js/wp-emoji-release.min.js?ver=6.8.3","fqdn":"getvelocity.org","domain":"getvelocity.org","tld":"org"},"ip":{"addr":"161.35.143.48","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://getvelocity.org/velocity-executor-v0-5-2/","date":"2025-10-18T07:59:43.696Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"getvelocity.org","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Tue, 19 Aug 2025 09:34:44 GMT","end":"Mon, 17 Nov 2025 09:34:43 GMT"},"fingerprint":{"sha1":"7C:89:FF:97:D8:58:E5:1E:42:78:4C:C7:09:29:5D:00:D5:C2:08:19","sha256":"79:0D:D7:E1:DB:7B:45:5D:69:CD:03:2A:99:2C:47:7F:26:53:62:85:BC:05:15:A2:F5:3A:8A:0C:4B:B2:49:93"}}},"request":{"raw":"GET /wp-includes/js/wp-emoji-release.min.js?ver=6.8.3 HTTP/1.1\r\nHost: getvelocity.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://getvelocity.org/velocity-executor-v0-5-2/\r\nCookie: _ga_HVY92KN3QE=GS2.1.s1760774383$o1$g0$t1760774383$j60$l0$h0; _ga=GA1.1.2111870290.1760774383\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 18 Oct 2025 07:59:43 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Wed, 16 Jul 2025 03:04:28 GMT\r\nvary: Accept-Encoding\r\netag: W/\"687716bc-4b33\"\r\ncache-control: public, max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":19251,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (16277)","md5":"c4b50535f3e989a77d537d5486342d47","sha1":"2a1cc988298c022def9376bd54f608f44154071a","sha256":"db8ee8be2b2456c191fc0739f34f6ac675af8ba4782380cf233024498e0eb968","sha512":"be3b974332c4dadc30025aa911fde008442c9f4966ade014a7b8f05926688e30b9fdc32ebdbdd53fe32fc3f4d9c6ac2310b98dc6602843f2d8f00b1ded4e9b83","ssdeep":"384:WAevzW+ZTbXUH3o//bEPhXgA5H1efAJmpr:WF6UXUH3o//YpXgAGfACr","tlshash":"d782fa9bb33a4e8f343e3bd7cd968f4dc9da555321c0e078dbeeb68169a00568274c90","first_seen":"2025-05-09T23:23:48.206606Z","last_seen":"2026-04-06T05:06:18.003558Z","times_seen":196065,"resource_available":true,"data":null}},"time_used":101,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":101,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fwww.youtube.com%2Ffavicon.ico\u0026dsh=S-2079601044%3A1760774384569051\u0026hl=en\u0026ifkv=AfYwgwUo_SlLJxUsHFYOaM6j6Oh6_9TyfkhOqRyf8HqkVu2AtBb3BdrnUTJOCcVPvALWNu94WZFHPQ\u0026passive=true\u0026service=youtube\u0026uilel=3\u0026flowName=GlifWebSignIn\u0026flowEntry=ServiceLogin","fqdn":"accounts.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"173.194.221.84","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://getvelocity.org/velocity-executor-v0-5-2/","date":"2025-10-18T07:59:44.653Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"accounts.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 22 Sep 2025 08:42:48 GMT","end":"Mon, 15 Dec 2025 08:42:47 GMT"},"fingerprint":{"sha1":"B8:19:CD:6B:C9:17:D6:19:47:43:3F:1E:4F:ED:FC:03:B7:CA:02:F6","sha256":"B2:36:8A:F6:ED:83:58:AB:24:95:A4:DA:77:3B:10:3C:CB:CB:99:B1:2A:25:1B:AB:51:A5:E7:2A:DD:6F:68:D6"}}},"request":{"raw":"GET /v3/signin/identifier?continue=https%3A%2F%2Fwww.youtube.com%2Ffavicon.ico\u0026dsh=S-2079601044%3A1760774384569051\u0026hl=en\u0026ifkv=AfYwgwUo_SlLJxUsHFYOaM6j6Oh6_9TyfkhOqRyf8HqkVu2AtBb3BdrnUTJOCcVPvALWNu94WZFHPQ\u0026passive=true\u0026service=youtube\u0026uilel=3\u0026flowName=GlifWebSignIn\u0026flowEntry=ServiceLogin HTTP/1.1\r\nHost: accounts.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://getvelocity.org/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 403 Forbidden\r\ncontent-type: text/html; charset=utf-8\r\ncache-control: no-cache, no-store, max-age=0, must-revalidate\r\npragma: no-cache\r\nexpires: Mon, 01 Jan 1990 00:00:00 GMT\r\ndate: Sat, 18 Oct 2025 07:59:44 GMT\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\npermissions-policy: ch-ua-arch=*, ch-ua-bitness=*, ch-ua-full-version=*, ch-ua-full-version-list=*, ch-ua-model=*, ch-ua-wow64=*, ch-ua-form-factors=*, ch-ua-platform=*, ch-ua-platform-version=*\r\naccept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"AccountsSignInUi\"\r\ncontent-security-policy: script-src 'nonce-VE_hWKyCpnkUJmLcGKEZfw' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /v3/signin/_/AccountsSignInUi/cspreport;worker-src 'self', script-src 'unsafe-inline' 'unsafe-eval' blob: data: 'self' https://apis.google.com https://ssl.gstatic.com https://www.google.com https://www.googletagmanager.com https://www.gstatic.com https://www.google-analytics.com https://www.google.com/tools/feedback/ https://www.gstatic.com/feedback/js/ https://www.gstatic.com/inproduct_help/ https://www.gstatic.com/support/content/ https://www.gstatic.com/uservoice/feedback/client/web/live/ https://www.gstatic.com/uservoice/surveys/resources/prod/js/survey/ https://support.google.com/inapp/;report-uri /v3/signin/_/AccountsSignInUi/cspreport/allowlist, require-trusted-types-for 'script';report-uri /v3/signin/_/AccountsSignInUi/cspreport\r\ncontent-security-policy-report-only: script-src 'unsafe-inline' 'unsafe-eval' blob: data: https://ajax.googleapis.com/ajax/libs/jquery/3.6.4/jquery.min.js https://translate.google.com/translate_a/element.js https://www.google.com/recaptcha/api.js https://www.google.com/recaptcha/enterprise.js https://www.gstatic.com/recaptcha/ https://www.google.com/tools/feedback/chat_load.js https://www.google.com/tools/feedback/help_api.js https://www.google.com/tools/feedback/load.js https://www.google.com/tools/feedback/open.js https://www.google.com/tools/feedback/open_to_help_guide_lazy.js https://www.gstatic.com/feedback/js/ https://www.gstatic.com/feedback/js/help/prod/service/lazy.min.js https://www.gstatic.com/inproduct_help/api/main.min.js https://www.gstatic.com/inproduct_help/chatsupport/chatsupport_button_v2.js https://www.gstatic.com/inproduct_help/service/lazy.min.js https://www.gstatic.com/uservoice/feedback/client/web/live/ https://www.gstatic.com/uservoice/surveys/resources/prod/js/survey/ https://www.gstatic.com/_/mss/boq-one-google/_/ https://www.gstatic.com/og/_/js/ https://apis.google.com/js/api.js https://apis.google.com/js/client.js https://www.googletagmanager.com/gtag/js https://www.google-analytics.com/analytics.js https://www.googletagmanager.com/gtag/destination https://www.gstatic.com/_/mss/boq-identity/_/js/k=boq-identity.AccountsSignInUi.en.OhYC1t3tRm4.es5.O/ https://apis.google.com/_/scs/abc-static/_/js/ https://translate.googleapis.com/_/translate_http/_/js/ https://www.gstatic.com/recaptcha/releases/;report-uri /v3/signin/_/AccountsSignInUi/cspreport/fine-allowlist\r\nreport-to: {\"group\":\"AccountsSignInUi\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/AccountsSignInUi\"}]}\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"403","status_text":"Forbidden","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-06T05:11:47.473796Z","times_seen":13406904,"resource_available":true,"data":null}},"time_used":80,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":80,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"getvelocity.org/velocity-executor-v0-5-2/","fqdn":"getvelocity.org","domain":"getvelocity.org","tld":"org"},"ip":{"addr":"161.35.143.48","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-10-18T07:59:42.117Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"getvelocity.org","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Tue, 19 Aug 2025 09:34:44 GMT","end":"Mon, 17 Nov 2025 09:34:43 GMT"},"fingerprint":{"sha1":"7C:89:FF:97:D8:58:E5:1E:42:78:4C:C7:09:29:5D:00:D5:C2:08:19","sha256":"79:0D:D7:E1:DB:7B:45:5D:69:CD:03:2A:99:2C:47:7F:26:53:62:85:BC:05:15:A2:F5:3A:8A:0C:4B:B2:49:93"}}},"request":{"raw":"GET /velocity-executor-v0-5-2/ HTTP/1.1\r\nHost: getvelocity.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 18 Oct 2025 07:59:42 GMT\r\ncontent-type: text/html; charset=utf-8\r\ncache-provider: CLOUDWAYS-CACHE-DE\r\ncontent-encoding: gzip\r\nvary: Accept-Encoding\r\nlast-modified: Thu, 09 Oct 2025 03:24:15 GMT\r\ncache-control: max-age=0, s-maxage=2592000\r\nexpires: Sat, 18 Oct 2025 07:59:42 GMT\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"WordPress Block Editor","description":"Sites using the WordPress Block Editor, also known as Gutenberg.","website":"https://wordpress.org/gutenberg/","common_platform_enumeration":"","icon":"WordPress.svg","categories":["Page builders"]},{"name":"Yoast SEO:24.4","description":"Yoast SEO is a search engine optimisation plugin for WordPress and other platforms.","website":"https://yoast.com/wordpress/plugins/seo/","common_platform_enumeration":"","icon":"Yoast SEO.png","categories":["SEO","WordPress plugins"]},{"name":"jQuery Migrate:3.4.1","description":"Query Migrate is a javascript library that allows you to preserve the compatibility of your jQuery code developed for versions of jQuery older than 1.9.","website":"https://github.com/jquery/jquery-migrate","common_platform_enumeration":"","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Cloudways","description":"Cloudways offers managed cloud-hosting services for WordPress sites on a cloud server where multiple copies of your content will be replicated throughout your chosen data center.","website":"https://www.cloudways.com","common_platform_enumeration":"","icon":"Cloudways.png","categories":["PaaS"]},{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"WordPress:6.8.3","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"Google Analytics","description":"Google Analytics is a free web analytics service that tracks and reports website traffic.","website":"https://google.com/analytics","common_platform_enumeration":"","icon":"Google Analytics.svg","categories":["Analytics"]},{"name":"GeneratePress GP Premium:2.5.0","description":"GP Premium is a premium add-on plugin for the GeneratePress WordPress theme.","website":"https://docs.generatepress.com/article/installing-gp-premium/","common_platform_enumeration":"","icon":"generatepress.png","categories":["WordPress plugins"]},{"name":"GeneratePress","description":"GeneratePress is a lightweight WordPress theme that focuses on speed, stability, and accessibility","website":"https://generatepress.com","common_platform_enumeration":"","icon":"generatepress.png","categories":["WordPress themes"]},{"name":"Contact Form 7:6.0.3","description":"Contact Form 7 is an WordPress plugin which can manage multiple contact forms. The form supports Ajax-powered submitting, CAPTCHA, Akismet spam filtering.","website":"https://contactform7.com","common_platform_enumeration":"","icon":"Contact Form 7.png","categories":["WordPress plugins","Form builders"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]}],"data":{"size":70745,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (9509), with CRLF, LF line terminators","md5":"774bf94376fbca8bece36ec89f7bbac8","sha1":"b41ef9ae52ca66e700e1b6b707656420fcd35a69","sha256":"5398deec8dc8994a79c8d86debd54f1429a41317472364090c4c590fc8e5cfcd","sha512":"86434d5a13fb9d1b3983e5a17a0f8a4acf5054ce0eb9be66b0fb60ca85c5d7725bd9331cf4ba2c17d2fd9e67ef3066b8ac277e2d5d47c4f70dc40385f30737d7","ssdeep":"1536:neZhapGJ0gw1QQPZemf+hkxc6P/YlcPtPCxj4c:neO8J0gw1r2hkxc6P/acPtPIj4c","tlshash":"2d633bb392a8053a136793aecb46f609b1d7c806cb4157e4b5fd91188bd9ff011b368d","first_seen":"2025-10-18T08:00:10.740898Z","last_seen":"2025-10-18T08:00:10.740898Z","times_seen":1,"resource_available":false,"data":null}},"time_used":730,"timings":{"blocked":267,"dns":61,"connect":99,"send":0,"wait":196,"receive":0,"ssl":104},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"getvelocity.org/wp-content/plugins/gp-premium/blog/functions/css/featured-images.min.css?ver=2.5.0","fqdn":"getvelocity.org","domain":"getvelocity.org","tld":"org"},"ip":{"addr":"161.35.143.48","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://getvelocity.org/velocity-executor-v0-5-2/","date":"2025-10-18T07:59:42.821Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"getvelocity.org","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Tue, 19 Aug 2025 09:34:44 GMT","end":"Mon, 17 Nov 2025 09:34:43 GMT"},"fingerprint":{"sha1":"7C:89:FF:97:D8:58:E5:1E:42:78:4C:C7:09:29:5D:00:D5:C2:08:19","sha256":"79:0D:D7:E1:DB:7B:45:5D:69:CD:03:2A:99:2C:47:7F:26:53:62:85:BC:05:15:A2:F5:3A:8A:0C:4B:B2:49:93"}}},"request":{"raw":"GET /wp-content/plugins/gp-premium/blog/functions/css/featured-images.min.css?ver=2.5.0 HTTP/1.1\r\nHost: getvelocity.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://getvelocity.org/velocity-executor-v0-5-2/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 18 Oct 2025 07:59:42 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 18 Feb 2025 07:06:50 GMT\r\nvary: Accept-Encoding\r\netag: W/\"67b4318a-cdd\"\r\ncache-control: public, max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3293,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (3293), with no line terminators","md5":"07e59a4db7995b6ce66bfb90fc7fbd22","sha1":"6d134cea98609f38cea5011d9f16e2199a5b5730","sha256":"3cdc8768b77b752d62d488cda4d7917a5df5d334da0f7fa7c9f86aeae573923b","sha512":"46af6c4cc817db04827aa8f96de7710fd00922e8ff901e9296282f161f3335199e71a9ffc92d64283c667dc899434b8aa2565ddd6d602ce2450661b9b551c9ba","ssdeep":"","tlshash":"c5618e8cc5876eeb77a7036fb49b50147ed76cd2939eebc6600f901683c29a386741a1","first_seen":"2023-04-11T00:48:14Z","last_seen":"2026-04-05T22:11:29.085572Z","times_seen":1912,"resource_available":false,"data":null}},"time_used":298,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":298,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"clonecroak.com/998c325fdf1538cfd6230e572005f2c1/invoke.js","fqdn":"clonecroak.com","domain":"clonecroak.com","tld":"com"},"ip":{"addr":"172.240.108.76","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://getvelocity.org/velocity-executor-v0-5-2/","date":"2025-10-18T07:59:42.840Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"clonecroak.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 06 Sep 2025 21:04:40 GMT","end":"Fri, 05 Dec 2025 21:04:39 GMT"},"fingerprint":{"sha1":"79:E7:D0:DC:29:8D:D5:DF:09:84:88:92:9F:BD:E5:02:A3:47:DF:5E","sha256":"5C:12:26:4E:87:FB:C6:AC:DF:BE:38:A7:B9:EE:52:BF:D4:BB:33:A3:DA:A2:8E:5B:0E:F9:0B:88:D6:A2:E5:56"}}},"request":{"raw":"GET /998c325fdf1538cfd6230e572005f2c1/invoke.js HTTP/1.1\r\nHost: clonecroak.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://getvelocity.org/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.21.6\r\nDate: Sat, 18 Oct 2025 07:59:43 GMT\r\nContent-Type: application/javascript\r\nContent-Length: 18446\r\nConnection: keep-alive\r\ncontent-encoding: gzip\r\np3p: CP=\"IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT\"\r\naccess-control-allow-origin: *\r\naccept-ch: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA\r\nx-envoy-upstream-service-time: 1\r\nHost: clonecroak.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: c91d95b1a18486705472e2ebfdf50f9f\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":46399,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (46399), with no line terminators","md5":"7dc4e40dd7e3da893bac079db1cce379","sha1":"9f9e076df5a08db603a0348f31e1f3d277e29cef","sha256":"a4bfe5c7768a0d21fcb8ef222c4ec6d14453f0d130e60ba43882c50e8adbe0b1","sha512":"8d72a7af78ce0ae630eb13eacf78950e42297e2b5eb9a69269d720b1e3a9f2dbfdabdda617be6a84599453f6b81cb873807562f5f958d3f36a04ec131dc8dd0a","ssdeep":"768:H5/C6gfHBHuf0gCjEqeJMtQIHKmt2FYjS2Tm:HI6gfhHuf0geEqeMQIHKVe7m","tlshash":"0d2308883fa0f66b07327437126fd11ffa6acc019888cc5cca46d5e52f68b19e536b49","first_seen":"2025-10-18T08:00:10.759861Z","last_seen":"2025-10-18T08:00:10.759861Z","times_seen":1,"resource_available":true,"data":null}},"time_used":835,"timings":{"blocked":304,"dns":52,"connect":93,"send":0,"wait":99,"receive":94,"ssl":191},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-18","alert":"Sinkholed","trigger":"clonecroak.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-18","alert":"Sinkholed","trigger":"clonecroak.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-10-18","alert":"Sinkholed","trigger":"clonecroak.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"getvelocity.org/wp-content/plugins/sticky-ad-lightweight/images/close.png","fqdn":"getvelocity.org","domain":"getvelocity.org","tld":"org"},"ip":{"addr":"161.35.143.48","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://getvelocity.org/velocity-executor-v0-5-2/","date":"2025-10-18T07:59:42.841Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"getvelocity.org","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Tue, 19 Aug 2025 09:34:44 GMT","end":"Mon, 17 Nov 2025 09:34:43 GMT"},"fingerprint":{"sha1":"7C:89:FF:97:D8:58:E5:1E:42:78:4C:C7:09:29:5D:00:D5:C2:08:19","sha256":"79:0D:D7:E1:DB:7B:45:5D:69:CD:03:2A:99:2C:47:7F:26:53:62:85:BC:05:15:A2:F5:3A:8A:0C:4B:B2:49:93"}}},"request":{"raw":"GET /wp-content/plugins/sticky-ad-lightweight/images/close.png HTTP/1.1\r\nHost: getvelocity.