{"report_id":"ab8ce104-9632-473b-9b2c-6f139d45f81b","version":0,"status":"done","tags":[],"date":"2026-10-08T04:26:49Z","url":{"schema":"http","addr":"almaei-hr.com/","fqdn":"almaei-hr.com","domain":"almaei-hr.com","tld":"com"},"ip":{"addr":"157.180.2.34","port":0,"asn":24940,"as":"Hetzner Online GmbH","country":"Finland","country_code":"FI"},"final":{"url":{"schema":"https","addr":"almaei-hr.com/","fqdn":"almaei-hr.com","domain":"almaei-hr.com","tld":"com"},"title":"حمیدرضا المعی – وبسایت شخصی حمیدرضا المعی","dom":{"size":45572,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (1688)","md5":"16f1836ac0b5dd41ec375bedc6ff8cf9","sha1":"635dc9f91f28baaebf8c1602b485c6d56c340116","sha256":"b141378cc26e7f2007390ebc388e2610d4598fbdd8e51ec29d9da7a9fdd3f9e0","sha512":"af272cbe1750ade5a1145652987bbf944287ac8962d7442019b72c4dc7e6f10bb54dd70c0e65eebacbd19b33a6c91284db1544cc50132f304afcd8cc0073ad5d","ssdeep":"768:f/dRiEtGxnfmqoYSbEKSSSS0zSSSSeY4w8yLR7rGOGKsWsrgfwnJ:f/dRiEtGxnfmqoYSbEKSSSSmSSSSx4zt","tlshash":"78231eb2649d1d3b0603c6d390513299e6ab9e36d72be481b6b307594fc6f43ab0f235","dom_hash":"domhash4b74dec2fbd7c501a59ba358c9120685","first_seen":"2026-10-08T04:18:32.910436Z","last_seen":"2026-10-08T04:26:52.39205Z","times_seen":2,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"almaei-hr.com/","fqdn":"almaei-hr.com","domain":"almaei-hr.com","tld":"com"},"ip":{"addr":"157.180.2.34","port":0,"asn":24940,"as":"Hetzner Online GmbH","country":"Finland","country_code":"FI"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-11-12T04:26:49Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":3}},"detection":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"almaei-hr.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"almaei-hr.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"almaei-hr.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null},"summary":[{"fqdn":"almaei-hr.com","ip":{"addr":"157.180.2.34","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"domain_registered":"2019-07-25","domain_rank":0,"first_seen":"2026-10-08T04:18:27.080694Z","last_seen":"2026-10-08T04:18:27.080694Z","alert_count":102,"request_count":34,"received_data":1190152,"sent_data":17305,"comment":"","tags":null,"fingerprints":[{"name":"parallax.js:4.9.26","description":"Simple parallax scrolling effect.","website":"https://github.com/pixelcog/parallax.js","common_platform_enumeration":"","icon":"","categories":["JavaScript libraries"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Bootstrap","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]},{"name":"jQuery:1.12.4","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"particles.js","description":"Particles.js is a JavaScript library for creating particles.","website":"https://github.com/VincentGarreau/particles.js","common_platform_enumeration":"","icon":"","categories":["JavaScript graphics"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]},{"name":"OWL Carousel","description":"OWL Carousel is an enabled jQuery plugin that lets you create responsive carousel sliders.","website":"https://owlcarousel2.github.io/OwlCarousel2/","common_platform_enumeration":"","icon":"OWL Carousel.png","categories":["JavaScript libraries"]},{"name":"WOW:4.9.26","description":"Reveal CSS animation as you scroll down a page.","website":"https://www.delac.io/WOW","common_platform_enumeration":"","icon":"","categories":["JavaScript frameworks","Web frameworks","JavaScript graphics"]},{"name":"WordPress:4.9.26","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"Magnific Popup:4.9.26","description":"Magnific