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://getvelocity.org/velocity-executor-v0-5-2/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 18 Oct 2025 07:59:42 GMT\r\ncontent-type: image/png\r\ncontent-length: 718\r\nlast-modified: Fri, 21 Feb 2025 14:04:55 GMT\r\netag: \"67b88807-2ce\"\r\ncache-control: public, max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":718,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 24 x 24, 8-bit/color RGBA, non-interlaced","md5":"86a65311d3a85713a94e430596145106","sha1":"e5d90fb9f6c749809e69d7c5168ef2ef860425bf","sha256":"d50a82cbf1b41068353ddf2589695da59293e5e0d0081e432acc5a83df3428b9","sha512":"ebca99d04568e9fdf42ba4ccb47474f9a1e7a0411423015de56033b5d10acee0053b493dc27e5451007344569712eea88517b5d9fb6da3618cb7d777dd7e2cae","ssdeep":"","tlshash":"cd0199d35411589fd40b21f51e56101cb67e5078b32d2c94b71dd95533985fd88006f5","first_seen":"2023-05-07T18:57:21Z","last_seen":"2025-12-27T00:21:20.465454Z","times_seen":149,"resource_available":false,"data":null}},"time_used":373,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":275,"receive":98,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rashcolonizeexpand.com/watch.1279047458136.js?key=998c325fdf1538cfd6230e572005f2c1\u0026kw=%5B%22velocity%22%2C%22executor%22%2C%22v0%22%2C%225%22%2C%222%22%2C%22-%22%5D\u0026refer=https%3A%2F%2Fgetvelocity.org%2Fvelocity-executor-v0-5-2%2F\u0026tz=0\u0026dev=e\u0026res=14.3095\u0026rb=\u0026uuid=096ad184-1e70-4034-a2ae-c740f1e427e9%3A3%3A1","fqdn":"rashcolonizeexpand.com","domain":"rashcolonizeexpand.com","tld":"com"},"ip":{"addr":"172.240.127.234","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://getvelocity.org/velocity-executor-v0-5-2/","date":"2025-10-18T07:59:43.741Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"rashcolonizeexpand.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 27 Aug 2025 21:51:30 GMT","end":"Tue, 25 Nov 2025 21:51:29 GMT"},"fingerprint":{"sha1":"1E:45:CB:7E:7C:E7:1E:08:73:0A:D3:08:B4:74:21:2F:CA:B6:15:9B","sha256":"54:F3:5A:C9:08:4C:76:26:F7:0E:BF:E0:3F:5B:38:DD:53:CF:95:81:0B:FC:C7:F9:6A:3E:9C:1A:6E:33:92:E0"}}},"request":{"raw":"GET /watch.1279047458136.js?key=998c325fdf1538cfd6230e572005f2c1\u0026kw=%5B%22velocity%22%2C%22executor%22%2C%22v0%22%2C%225%22%2C%222%22%2C%22-%22%5D\u0026refer=https%3A%2F%2Fgetvelocity.org%2Fvelocity-executor-v0-5-2%2F\u0026tz=0\u0026dev=e\u0026res=14.3095\u0026rb=\u0026uuid=096ad184-1e70-4034-a2ae-c740f1e427e9%3A3%3A1 HTTP/1.1\r\nHost: rashcolonizeexpand.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://getvelocity.org\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://getvelocity.org/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 307 Temporary Redirect\r\nServer: nginx/1.21.6\r\nDate: Sat, 18 Oct 2025 07:59:44 GMT\r\nContent-Type: text/html\r\nContent-Length: 0\r\nConnection: keep-alive\r\np3p: CP=\"IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT\"\r\naccept-ch: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA\r\naccess-control-allow-origin: https://getvelocity.org\r\naccess-control-allow-credentials: true\r\nlocation: https://rashcolonizeexpand.com/watch.1279047458136.js?dev=e\u0026key=998c325fdf1538cfd6230e572005f2c1\u0026kw=%5B%22velocity%22%2C%22executor%22%2C%22v0%22%2C%225%22%2C%222%22%2C%22-%22%5D\u0026pst=1760774444\u0026rb=\u0026refer=https%3A%2F%2Fgetvelocity.org%2Fvelocity-executor-v0-5-2%2F\u0026res=14.3095\u0026rmtc=t\u0026shu=7267cccdba8a166e1900d58c0f289110b7cba1e1daf101b8e5a27cdafcd88f991ba071a9a9881521eb4ccc1bdedf65268e21b5433242b6957cf924d8872cebd89b0a6ddd0bba7ed874a3d198c06805069071a031c9b7d922d418a7\u0026tz=0\u0026uuid=096ad184-1e70-4034-a2ae-c740f1e427e9%3A3%3A1\r\nset-cookie: ain=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.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.AeIGOPorg_sZBlmbIkyEoxsniynLf_G2a7-CHOvP_WY; expires=Sat, 18 Oct 2025 08:00:44 GMT; path=/; secure; SameSite=None\r\nx-envoy-upstream-service-time: 2\r\nHost: rashcolonizeexpand.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: afd0788f8dfdef726333aa183b49cdb4\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"307","status_text":"Temporary Redirect","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]}],"data":{"size":4572,"size_decoded":0,"mime_type":"text/html","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-06T05:11:47.473796Z","times_seen":13406904,"resource_available":true,"data":null}},"time_used":663,"timings":{"blocked":282,"dns":1,"connect":92,"send":0,"wait":96,"receive":0,"ssl":188},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-18","alert":"Sinkholed","trigger":"rashcolonizeexpand.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-18","alert":"Sinkholed","trigger":"rashcolonizeexpand.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-10-18","alert":"Sinkholed","trigger":"rashcolonizeexpand.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"accounts.google.com/ServiceLogin?passive=true\u0026continue=https%3A%2F%2Fwww.youtube.com%2Ffavicon.ico\u0026uilel=3\u0026hl=en\u0026service=youtube","fqdn":"accounts.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"173.194.221.84","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://getvelocity.org/velocity-executor-v0-5-2/","date":"2025-10-18T07:59:44.362Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"accounts.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 22 Sep 2025 08:42:48 GMT","end":"Mon, 15 Dec 2025 08:42:47 GMT"},"fingerprint":{"sha1":"B8:19:CD:6B:C9:17:D6:19:47:43:3F:1E:4F:ED:FC:03:B7:CA:02:F6","sha256":"B2:36:8A:F6:ED:83:58:AB:24:95:A4:DA:77:3B:10:3C:CB:CB:99:B1:2A:25:1B:AB:51:A5:E7:2A:DD:6F:68:D6"}}},"request":{"raw":"GET /ServiceLogin?passive=true\u0026continue=https%3A%2F%2Fwww.youtube.com%2Ffavicon.ico\u0026uilel=3\u0026hl=en\u0026service=youtube HTTP/1.1\r\nHost: accounts.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://getvelocity.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\ncontent-type: application/binary\r\nset-cookie: __Host-GAPS=1:lzCXT2tk2U5u6iCqLhBQVY0_zKsnfA:1tU4Pxd_3siM26LI; Expires=Mon, 18-Oct-2027 07:59:44 GMT; Path=/; Secure; HttpOnly; Priority=HIGH\r\ncache-control: no-cache, no-store, max-age=0, must-revalidate\r\npragma: no-cache\r\nexpires: Mon, 01 Jan 1990 00:00:00 GMT\r\ndate: Sat, 18 Oct 2025 07:59:44 GMT\r\nlocation: https://accounts.google.com/InteractiveLogin?continue=https://www.youtube.com/favicon.ico\u0026hl=en\u0026passive=true\u0026service=youtube\u0026uilel=3\u0026dsh=S-2079601044:1760774384569051\u0026ifkv=AfYwgwVaBnCUG7wiLoSoOVG7PBDFSq5LyZCwr5huthZPI3K6WuR-pR6PjfkHFzqMUkv-NFwu9BIhgA\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\naccept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version\r\ncross-origin-opener-policy: unsafe-none\r\ncontent-security-policy: script-src 'nonce-J_j3fmTe74XyTQf2NamaoA' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/AccountsSigninPassiveLoginHttp/cspreport;worker-src 'self', script-src 'unsafe-inline' 'unsafe-eval' blob: data: 'self' https://apis.google.com https://ssl.gstatic.com https://www.google.com https://www.googletagmanager.com https://www.gstatic.com https://www.google-analytics.com;report-uri /_/AccountsSigninPassiveLoginHttp/cspreport/allowlist, require-trusted-types-for 'script';report-uri /_/AccountsSigninPassiveLoginHttp/cspreport\r\ncross-origin-resource-policy: cross-origin\r\npermissions-policy: ch-ua-arch=*, ch-ua-bitness=*, ch-ua-full-version=*, ch-ua-full-version-list=*, ch-ua-model=*, ch-ua-wow64=*, ch-ua-form-factors=*, ch-ua-platform=*, ch-ua-platform-version=*\r\nserver: ESF\r\ncontent-length: 0\r\nx-xss-protection: 0\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-06T05:11:47.473796Z","times_seen":13406904,"resource_available":true,"data":null}},"time_used":406,"timings":{"blocked":181,"dns":0,"connect":16,"send":0,"wait":39,"receive":0,"ssl":167},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.storageimagedisplay.com/cti/0e/3d/23/0e3d23863eff2e8bf535579f702fe030/1756656797.jpg","fqdn":"cdn.storageimagedisplay.com","domain":"storageimagedisplay.com","tld":"com"},"ip":{"addr":"45.133.44.1","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://getvelocity.org/velocity-executor-v0-5-2/","date":"2025-10-18T07:59:44.382Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.storageimagedisplay.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 08 Sep 2025 02:32:56 GMT","end":"Sun, 07 Dec 2025 02:32:55 GMT"},"fingerprint":{"sha1":"F2:37:25:60:C4:34:06:EB:37:74:9F:D1:9C:FE:63:47:1F:30:4C:58","sha256":"AA:72:28:9B:C9:B7:77:AB:D7:89:4F:AC:CB:86:72:85:1D:1B:E5:15:4D:07:7B:D9:77:0F:D5:BE:92:06:8D:71"}}},"request":{"raw":"GET /cti/0e/3d/23/0e3d23863eff2e8bf535579f702fe030/1756656797.jpg HTTP/1.1\r\nHost: cdn.storageimagedisplay.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 18 Oct 2025 07:59:44 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 51444\r\nserver: nginx/1.21.6\r\nlast-modified: Sun, 31 Aug 2025 16:13:17 GMT\r\netag: \"68b4749d-c8f4\"\r\nexpires: Mon, 20 Oct 2025 07:59:44 GMT\r\ncache-control: max-age=172800\r\nx-cdn-host-id: AH0543\r\nx-proxy-cache: HIT\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":51444,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop 26.3 (Macintosh), datetime=2025:08:29 16:20:35], progressive, precision 8, 728x90, components 3","md5":"e1777a2961908b35f79a77c5ab64bb88","sha1":"7115f98ff2a370bd0de059359701bf680c2fd69f","sha256":"7d07fa5d13965523a25f23c9e89fc1896c55e785998ff0eb814763ff3f3f1cc8","sha512":"f5308c63b2c0a27b1c3950d479124105c4f2ea8e7fb927f973aaf673a35e1ac3de58805a51db21b49a49b4c8b3867e2ee526d8d3b98c9fa50ac28afaec9a1fa9","ssdeep":"768:tYiS/vYyMgxzdJSqK1tEkSo0qQCBUPAkpfVBYocvnJ9zAAtm2:evRJyHv0TTYWfVBYjB9zAh2","tlshash":"7333e01a7a908fb2f8c196782065f383c3a29e94b7a32751b8dc771177b37955d4f202","first_seen":"2025-09-02T20:22:38.328959Z","last_seen":"2026-04-06T05:05:16.255903Z","times_seen":655,"resource_available":false,"data":null}},"time_used":255,"timings":{"blocked":97,"dns":46,"connect":23,"send":0,"wait":20,"receive":40,"ssl":26},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"getvelocity.org/wp-content/plugins/contact-form-7/includes/css/styles.css?ver=6.0.3","fqdn":"getvelocity.org","domain":"getvelocity.org","tld":"org"},"ip":{"addr":"161.35.143.48","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://getvelocity.org/velocity-executor-v0-5-2/","date":"2025-10-18T07:59:42.805Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"getvelocity.org","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Tue, 19 Aug 2025 09:34:44 GMT","end":"Mon, 17 Nov 2025 09:34:43 GMT"},"fingerprint":{"sha1":"7C:89:FF:97:D8:58:E5:1E:42:78:4C:C7:09:29:5D:00:D5:C2:08:19","sha256":"79:0D:D7:E1:DB:7B:45:5D:69:CD:03:2A:99:2C:47:7F:26:53:62:85:BC:05:15:A2:F5:3A:8A:0C:4B:B2:49:93"}}},"request":{"raw":"GET /wp-content/plugins/contact-form-7/includes/css/styles.css?ver=6.0.3 HTTP/1.1\r\nHost: getvelocity.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://getvelocity.org/velocity-executor-v0-5-2/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 18 Oct 2025 07:59:42 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 17 Feb 2025 02:05:53 GMT\r\nvary: Accept-Encoding\r\netag: W/\"67b29981-b4e\"\r\ncache-control: public, max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2894,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"3fd2afa98866679439097f4ab102fe0a","sha1":"dbc9c4139e49d0d9fb41b7191aad1a2db6c555fd","sha256":"ccd31ffa708d025833f954b3e0560cedd58df9a0d2706b2ccee5f501c5b2467b","sha512":"82811ef42abd80cbebd4a74d35475fc3871478fc25a486b08bb7e04921b7824db56c56b2191e9ab56a421552b483a2e64f966396711e5f248afae9d1ded22cb2","ssdeep":"","tlshash":"12511164660028504bff92d77ea9db047b6e7481ce1faf97b0c21a3c5b786851223e5e","first_seen":"2023-11-16T07:59:28Z","last_seen":"2026-04-06T05:16:18.572173Z","times_seen":72628,"resource_available":false,"data":null}},"time_used":107,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":107,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"getvelocity.org/wp-content/plugins/social-icons-widget-by-wpzoom/assets/font/academicons.woff2?v=1.9.2","fqdn":"getvelocity.org","domain":"getvelocity.org","tld":"org"},"ip":{"addr":"161.35.143.48","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://getvelocity.org/velocity-executor-v0-5-2/","date":"2025-10-18T07:59:42.827Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"getvelocity.org","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Tue, 19 Aug 2025 09:34:44 GMT","end":"Mon, 17 Nov 2025 09:34:43 GMT"},"fingerprint":{"sha1":"7C:89:FF:97:D8:58:E5:1E:42:78:4C:C7:09:29:5D:00:D5:C2:08:19","sha256":"79:0D:D7:E1:DB:7B:45:5D:69:CD:03:2A:99:2C:47:7F:26:53:62:85:BC:05:15:A2:F5:3A:8A:0C:4B:B2:49:93"}}},"request":{"raw":"GET /wp-content/plugins/social-icons-widget-by-wpzoom/assets/font/academicons.woff2?v=1.9.2 HTTP/1.1\r\nHost: getvelocity.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://getvelocity.org/velocity-executor-v0-5-2/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 18 Oct 2025 07:59:42 GMT\r\ncontent-type: application/font-woff2\r\ncontent-length: 28500\r\nlast-modified: Mon, 17 Feb 2025 02:07:48 GMT\r\netag: \"67b299f4-6f54\"\r\ncache-control: public, max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":28500,"size_decoded":0,"mime_type":"application/font-woff2","magic":"Web Open Font Format (Version 2), TrueType, length 28500, version 1.0","md5":"8d327694df3ebcbf19980f6553fe85a4","sha1":"ebee1e2e1c18a7df8be0cae7981770823e4db97f","sha256":"476cdac0e6b6f629fe3ef9716991455b515d87dda1651c3be37df4f3d3bc9a36","sha512":"1fa16800389256b0a70a4f519fedcc658ece5971f07c363bcb77b7267b1e9c3991b7f74be16db6223ad3b442029e4014e46ea7c87719c25f795204d2967056cc","ssdeep":"384:ETcHVw6m84mwEEfcatfM5Z1ExHETW+UkP5CopPKlm0N1B8zZUjj+QdEFXAyZf+Hq:WgONKatMvPxvAhNQzgSkEFQyB+HeBCw","tlshash":"9dd2e1a88ad991b8a78c823b5ce709c099390d0dfcd7b6537b01fdb41c785ca7b48262","first_seen":"2023-04-08T15:06:10Z","last_seen":"2026-04-05T23:45:12.441765Z","times_seen":1783,"resource_available":false,"data":null}},"time_used":385,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":293,"receive":92,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"getvelocity.org/wp-content/plugins/contact-form-7/includes/js/index.js?ver=6.0.3","fqdn":"getvelocity.org","domain":"getvelocity.org","tld":"org"},"ip":{"addr":"161.35.143.48","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://getvelocity.org/velocity-executor-v0-5-2/","date":"2025-10-18T07:59:42.848Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"getvelocity.org","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Tue, 19 Aug 2025 09:34:44 GMT","end":"Mon, 17 Nov 2025 09:34:43 GMT"},"fingerprint":{"sha1":"7C:89:FF:97:D8:58:E5:1E:42:78:4C:C7:09:29:5D:00:D5:C2:08:19","sha256":"79:0D:D7:E1:DB:7B:45:5D:69:CD:03:2A:99:2C:47:7F:26:53:62:85:BC:05:15:A2:F5:3A:8A:0C:4B:B2:49:93"}}},"request":{"raw":"GET /wp-content/plugins/contact-form-7/includes/js/index.js?ver=6.0.3 HTTP/1.1\r\nHost: getvelocity.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://getvelocity.org/velocity-executor-v0-5-2/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 18 Oct 2025 07:59:42 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 17 Feb 2025 02:05:53 GMT\r\nvary: Accept-Encoding\r\netag: W/\"67b29981-348c\"\r\ncache-control: public, max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":13452,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (13452), with no line terminators","md5":"2912c657d0592cc532dff73d0d2ce7bb","sha1":"70a679e2769825236f83bcc56965a9d0bd86c4e9","sha256":"ddcce687729cb358abf9d0d8e1217a097859be2b0d18c23d7c851b38c87bc9c0","sha512":"9646384e65d09bf00cb20365f43e06dd41e7428e3fc6cc2737f4e69b50f006ebb25bd24a566fcd9faec2f0dcb24404e25d57ba7b8c6aba61797a29c515ad5144","ssdeep":"384:IsIRHeFJ1yQ7QdfnJgeYh7MXlsNqrBp1pgQpwOjNtqohIQ/5Z:IsIR+L1yQ7QdpYh7M1iqrBp1pgQpwOjn","tlshash":"0a52d7a1472955321eb506e391e513c1769075aef44b8aa1a898dc2e18bdcc328f3ff7","first_seen":"2024-11-04T17:50:00.022634Z","last_seen":"2026-04-06T05:02:14.404212Z","times_seen":156076,"resource_available":true,"data":null}},"time_used":262,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":262,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"yweakelandord.com/aW1BUk1GUiIhcDheAwQuEwV2ABoNKgAaFy83FCEHCl0HIRwoLGcmJA1QcGB8UVRyamsZBCVvfE8eNTM5HB58Y2sAAyc9cE8bfGNjWllvYXtHW2cncFhLNSIsDlBwdD0dGS1vfF5bcWV6XV55YXxfWw","fqdn":"yweakelandord.com","domain":"yweakelandord.com","tld":"com"},"ip":{"addr":"104.21.47.91","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://getvelocity.org/velocity-executor-v0-5-2/","date":"2025-10-18T07:59:43.173Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"yweakelandord.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 07 Oct 2025 08:53:24 GMT","end":"Mon, 05 Jan 2026 09:50:59 GMT"},"fingerprint":{"sha1":"E9:A5:59:FC:88:D4:57:19:6D:06:55:B2:AA:BA:2E:D4:5D:C1:D3:AC","sha256":"15:31:93:46:6D:B1:7F:8F:F2:25:E4:E9:A1:53:3E:FF:81:24:7E:B2:25:C0:07:FD:D9:48:B3:26:C3:17:1E:DB"}}},"request":{"raw":"GET /aW1BUk1GUiIhcDheAwQuEwV2ABoNKgAaFy83FCEHCl0HIRwoLGcmJA1QcGB8UVRyamsZBCVvfE8eNTM5HB58Y2sAAyc9cE8bfGNjWllvYXtHW2cncFhLNSIsDlBwdD0dGS1vfF5bcWV6XV55YXxfWw HTTP/1.1\r\nHost: yweakelandord.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://getvelocity.