Popup is a responsive lightbox \u0026 dialog script with focus on performance and providing best experience for user with any device.","website":"https://dimsemenov.com/plugins/magnific-popup/","common_platform_enumeration":"","icon":"Magnific Popup.png","categories":["JavaScript libraries"]},{"name":"YouTube","description":"YouTube is a video sharing service where users can create their own profile, upload videos, watch, like and comment on other videos.","website":"https://www.youtube.com","common_platform_enumeration":"","icon":"YouTube.png","categories":["Video players"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"almaei-hr.com/wp-content/themes/idol/assets/js/bootstrap.min.js?ver=4.9.26","fqdn":"almaei-hr.com","domain":"almaei-hr.com","tld":"com"},"ip":{"addr":"157.180.2.34","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":false,"md5":"fc6f0acd7dc4cfeebdf0f5f5bc42eb22","sha1":"8e330d542c72c1acea329fd2d5deeb0c89126576","sha256":"8d305146449ba0f4fe550ce0d90b89b1fbd145c1e6efbed6a112c3a82eefa2e8","sha512":"d70e10fabe38709df847bd90405dd5d7bfee8787daa26bf8845a97121a530a3f415a0bf3e088face359df68eee6f2df3cf2c2c5152107a8a3bac08be9e236844","ssdeep":"768:p2rGy27UwlNqMl95qNmCFeNh0Z8snmi+CSFXPlx8Gf3Zq7Q:Yg73dh0ZG/lJ3ZKQ","tlshash":"b9f28606b23031a147efb1e1525b020e72396a6ee906907c78b99af53db5c48717bf3d","size":37249,"data":"","first_seen":"2023-03-12T16:40:41Z","last_seen":"2026-10-08T04:26:52.413012Z","times_seen":21,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"almaei-hr.com/wp-content/themes/idol/assets/js/magnific-popup.min.js?ver=4.9.26","fqdn":"almaei-hr.com","domain":"almaei-hr.com","tld":"com"},"ip":{"addr":"157.180.2.34","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":false,"md5":"95cde8fa56b25aad0d8116d0f8b27187","sha1":"27e4df74cb10e5d4c6c9d17a6489274795239950","sha256":"1bec77eccb01b598b3a5e1d3299f231a1ef855489f766eee3584f97ee4a3ae35","sha512":"a7b4643012b072d563ea94f717d42931c84d9f17e561ce6240a2e9fff355bb16d0af210f3f0750d15a60d6f6ee844e1d88f5f5a3005838dc41bab685af0ba2fd","ssdeep":"384:iPhVPXQ2G2XAQyqVxRQ5giCCMLtA15h5/F6l8aZwHwztLCpMst:iPBIt8I5h5t1qkOLCist","tlshash":"c7921894f2b2b21383a735b8686f70093a729952ed06c855b55d94d87efcec89027f3c","size":20226,"data":"","first_seen":"2026-10-08T04:18:32.936121Z","last_seen":"2026-10-08T04:26:52.413607Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"almaei-hr.com/wp-content/themes/idol/assets/js/owl.carousel.min.js?ver=4.9.26","fqdn":"almaei-hr.com","domain":"almaei-hr.com","tld":"com"},"ip":{"addr":"157.180.2.34","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":false,"md5":"b7b9c97cd68ec336d01a79d5be48c58d","sha1":"1a99890b57c9859a622337ed0b2f989d6e30cc0e","sha256":"b394d33b2a7ec654a6b037ebfda6618341b3f897a362be624c923c2711b54a43","sha512":"968e18822c24c6c54827999ec766fe54750a9489d22b6a45b641854731ec00beb8fd93b9bda8823e67463f7a99ab587d333673821ae90cfdf7e92716ba050c4e","ssdeep":"768:JBA7PMMFA0tdlXKNSR4vlGRep2lcwJeL+C2jQdc7/CORUQuFBt33:HAIMFFdYMxAcLQDV","tlshash":"cb137346b3202d2a869b61a0663f160bb23a291ce414507d7d7da6de6d7dc4c213fbfc","size":42766,"data":"","first_seen":"2023-03-07T01:03:18Z","last_seen":"2026-10-08T06:47:03.275149Z","times_seen":21433,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"almaei-hr.com/wp-content/themes/idol/assets/js/particles.min.js?ver=4.9.26","fqdn":"almaei-hr.com","domain":"almaei-hr.com","tld":"com"},"ip":{"addr":"157.180.2.34","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":false,"md5":"00debcf6cf0789a19cee2278011afcd4","sha1":"8017f8b1869077db728573f1ca4684a00af69462","sha256":"faee7