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 204 No Content\r\ndate: Sat, 18 Oct 2025 07:59:43 GMT\r\naccess-control-allow-origin: *\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=9HzwbmS42aTbWeu85VPBxwYZ4zUQqptn9RiVu0ctfsDA3kscPFJtcKmaaxCB14sK%2FcWvJBRSe3k2hWpbHGD%2F4MNlpLsKZB9UIbtrcBuDcw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\ncf-ray: 99067f774fc156c9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"No Content","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-06T05:11:47.473796Z","times_seen":13406904,"resource_available":true,"data":null}},"time_used":266,"timings":{"blocked":72,"dns":6,"connect":1,"send":0,"wait":119,"receive":0,"ssl":64},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.storageimagedisplay.com/cti/81/38/73/81387328b92d5376d3bf6fc70d0962f4/1756656875.jpg","fqdn":"cdn.storageimagedisplay.com","domain":"storageimagedisplay.com","tld":"com"},"ip":{"addr":"45.133.44.1","port":443,"asn":39572,"as":"DataWeb Global Group B.V.","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://getvelocity.org/velocity-executor-v0-5-2/","date":"2025-10-18T07:59:44.405Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cdn.storageimagedisplay.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 08 Sep 2025 02:32:56 GMT","end":"Sun, 07 Dec 2025 02:32:55 GMT"},"fingerprint":{"sha1":"F2:37:25:60:C4:34:06:EB:37:74:9F:D1:9C:FE:63:47:1F:30:4C:58","sha256":"AA:72:28:9B:C9:B7:77:AB:D7:89:4F:AC:CB:86:72:85:1D:1B:E5:15:4D:07:7B:D9:77:0F:D5:BE:92:06:8D:71"}}},"request":{"raw":"GET /cti/81/38/73/81387328b92d5376d3bf6fc70d0962f4/1756656875.jpg HTTP/1.1\r\nHost: cdn.storageimagedisplay.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 18 Oct 2025 07:59:44 GMT\r\ncontent-type: image/jpeg\r\ncontent-length: 48533\r\nserver: nginx/1.21.6\r\nlast-modified: Sun, 31 Aug 2025 16:14:36 GMT\r\netag: \"68b474ec-bd95\"\r\nexpires: Mon, 20 Oct 2025 07:59:44 GMT\r\ncache-control: max-age=172800\r\nx-cdn-host-id: AH0543\r\nx-proxy-cache: HIT\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":48533,"size_decoded":0,"mime_type":"image/jpeg","magic":"JPEG image data, Exif standard: [TIFF image data, big-endian, direntries=7, orientation=upper-left, xresolution=98, yresolution=106, resolutionunit=2, software=Adobe Photoshop 26.3 (Macintosh), datetime=2025:08:30 12:09:12], progressive, precision 8, 728x90, components 3","md5":"b655968dfbf788c0e508a561a6aa8ad1","sha1":"ee1fd3180c9ba834b04194e37159eb6ac40f0b4a","sha256":"9eb371b5ed2f8d3b721f179e0c2ce793dd445d329f5fa5f9ba9cba61c25a23ec","sha512":"c60e8b3f81379dce1cef22d6b38786c93c703ea022679bd0178382c6ca99fbd83ea2ece9b12bbe7700ef3fd3c102c59dd5f42646a3062b17e3e96bb8e697ddfd","ssdeep":"768:dJx3MijJx3BkpYyE6XdAAjCMAdUVzpnNhCLs2LjenuRPnSdkMNM5gTTOoy:PBlBBkpIAp1pfCLffenuRP4kcMiTry","tlshash":"8e23d01d7b66ad02f8c0c77548f1e3fb6312b558fba366067ddc64813b7a282981c1ca","first_seen":"2025-09-02T18:27:26.497192Z","last_seen":"2026-04-04T00:40:49.58216Z","times_seen":629,"resource_available":false,"data":null}},"time_used":223,"timings":{"blocked":74,"dns":20,"connect":20,"send":0,"wait":64,"receive":12,"ssl":29},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"getvelocity.org/wp-content/plugins/social-icons-widget-by-wpzoom/assets/css/genericons.css?ver=1739758068","fqdn":"getvelocity.org","domain":"getvelocity.org","tld":"org"},"ip":{"addr":"161.35.143.48","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://getvelocity.org/velocity-executor-v0-5-2/","date":"2025-10-18T07:59:42.812Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"getvelocity.org","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Tue, 19 Aug 2025 09:34:44 GMT","end":"Mon, 17 Nov 2025 09:34:43 GMT"},"fingerprint":{"sha1":"7C:89:FF:97:D8:58:E5:1E:42:78:4C:C7:09:29:5D:00:D5:C2:08:19","sha256":"79:0D:D7:E1:DB:7B:45:5D:69:CD:03:2A:99:2C:47:7F:26:53:62:85:BC:05:15:A2:F5:3A:8A:0C:4B:B2:49:93"}}},"request":{"raw":"GET /wp-content/plugins/social-icons-widget-by-wpzoom/assets/css/genericons.css?ver=1739758068 HTTP/1.1\r\nHost: getvelocity.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://getvelocity.org/velocity-executor-v0-5-2/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 18 Oct 2025 07:59:42 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 17 Feb 2025 02:07:48 GMT\r\nvary: Accept-Encoding\r\netag: W/\"67b299f4-1f26\"\r\ncache-control: public, max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":7974,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"cac19de39b4b14e0b8aaa90d06bfe696","sha1":"851fe6a519a3e86e2e18c179191bd869af70d949","sha256":"6d41c3967be2609d77bcab64b36fff22ab9c60d939c4afdd08d8a55a4f7d225c","sha512":"4481adf0479a1c982a4bb9edf0fa32967f55ad3eada5d8ef144d779027ee81efa1feb36ac1b38b6827b07a2fd7f66390558d4e15166654b733a5a69adf4103ef","ssdeep":"48:LVs0rOxzWBUF6vQjLzuMpOQhcuJdk3XZDbsDGdfvi8aZCV96gRqoByZcJqtf5fdV:LW0rOphMMtfJKZD7zScy55hu785hS0uA","tlshash":"9ef1e2b6914d05b0671aea903743f7401384b46c98a1acf6f04a6c8ee7e1a3cd7a33dc","first_seen":"2023-04-07T01:30:23Z","last_seen":"2026-04-05T23:45:12.440004Z","times_seen":1242,"resource_available":false,"data":null}},"time_used":192,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":192,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"getvelocity.org/wp-content/plugins/social-icons-widget-by-wpzoom/assets/font/Genericons.woff","fqdn":"getvelocity.org","domain":"getvelocity.org","tld":"org"},"ip":{"addr":"161.35.143.48","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://getvelocity.org/velocity-executor-v0-5-2/","date":"2025-10-18T07:59:42.830Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"getvelocity.org","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Tue, 19 Aug 2025 09:34:44 GMT","end":"Mon, 17 Nov 2025 09:34:43 GMT"},"fingerprint":{"sha1":"7C:89:FF:97:D8:58:E5:1E:42:78:4C:C7:09:29:5D:00:D5:C2:08:19","sha256":"79:0D:D7:E1:DB:7B:45:5D:69:CD:03:2A:99:2C:47:7F:26:53:62:85:BC:05:15:A2:F5:3A:8A:0C:4B:B2:49:93"}}},"request":{"raw":"GET /wp-content/plugins/social-icons-widget-by-wpzoom/assets/font/Genericons.woff HTTP/1.1\r\nHost: getvelocity.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://getvelocity.org/velocity-executor-v0-5-2/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 18 Oct 2025 07:59:42 GMT\r\ncontent-type: application/font-woff\r\ncontent-length: 13988\r\nlast-modified: Mon, 17 Feb 2025 02:07:48 GMT\r\netag: \"67b299f4-36a4\"\r\ncache-control: public, max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":13988,"size_decoded":0,"mime_type":"application/font-woff","magic":"Web Open Font Format, TrueType, length 13988, version 0.0","md5":"f3f73b280148eeed102d4a6874ac7886","sha1":"973bfcd63513292f1bb220c241f6dde6509f1168","sha256":"970a3fa15876d16dcc0fd70eb7c9ab44d733108b3ddca1a449edd0356c1b79a7","sha512":"70d9b9f84523487db748797d0feecf4e0ccb396e4f6bb3fc634b9ecb3a8d54a6c7a9826afc7258191bf33b15cc0871db6ad027006fe3f9041d55d4e332c9852c","ssdeep":"192:KSc73PsOuAXVyTNjPnrPCg7jAS8SfgtUUE22K5jHmUMGbp9QPvzi8e4KUASFaq/P:KSOqSgdr6VSVM9RlmUp9QPvI2aqZA1c","tlshash":"5152b0bac6962d7adc292c349ca3d94b5ff17257011645d9314fc8778c8eb2af9a0823","first_seen":"2023-04-08T09:38:30Z","last_seen":"2026-04-05T23:45:12.437058Z","times_seen":17792,"resource_available":false,"data":null}},"time_used":381,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":289,"receive":92,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"getvelocity.org/wp-content/plugins/gp-premium/menu-plus/functions/js/sticky.min.js?ver=2.5.0","fqdn":"getvelocity.org","domain":"getvelocity.org","tld":"org"},"ip":{"addr":"161.35.143.48","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://getvelocity.org/velocity-executor-v0-5-2/","date":"2025-10-18T07:59:42.843Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"getvelocity.org","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Tue, 19 Aug 2025 09:34:44 GMT","end":"Mon, 17 Nov 2025 09:34:43 GMT"},"fingerprint":{"sha1":"7C:89:FF:97:D8:58:E5:1E:42:78:4C:C7:09:29:5D:00:D5:C2:08:19","sha256":"79:0D:D7:E1:DB:7B:45:5D:69:CD:03:2A:99:2C:47:7F:26:53:62:85:BC:05:15:A2:F5:3A:8A:0C:4B:B2:49:93"}}},"request":{"raw":"GET /wp-content/plugins/gp-premium/menu-plus/functions/js/sticky.min.js?ver=2.5.0 HTTP/1.1\r\nHost: getvelocity.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://getvelocity.org/velocity-executor-v0-5-2/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 18 Oct 2025 07:59:42 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 18 Feb 2025 07:06:51 GMT\r\nvary: Accept-Encoding\r\netag: W/\"67b4318b-214c\"\r\ncache-control: public, max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":8524,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (8524), with no line terminators","md5":"b4054cf702149de2ebe6578b6c5e21d4","sha1":"898f2ff50a92069b4d5886ee0b378f36e8f0c906","sha256":"57d35f39158ef6990a75261c466b5c93e3f441b5b05426a35975fc3f31c19c45","sha512":"54fe82d5c65f91daa1cacfad3d996709098622731ed79e37b780f5ef8c07b30b92c9b66b7ec0c8c0c052085caa2fb281492bc125101b6e3086a6346ac8b36ff1","ssdeep":"96:BiLzZp1jH2BKyAWjjp9+1YYE7Aq5l0ok7yyAMGrrAU9gEuqOxVTHjiQzBSw6MCnk:B6jH2cK5IKD0Y3vm17iQz8VBAn06kY","tlshash":"f602d88cf71034b548bfc69e81dba500d1bbc92596439086f69d8c4e1949f6813e7fdd","first_seen":"2023-03-29T21:09:46Z","last_seen":"2026-04-06T04:58:55.775594Z","times_seen":2705,"resource_available":true,"data":null}},"time_used":273,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":273,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rashcolonizeexpand.com/watch.1279047458136.js?dev=e\u0026key=998c325fdf1538cfd6230e572005f2c1\u0026kw=%5B%22velocity%22%2C%22executor%22%2C%22v0%22%2C%225%22%2C%222%22%2C%22-%22%5D\u0026pst=1760774444\u0026rb=\u0026refer=https%3A%2F%2Fgetvelocity.org%2Fvelocity-executor-v0-5-2%2F\u0026res=14.3095\u0026rmtc=t\u0026shu=7267cccdba8a166e1900d58c0f289110b7cba1e1daf101b8e5a27cdafcd88f991ba071a9a9881521eb4ccc1bdedf65268e21b5433242b6957cf924d8872cebd89b0a6ddd0bba7ed874a3d198c06805069071a031c9b7d922d418a7\u0026tz=0\u0026uuid=096ad184-1e70-4034-a2ae-c740f1e427e9%3A3%3A1","fqdn":"rashcolonizeexpand.com","domain":"rashcolonizeexpand.com","tld":"com"},"ip":{"addr":"172.240.127.234","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://getvelocity.org/velocity-executor-v0-5-2/","date":"2025-10-18T07:59:44.131Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"rashcolonizeexpand.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 27 Aug 2025 21:51:30 GMT","end":"Tue, 25 Nov 2025 21:51:29 GMT"},"fingerprint":{"sha1":"1E:45:CB:7E:7C:E7:1E:08:73:0A:D3:08:B4:74:21:2F:CA:B6:15:9B","sha256":"54:F3:5A:C9:08:4C:76:26:F7:0E:BF:E0:3F:5B:38:DD:53:CF:95:81:0B:FC:C7:F9:6A:3E:9C:1A:6E:33:92:E0"}}},"request":{"raw":"GET /watch.1279047458136.js?dev=e\u0026key=998c325fdf1538cfd6230e572005f2c1\u0026kw=%5B%22velocity%22%2C%22executor%22%2C%22v0%22%2C%225%22%2C%222%22%2C%22-%22%5D\u0026pst=1760774444\u0026rb=\u0026refer=https%3A%2F%2Fgetvelocity.org%2Fvelocity-executor-v0-5-2%2F\u0026res=14.3095\u0026rmtc=t\u0026shu=7267cccdba8a166e1900d58c0f289110b7cba1e1daf101b8e5a27cdafcd88f991ba071a9a9881521eb4ccc1bdedf65268e21b5433242b6957cf924d8872cebd89b0a6ddd0bba7ed874a3d198c06805069071a031c9b7d922d418a7\u0026tz=0\u0026uuid=096ad184-1e70-4034-a2ae-c740f1e427e9%3A3%3A1 HTTP/1.1\r\nHost: rashcolonizeexpand.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://getvelocity.org\r\nReferer: https://getvelocity.org/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: ain=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.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.AeIGOPorg_sZBlmbIkyEoxsniynLf_G2a7-CHOvP_WY\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.21.6\r\nDate: Sat, 18 Oct 2025 07:59:44 GMT\r\nContent-Type: text/html\r\nContent-Length: 3242\r\nConnection: keep-alive\r\ncontent-encoding: gzip\r\np3p: CP=\"IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT\"\r\naccept-ch: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA\r\naccess-control-allow-origin: https://getvelocity.org\r\naccess-control-allow-credentials: true\r\nvary: Accept-Encoding\r\nset-cookie: uid_id2=096ad184-1e70-4034-a2ae-c740f1e427e9:3:1; expires=Sat, 25 Oct 2025 07:59:44 GMT; path=/; secure; SameSite=None\npdhtkv=true; expires=Sun, 19 Oct 2025 07:59:44 GMT; path=/; secure; SameSite=None\nuncs=1; expires=Sun, 19 Oct 2025 07:59:44 GMT; path=/; secure; SameSite=None\npdhtkv23=true; expires=Sun, 19 Oct 2025 07:59:44 GMT; path=/; secure; SameSite=None\nuncs23=1; expires=Sun, 19 Oct 2025 07:59:44 GMT; path=/; secure; SameSite=None\nu_pl25830513=1; expires=Sun, 19 Oct 2025 07:59:44 GMT; path=/; secure; SameSite=None\r\nx-envoy-upstream-service-time: 40\r\nHost: rashcolonizeexpand.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: e5127ed0e9c434e16cfbc2911ff0eea9\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4572,"size_decoded":0,"mime_type":"text/html","magic":"JavaScript source, ASCII text, with very long lines (3696)","md5":"267ac9274203c44d5b43b0f3427a32fa","sha1":"92258866aacc63196786214175f7a4aa712b662c","sha256":"5cc0061b89dcb298236ea52694e12c1d69be729e4c5832de807bfc63152f54b7","sha512":"2e5905af54791b2e0791fd11ff1f5a8c4e25c401b083236349bbad240b8eb925185531efacf34dca8a8907663d6e8d562b1c15395aacaf491ef864383a7ec0c5","ssdeep":"96:qoz+OYo/A4k3BJMhe4vdD0k/m3FF03jtd1ZD2CfMEDaH:Hz7YRBAwkoFFKV2CkCaH","tlshash":"61914c344c86497a3d6e50bf253a62952d91b10b6a40f543fc8cd959af201f50e7faf8","first_seen":"2025-10-18T08:00:10.814472Z","last_seen":"2025-10-18T08:00:10.814472Z","times_seen":1,"resource_available":false,"data":null}},"time_used":135,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":134,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-10-18","alert":"Sinkholed","trigger":"rashcolonizeexpand.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-18","alert":"Sinkholed","trigger":"rashcolonizeexpand.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-18","alert":"Sinkholed","trigger":"rashcolonizeexpand.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"torchfriendlypay.com/watch.115592109238.js?dev=e\u0026key=998c325fdf1538cfd6230e572005f2c1\u0026kw=%5B%22velocity%22%2C%22executor%22%2C%22v0%22%2C%225%22%2C%222%22%2C%22-%22%5D\u0026pst=1760774444\u0026rb=\u0026refer=https%3A%2F%2Fgetvelocity.org%2Fvelocity-executor-v0-5-2%2F\u0026res=14.3095\u0026rmtc=t\u0026shu=6818862266248f9fb99e6bbedc2185d40cdf233300c3050b9e0ec7498fd629a269e70ac48eb08a1f24787ad862d942456067dcb401ce7ffb4ce0a0be282a6f460485ee2c6cb7d717494b758f560f704d67ab3020ad5851157cadcc\u0026tz=0\u0026uuid=096ad184-1e70-4034-a2ae-c740f1e427e9%3A3%3A1","fqdn":"torchfriendlypay.com","domain":"torchfriendlypay.com","tld":"com"},"ip":{"addr":"172.240.108.84","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://getvelocity.org/velocity-executor-v0-5-2/","date":"2025-10-18T07:59:44.179Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"torchfriendlypay.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 27 Aug 2025 22:09:22 GMT","end":"Tue, 25 Nov 2025 22:09:21 GMT"},"fingerprint":{"sha1":"11:D6:40:9F:C0:3E:93:5F:D7:10:AB:88:ED:35:EF:8D:BC:BA:B6:BE","sha256":"46:DD:4D:E7:2C:ED:72:DC:3F:71:6D:46:29:34:DC:D7:AC:E1:73:91:92:2F:5C:B4:86:3E:AE:F7:FB:A4:58:10"}}},"request":{"raw":"GET /watch.115592109238.js?dev=e\u0026key=998c325fdf1538cfd6230e572005f2c1\u0026kw=%5B%22velocity%22%2C%22executor%22%2C%22v0%22%2C%225%22%2C%222%22%2C%22-%22%5D\u0026pst=1760774444\u0026rb=\u0026refer=https%3A%2F%2Fgetvelocity.org%2Fvelocity-executor-v0-5-2%2F\u0026res=14.3095\u0026rmtc=t\u0026shu=6818862266248f9fb99e6bbedc2185d40cdf233300c3050b9e0ec7498fd629a269e70ac48eb08a1f24787ad862d942456067dcb401ce7ffb4ce0a0be282a6f460485ee2c6cb7d717494b758f560f704d67ab3020ad5851157cadcc\u0026tz=0\u0026uuid=096ad184-1e70-4034-a2ae-c740f1e427e9%3A3%3A1 HTTP/1.1\r\nHost: torchfriendlypay.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://getvelocity.org\r\nReferer: https://getvelocity.org/\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: ain=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.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.AeIGOPorg_sZBlmbIkyEoxsniynLf_G2a7-CHOvP_WY\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.21.6\r\nDate: Sat, 18 Oct 2025 07:59:44 GMT\r\nContent-Type: text/html\r\nContent-Length: 3262\r\nConnection: keep-alive\r\ncontent-encoding: gzip\r\np3p: CP=\"IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT\"\r\naccept-ch: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA\r\naccess-control-allow-origin: https://getvelocity.org\r\naccess-control-allow-credentials: true\r\nvary: Accept-Encoding\r\nset-cookie: uid_id2=096ad184-1e70-4034-a2ae-c740f1e427e9:3:1; expires=Sat, 25 Oct 2025 07:59:44 GMT; path=/; secure; SameSite=None\npdhtkv=true; expires=Sun, 19 Oct 2025 07:59:44 GMT; path=/; secure; SameSite=None\nuncs=1; expires=Sun, 19 Oct 2025 07:59:44 GMT; path=/; secure; SameSite=None\npdhtkv23=true; expires=Sun, 19 Oct 2025 07:59:44 GMT; path=/; secure; SameSite=None\nuncs23=1; expires=Sun, 19 Oct 2025 07:59:44 GMT; path=/; secure; SameSite=None\nu_pl25830513=1; expires=Sun, 19 Oct 2025 07:59:44 GMT; path=/; secure; SameSite=None\r\nx-envoy-upstream-service-time: 29\r\nHost: torchfriendlypay.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: 7494233c382667d07c04db851693e747\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":4572,"size_decoded":0,"mime_type":"text/html","magic":"JavaScript source, ASCII text, with very long lines (3696)","md5":"6bebe9947f9ca8980a6560599948437d","sha1":"216de3d8265dd9c761732ca37a77f09d69e62309","sha256":"a52ea306c3aa63c71d6f5a37273cc5f95020dd7b5093519850adeb7ea86eb5b8","sha512":"f80a399f8d4f9bb0ef23defa28583fa912c60d4c3cdadfe57e45b206b305f5c96543257f9019553a52b0e34de61caaf2bedd9d031fb031760f7c65ca677f8e7d","ssdeep":"96:qoziYisBkZfXvYod2k/asm1lvXJwBm7ajqyuW1ZD2CfMEDaH:HzlCZfXgockDSMBm8qyV2CkCaH","tlshash":"e1910a567c9646fd246e74eea4b752282c31c20baf01d901fb2cd6a98f30fb80955d7c","first_seen":"2025-10-18T08:00:10.818233Z","last_seen":"2025-10-18T08:00:10.818233Z","times_seen":1,"resource_available":false,"data":null}},"time_used":125,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":124,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-18","alert":"Sinkholed","trigger":"torchfriendlypay.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-10-18","alert":"Sinkholed","trigger":"torchfriendlypay.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-18","alert":"Sinkholed","trigger":"torchfriendlypay.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"accounts.google.com/InteractiveLogin?continue=https://www.youtube.com/favicon.ico\u0026hl=en\u0026passive=true\u0026service=youtube\u0026uilel=3\u0026dsh=S-2079601044:1760774384569051\u0026ifkv=AfYwgwVaBnCUG7wiLoSoOVG7PBDFSq5LyZCwr5huthZPI3K6WuR-pR6PjfkHFzqMUkv-NFwu9BIhgA","fqdn":"accounts.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"173.194.221.84","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://getvelocity.org/velocity-executor-v0-5-2/","date":"2025-10-18T07:59:44.598Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"accounts.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 22 Sep 2025 08:42:48 GMT","end":"Mon, 15 Dec 2025 08:42:47 GMT"},"fingerprint":{"sha1":"B8:19:CD:6B:C9:17:D6:19:47:43:3F:1E:4F:ED:FC:03:B7:CA:02:F6","sha256":"B2:36:8A:F6:ED:83:58:AB:24:95:A4:DA:77:3B:10:3C:CB:CB:99:B1:2A:25:1B:AB:51:A5:E7:2A:DD:6F:68:D6"}}},"request":{"raw":"GET /InteractiveLogin?continue=https://www.youtube.com/favicon.ico\u0026hl=en\u0026passive=true\u0026service=youtube\u0026uilel=3\u0026dsh=S-2079601044:1760774384569051\u0026ifkv=AfYwgwVaBnCUG7wiLoSoOVG7PBDFSq5LyZCwr5huthZPI3K6WuR-pR6PjfkHFzqMUkv-NFwu9BIhgA HTTP/1.1\r\nHost: accounts.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://getvelocity.org/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\ncontent-type: text/html; charset=UTF-8\r\nset-cookie: __Host-GAPS=1:AXBkdgoiwlsm3qh7K3q7MX1QRFJccQ:lYmiNTmUf0Qjilmy;Path=/;Expires=Mon, 18-Oct-2027 07:59:44 GMT;Secure;HttpOnly;Priority=HIGH\r\nx-frame-options: DENY\r\ncache-control: no-cache, no-store, max-age=0, must-revalidate\r\npragma: no-cache\r\nexpires: Mon, 01 Jan 1990 00:00:00 GMT\r\ndate: Sat, 18 Oct 2025 07:59:44 GMT\r\nlocation: https://accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fwww.youtube.com%2Ffavicon.ico\u0026dsh=S-2079601044%3A1760774384569051\u0026hl=en\u0026ifkv=AfYwgwUo_SlLJxUsHFYOaM6j6Oh6_9TyfkhOqRyf8HqkVu2AtBb3BdrnUTJOCcVPvALWNu94WZFHPQ\u0026passive=true\u0026service=youtube\u0026uilel=3\u0026flowName=GlifWebSignIn\u0026flowEntry=ServiceLogin\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncontent-security-policy: script-src 'nonce-iEToYcCKzjRxSr9EOpR_rg' 'unsafe-inline' 'unsafe-eval';object-src 'none';base-uri 'self';report-uri /cspreport, require-trusted-types-for 'script';report-uri /cspreport\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"coop_gse_qebhlk\"\r\nreport-to: {\"group\":\"coop_gse_qebhlk\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/gse_qebhlk\"}]}\r\ncontent-encoding: gzip\r\nx-content-type-options: nosniff\r\nx-xss-protection: 1; mode=block\r\ncontent-length: 422\r\nserver: GSE\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"OpenGSE","description":"OpenGSE is a test suite used for testing servlet compliance. It is deployed by using WAR files that are deployed on the server engine.","website":"https://code.google.com/p/opengse","common_platform_enumeration":"","icon":"Google.svg","categories":["Web servers"]},{"name":"Java","description":"Java is a class-based, object-oriented programming language that is designed to have as few implementation dependencies as possible.","website":"https://java.com","common_platform_enumeration":"cpe:2.3:a:oracle:jre:*:*:*:*:*:*:*:*","icon":"Java.svg","categories":["Programming languages"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-06T05:11:47.473796Z","times_seen":13406904,"resource_available":true,"data":null}},"time_used":47,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":47,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"getvelocity.org/wp-content/plugins/social-icons-widget-by-wpzoom/assets/css/font-awesome-3.min.css?ver=1739758068","fqdn":"getvelocity.org","domain":"getvelocity.org","tld":"org"},"ip":{"addr":"161.35.143.48","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://getvelocity.org/velocity-executor-v0-5-2/","date":"2025-10-18T07:59:42.815Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"getvelocity.org","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Tue, 19 Aug 2025 09:34:44 GMT","end":"Mon, 17 Nov 2025 09:34:43 GMT"},"fingerprint":{"sha1":"7C:89:FF:97:D8:58:E5:1E:42:78:4C:C7:09:29:5D:00:D5:C2:08:19","sha256":"79:0D:D7:E1:DB:7B:45:5D:69:CD:03:2A:99:2C:47:7F:26:53:62:85:BC:05:15:A2:F5:3A:8A:0C:4B:B2:49:93"}}},"request":{"raw":"GET /wp-content/plugins/social-icons-widget-by-wpzoom/assets/css/font-awesome-3.min.css?ver=1739758068 HTTP/1.1\r\nHost: getvelocity.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://getvelocity.org/velocity-executor-v0-5-2/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 18 Oct 2025 07:59:42 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 17 Feb 2025 02:07:48 GMT\r\nvary: Accept-Encoding\r\netag: W/\"67b299f4-77d1\"\r\ncache-control: public, max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":30673,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (30510)","md5":"667681ba193116f0a58eff88ee58f43d","sha1":"d229366c090d12b65f6af960bc6af4eef7eba671","sha256":"014da2c2fc006d274518c09e430d055e117efc0f76be195e24998dd0c8ea92f6","sha512":"1829e07578ec8d6113809f43f51e91839d62387fcc763251326bc1abe223b48a8f2cd45dc1a41b92bd2ae4453d4a827e0c1472d15fcfc7ab50b2b6c6c712a0ce","ssdeep":"384:iu5yWeTUKW+KlkJ5de2UYDyVfwYUas2l8yQ/8dwmaU8G:1lr+Klk3Yi+fwYUf2l8yQ/e9vf","tlshash":"17d241e8e54c01d66731c48bff81b36862b6fb3dc5854da9f01f290c29d22a552c5fba","first_seen":"2023-04-06T17:40:35Z","last_seen":"2026-04-05T23:45:12.422372Z","times_seen":1494,"resource_available":false,"data":null}},"time_used":200,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":200,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"getvelocity.org/wp-includes/js/jquery/jquery.min.js?ver=3.7.1","fqdn":"getvelocity.org","domain":"getvelocity.org","tld":"org"},"ip":{"addr":"161.35.143.48","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://getvelocity.org/velocity-executor-v0-5-2/","date":"2025-10-18T07:59:42.832Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"getvelocity.org","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Tue, 19 Aug 2025 09:34:44 GMT","end":"Mon, 17 Nov 2025 09:34:43 GMT"},"fingerprint":{"sha1":"7C:89:FF:97:D8:58:E5:1E:42:78:4C:C7:09:29:5D:00:D5:C2:08:19","sha256":"79:0D:D7:E1:DB:7B:45:5D:69:CD:03:2A:99:2C:47:7F:26:53:62:85:BC:05:15:A2:F5:3A:8A:0C:4B:B2:49:93"}}},"request":{"raw":"GET /wp-includes/js/jquery/jquery.min.js?ver=3.7.1 HTTP/1.1\r\nHost: getvelocity.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://getvelocity.org/velocity-executor-v0-5-2/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 18 Oct 2025 07:59:42 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 17 Feb 2025 01:54:09 GMT\r\nvary: Accept-Encoding\r\netag: W/\"67b296c1-15601\"\r\ncache-control: public, max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":87553,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65447)","md5":"826eb77e86b02ab7724fe3d0141ff87c","sha1":"79cd3587d565afe290076a8d36c31c305a573d18","sha256":"cb6f2d32c49d1c2b25e9ffc9aaafa3f83075346c01bcd4ae6eb187392a4292cf","sha512":"fc79fdb76763025dc39fac045a215ff155ef2f492a0e9640079d6f089fa6218af2b3ab7c6eaf636827dee9294e6939a95ab24554e870c976679c25567ad6374c","ssdeep":"1536:0RUX9uDgwxcy2KVBNwchN6SLaHEk2BSrBESp+a/IEk4aAocVi8SMBQ47GKO:sHNwcv9VBQpLl88SMBQ47GKO","tlshash":"7483f8df77ca702247ab30b9006f550bf276199d684d4400f159d8e9bcb8a4a827bf7e","first_seen":"2023-11-03T09:26:43Z","last_seen":"2026-04-06T05:11:39.633896Z","times_seen":689466,"resource_available":true,"data":null}},"time_used":286,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":286,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"clonecroak.com/998c325fdf1538cfd6230e572005f2c1/invoke.js","fqdn":"clonecroak.com","domain":"clonecroak.com","tld":"com"},"ip":{"addr":"172.240.108.76","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://getvelocity.org/velocity-executor-v0-5-2/","date":"2025-10-18T07:59:43.438Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"clonecroak.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Sat, 06 Sep 2025 21:04:40 GMT","end":"Fri, 05 Dec 2025 21:04:39 GMT"},"fingerprint":{"sha1":"79:E7:D0:DC:29:8D:D5:DF:09:84:88:92:9F:BD:E5:02:A3:47:DF:5E","sha256":"5C:12:26:4E:87:FB:C6:AC:DF:BE:38:A7:B9:EE:52:BF:D4:BB:33:A3:DA:A2:8E:5B:0E:F9:0B:88:D6:A2:E5:56"}}},"request":{"raw":"GET /998c325fdf1538cfd6230e572005f2c1/invoke.js HTTP/1.1\r\nHost: clonecroak.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://getvelocity.org/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.21.6\r\nDate: Sat, 18 Oct 2025 07:59:43 GMT\r\nContent-Type: application/javascript\r\nContent-Length: 18457\r\nConnection: keep-alive\r\ncontent-encoding: gzip\r\np3p: CP=\"IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT\"\r\naccess-control-allow-origin: *\r\naccept-ch: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA\r\nx-envoy-upstream-service-time: 4\r\nHost: clonecroak.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: 0697a372fa46dcaecf56e82628958434\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":46393,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (46393), with no line terminators","md5":"0ccbff0b9d24f5aca36d6e68da556d8a","sha1":"7a0c3af43ecc454f445daf1b7c205faf39758e96","sha256":"16e11841106951b985326452436acb528c80917166ababa395ccf8f44c18b7a8","sha512":"ead1e59031db4fa1e1b5856f1f18d2da4a4ec36bf33d2b2d8ec12b687acfed0149ff84a199997a7210975ca12dc362a516c0859de4644eecd4b409ff8dd1df27","ssdeep":"768:H5/C6gfHBHuf0gCjEqeJMtQIHKmt2FgjS2Tm:HI6gfhHuf0geEqeMQIHKV27m","tlshash":"ed2308883fa0f66b07327437126fd11ffa6acc019888cc5cda46d5e52f68b19e536b45","first_seen":"2025-10-18T08:00:10.832385Z","last_seen":"2025-10-18T08:00:10.832385Z","times_seen":1,"resource_available":true,"data":null}},"time_used":138,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":137,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-10-18","alert":"Sinkholed","trigger":"clonecroak.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-18","alert":"Sinkholed","trigger":"clonecroak.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-18","alert":"Sinkholed","trigger":"clonecroak.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"getvelocity.org/wp-content/plugins/social-icons-widget-by-wpzoom/assets/css/academicons.min.css?ver=1739758068","fqdn":"getvelocity.org","domain":"getvelocity.org","tld":"org"},"ip":{"addr":"161.35.143.48","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://getvelocity.org/velocity-executor-v0-5-2/","date":"2025-10-18T07:59:42.814Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"getvelocity.org","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Tue, 19 Aug 2025 09:34:44 GMT","end":"Mon, 17 Nov 2025 09:34:43 GMT"},"fingerprint":{"sha1":"7C:89:FF:97:D8:58:E5:1E:42:78:4C:C7:09:29:5D:00:D5:C2:08:19","sha256":"79:0D:D7:E1:DB:7B:45:5D:69:CD:03:2A:99:2C:47:7F:26:53:62:85:BC:05:15:A2:F5:3A:8A:0C:4B:B2:49:93"}}},"request":{"raw":"GET /wp-content/plugins/social-icons-widget-by-wpzoom/assets/css/academicons.min.css?ver=1739758068 HTTP/1.1\r\nHost: getvelocity.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://getvelocity.org/velocity-executor-v0-5-2/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 18 Oct 2025 07:59:42 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 17 Feb 2025 02:07:48 GMT\r\nvary: Accept-Encoding\r\netag: W/\"67b299f4-27d9\"\r\ncache-control: public, max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":10201,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"bb1aeb9c7bbff08fae9d4ba032594c41","sha1":"6b5cc0afeace5761b6fd92fc6870e2f9b4a2643d","sha256":"c85f828a413187b47732291ad7bfde324f386507157ca69839d17dae29d56e21","sha512":"82d9c8a7194f8700b769075a7e2b17fc9e9ed69b46e0eb4199f48abb6c8872619fbae08c9818e3f7ef7635142fbaf78f8168ae5500664ebd833a6cca9253675f","ssdeep":"48:jtkSJ/myHn/HyWoRPOLJoBZaDG/zRao3g6EJqvCWKCKZsEt6YOtbjSllIS/plKlQ:NDHKWohEJw1CbZsHRjSlluSvdv3","tlshash":"212239d492bd08a21306dcd662467222fb19f3769c169cccd6a17e8eb6d163cc0917ee","first_seen":"2023-04-06T17:40:35Z","last_seen":"2026-04-05T23:45:12.413355Z","times_seen":1493,"resource_available":false,"data":null}},"time_used":201,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":201,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"getvelocity.org/wp-content/themes/generatepress/assets/css/main.min.css?ver=3.5.1","fqdn":"getvelocity.org","domain":"getvelocity.org","tld":"org"},"ip":{"addr":"161.35.143.48","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://getvelocity.org/velocity-executor-v0-5-2/","date":"2025-10-18T07:59:42.809Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"getvelocity.org","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Tue, 19 Aug 2025 09:34:44 GMT","end":"Mon, 17 Nov 2025 09:34:43 GMT"},"fingerprint":{"sha1":"7C:89:FF:97:D8:58:E5:1E:42:78:4C:C7:09:29:5D:00:D5:C2:08:19","sha256":"79:0D:D7:E1:DB:7B:45:5D:69:CD:03:2A:99:2C:47:7F:26:53:62:85:BC:05:15:A2:F5:3A:8A:0C:4B:B2:49:93"}}},"request":{"raw":"GET /wp-content/themes/generatepress/assets/css/main.min.css?ver=3.5.1 HTTP/1.1\r\nHost: getvelocity.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://getvelocity.org/velocity-executor-v0-5-2/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 18 Oct 2025 07:59:42 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 17 Feb 2025 02:05:00 GMT\r\nvary: Accept-Encoding\r\netag: W/\"67b2994c-4c38\"\r\ncache-control: public, max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":19512,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (19512), with no line terminators","md5":"b7e067012db6249774c29e4c56b4f2c0","sha1":"7523574074e98d492a8da515f0daf7446cc504e0","sha256":"c839222ec3a5037179749a843610820436bf575a591a3e0b45404f1970a2cc56","sha512":"c77b609b39ddf4ab8b6a89aba1b8daa2e8824312b1032eed8270c82167794dd438ec9878dc5e5e19853565f3f95c24315e3f164b5919cbed8c772e84f7078bba","ssdeep":"384:sk1JAWvwWZ34igipTh3dGr5PL3NatuylxQp9svaQW4M+ght5NsKa4TqSD6CE:hAWvwWZ34igipTh3dGr5PL3NatuylxQo","tlshash":"3f9209a2aaf1242cb177831ffbd0e16c3565d522d30b95dab897d700c9cab67026379c","first_seen":"2024-08-28T15:41:57Z","last_seen":"2026-04-06T05:25:23.689883Z","times_seen":8945,"resource_available":false,"data":null}},"time_used":107,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":107,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"getvelocity.org/wp-content/plugins/social-icons-widget-by-wpzoom/assets/css/wpzoom-socicon.css?ver=1739758068","fqdn":"getvelocity.org","domain":"getvelocity.org","tld":"org"},"ip":{"addr":"161.35.143.48","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://getvelocity.org/velocity-executor-v0-5-2/","date":"2025-10-18T07:59:42.810Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"getvelocity.org","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Tue, 19 Aug 2025 09:34:44 GMT","end":"Mon, 17 Nov 2025 09:34:43 GMT"},"fingerprint":{"sha1":"7C:89:FF:97:D8:58:E5:1E:42:78:4C:C7:09:29:5D:00:D5:C2:08:19","sha256":"79:0D:D7:E1:DB:7B:45:5D:69:CD:03:2A:99:2C:47:7F:26:53:62:85:BC:05:15:A2:F5:3A:8A:0C:4B:B2:49:93"}}},"request":{"raw":"GET /wp-content/plugins/social-icons-widget-by-wpzoom/assets/css/wpzoom-socicon.css?ver=1739758068 HTTP/1.1\r\nHost: getvelocity.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://getvelocity.org/velocity-executor-v0-5-2/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 18 Oct 2025 07:59:42 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 17 Feb 2025 02:07:48 GMT\r\nvary: Accept-Encoding\r\netag: W/\"67b299f4-6c8b\"\r\ncache-control: public, max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":27787,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"79eb2937e3b89d4769f524a8ab9694b9","sha1":"08e6bb5777663a54bc94f7b43c0b8386478e69ad","sha256":"4fb41c31d096fcf6fa8f5a791271516164b9851da5ebb114fb804fd340fd72e5","sha512":"b63249a7a620cdaedeb6b230fb21139ca6dc90f9f3b8ddad033b72e9cc2d11e9920691fcfff69cca16fa7a5f84abff8c2725627c7536731ea15d86745d4b5f0d","ssdeep":"384:RHkPkf/DUHRseHcKzoYlztq/pOhXW+KVMlvtG:REPkfrU+e5lzt6OhXWMG","tlshash":"1bc25250c6be4c82370b4058167ae280637971d6ce9c8f2c7656bd9c6fb5290b87f9dc","first_seen":"2024-12-05T15:23:45.516539Z","last_seen":"2026-04-05T22:48:03.187318Z","times_seen":109,"resource_available":false,"data":null}},"time_used":105,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":105,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"getvelocity.org/wp-includes/js/dist/i18n.min.js?ver=5e580eb46a90c2b997e6","fqdn":"getvelocity.org","domain":"getvelocity.org","tld":"org"},"ip":{"addr":"161.35.143.48","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://getvelocity.org/velocity-executor-v0-5-2/","date":"2025-10-18T07:59:42.846Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"getvelocity.org","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Tue, 19 Aug 2025 09:34:44 GMT","end":"Mon, 17 Nov 2025 09:34:43 GMT"},"fingerprint":{"sha1":"7C:89:FF:97:D8:58:E5:1E:42:78:4C:C7:09:29:5D:00:D5:C2:08:19","sha256":"79:0D:D7:E1:DB:7B:45:5D:69:CD:03:2A:99:2C:47:7F:26:53:62:85:BC:05:15:A2:F5:3A:8A:0C:4B:B2:49:93"}}},"request":{"raw":"GET /wp-includes/js/dist/i18n.min.js?ver=5e580eb46a90c2b997e6 HTTP/1.1\r\nHost: getvelocity.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://getvelocity.org/velocity-executor-v0-5-2/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 18 Oct 2025 07:59:42 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 17 Feb 2025 01:54:09 GMT\r\nvary: Accept-Encoding\r\netag: W/\"67b296c1-23b5\"\r\ncache-control: public, max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":9141,"size_decoded":0,"mime_type":"application/javascript","magic":"data","md5":"a8127c1a87bb4f99edbeec7c37311dcd","sha1":"9997a1745f48bdd233dbe9bd8164daa53eba105b","sha256":"f313d12ea6124bd28fc4a6b7163d253bb83d5aeab5edce594880c5c3df475cbc","sha512":"aa10ddc5b29905c60a058faed3f5f195f7577ceac46489e02461b5135732194daa3aef4aa473127bf8c753312e02074cfdac8d0f8f0cc8aa544c7f8e02bebd08","ssdeep":"192:s6zoFrnW4iaX3LzDk1jpJLB2hlq717+3uClD2tFtJ7bykd+SHS+F:s6Udn3LzoJphH8uClD2tFtJ7byTwtF","tlshash":"8612d8ac30deb021239a11e1586fb101f13aaf6532d99ce0da81d9e57db19c960b3ff5","first_seen":"2024-04-03T08:25:07Z","last_seen":"2026-04-06T04:58:55.782426Z","times_seen":237366,"resource_available":true,"data":null}},"time_used":266,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":266,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"getvelocity.org/wp-content/themes/generatepress/assets/js/dropdown-click.min.js?ver=3.5.1","fqdn":"getvelocity.org","domain":"getvelocity.org","tld":"org"},"ip":{"addr":"161.35.143.48","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://getvelocity.org/velocity-executor-v0-5-2/","date":"2025-10-18T07:59:42.850Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"getvelocity.org","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Tue, 19 Aug 2025 09:34:44 GMT","end":"Mon, 17 Nov 2025 09:34:43 GMT"},"fingerprint":{"sha1":"7C:89:FF:97:D8:58:E5:1E:42:78:4C:C7:09:29:5D:00:D5:C2:08:19","sha256":"79:0D:D7:E1:DB:7B:45:5D:69:CD:03:2A:99:2C:47:7F:26:53:62:85:BC:05:15:A2:F5:3A:8A:0C:4B:B2:49:93"}}},"request":{"raw":"GET /wp-content/themes/generatepress/assets/js/dropdown-click.min.js?ver=3.5.1 HTTP/1.1\r\nHost: getvelocity.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://getvelocity.org/velocity-executor-v0-5-2/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 18 Oct 2025 07:59:42 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 17 Feb 2025 02:05:00 GMT\r\nvary: Accept-Encoding\r\netag: W/\"67b2994c-c7c\"\r\ncache-control: public, max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3196,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (3196), with no line terminators","md5":"b5bc1c34654b921b29931202a2a1c21c","sha1":"c265ba248a2360ea3860b0aa6fc71d7a88e00c18","sha256":"961de1e60f1c5cf174f5b7994a3f23b03e3af679b011a5c3c19e7615ef473005","sha512":"42d358c868d702b0ab9cffc346cc07c59181e9af31af772d5ee6e8cbc20c04f7a507b6eb45ca64780b371f971ed3b38868cb0421510c886bb91f8b93bef0c307","ssdeep":"","tlshash":"f061efb99a4015bb14d939d625d6fcc16fa224fffe0588211165dc0e2aadd8111fcbf4","first_seen":"2024-09-11T01:27:06Z","last_seen":"2026-04-06T03:41:42.241458Z","times_seen":344,"resource_available":true,"data":null}},"time_used":161,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":161,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"getvelocity.org/wp-includes/js/comment-reply.min.js?ver=6.8.3","fqdn":"getvelocity.org","domain":"getvelocity.org","tld":"org"},"ip":{"addr":"161.35.143.48","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://getvelocity.org/velocity-executor-v0-5-2/","date":"2025-10-18T07:59:42.854Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"getvelocity.org","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Tue, 19 Aug 2025 09:34:44 GMT","end":"Mon, 17 Nov 2025 09:34:43 GMT"},"fingerprint":{"sha1":"7C:89:FF:97:D8:58:E5:1E:42:78:4C:C7:09:29:5D:00:D5:C2:08:19","sha256":"79:0D:D7:E1:DB:7B:45:5D:69:CD:03:2A:99:2C:47:7F:26:53:62:85:BC:05:15:A2:F5:3A:8A:0C:4B:B2:49:93"}}},"request":{"raw":"GET /wp-includes/js/comment-reply.min.js?ver=6.8.3 HTTP/1.1\r\nHost: getvelocity.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://getvelocity.org/velocity-executor-v0-5-2/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 18 Oct 2025 07:59:42 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 17 Feb 2025 01:54:09 GMT\r\nvary: Accept-Encoding\r\netag: W/\"67b296c1-bd2\"\r\ncache-control: public, max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3026,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (2991)","md5":"e4a49df71f8b98c1d9f9d8fce74d89e8","sha1":"b95fcda0c8c26305ad94e80343d0cfca8a048a10","sha256":"9d4687a19cab8f7442a3bda40c45be4d10e42488e091ddd706c3caed83c3ee1f","sha512":"42cd5f854779886f24c43ed14617380110c946d1b430b454060c3b391de6fbae6d0ed8ab7cdd7cfdc9726b2d6142a4e01c4448e36088dfcee7fdd00b60909f89","ssdeep":"","tlshash":"5051a7d437c95d762a83b3395efe930271712709a50805608826c86931bcfea63b67fe","first_seen":"2024-11-13T06:33:24.856382Z","last_seen":"2026-04-06T05:16:18.606004Z","times_seen":57490,"resource_available":true,"data":null}},"time_used":158,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":158,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"accounts.google.com/ServiceLogin?passive=true\u0026continue=https%3A%2F%2Fwww.google.com%2Ffavicon.ico\u0026uilel=3\u0026hl=en\u0026service=mail","fqdn":"accounts.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"173.194.221.84","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://getvelocity.org/velocity-executor-v0-5-2/","date":"2025-10-18T07:59:44.360Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"accounts.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 22 Sep 2025 08:42:48 GMT","end":"Mon, 15 Dec 2025 08:42:47 GMT"},"fingerprint":{"sha1":"B8:19:CD:6B:C9:17:D6:19:47:43:3F:1E:4F:ED:FC:03:B7:CA:02:F6","sha256":"B2:36:8A:F6:ED:83:58:AB:24:95:A4:DA:77:3B:10:3C:CB:CB:99:B1:2A:25:1B:AB:51:A5:E7:2A:DD:6F:68:D6"}}},"request":{"raw":"GET /ServiceLogin?passive=true\u0026continue=https%3A%2F%2Fwww.google.com%2Ffavicon.ico\u0026uilel=3\u0026hl=en\u0026service=mail HTTP/1.1\r\nHost: accounts.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://getvelocity.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\ncontent-type: application/binary\r\nset-cookie: __Host-GAPS=1:LR271d1EBc-iOl9KLciJf1PXeAZuVA:zB5vCERMW8zviyPz; Expires=Mon, 18-Oct-2027 07:59:44 GMT; Path=/; Secure; HttpOnly; Priority=HIGH\r\ncache-control: no-cache, no-store, max-age=0, must-revalidate\r\npragma: no-cache\r\nexpires: Mon, 01 Jan 1990 00:00:00 GMT\r\ndate: Sat, 18 Oct 2025 07:59:44 GMT\r\nlocation: https://accounts.google.com/InteractiveLogin?continue=https://www.google.com/favicon.ico\u0026hl=en\u0026passive=true\u0026service=mail\u0026uilel=3\u0026dsh=S2015982656:1760774384537136\u0026ifkv=AfYwgwVwx3Rpy-i6hugpar2A2-fOxSkOhVu2YytpQo1YdsEi_7gQIKbXvftF32bgLEjL8AuUQ8G1Mw\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncontent-security-policy: require-trusted-types-for 'script';report-uri /_/AccountsSigninPassiveLoginHttp/cspreport, script-src 'nonce-h8Zdn5kJ-5Bk8OqXiB-PDQ' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/AccountsSigninPassiveLoginHttp/cspreport;worker-src 'self', script-src 'unsafe-inline' 'unsafe-eval' blob: data: 'self' https://apis.google.com https://ssl.gstatic.com https://www.google.com https://www.googletagmanager.com https://www.gstatic.com https://www.google-analytics.com;report-uri /_/AccountsSigninPassiveLoginHttp/cspreport/allowlist\r\npermissions-policy: ch-ua-arch=*, ch-ua-bitness=*, ch-ua-full-version=*, ch-ua-full-version-list=*, ch-ua-model=*, ch-ua-wow64=*, ch-ua-form-factors=*, ch-ua-platform=*, ch-ua-platform-version=*\r\ncross-origin-opener-policy: unsafe-none\r\naccept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version\r\ncross-origin-resource-policy: cross-origin\r\nserver: ESF\r\ncontent-length: 0\r\nx-xss-protection: 0\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-06T05:11:47.473796Z","times_seen":13406904,"resource_available":true,"data":null}},"time_used":345,"timings":{"blocked":153,"dns":0,"connect":30,"send":0,"wait":37,"receive":0,"ssl":122},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"d1jum8517nhtf1.cloudfront.net/sbnNVVFoNHDsyZRoaMWlrXEJtbWlWVSUmPwhOMjEuGBY5OzkHByx6NRwUcz4pAR0laSACHhkkKFwrGxUwAwMYci4UF2hkfAISOzNnSBY7N2dfVTQwOFNDcyAqARhoMzQZGSQsNRsFN3IvD044OyAHHzk1f1w1YHpqS0FlfC0HHTE7LR1WZ2Q0GlZnZGteXW-VxaSxWZ2QtBx1jYH9dMXBmahZFYXFpLFZnZCgYVmYVa11He2RzS0FlMz8NGDpxaChBZWVqXkJlZX9cQzM9KAsVOix/XDVkZ25AQ3MhZ18","fqdn":"d1jum8517nhtf1.cloudfront.net","domain":"d1jum8517nhtf1.cloudfront.net","tld":"cloudfront.net"},"ip":{"addr":"54.230.245.183","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://getvelocity.org/velocity-executor-v0-5-2/","date":"2025-10-18T07:59:44.363Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cloudfront.net","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Mon, 05 May 2025 00:00:00 GMT","end":"Thu, 23 Apr 2026 23:59:59 GMT"},"fingerprint":{"sha1":"8F:00:F1:34:A7:1E:27:1C:CF:CD:A6:53:8B:C4:82:B0:68:BC:C8:72","sha256":"60:38:9D:24:9E:41:8F:23:AC:D9:14:5C:A3:47:7E:AF:07:DB:9F:2D:6A:8C:0D:08:E9:24:8A:8E:49:A9:4D:28"}}},"request":{"raw":"GET /sbnNVVFoNHDsyZRoaMWlrXEJtbWlWVSUmPwhOMjEuGBY5OzkHByx6NRwUcz4pAR0laSACHhkkKFwrGxUwAwMYci4UF2hkfAISOzNnSBY7N2dfVTQwOFNDcyAqARhoMzQZGSQsNRsFN3IvD044OyAHHzk1f1w1YHpqS0FlfC0HHTE7LR1WZ2Q0GlZnZGteXW-VxaSxWZ2QtBx1jYH9dMXBmahZFYXFpLFZnZCgYVmYVa11He2RzS0FlMz8NGDpxaChBZWVqXkJlZX9cQzM9KAsVOix/XDVkZ25AQ3MhZ18 HTTP/1.1\r\nHost: d1jum8517nhtf1.cloudfront.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://getvelocity.org/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-length: 650\r\naccess-control-allow-origin: *\r\ncache-control: max-age=31556926\r\ncontent-encoding: gzip\r\ndate: Sat, 18 Oct 2025 07:59:44 GMT\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 9d4a908d41124cba1276d6cef8f00c60.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P1\r\nx-amz-cf-id: ma_RPShey4kv5jWOjL-4JnPV2Oo5gRLDGkCfEPFhExT5Z915KMyV4g==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":902,"size_decoded":0,"mime_type":"text/plain","magic":"ASCII text, with very long lines (902), with no line terminators","md5":"111e0908f64bb39895023cf6b3b3b7d4","sha1":"22a049b3b4b9e4ebab07ddd3a3c9d4c71c550cc4","sha256":"eaa913127c5924f701af15040b73e77af766d931b1b4b42ce0245406f3e9dd16","sha512":"f362863ab5e348eeb9622dde15e6848456b2cf40d5000196f7c7212a8efcb7daee2b9384f1df13222069b9731d412cb3759db4f27b3059dd19d48184bc31f39f","ssdeep":"","tlshash":"b611bbae65548e235869a1b533f3f45253c8908d21b95265b8024f73e30ce4b4510721","first_seen":"2025-10-18T08:00:10.865814Z","last_seen":"2025-10-18T08:00:10.865814Z","times_seen":1,"resource_available":true,"data":null}},"time_used":168,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":167,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"getvelocity.org/wp-content/plugins/social-icons-widget-by-wpzoom/block/dist/style-wpzoom-social-icons.css?ver=4.3.4","fqdn":"getvelocity.org","domain":"getvelocity.org","tld":"org"},"ip":{"addr":"161.35.143.48","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://getvelocity.org/velocity-executor-v0-5-2/","date":"2025-10-18T07:59:42.802Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"getvelocity.org","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Tue, 19 Aug 2025 09:34:44 GMT","end":"Mon, 17 Nov 2025 09:34:43 GMT"},"fingerprint":{"sha1":"7C:89:FF:97:D8:58:E5:1E:42:78:4C:C7:09:29:5D:00:D5:C2:08:19","sha256":"79:0D:D7:E1:DB:7B:45:5D:69:CD:03:2A:99:2C:47:7F:26:53:62:85:BC:05:15:A2:F5:3A:8A:0C:4B:B2:49:93"}}},"request":{"raw":"GET /wp-content/plugins/social-icons-widget-by-wpzoom/block/dist/style-wpzoom-social-icons.css?ver=4.3.4 HTTP/1.1\r\nHost: getvelocity.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://getvelocity.org/velocity-executor-v0-5-2/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 18 Oct 2025 07:59:42 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 17 Feb 2025 02:07:48 GMT\r\nvary: Accept-Encoding\r\netag: W/\"67b299f4-229a\"\r\ncache-control: public, max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":8858,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (8857)","md5":"f58316e9b2d53befb4986b2ce25fe067","sha1":"aa5ee777a207c90862927e04f164501653e6c6af","sha256":"c9113a1bdcfe16115abcc7c453812c94c6fa018fec8afe493a04bb8063a8491f","sha512":"aeca67c13d2293321be64e9f3b67a8a087edf77f7b9f7da9d5ed6bc94fca836319bed6a93f7a4bc0a3329fa5ed1c31cd4f903ba77574e297d9305a361f056618","ssdeep":"48:ogTQpKP3UUaPwRiO6a17lm7lm3777937ym7ym37g7c37Wm7Wm37c7A3HK3Wu3eo2:hlclS/VycySK8WcWSW8oe24weqP/uX","tlshash":"a802d5654f7c88ff769728194d48c3bad6801311ce88a2d9e553e11864fc7b91cb3bae","first_seen":"2023-04-06T17:40:34Z","last_seen":"2026-04-05T22:48:03.193023Z","times_seen":478,"resource_available":false,"data":null}},"time_used":100,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":100,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"getvelocity.org/wp-content/plugins/gp-premium/menu-plus/functions/css/navigation-branding-flex.min.css?ver=2.5.0","fqdn":"getvelocity.org","domain":"getvelocity.org","tld":"org"},"ip":{"addr":"161.35.143.48","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://getvelocity.org/velocity-executor-v0-5-2/","date":"2025-10-18T07:59:42.826Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"getvelocity.org","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Tue, 19 Aug 2025 09:34:44 GMT","end":"Mon, 17 Nov 2025 09:34:43 GMT"},"fingerprint":{"sha1":"7C:89:FF:97:D8:58:E5:1E:42:78:4C:C7:09:29:5D:00:D5:C2:08:19","sha256":"79:0D:D7:E1:DB:7B:45:5D:69:CD:03:2A:99:2C:47:7F:26:53:62:85:BC:05:15:A2:F5:3A:8A:0C:4B:B2:49:93"}}},"request":{"raw":"GET /wp-content/plugins/gp-premium/menu-plus/functions/css/navigation-branding-flex.min.css?ver=2.5.0 HTTP/1.1\r\nHost: getvelocity.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://getvelocity.org/velocity-executor-v0-5-2/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 18 Oct 2025 07:59:42 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 18 Feb 2025 07:06:51 GMT\r\nvary: Accept-Encoding\r\netag: W/\"67b4318b-a06\"\r\ncache-control: public, max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2566,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (2566), with no line terminators","md5":"ebc4817d78928435ca7eed8216d49e5b","sha1":"8e120ea34776bca556b3c6bccb361c45f0a7f964","sha256":"7c8eb7fd8354e29e58e77290872b6e05a65404a4d16fe26996b72b6f2f606281","sha512":"cbcc6cc2e06303e3e0fae560253b7f9438fef8a83f6a5dbf84d0b6f24ca9f4b8855e55e979dc55b41517a21ddb5e789f16957efa1e470978ad3b4a12110f8360","ssdeep":"","tlshash":"f8514bd9d1b8248640f34b2ff7d6865438f3a41452977a82a0db671548efe4607a3fbc","first_seen":"2023-04-06T22:42:41Z","last_seen":"2026-04-06T05:06:20.046419Z","times_seen":3597,"resource_available":false,"data":null}},"time_used":294,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":294,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"professionaltrafficmonitor.com/stats","fqdn":"professionaltrafficmonitor.com","domain":"professionaltrafficmonitor.com","tld":"com"},"ip":{"addr":"52.59.24.226","port":443,"asn":16509,"as":"AMAZON-02","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://getvelocity.org/velocity-executor-v0-5-2/","date":"2025-10-18T07:59:43.640Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"P256","signature_name":"RSA-PKCS1-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"protrafficinspector.com","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Tue, 01 Jul 2025 00:00:00 GMT","end":"Thu, 30 Jul 2026 23:59:59 GMT"},"fingerprint":{"sha1":"5D:D5:8D:EB:A4:50:13:0D:7C:33:71:82:B8:02:49:4F:D6:31:B6:E6","sha256":"49:03:4C:2C:1B:23:D8:D6:CB:AE:F0:54:61:99:C2:20:F4:FF:87:5E:0B:72:B1:6B:D8:AB:21:49:2D:F2:EC:4A"}}},"request":{"raw":"GET /stats HTTP/1.1\r\nHost: professionaltrafficmonitor.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nOrigin: https://getvelocity.org\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://getvelocity.org/\r\nCookie: uid_id2=096ad184-1e70-4034-a2ae-c740f1e427e9:3:1\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 18 Oct 2025 07:59:43 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-length: 40\r\nserver: fasthttp\r\naccess-control-allow-origin: https://getvelocity.org\r\nvary: Origin\r\naccess-control-allow-credentials: true\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":40,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"ASCII text, with no line terminators","md5":"4fe55c0feab3f0eb245851ef3d07390d","sha1":"fbd98285ba595e5c738cfb014c4e3742aab1ef6f","sha256":"e19d691439a44d50c882a4ffb8a73ce18a36f618ce724f547984bd3e3c1a990c","sha512":"04aefcba61394b8e11b23e6656c3c3dded19e929978ff8c0be63e9c5dae24d8629f39fadc312dfbf39e7d2c599a9dcf6d305c32d00d9e0ddc6b79b6d8deb2e59","ssdeep":"","tlshash":"74900450311441c0c05c4f007401315dc4045434443c101c0503d7d41d0ff01505cd55","first_seen":"2025-10-18T08:00:10.720547Z","last_seen":"2025-10-18T08:00:10.720547Z","times_seen":1,"resource_available":false,"data":null}},"time_used":22,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"getvelocity.org/wp-content/uploads/2025/02/cropped-velocity-executor-logo-32x32.png","fqdn":"getvelocity.org","domain":"getvelocity.org","tld":"org"},"ip":{"addr":"161.35.143.48","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://getvelocity.org/velocity-executor-v0-5-2/","date":"2025-10-18T07:59:44.370Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"getvelocity.org","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Tue, 19 Aug 2025 09:34:44 GMT","end":"Mon, 17 Nov 2025 09:34:43 GMT"},"fingerprint":{"sha1":"7C:89:FF:97:D8:58:E5:1E:42:78:4C:C7:09:29:5D:00:D5:C2:08:19","sha256":"79:0D:D7:E1:DB:7B:45:5D:69:CD:03:2A:99:2C:47:7F:26:53:62:85:BC:05:15:A2:F5:3A:8A:0C:4B:B2:49:93"}}},"request":{"raw":"GET /wp-content/uploads/2025/02/cropped-velocity-executor-logo-32x32.png HTTP/1.1\r\nHost: getvelocity.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://getvelocity.org/velocity-executor-v0-5-2/\r\nCookie: _ga_HVY92KN3QE=GS2.1.s1760774383$o1$g0$t1760774383$j60$l0$h0; _ga=GA1.1.2111870290.1760774383; dom3ic8zudi28v8lr6fgphwffqoz0j6c=096ad184-1e70-4034-a2ae-c740f1e427e9%3A3%3A1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 18 Oct 2025 07:59:44 GMT\r\ncontent-type: image/png\r\ncontent-length: 2171\r\nlast-modified: Tue, 18 Feb 2025 08:18:21 GMT\r\netag: \"67b4424d-87b\"\r\ncache-control: public, max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2171,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced","md5":"d81c4944de811d0c35532ee4ce7a67e5","sha1":"ca350a1adee18807b63c4e565f2338c3af5faa05","sha256":"0bb5e32ceb34b82a095839ec6e9a735900224b1529879a512346f70ba62dd9ee","sha512":"9270145fa9fac08ea42d0fef04cc0a1f61599b09eb0039d0070f60dba7829a6c6a80a7957194e227eaae7deaa469d82ac2185aa39736d6142cca8bb410f6247f","ssdeep":"","tlshash":"f7412b4256ed413c2845611be296f796d172a4e84e7933bec800bcba31aeb814acd35f","first_seen":"2025-10-18T08:00:10.881215Z","last_seen":"2025-11-23T11:54:40.140687Z","times_seen":2,"resource_available":false,"data":null}},"time_used":200,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":200,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-HVY92KN3QE","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.178.40","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://getvelocity.org/velocity-executor-v0-5-2/","date":"2025-10-18T07:59:42.798Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 22 Sep 2025 08:40:44 GMT","end":"Mon, 15 Dec 2025 08:40:43 GMT"},"fingerprint":{"sha1":"02:50:AA:DF:C5:16:76:73:9E:ED:AD:C4:E5:98:EB:E7:2D:B9:C3:33","sha256":"6C:68:2F:0A:C2:03:62:A1:8E:7B:3B:BB:D6:6D:96:A7:78:6C:78:0F:1D:F0:EB:77:84:A5:4A:DD:07:44:9B:DD"}}},"request":{"raw":"GET /gtag/js?id=G-HVY92KN3QE HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://getvelocity.org/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Sat, 18 Oct 2025 07:59:42 GMT\r\nexpires: Sat, 18 Oct 2025 07:59:42 GMT\r\ncache-control: private, max-age=900\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\nserver: Google Tag Manager\r\ncontent-length: 141925\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":426453,"size_decoded":0,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (6031)","md5":"1deaaef82d0e41638bcb7b409c335342","sha1":"b2e315e295f89cf0d37f3890317218d9cdacc144","sha256":"2abbc23cb79241b0c3f0a3eadeb315b5d11433500642ee7a8a4eac586ec8ca2a","sha512":"e2fe60cf6c710129ac7254d79fc4846f2b31d373ce81496f65e8971652dfe608733a129eb25b2b9e8f0b4790050e1c18f89d35e3eda8dad9b9d9fd29bf368d43","ssdeep":"6144:jBipc6tQSyOe+hy4nkEt7F8KWjxSqpRjeWvkAX6HJLGy1tyyluxwuuSyv:VN6rRRhy4nkEt7F0EqPeKRy1bv","tlshash":"60941a8e73c674269396f078503f018ba57b29a2f45cc896f189cce42e7499a4277f7c","first_seen":"2025-10-18T08:00:10.891413Z","last_seen":"2025-10-18T08:00:10.891413Z","times_seen":1,"resource_available":true,"data":null}},"time_used":402,"timings":{"blocked":118,"dns":1,"connect":28,"send":0,"wait":61,"receive":80,"ssl":111},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"getvelocity.org/wp-includes/css/dist/block-library/style.min.css?ver=6.8.3","fqdn":"getvelocity.org","domain":"getvelocity.org","tld":"org"},"ip":{"addr":"161.35.143.48","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://getvelocity.org/velocity-executor-v0-5-2/","date":"2025-10-18T07:59:42.800Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"getvelocity.org","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Tue, 19 Aug 2025 09:34:44 GMT","end":"Mon, 17 Nov 2025 09:34:43 GMT"},"fingerprint":{"sha1":"7C:89:FF:97:D8:58:E5:1E:42:78:4C:C7:09:29:5D:00:D5:C2:08:19","sha256":"79:0D:D7:E1:DB:7B:45:5D:69:CD:03:2A:99:2C:47:7F:26:53:62:85:BC:05:15:A2:F5:3A:8A:0C:4B:B2:49:93"}}},"request":{"raw":"GET /wp-includes/css/dist/block-library/style.min.css?ver=6.8.3 HTTP/1.1\r\nHost: getvelocity.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://getvelocity.org/velocity-executor-v0-5-2/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 18 Oct 2025 07:59:42 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 16 Jul 2025 03:04:28 GMT\r\nvary: Accept-Encoding\r\netag: W/\"687716bc-1c679\"\r\ncache-control: public, max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":116345,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (55654)","md5":"a06b3af98203ddc303997e0e0caaff83","sha1":"04c3e7de74a890d18014588c4e1f077a52d79acc","sha256":"838ede31a58a3cdb411d6dd7f13cbe65d4a26193d9fa31882854e63938f12bac","sha512":"4ce1079b8dc07043b0201dc74f5888b50aa530a4e604eecd7673e225946de62c421b290a707014ddaf4366591f8c4767737b5689bc44d57eb0a11aef905cead9","ssdeep":"3072:seeJu1iQg5MG7x+qehvP0x2pck2qkA3Pu:b1iQg5MG7x+qehvP0x2pck2lA2","tlshash":"34b3615417b4dcf935ffa73a5e4ee248a503aa41c68a57ebe066d190618ca490cf3f0f","first_seen":"2025-07-15T17:03:07.843749Z","last_seen":"2026-04-06T05:06:17.988249Z","times_seen":164453,"resource_available":false,"data":null}},"time_used":103,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":103,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"getvelocity.org/wp-content/plugins/social-icons-widget-by-wpzoom/assets/font/socicon.woff2?v=4.3.4","fqdn":"getvelocity.org","domain":"getvelocity.org","tld":"org"},"ip":{"addr":"161.35.143.48","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://getvelocity.org/velocity-executor-v0-5-2/","date":"2025-10-18T07:59:42.831Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"getvelocity.org","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Tue, 19 Aug 2025 09:34:44 GMT","end":"Mon, 17 Nov 2025 09:34:43 GMT"},"fingerprint":{"sha1":"7C:89:FF:97:D8:58:E5:1E:42:78:4C:C7:09:29:5D:00:D5:C2:08:19","sha256":"79:0D:D7:E1:DB:7B:45:5D:69:CD:03:2A:99:2C:47:7F:26:53:62:85:BC:05:15:A2:F5:3A:8A:0C:4B:B2:49:93"}}},"request":{"raw":"GET /wp-content/plugins/social-icons-widget-by-wpzoom/assets/font/socicon.woff2?v=4.3.4 HTTP/1.1\r\nHost: getvelocity.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://getvelocity.org/velocity-executor-v0-5-2/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 18 Oct 2025 07:59:42 GMT\r\ncontent-type: application/font-woff2\r\ncontent-length: 51248\r\nlast-modified: Mon, 17 Feb 2025 02:07:48 GMT\r\netag: \"67b299f4-c830\"\r\ncache-control: public, max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":51248,"size_decoded":0,"mime_type":"application/font-woff2","magic":"Web Open Font Format (Version 2), TrueType, length 51248, version 1.0","md5":"66a8097de979896b872f5cbe028a9bfd","sha1":"2eee8b7de801ed90605ba64e3e44d1840bda99d9","sha256":"db5c97cac7b445e8bfb2c7493f48575fae914c8b157f7497ad015a0833494b29","sha512":"92d907c953e96dee24a9e3adf799d0df9d3ad0f4b8d8ea320c4e4538698d03217dd653193f7f4275550c147dea9e991a7ecafcba75c95db7bc1e430cacf63989","ssdeep":"768:hNQxaHOCmDdgr51u+VY1afQhMFTVsCHc6dhWfUn1Pp2D/yPqC/MhU2JTFkHM/w5:nOaHOndCXdSqVJn9OE/qUATFSkW","tlshash":"9d3302fa8ac8f180fb1166577bdca01a76c1c27bf85133e7a4c7548db173a96ac06c81","first_seen":"2024-12-03T18:27:54.020451Z","last_seen":"2026-04-05T23:45:12.429662Z","times_seen":949,"resource_available":false,"data":null}},"time_used":379,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":288,"receive":91,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"getvelocity.org/wp-content/uploads/2025/02/velocity-executor-logo.png","fqdn":"getvelocity.org","domain":"getvelocity.org","tld":"org"},"ip":{"addr":"161.35.143.48","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://getvelocity.org/velocity-executor-v0-5-2/","date":"2025-10-18T07:59:42.838Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"getvelocity.org","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Tue, 19 Aug 2025 09:34:44 GMT","end":"Mon, 17 Nov 2025 09:34:43 GMT"},"fingerprint":{"sha1":"7C:89:FF:97:D8:58:E5:1E:42:78:4C:C7:09:29:5D:00:D5:C2:08:19","sha256":"79:0D:D7:E1:DB:7B:45:5D:69:CD:03:2A:99:2C:47:7F:26:53:62:85:BC:05:15:A2:F5:3A:8A:0C:4B:B2:49:93"}}},"request":{"raw":"GET /wp-content/uploads/2025/02/velocity-executor-logo.png HTTP/1.1\r\nHost: getvelocity.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://getvelocity.org/velocity-executor-v0-5-2/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 18 Oct 2025 07:59:42 GMT\r\ncontent-type: image/png\r\ncontent-length: 70531\r\nlast-modified: Tue, 18 Feb 2025 08:17:40 GMT\r\netag: \"67b44224-11383\"\r\ncache-control: public, max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":70531,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 512 x 512, 8-bit colormap, non-interlaced","md5":"12d6b120e3dfc87d071d1a148796bf56","sha1":"17534f11aed5cbd13eed6358b4fb6e8cb8de865c","sha256":"73cf4bac74580b8c7ae94f23fd2a4bf60476513c6f05b913aa3a9613fd374b74","sha512":"0b9b52c2c30abc4d8003a4da19c15f48f5a4a848cd4dd2674786c8efa2d8974be8ea7d00afc137a2391501a84c898d7cc35447217888c8b579033ddaa38afe12","ssdeep":"1536:wYtwMM6Iti2lU1kKBtA/eVBKTlZvEyklING5lHMlzue:1wMM6Iti2UDBtA2BKTzslINGr4ae","tlshash":"53630261de7dc2fae22628b55c7426ade8470513cda70ce42be75c0f0169272829fbb1","first_seen":"2025-10-18T08:00:10.90732Z","last_seen":"2025-11-23T11:54:40.187121Z","times_seen":2,"resource_available":false,"data":null}},"time_used":277,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":275,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"getvelocity.org/wp-content/themes/generatepress/assets/js/menu.min.js?ver=3.5.1","fqdn":"getvelocity.org","domain":"getvelocity.org","tld":"org"},"ip":{"addr":"161.35.143.48","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://getvelocity.org/velocity-executor-v0-5-2/","date":"2025-10-18T07:59:42.849Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"getvelocity.org","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Tue, 19 Aug 2025 09:34:44 GMT","end":"Mon, 17 Nov 2025 09:34:43 GMT"},"fingerprint":{"sha1":"7C:89:FF:97:D8:58:E5:1E:42:78:4C:C7:09:29:5D:00:D5:C2:08:19","sha256":"79:0D:D7:E1:DB:7B:45:5D:69:CD:03:2A:99:2C:47:7F:26:53:62:85:BC:05:15:A2:F5:3A:8A:0C:4B:B2:49:93"}}},"request":{"raw":"GET /wp-content/themes/generatepress/assets/js/menu.min.js?ver=3.5.1 HTTP/1.1\r\nHost: getvelocity.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://getvelocity.org/velocity-executor-v0-5-2/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 18 Oct 2025 07:59:42 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 17 Feb 2025 02:05:00 GMT\r\nvary: Accept-Encoding\r\netag: W/\"67b2994c-1ca5\"\r\ncache-control: public, max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":7333,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (7333), with no line terminators","md5":"67148b2ff82038d0faf6385f182c5644","sha1":"7452d643e468caf6db8ecf07618f1cb7ff3f7651","sha256":"5af760e4297b064a2150dcd5f63d748a06dfa8b618c9e9d43a87c4ac74fa3974","sha512":"24cb8e3c4f17abc7cf1ba96407ac1eda4e6c5d7c669ac213024a9b428e19cef574cefdb06c4dd28c013f1f8d3c775fb8f98c5a15c142783ba0f25b46f0c6e7ad","ssdeep":"192:iQqHlWQZgROnqWgpkgJMhqDi92FY+alT/fnGtxTbvm:bqHngROnvgJUqDi9cNYTnGvTbvm","tlshash":"6ee112fa964412bb04ef29ca74e6e5c07b7568fdea0184302579c84d1fe8dc202e6bf5","first_seen":"2024-08-31T11:00:29Z","last_seen":"2026-04-06T05:25:23.67858Z","times_seen":9950,"resource_available":true,"data":null}},"time_used":259,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":259,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"getvelocity.org/wp-content/plugins/social-icons-widget-by-wpzoom/assets/js/social-icons-widget-frontend.js?ver=1739758068","fqdn":"getvelocity.org","domain":"getvelocity.org","tld":"org"},"ip":{"addr":"161.35.143.48","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://getvelocity.org/velocity-executor-v0-5-2/","date":"2025-10-18T07:59:42.858Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"getvelocity.org","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Tue, 19 Aug 2025 09:34:44 GMT","end":"Mon, 17 Nov 2025 09:34:43 GMT"},"fingerprint":{"sha1":"7C:89:FF:97:D8:58:E5:1E:42:78:4C:C7:09:29:5D:00:D5:C2:08:19","sha256":"79:0D:D7:E1:DB:7B:45:5D:69:CD:03:2A:99:2C:47:7F:26:53:62:85:BC:05:15:A2:F5:3A:8A:0C:4B:B2:49:93"}}},"request":{"raw":"GET /wp-content/plugins/social-icons-widget-by-wpzoom/assets/js/social-icons-widget-frontend.js?ver=1739758068 HTTP/1.1\r\nHost: getvelocity.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://getvelocity.org/velocity-executor-v0-5-2/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 18 Oct 2025 07:59:42 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 17 Feb 2025 02:07:48 GMT\r\nvary: Accept-Encoding\r\netag: W/\"67b299f4-35c\"\r\ncache-control: public, max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":860,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text","md5":"6442171da4dc4093819153e31fe5d513","sha1":"8b4bb7223ce0e3ddf41fd16ac73430dc847fb69a","sha256":"6853d729a67593739860d399dc73e21340de4f57bda79cc930f536e428967b4f","sha512":"a6f17f0dcd6183d5c8faea966f7ab166603ad0660044637919e44b3dd9a1ddfae3b36e535dfbd9ab6f61e79268706ea21f5a447920c79dd284d01bf03db98746","ssdeep":"","tlshash":"f911704aa5ff189154b3319f4b5fca012216ac37410bd718793c95a08f50b3cbb7d1e9","first_seen":"2023-03-07T12:01:50Z","last_seen":"2026-04-05T23:45:12.411745Z","times_seen":1800,"resource_available":true,"data":null}},"time_used":158,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":158,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"ukankingwithea.com/","fqdn":"ukankingwithea.com","domain":"ukankingwithea.com","tld":"com"},"ip":{"addr":"172.67.192.190","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://getvelocity.org/velocity-executor-v0-5-2/","date":"2025-10-18T07:59:44.367Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"ukankingwithea.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 25 Aug 2025 14:13:33 GMT","end":"Sun, 23 Nov 2025 15:11:16 GMT"},"fingerprint":{"sha1":"1A:11:63:8A:09:D9:A9:1F:C1:06:34:29:E0:E0:95:E7:BA:BC:63:A3","sha256":"20:A6:48:1D:DB:42:37:88:BF:13:AD:64:91:6B:C4:6D:02:EA:D4:98:E1:E5:88:85:C0:D3:03:48:B4:F1:11:49"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: ukankingwithea.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://getvelocity.org/\r\nOrigin: https://getvelocity.org\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 18 Oct 2025 07:59:44 GMT\r\ncontent-type: text/plain\r\nserver: cloudflare\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\naccess-control-allow-origin: https://getvelocity.org\r\naccess-control-allow-credentials: true\r\naccess-control-allow-methods: GET\r\naccess-control-allow-headers: X-Requested-With, content-type\r\ncf-cache-status: DYNAMIC\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=SkFMl3DKE1cXHUNFzWlH7SWu7UmvTXPSWI2DuBCkZzAerRS%2BjahLyILH%2FHzBO8rY6otKTT4UiBjZhjz02dRWj53PiWxxkOKj3TqpcBBOJAI%3D\"}]}\r\ncontent-encoding: br\r\nset-cookie: csu=578304425496589@1@1760774384; SameSite=None; Secure; Max-Age=31104000\r\ncf-ray: 99067f7ebcde56b9-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":26,"size_decoded":0,"mime_type":"text/plain","magic":"ASCII text, with no line terminators","md5":"3dac34daf2a0189d89299a38b36b355d","sha1":"307fb3bb3e29c1cbc43a34909c764096c2884301","sha256":"3f609bf34c89c1bd8d1d5d0c9e3db08b522fec52b23865dd257f4377ae300719","sha512":"3f853edd134b935ae488c8740a7f21e264c145c1e1868edceb199e1fe40ab05dae007f10f061b56a2c226ed47dab2c941ef0e0c6cffc0e305a17cdbfee1def74","ssdeep":"","tlshash":"cf8000000808a02cbe00a008230b280e00a80300a82c20820020ca8c08ea2802002038","first_seen":"2025-10-18T08:00:10.922865Z","last_seen":"2025-10-18T08:00:10.922865Z","times_seen":1,"resource_available":false,"data":null}},"time_used":265,"timings":{"blocked":63,"dns":5,"connect":2,"send":0,"wait":134,"receive":0,"ssl":58},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2025-10-18","alert":"Sinkholed","trigger":"ukankingwithea.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2025-10-18","alert":"Sinkholed","trigger":"ukankingwithea.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-10-18","alert":"Sinkholed","trigger":"ukankingwithea.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"torchfriendlypay.com/impr.gif?sid=H4sIAAAAAAAC_1RTv28c1Ra-a0eveK94ei8I2i1SAML2nZk7v0iBMCEhIiRREpQCUdxfs754du5k7syO7SoiEopSLQUSdONvnVhABKShA0XrdJGQWBpcxA3_AChSCiq0jiXDKc75zv1u8Z2j73yy3RyQAA3fv_ye3TJ5zlfCZdp_-boplG1d_-K1vkeX6en-dVNE7HR_Y56q0etewJbpK_1zWq7bFZ96lHrU6581lc7sxsohC1PeT73llC4zf9kLGTaqf_au6cHxHtTogPwfRs3--1v2AYycohh-d0a79dqWr709bHJe2wojtft-sV7YtsDwGGZVD1mxe_Qb1s0I-XwBttg9mgB2tDOfAMLMyMKLTyCK3SOZEKO7z5WKHLqAUP9BO5pC53swfAppb8GonwkgFS5eQjG8d9FWLd98zvI5OyMnnj2FaWfkxJMXUAy_Wc3NRv-qzZva2MJhI-tgNqYwgynKZg_11gJMuwdZfwyjfiIrzy6gGO5ccrmFUfunaBpx5SVsydMxXWI0YEvc53pJxoxmnmZ-rNPDFZlsCu4W0bgeGtNDk_XQlD0M1X6f0YRJjwdRlioZU8YZU1rQNPEp5amM0ci59jHqcgyZjyGrmyirm1g3Y1TNQ7i1_e-jxEuSyPejyGdJlmYiTXUkhFbS95JQMSpV5gdBQKkMaEhFqqmWMUuTTEV-yv0o1THlkiVa0IR7mc_iJOYqiXyVMp-FEY1iJQWjntRxlgkmNeVUaD_xeZSxiLIk1NqXkRSxir2YpUzEYZKFEc1iylQUcxFQn3IVJqHnhbHkSko41YOrCUaqQ6sJWkfQcoLWELQ1QTvq7qrc-a67p3LXCO-o-kc16Ca2Hmzzu7Ye6IKAV2NUqtsx5Q13C7JenGxlTk3sPHFRdxMuVLddHpD_zd3Qu3PqBtb1fj9NExn4YaYyLwwSOd9JQHUY-5SGmS89ONPBuAVw18OWmZFze49Qmhk59dmfEHwPLt-DNIvgzUvg7ST2E_A1pBRbxbcDXY90bqWpN5dtNYCyHcr6BOrN3nZ-QE5OrlxbfXhozg9__RRaPiZHAVl1KKsOH5lHBIP89uSKbcnOFds68uBSWZuh2eJz416tea3_9dW7erO1lTp_xo2_fFPOiTm8f027-gIvlCkGjny9apTS1VlbSU1-OO-ua3G5cWurTVU05YXLb509Pywr7ZyxxRTczMi__7gDaWbk5I9fHB5l-OoDyPImXHms01kCURLkhiDXx-9cdHB_68Ux3na3Mah64PUtFMMOo6rDKO_A8zFcszipy-rxG78EhwGR9yYir8iOyKs5b_b7WaB9SWkSR16QZNoLmJJZmLBURZwGgUbtZmtP3_n9rwAAAP__77P_SDIFAAA=","fqdn":"torchfriendlypay.com","domain":"torchfriendlypay.com","tld":"com"},"ip":{"addr":"172.240.108.84","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://getvelocity.org/velocity-executor-v0-5-2/","date":"2025-10-18T07:59:44.408Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"torchfriendlypay.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 27 Aug 2025 22:09:22 GMT","end":"Tue, 25 Nov 2025 22:09:21 GMT"},"fingerprint":{"sha1":"11:D6:40:9F:C0:3E:93:5F:D7:10:AB:88:ED:35:EF:8D:BC:BA:B6:BE","sha256":"46:DD:4D:E7:2C:ED:72:DC:3F:71:6D:46:29:34:DC:D7:AC:E1:73:91:92:2F:5C:B4:86:3E:AE:F7:FB:A4:58:10"}}},"request":{"raw":"GET /impr.gif?sid=H4sIAAAAAAAC_1RTv28c1Ra-a0eveK94ei8I2i1SAML2nZk7v0iBMCEhIiRREpQCUdxfs754du5k7syO7SoiEopSLQUSdONvnVhABKShA0XrdJGQWBpcxA3_AChSCiq0jiXDKc75zv1u8Z2j73yy3RyQAA3fv_ye3TJ5zlfCZdp_-boplG1d_-K1vkeX6en-dVNE7HR_Y56q0etewJbpK_1zWq7bFZ96lHrU6581lc7sxsohC1PeT73llC4zf9kLGTaqf_au6cHxHtTogPwfRs3--1v2AYycohh-d0a79dqWr709bHJe2wojtft-sV7YtsDwGGZVD1mxe_Qb1s0I-XwBttg9mgB2tDOfAMLMyMKLTyCK3SOZEKO7z5WKHLqAUP9BO5pC53swfAppb8GonwkgFS5eQjG8d9FWLd98zvI5OyMnnj2FaWfkxJMXUAy_Wc3NRv-qzZva2MJhI-tgNqYwgynKZg_11gJMuwdZfwyjfiIrzy6gGO5ccrmFUfunaBpx5SVsydMxXWI0YEvc53pJxoxmnmZ-rNPDFZlsCu4W0bgeGtNDk_XQlD0M1X6f0YRJjwdRlioZU8YZU1rQNPEp5amM0ci59jHqcgyZjyGrmyirm1g3Y1TNQ7i1_e-jxEuSyPejyGdJlmYiTXUkhFbS95JQMSpV5gdBQKkMaEhFqqmWMUuTTEV-yv0o1THlkiVa0IR7mc_iJOYqiXyVMp-FEY1iJQWjntRxlgkmNeVUaD_xeZSxiLIk1NqXkRSxir2YpUzEYZKFEc1iylQUcxFQn3IVJqHnhbHkSko41YOrCUaqQ6sJWkfQcoLWELQ1QTvq7qrc-a67p3LXCO-o-kc16Ca2Hmzzu7Ye6IKAV2NUqtsx5Q13C7JenGxlTk3sPHFRdxMuVLddHpD_zd3Qu3PqBtb1fj9NExn4YaYyLwwSOd9JQHUY-5SGmS89ONPBuAVw18OWmZFze49Qmhk59dmfEHwPLt-DNIvgzUvg7ST2E_A1pBRbxbcDXY90bqWpN5dtNYCyHcr6BOrN3nZ-QE5OrlxbfXhozg9__RRaPiZHAVl1KKsOH5lHBIP89uSKbcnOFds68uBSWZuh2eJz416tea3_9dW7erO1lTp_xo2_fFPOiTm8f027-gIvlCkGjny9apTS1VlbSU1-OO-ua3G5cWurTVU05YXLb509Pywr7ZyxxRTczMi__7gDaWbk5I9fHB5l-OoDyPImXHms01kCURLkhiDXx-9cdHB_68Ux3na3Mah64PUtFMMOo6rDKO_A8zFcszipy-rxG78EhwGR9yYir8iOyKs5b_b7WaB9SWkSR16QZNoLmJJZmLBURZwGgUbtZmtP3_n9rwAAAP__77P_SDIFAAA= HTTP/1.1\r\nHost: torchfriendlypay.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: ain=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJwIjp7ImlkIjoyNTgzMDUxMywiayI6Ijk5OGMzMjVmZGYxNTM4Y2ZkNjIzMGU1NzIwMDVmMmMxIiwic2lkIjoiIiwiaXNpZCI6MiwiYXNpZCI6MSwiemlkIjo0NzAzMTcyLCJwaWQiOjIzOTc2OTAsImFuIjp0cnVlLCJsYW4iOnRydWUsImNpZCI6MywiYWlkIjoyMywicHQiOjQsInBrIjoidHBmM3R5OXd6YiIsInQiOjF9LCJ1Ijp7InUiOjEsImF1IjoxLCJkIjp7ImlkIjoyNjY1NjExMTUsImlkcyI6IiIsImljIjpmYWxzZSwibiI6IkRlc2t0b3AsRW11bGF0b3IiLCJ2IjoiVW5rbm93biIsIm0iOiJVbmtub3duIiwiZiI6MSwiZm4iOiJEZXNrdG9wIiwib2lkIjozODkxNCwib24iOiJXaW5kb3dzIiwib3YiOiIxMC4wIiwiYmlkIjoxMzY5MjUsImJuIjoiRmlyZWZveCIsImJ2IjoiMTM0LjAiLCJ3diI6ZmFsc2UsImUiOnRydWUsImFiIjpmYWxzZX0sImMiOnsiaWQiOjE2MiwiYyI6Ik5PIiwibiI6Ik5vcndheSJ9LCJhIjpmYWxzZSwiY3IiOnsibiI6IkJsaXggU29sdXRpb25zIn0sInhmIjoiIiwiaXhmIjpmYWxzZSwiaWd4ZiI6ZmFsc2UsInVwIjp0cnVlLCJyIjoiaHR0cHM6Ly9nZXR2ZWxvY2l0eS5vcmcvdmVsb2NpdHktZXhlY3V0b3ItdjAtNS0yLyIsImFyIjpbXX19.AeIGOPorg_sZBlmbIkyEoxsniynLf_G2a7-CHOvP_WY; uid_id2=096ad184-1e70-4034-a2ae-c740f1e427e9:3:1; pdhtkv=true; uncs=1; pdhtkv23=true; uncs23=1; u_pl25830513=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.21.6\r\nDate: Sat, 18 Oct 2025 07:59:44 GMT\r\nContent-Type: image/gif\r\nContent-Length: 7\r\nConnection: keep-alive\r\naccess-control-allow-origin: *\r\nvary: Origin\r\naccess-control-allow-credentials: true\r\np3p: CP=\"IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT\"\r\naccept-ch: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA\r\nx-envoy-upstream-service-time: 2\r\nHost: torchfriendlypay.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: adf1771eeb600231bfbad011c122ec87\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/gif","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-06T05:11:47.473796Z","times_seen":13406904,"resource_available":true,"data":null}},"time_used":97,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":97,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-10-18","alert":"Sinkholed","trigger":"torchfriendlypay.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-18","alert":"Sinkholed","trigger":"torchfriendlypay.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-18","alert":"Sinkholed","trigger":"torchfriendlypay.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"getvelocity.org/wp-content/plugins/social-icons-widget-by-wpzoom/assets/css/wpzoom-social-icons-styles.css?ver=1739758068","fqdn":"getvelocity.org","domain":"getvelocity.org","tld":"org"},"ip":{"addr":"161.35.143.48","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://getvelocity.org/velocity-executor-v0-5-2/","date":"2025-10-18T07:59:42.820Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"getvelocity.org","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Tue, 19 Aug 2025 09:34:44 GMT","end":"Mon, 17 Nov 2025 09:34:43 GMT"},"fingerprint":{"sha1":"7C:89:FF:97:D8:58:E5:1E:42:78:4C:C7:09:29:5D:00:D5:C2:08:19","sha256":"79:0D:D7:E1:DB:7B:45:5D:69:CD:03:2A:99:2C:47:7F:26:53:62:85:BC:05:15:A2:F5:3A:8A:0C:4B:B2:49:93"}}},"request":{"raw":"GET /wp-content/plugins/social-icons-widget-by-wpzoom/assets/css/wpzoom-social-icons-styles.css?ver=1739758068 HTTP/1.1\r\nHost: getvelocity.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://getvelocity.org/velocity-executor-v0-5-2/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 18 Oct 2025 07:59:42 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 17 Feb 2025 02:07:48 GMT\r\nvary: Accept-Encoding\r\netag: W/\"67b299f4-f62\"\r\ncache-control: public, max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3938,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"99e4731bccd0d8bada1a24cbfa710156","sha1":"5ae37f9a22b5123a75a0a9ade6f0222631adcc02","sha256":"42a9766b458cf20e536280b8a52122430df3b247b75b1338447971da03799dc0","sha512":"48ab925253ec59fbd54c556931db8c35d53a6811eb90fd1f9cafe521484b087c86b13d87b186fd1cd787b622c38e564aece6c7822f7901d396740baff6af4adf","ssdeep":"","tlshash":"6d8127550f0e0d02b28b4d1b09589383925aef73ee6dc89d6981a31d4fbcef938729d4","first_seen":"2024-10-13T23:23:30.093207Z","last_seen":"2026-04-05T23:45:12.411172Z","times_seen":945,"resource_available":false,"data":null}},"time_used":199,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":199,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"getvelocity.org/wp-content/plugins/gp-premium/menu-plus/functions/css/offside.min.css?ver=2.5.0","fqdn":"getvelocity.org","domain":"getvelocity.org","tld":"org"},"ip":{"addr":"161.35.143.48","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://getvelocity.org/velocity-executor-v0-5-2/","date":"2025-10-18T07:59:42.823Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"getvelocity.org","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Tue, 19 Aug 2025 09:34:44 GMT","end":"Mon, 17 Nov 2025 09:34:43 GMT"},"fingerprint":{"sha1":"7C:89:FF:97:D8:58:E5:1E:42:78:4C:C7:09:29:5D:00:D5:C2:08:19","sha256":"79:0D:D7:E1:DB:7B:45:5D:69:CD:03:2A:99:2C:47:7F:26:53:62:85:BC:05:15:A2:F5:3A:8A:0C:4B:B2:49:93"}}},"request":{"raw":"GET /wp-content/plugins/gp-premium/menu-plus/functions/css/offside.min.css?ver=2.5.0 HTTP/1.1\r\nHost: getvelocity.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://getvelocity.org/velocity-executor-v0-5-2/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 18 Oct 2025 07:59:42 GMT\r\ncontent-type: text/css\r\nlast-modified: Tue, 18 Feb 2025 07:06:51 GMT\r\nvary: Accept-Encoding\r\netag: W/\"67b4318b-170d\"\r\ncache-control: public, max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":5901,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (5901), with no line terminators","md5":"620bdc2e262641f4cee95c34de331140","sha1":"588be9ecfa8899889f324f17b4fe3f0828acd478","sha256":"ff95720758215ef9f328fda9e5b00e7c64421bcc8c0439e38201492e0fa78616","sha512":"56620f620d1dfd70b978a2368252f79149030ea50b1160d8eea2fb1be91efea00b1a04fcc4370312e4ae4ae440410ef0bd8e1f2c6eaae55295e564d1dc274ca1","ssdeep":"48:C6DWCYieBSBvVi+dhQCRl6t3i4sNoPopQWxoZob+VNnroIx2rw8nvLnYrrz4SqXm:BfdNLGSeQSXmKo0rzQeFL9CzfPvg9","tlshash":"6ec1405191e14268c867c22316ffc1e413fedd1c9f6be655bdcb83058c4aa1a139aee8","first_seen":"2023-12-29T10:54:46Z","last_seen":"2026-04-06T05:06:20.034258Z","times_seen":2311,"resource_available":false,"data":null}},"time_used":296,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":296,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"d1jum8517nhtf1.cloudfront.net/?nmujd=1218938","fqdn":"d1jum8517nhtf1.cloudfront.net","domain":"d1jum8517nhtf1.cloudfront.net","tld":"cloudfront.net"},"ip":{"addr":"54.230.245.183","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://getvelocity.org/velocity-executor-v0-5-2/","date":"2025-10-18T07:59:42.838Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.cloudfront.net","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M01","organization":"Amazon"},"validity":{"start":"Mon, 05 May 2025 00:00:00 GMT","end":"Thu, 23 Apr 2026 23:59:59 GMT"},"fingerprint":{"sha1":"8F:00:F1:34:A7:1E:27:1C:CF:CD:A6:53:8B:C4:82:B0:68:BC:C8:72","sha256":"60:38:9D:24:9E:41:8F:23:AC:D9:14:5C:A3:47:7E:AF:07:DB:9F:2D:6A:8C:0D:08:E9:24:8A:8E:49:A9:4D:28"}}},"request":{"raw":"GET /?nmujd=1218938 HTTP/1.1\r\nHost: d1jum8517nhtf1.cloudfront.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://getvelocity.org/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-length: 64362\r\naccess-control-allow-origin: *\r\ncache-control: no-store, no-cache, proxy-revalidate, must-revalidate, private, no-transform\r\ncontent-encoding: gzip\r\npragma: no-cache\r\ndate: Sat, 18 Oct 2025 07:59:42 GMT\r\nx-cache: Miss from cloudfront\r\nvia: 1.1 9d4a908d41124cba1276d6cef8f00c60.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P1\r\nx-amz-cf-id: bfaY4SL5qrD4Ivlp0niBbgKDC4vb45V0z8CcqQnmfE-SNddZIfTZ1g==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":190447,"size_decoded":0,"mime_type":"text/plain","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (38488)","md5":"d636ce64435a8cc27cb9c81f673c76e7","sha1":"aed5a3e2d6a3c584c361f2cda0689a79726d2c97","sha256":"5374c40bb9ce4e2559dd3c491b07822adb3ff934670c987c056e7110168019cd","sha512":"a6710e57e7fe55b93350586053ae360cf908ff58e949308bf34c97e7dd312ae493186dc8aea30b5faa4281317f729437bb1402cd358ccda5be5363f633891594","ssdeep":"3072:XBUNPgDYzi07L02raYDbe+Y5UKS+7L0x2ii:XuN4DUi07w2rnX4","tlshash":"47145dc9be92346d836374b540bf528a723f4a68b8184cd4e496d4d17db8d0a437bfac","first_seen":"2025-10-18T08:00:10.936035Z","last_seen":"2025-10-18T08:00:10.936035Z","times_seen":1,"resource_available":true,"data":null}},"time_used":202,"timings":{"blocked":-1,"dns":14,"connect":1,"send":0,"wait":175,"receive":3,"ssl":6},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"getvelocity.org/wp-content/uploads/2025/10/Velocity-Executor-v0.5.2.png","fqdn":"getvelocity.org","domain":"getvelocity.org","tld":"org"},"ip":{"addr":"161.35.143.48","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://getvelocity.org/velocity-executor-v0-5-2/","date":"2025-10-18T07:59:42.839Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"getvelocity.org","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Tue, 19 Aug 2025 09:34:44 GMT","end":"Mon, 17 Nov 2025 09:34:43 GMT"},"fingerprint":{"sha1":"7C:89:FF:97:D8:58:E5:1E:42:78:4C:C7:09:29:5D:00:D5:C2:08:19","sha256":"79:0D:D7:E1:DB:7B:45:5D:69:CD:03:2A:99:2C:47:7F:26:53:62:85:BC:05:15:A2:F5:3A:8A:0C:4B:B2:49:93"}}},"request":{"raw":"GET /wp-content/uploads/2025/10/Velocity-Executor-v0.5.2.png HTTP/1.1\r\nHost: getvelocity.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://getvelocity.org/velocity-executor-v0-5-2/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 18 Oct 2025 07:59:42 GMT\r\ncontent-type: image/png\r\ncontent-length: 36272\r\nlast-modified: Thu, 09 Oct 2025 03:20:56 GMT\r\netag: \"68e72a18-8db0\"\r\ncache-control: public, max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":36272,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 960 x 540, 8-bit colormap, non-interlaced","md5":"91533d32e53301c799f7fb78932cd614","sha1":"ba74e3e64f52ae63ddbf8907a270be007dc6447c","sha256":"3476b7bf448d5891b4ea1acca3ce74bd74c4844a4c6e9784af5e930065e08d8a","sha512":"59dc91e259e1021ee4dc0ca13d50dfb883ec920a7becc92905fa4351821671b7b1ef2f7381a737f9f8d5fe1725cabdcfb8eec3e0a2ca6148fab7bb7c7af12860","ssdeep":"768:RUs3TmC7H4/9oXHvKyHhp6/+KLBZUScZ81aNdOUUJxyLfj3wZEC0:WeTmC7C9ohHhpGQZLfzO0","tlshash":"81f2e120655d07f1fd3093b3e5b3b55e89b71f34c802a5dd0c96aeda5f80aa4a6430da","first_seen":"2025-10-18T08:00:10.941585Z","last_seen":"2025-11-23T11:54:40.192465Z","times_seen":2,"resource_available":false,"data":null}},"time_used":377,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":278,"receive":99,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"getvelocity.org/wp-content/plugins/gp-premium/menu-plus/functions/js/offside.min.js?ver=2.5.0","fqdn":"getvelocity.org","domain":"getvelocity.org","tld":"org"},"ip":{"addr":"161.35.143.48","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://getvelocity.org/velocity-executor-v0-5-2/","date":"2025-10-18T07:59:42.844Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"getvelocity.org","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Tue, 19 Aug 2025 09:34:44 GMT","end":"Mon, 17 Nov 2025 09:34:43 GMT"},"fingerprint":{"sha1":"7C:89:FF:97:D8:58:E5:1E:42:78:4C:C7:09:29:5D:00:D5:C2:08:19","sha256":"79:0D:D7:E1:DB:7B:45:5D:69:CD:03:2A:99:2C:47:7F:26:53:62:85:BC:05:15:A2:F5:3A:8A:0C:4B:B2:49:93"}}},"request":{"raw":"GET /wp-content/plugins/gp-premium/menu-plus/functions/js/offside.min.js?ver=2.5.0 HTTP/1.1\r\nHost: getvelocity.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://getvelocity.org/velocity-executor-v0-5-2/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 18 Oct 2025 07:59:42 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Tue, 18 Feb 2025 07:06:51 GMT\r\nvary: Accept-Encoding\r\netag: W/\"67b4318b-1a8b\"\r\ncache-control: public, max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":6795,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (6795), with no line terminators","md5":"2c8d926d887909904dab4316508bacc6","sha1":"455db3d80b61fefab3797bacd140f95229fa7518","sha256":"50fe1014e82dd9acea2f5b26061c8f135cb11ea0aa5d5ad5985e6b265b7f50a8","sha512":"8281e2ec7632f785570764ece44bfdb308fde7664af663669feb6c72c496ccc44ced9b5b5f7cfd1d55313aefa4ff1e19d9aad733fa75284a53523604ee9f070f","ssdeep":"192:cVABvuAZzR3rNjHOYzh2AWGVpPK5NBiNizDN:IARRnrNjuYzh2AWGVpPK5WQ/N","tlshash":"b0e187647160223500bb16db31ffd2c936f558deac16901538eace8d2db99cb12a1fe9","first_seen":"2023-03-29T23:12:02Z","last_seen":"2026-04-06T05:06:20.041322Z","times_seen":2798,"resource_available":true,"data":null}},"time_used":271,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":271,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"rashcolonizeexpand.com/impr.gif?sid=H4sIAAAAAAAC_1RTv28dRRedZ0df8X3FJwiC9hUpAGF7Zn8vKRAmJESEJEqCUiCK-bXPg_ftbHZ239quIiKhKKJ4DRJ06_OcWEDEj4YOFD2ni4TEo8FF3PAPgCKloELPsWS4xb3nzhmNzh2d-8l2c0B8NHz_8nt2y-Q5XwmXaf_l66ZQtnX9i9f6jC7T0_3rpoiC0_2NeapGrzM_WKav9M9puW5XPMooZZT1z5pKZ3Zj5ZCFKe-nbDmly4G3zMIAG9W_e9f04HgPanRAnodRs___nn0AI6coht-d0W69tuVrbw-bnNe2wkjtvl-sF7YtMDyGWdVDVuwe3YZ1M0I-X4Atdo8mgB3tzCeAMDOy8OJjiGL3SCbE6O4zpSKHLiDU_9COptD5HgyfQtpbMOoXAkiFi5dQDO9dtFXLN5-xfM7OyImnT2DaGTnx-AUUw29Wc7PRv2rzpja2cNjIOpiNKcxgirLZQ721ANPuQdYfw6ifycrTCyiGO5dcbmHU_imaRlyxJFhiOqZLAfWDJe5xvSTjgGZMB16s08MvMtkU3C2icT00pocm66Epexiq_X5Ak0Ay7kdZqmRMAx4ESguaJh6lPJUxGjnXPkZdjiHzMWR1E2V1E-tmjKp5ALe2_0PsRbGUUgmecBZFmqWUqjCRNPOSlDEqYik400zxjFEmEh1yL5aKZ1IlSZamTHAaM57yNElY6DEtAiklE0qrLAq9KNEeE2Hg-17giSgNY5mlXqCSJPakFipJBeWRUooKwWOtkjjgvmJpImmU0JBG6fx16jOZililnqcClvAYTvXgaoKR6tBqgtYRtJygNQRtTdCOursqd57r7qncNYIdVe-o-t3E1oNtftfWA10Q8GqMSnU7przhbkHWi5OtzKmJnScu6m7Cheq2ywPy3NwNvTunbmBd7_fTNJG-F2YqY6GfyExFnk91GHuUhpknGZzpYNwCuOthy8zIub2HKM2MnPrsLwi-B5fvQZpF8OYl8HYSewn4GlKKreLbga5HOrfS1JvLthpA2Q5lfQL1Zm87PyAnJ1eurT44NOeHv30KLR-Ro4CsOpRVh4_MQ4JBfntyxbZk54ptHfn-Ulmbodnic-NerXmt__PVu3qztZU6f8aNv3xTzok5vH9Nu_oCL5QpBo58vWqU0tVZW0lNfjzvrmtxuXFrq01VNOWFy2-dPT8sK-2cscUU3MzIf_-8A2lm5ORPXxwuZfjqfcjyJlx5rNNZAlES5IYg18fnXHRw_-jFMd52tzGoeuD1LRTDDqOqwyjvwPMxXLM4qcvq0Ru_-ocBkfcmIq_IjsirOW_2-5mvPUlpEkfMTzLN_EDJLEyCVEWc-r5G7WZrT9754-8AAAD__50OX-8yBQAA","fqdn":"rashcolonizeexpand.com","domain":"rashcolonizeexpand.com","tld":"com"},"ip":{"addr":"172.240.127.234","port":443,"asn":7979,"as":"SERVERS-COM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://getvelocity.org/velocity-executor-v0-5-2/","date":"2025-10-18T07:59:44.383Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"rashcolonizeexpand.com","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Wed, 27 Aug 2025 21:51:30 GMT","end":"Tue, 25 Nov 2025 21:51:29 GMT"},"fingerprint":{"sha1":"1E:45:CB:7E:7C:E7:1E:08:73:0A:D3:08:B4:74:21:2F:CA:B6:15:9B","sha256":"54:F3:5A:C9:08:4C:76:26:F7:0E:BF:E0:3F:5B:38:DD:53:CF:95:81:0B:FC:C7:F9:6A:3E:9C:1A:6E:33:92:E0"}}},"request":{"raw":"GET /impr.gif?sid=H4sIAAAAAAAC_1RTv28dRRedZ0df8X3FJwiC9hUpAGF7Zn8vKRAmJESEJEqCUiCK-bXPg_ftbHZ239quIiKhKKJ4DRJ06_OcWEDEj4YOFD2ni4TEo8FF3PAPgCKloELPsWS4xb3nzhmNzh2d-8l2c0B8NHz_8nt2y-Q5XwmXaf_l66ZQtnX9i9f6jC7T0_3rpoiC0_2NeapGrzM_WKav9M9puW5XPMooZZT1z5pKZ3Zj5ZCFKe-nbDmly4G3zMIAG9W_e9f04HgPanRAnodRs___nn0AI6coht-d0W69tuVrbw-bnNe2wkjtvl-sF7YtMDyGWdVDVuwe3YZ1M0I-X4Atdo8mgB3tzCeAMDOy8OJjiGL3SCbE6O4zpSKHLiDU_9COptD5HgyfQtpbMOoXAkiFi5dQDO9dtFXLN5-xfM7OyImnT2DaGTnx-AUUw29Wc7PRv2rzpja2cNjIOpiNKcxgirLZQ721ANPuQdYfw6ifycrTCyiGO5dcbmHU_imaRlyxJFhiOqZLAfWDJe5xvSTjgGZMB16s08MvMtkU3C2icT00pocm66Epexiq_X5Ak0Ay7kdZqmRMAx4ESguaJh6lPJUxGjnXPkZdjiHzMWR1E2V1E-tmjKp5ALe2_0PsRbGUUgmecBZFmqWUqjCRNPOSlDEqYik400zxjFEmEh1yL5aKZ1IlSZamTHAaM57yNElY6DEtAiklE0qrLAq9KNEeE2Hg-17giSgNY5mlXqCSJPakFipJBeWRUooKwWOtkjjgvmJpImmU0JBG6fx16jOZililnqcClvAYTvXgaoKR6tBqgtYRtJygNQRtTdCOursqd57r7qncNYIdVe-o-t3E1oNtftfWA10Q8GqMSnU7przhbkHWi5OtzKmJnScu6m7Cheq2ywPy3NwNvTunbmBd7_fTNJG-F2YqY6GfyExFnk91GHuUhpknGZzpYNwCuOthy8zIub2HKM2MnPrsLwi-B5fvQZpF8OYl8HYSewn4GlKKreLbga5HOrfS1JvLthpA2Q5lfQL1Zm87PyAnJ1eurT44NOeHv30KLR-Ro4CsOpRVh4_MQ4JBfntyxbZk54ptHfn-Ulmbodnic-NerXmt__PVu3qztZU6f8aNv3xTzok5vH9Nu_oCL5QpBo58vWqU0tVZW0lNfjzvrmtxuXFrq01VNOWFy2-dPT8sK-2cscUU3MzIf_-8A2lm5ORPXxwuZfjqfcjyJlx5rNNZAlES5IYg18fnXHRw_-jFMd52tzGoeuD1LRTDDqOqwyjvwPMxXLM4qcvq0Ru_-ocBkfcmIq_IjsirOW_2-5mvPUlpEkfMTzLN_EDJLEyCVEWc-r5G7WZrT9754-8AAAD__50OX-8yBQAA HTTP/1.1\r\nHost: rashcolonizeexpand.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: ain=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.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.AeIGOPorg_sZBlmbIkyEoxsniynLf_G2a7-CHOvP_WY; uid_id2=096ad184-1e70-4034-a2ae-c740f1e427e9:3:1; pdhtkv=true; uncs=1; pdhtkv23=true; uncs23=1; u_pl25830513=1\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/1.1 200 OK\r\nServer: nginx/1.21.6\r\nDate: Sat, 18 Oct 2025 07:59:44 GMT\r\nContent-Type: image/gif\r\nContent-Length: 7\r\nConnection: keep-alive\r\naccess-control-allow-origin: *\r\nvary: Origin\r\naccess-control-allow-credentials: true\r\np3p: CP=\"IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT\"\r\naccept-ch: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA\r\nx-envoy-upstream-service-time: 3\r\nHost: rashcolonizeexpand.com\r\nExpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nX-Request-ID: dd3c8e9872dd828657e8ae11dfaafce9\r\nCache-Control: no-cache, max-age=0, private, no-cache\r\nPragma: no-cache\r\nStrict-Transport-Security: max-age=0; includeSubdomains\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx:1.21.6","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Envoy","description":"Envoy is an open-source edge and service proxy, designed for cloud-native applications.","website":"https://www.envoyproxy.io/","common_platform_enumeration":"cpe:2.3:a:envoyproxy:envoy:*:*:*:*:*:*:*:*","icon":"Envoy.png","categories":["Reverse proxies"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"image/gif","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-06T05:11:47.473796Z","times_seen":13406904,"resource_available":true,"data":null}},"time_used":99,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":99,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2025-10-18","alert":"Sinkholed","trigger":"rashcolonizeexpand.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2025-10-18","alert":"Sinkholed","trigger":"rashcolonizeexpand.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2025-10-18","alert":"Sinkholed","trigger":"rashcolonizeexpand.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"getvelocity.org/wp-content/plugins/breeze/assets/js/js-front-end/breeze-prefetch-links.min.js?ver=2.2.2","fqdn":"getvelocity.org","domain":"getvelocity.org","tld":"org"},"ip":{"addr":"161.35.143.48","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://getvelocity.org/velocity-executor-v0-5-2/","date":"2025-10-18T07:59:42.833Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"getvelocity.org","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Tue, 19 Aug 2025 09:34:44 GMT","end":"Mon, 17 Nov 2025 09:34:43 GMT"},"fingerprint":{"sha1":"7C:89:FF:97:D8:58:E5:1E:42:78:4C:C7:09:29:5D:00:D5:C2:08:19","sha256":"79:0D:D7:E1:DB:7B:45:5D:69:CD:03:2A:99:2C:47:7F:26:53:62:85:BC:05:15:A2:F5:3A:8A:0C:4B:B2:49:93"}}},"request":{"raw":"GET /wp-content/plugins/breeze/assets/js/js-front-end/breeze-prefetch-links.min.js?ver=2.2.2 HTTP/1.1\r\nHost: getvelocity.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://getvelocity.org/velocity-executor-v0-5-2/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 18 Oct 2025 07:59:42 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Mon, 17 Feb 2025 01:55:15 GMT\r\nvary: Accept-Encoding\r\netag: W/\"67b29703-559\"\r\ncache-control: public, max-age=31536000\r\ncontent-encoding: gzip\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1369,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (1324)","md5":"496a14cf382a27af8cbc49bfa99584bb","sha1":"ae328b516de9a4a1836b897f4b4a5c9deeeb51d4","sha256":"fb08df814c344a8e54c8c1869a160670bb397a20a68ca8e2d997aee849632c60","sha512":"172ea48bd3216f24fa74482ddc1473f8dddfd58a2e7159ce27c50a21647ff6073f4ca0fcc76d39b9ad04974646e90aca687ab39f4f5bfb4026d27147f48f5397","ssdeep":"","tlshash":"8e2166a5ffe410f755c24df4d26ea700707aa4951849c1e0b918fa055d2cfd7201bceb","first_seen":"2025-02-06T17:25:32.640758Z","last_seen":"2026-04-06T00:59:40.854111Z","times_seen":442,"resource_available":true,"data":null}},"time_used":285,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":285,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"s.w.org/images/core/emoji/16.0.1/svg/1f680.svg","fqdn":"s.w.org","domain":"w.org","tld":"org"},"ip":{"addr":"192.0.77.48","port":443,"asn":2635,"as":"AUTOMATTIC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://getvelocity.org/velocity-executor-v0-5-2/","date":"2025-10-18T07:59:43.808Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"s.w.org","organization":""},"issuer":{"commonName":"E8","organization":"Let's Encrypt"},"validity":{"start":"Wed, 27 Aug 2025 19:44:40 GMT","end":"Tue, 25 Nov 2025 19:44:39 GMT"},"fingerprint":{"sha1":"1F:8D:28:3F:BE:E3:7F:80:0F:AA:45:06:98:87:1D:E9:CA:E1:11:4F","sha256":"AD:CC:CD:64:B6:6F:C9:5B:27:CA:75:DA:4D:1D:57:41:30:6E:12:A2:0D:2E:E8:69:49:40:DD:EE:56:9E:7F:9E"}}},"request":{"raw":"GET /images/core/emoji/16.0.1/svg/1f680.svg HTTP/1.1\r\nHost: s.w.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://getvelocity.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 18 Oct 2025 07:59:43 GMT\r\ncontent-type: image/svg+xml\r\nlast-modified: Tue, 27 May 2025 09:57:55 GMT\r\nvary: Accept-Encoding\r\nx-frame-options: SAMEORIGIN\r\ncontent-encoding: br\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccess-control-allow-methods: GET, HEAD\r\naccess-control-allow-origin: *\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-nc: HIT arn 13\r\nserver-timing: a8c-cdn, dc;desc=arn, cache;desc=HIT;dur=0.0\r\nx-content-type-options: nosniff\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":677,"size_decoded":0,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"748ff0e7b2f1f22adecad8463de25945","sha1":"aa0d4e6225e9c5ecf65488ac43b9484226a798e8","sha256":"3892ef66f49ce43d49c8719e9277da0e0e821059f0cc239a549f6629cc12b3cf","sha512":"46ab91e8dd016495b59beab5bd52adab9bda22212d86eed166f3e788b5d6efa21b0b84c1689611811f62121d04cfe0955524b3a22bd60fb002927b026631f9bd","ssdeep":"","tlshash":"7a01f4d514bcb1a58b02d3b89f787dc0100a727f729b048190c484a45187adfaa45820","first_seen":"2023-04-16T15:02:53Z","last_seen":"2026-04-06T05:12:21.097372Z","times_seen":2316,"resource_available":false,"data":null}},"time_used":156,"timings":{"blocked":71,"dns":34,"connect":7,"send":0,"wait":11,"receive":0,"ssl":28},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"getvelocity.org/wp-content/plugins/social-icons-widget-by-wpzoom/assets/font/fontawesome-webfont.woff2?v=4.7.0","fqdn":"getvelocity.org","domain":"getvelocity.org","tld":"org"},"ip":{"addr":"161.35.143.48","port":443,"asn":14061,"as":"DIGITALOCEAN-ASN","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://getvelocity.org/velocity-executor-v0-5-2/","date":"2025-10-18T07:59:42.828Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"getvelocity.org","organization":""},"issuer":{"commonName":"R11","organization":"Let's Encrypt"},"validity":{"start":"Tue, 19 Aug 2025 09:34:44 GMT","end":"Mon, 17 Nov 2025 09:34:43 GMT"},"fingerprint":{"sha1":"7C:89:FF:97:D8:58:E5:1E:42:78:4C:C7:09:29:5D:00:D5:C2:08:19","sha256":"79:0D:D7:E1:DB:7B:45:5D:69:CD:03:2A:99:2C:47:7F:26:53:62:85:BC:05:15:A2:F5:3A:8A:0C:4B:B2:49:93"}}},"request":{"raw":"GET /wp-content/plugins/social-icons-widget-by-wpzoom/assets/font/fontawesome-webfont.woff2?v=4.7.0 HTTP/1.1\r\nHost: getvelocity.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://getvelocity.org/velocity-executor-v0-5-2/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Sat, 18 Oct 2025 07:59:42 GMT\r\ncontent-type: application/font-woff2\r\ncontent-length: 77160\r\nlast-modified: Mon, 17 Feb 2025 02:07:48 GMT\r\netag: \"67b299f4-12d68\"\r\ncache-control: public, max-age=31536000\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":77160,"size_decoded":0,"mime_type":"application/font-woff2","magic":"Web Open Font Format (Version 2), TrueType, length 77160, version 4.459","md5":"af7ae505a9eed503f8b8e6982036873e","sha1":"d6f48cba7d076fb6f2fd6ba993a75b9dc1ecbf0c","sha256":"2adefcbc041e7d18fcf2d417879dc5a09997aa64d675b7a3c4b6ce33da13f3fe","sha512":"838fefdbc14901f41edf995a78fdac55764cd4912ccb734b8bea4909194582904d8f2afdf2b6c428667912ce4d65681a1044d045d1bc6de2b14113f0315fc892","ssdeep":"1536:/MkbAPfd1vyBKwHz4kco36ZvIaBfRPlajyXUA2jVTc:L0nXnHdfRVEAS2","tlshash":"7d7302e63b6c4943e03d6460708abe9f104b3ab42fe057e5c876db7f2722992b71552c","first_seen":"2023-04-05T03:30:47Z","last_seen":"2026-04-06T05:11:39.58951Z","times_seen":414589,"resource_available":true,"data":null}},"time_used":392,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":291,"receive":101,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fwww.google.com%2Ffavicon.ico\u0026dsh=S2015982656%3A1760774384537136\u0026hl=en\u0026ifkv=AfYwgwU63KK3-Cj_b2z1vR9rKpBXFlsWBdvVZqaAoFkhYCCjnWDj-Pwx43slQjSidaSvknQUotWqJg\u0026passive=true\u0026service=mail\u0026uilel=3\u0026flowName=GlifWebSignIn\u0026flowEntry=ServiceLogin","fqdn":"accounts.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"173.194.221.84","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://getvelocity.org/velocity-executor-v0-5-2/","date":"2025-10-18T07:59:44.617Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"accounts.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 22 Sep 2025 08:42:48 GMT","end":"Mon, 15 Dec 2025 08:42:47 GMT"},"fingerprint":{"sha1":"B8:19:CD:6B:C9:17:D6:19:47:43:3F:1E:4F:ED:FC:03:B7:CA:02:F6","sha256":"B2:36:8A:F6:ED:83:58:AB:24:95:A4:DA:77:3B:10:3C:CB:CB:99:B1:2A:25:1B:AB:51:A5:E7:2A:DD:6F:68:D6"}}},"request":{"raw":"GET /v3/signin/identifier?continue=https%3A%2F%2Fwww.google.com%2Ffavicon.ico\u0026dsh=S2015982656%3A1760774384537136\u0026hl=en\u0026ifkv=AfYwgwU63KK3-Cj_b2z1vR9rKpBXFlsWBdvVZqaAoFkhYCCjnWDj-Pwx43slQjSidaSvknQUotWqJg\u0026passive=true\u0026service=mail\u0026uilel=3\u0026flowName=GlifWebSignIn\u0026flowEntry=ServiceLogin HTTP/1.1\r\nHost: accounts.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nReferer: https://getvelocity.org/\r\nDNT: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 403 Forbidden\r\ncontent-type: text/html; charset=utf-8\r\ncache-control: no-cache, no-store, max-age=0, must-revalidate\r\npragma: no-cache\r\nexpires: Mon, 01 Jan 1990 00:00:00 GMT\r\ndate: Sat, 18 Oct 2025 07:59:44 GMT\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"AccountsSignInUi\"\r\npermissions-policy: ch-ua-arch=*, ch-ua-bitness=*, ch-ua-full-version=*, ch-ua-full-version-list=*, ch-ua-model=*, ch-ua-wow64=*, ch-ua-form-factors=*, ch-ua-platform=*, ch-ua-platform-version=*\r\naccept-ch: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version\r\ncontent-security-policy: script-src 'nonce-YmWsk97IkKJPLyM3kGQW2Q' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /v3/signin/_/AccountsSignInUi/cspreport;worker-src 'self', script-src 'unsafe-inline' 'unsafe-eval' blob: data: 'self' https://apis.google.com https://ssl.gstatic.com https://www.google.com https://www.googletagmanager.com https://www.gstatic.com https://www.google-analytics.com https://www.google.com/tools/feedback/ https://www.gstatic.com/feedback/js/ https://www.gstatic.com/inproduct_help/ https://www.gstatic.com/support/content/ https://www.gstatic.com/uservoice/feedback/client/web/live/ https://www.gstatic.com/uservoice/surveys/resources/prod/js/survey/ https://support.google.com/inapp/;report-uri /v3/signin/_/AccountsSignInUi/cspreport/allowlist, require-trusted-types-for 'script';report-uri /v3/signin/_/AccountsSignInUi/cspreport\r\ncontent-security-policy-report-only: script-src 'unsafe-inline' 'unsafe-eval' blob: data: https://ajax.googleapis.com/ajax/libs/jquery/3.6.4/jquery.min.js https://translate.google.com/translate_a/element.js https://www.google.com/recaptcha/api.js https://www.google.com/recaptcha/enterprise.js https://www.gstatic.com/recaptcha/ https://www.google.com/tools/feedback/chat_load.js https://www.google.com/tools/feedback/help_api.js https://www.google.com/tools/feedback/load.js https://www.google.com/tools/feedback/open.js https://www.google.com/tools/feedback/open_to_help_guide_lazy.js https://www.gstatic.com/feedback/js/ https://www.gstatic.com/feedback/js/help/prod/service/lazy.min.js https://www.gstatic.com/inproduct_help/api/main.min.js https://www.gstatic.com/inproduct_help/chatsupport/chatsupport_button_v2.js https://www.gstatic.com/inproduct_help/service/lazy.min.js https://www.gstatic.com/uservoice/feedback/client/web/live/ https://www.gstatic.com/uservoice/surveys/resources/prod/js/survey/ https://www.gstatic.com/_/mss/boq-one-google/_/ https://www.gstatic.com/og/_/js/ https://apis.google.com/js/api.js https://apis.google.com/js/client.js https://www.googletagmanager.com/gtag/js https://www.google-analytics.com/analytics.js https://www.googletagmanager.com/gtag/destination https://www.gstatic.com/_/mss/boq-identity/_/js/k=boq-identity.AccountsSignInUi.en.OhYC1t3tRm4.es5.O/ https://apis.google.com/_/scs/abc-static/_/js/ https://translate.googleapis.com/_/translate_http/_/js/ https://www.gstatic.com/recaptcha/releases/;report-uri /v3/signin/_/AccountsSignInUi/cspreport/fine-allowlist\r\nreport-to: {\"group\":\"AccountsSignInUi\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/AccountsSignInUi\"}]}\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"403","status_text":"Forbidden","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-06T05:11:47.473796Z","times_seen":13406904,"resource_available":true,"data":null}},"time_used":47,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":47,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}