815a5fd27e938d1e01c8392b66332024908eb118048f608eee671371df6","sha512":"29e7f9b1cee07d369c47b4d929e95cad1b35e62a5fefeb7e9fb661ea628d25b996fbf4517425bd9f07cb9f8617d2cda73ba2afe58d8286a8086a4682e8f5b4f4","ssdeep":"384:NkfJtGvWjT6uYvqhCz8wSEHESxtVAFPQcYpeib+9rOEKXWd/:NC7T6uYvn8wRxwyryVOEKXW5","tlshash":"61a2934d23f73e77378ab2e09be9d122c774a4d1399b04b0f93c667da52549201ee7a0","size":23364,"data":"","first_seen":"2023-03-07T01:16:44Z","last_seen":"2026-10-08T04:26:52.41238Z","times_seen":5942,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"almaei-hr.com/wp-content/themes/idol/assets/js/parallax.min.js?ver=4.9.26","fqdn":"almaei-hr.com","domain":"almaei-hr.com","tld":"com"},"ip":{"addr":"157.180.2.34","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":false,"md5":"81e0b0f668eacf2a03a6837d1725b5e4","sha1":"fc5ccfb2acc1373fe0bc98deb05cf17527308932","sha256":"01a1f3673b0aded595d51abe806812fb9385fa22f1fff9ebd33ab7f422caab30","sha512":"0dbd90c9e97d90c1018931089b5e8f6c1f8923b1ee24cc4e489722ae12e1bc3f8efe551c542867389213b26eef62d09015b1fc1ea2dd77907c6503071bb9cccb","ssdeep":"","tlshash":"193145a8339f3105c876636f5a3f935cf23bd15184878020d9aee46c3950a2b77b1da8","size":1837,"data":"","first_seen":"2023-03-07T01:29:00Z","last_seen":"2026-10-08T04:26:52.416732Z","times_seen":494,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"almaei-hr.com/wp-content/themes/idol/assets/js/scripts.js?ver=4.9.26","fqdn":"almaei-hr.com","domain":"almaei-hr.com","tld":"com"},"ip":{"addr":"157.180.2.34","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":false,"md5":"d044423f94128b37f443bcdf334f4a28","sha1":"c40f37738b84a7d9131ddbfff6d3d3192baee36a","sha256":"007e6a6cb83801aa0bb05ecd45e41b11a4f6c49a09d8e4e8a8d54f273d81c79d","sha512":"c59568c7c22bbacd2b67c6baafdc7e2c140c5108c9e48a733a6149ad210bfcaa4205853693617efcd0a0ba2d53889f48e4a6b00e93390b3853ae5017ecd1a4d6","ssdeep":"48:z5R7nvlOups/Tnw/w3dtMfaNFmX/qPsvcvTogAj2Do3QmyNvK7+tsG09pHhvf5kq:bRZ0TqSFfvMgAjXAmyNvKqSSmCJeZ9","tlshash":"c3c141443fafa07e16fbf219863e9941df2dc032810713b1b9ba46289c28369524ed7c","size":6004,"data":"","first_seen":"2026-10-08T04:18:32.957325Z","last_seen":"2026-10-08T04:26:52.396482Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"almaei-hr.com/wp-includes/js/wp-emoji-release.min.js?ver=4.9.26","fqdn":"almaei-hr.com","domain":"almaei-hr.com","tld":"com"},"ip":{"addr":"157.180.2.34","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":false,"md5":"fe0575b66568074463f12485d90f6d4c","sha1":"aeedd9ab3b7874e63f647042963cb1301a38b391","sha256":"647a6b36f3fd1f21bae171270111096b4613c23a47e6621628a51bae9c82b0b7","sha512":"0d209cbc9550cfcf49ca7ca5a1243e1578c0a42f9fb28c1fa8d353cea26f24eed282547f47fe858126e1ba9a4aa4d8ddbd2cbdef9db5a45f24cfbfd6383bff9e","ssdeep":"192:WuKiKqdccoXJW+TJr3J//bEvAbWXXR6AooHyrOUVsbEJEoesM0m3dJXWP/2//:0qlkJW+TJr3J//bEI+XgA5UCOeffJmW3","tlshash":"8032229f732b5f9b743e36db8e96cf4d95d949932580e038cafef68129e005983b4850","size":11943,"data":"","first_seen":"2023-03-07T01:02:46Z","last_seen":"2026-10-08T04:26:52.407734Z","times_seen":7428,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"almaei-hr.com/wp-includes/js/wp-embed.min.js?ver=4.9.26","fqdn":"almaei-hr.com","domain":"almaei-hr.com","tld":"com"},"ip":{"addr":"157.180.2.34","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":false,"md5":"43928880ff5ebadcd513755b011732cd","sha1":"d0fdb17db490123ed700c2caa5d2d764794cb6d5","sha256":"37c5f58f12814dd0ecc28f15b7765c6bcd31a9479d330b4ef896e140bf89dc38","sha512":"ba9ec90a842c0aad802294c3fe144c0ed737e51586ed19dc15dcf518dd0c9790e6ba5a1a8bc9e8a09d48cac3941df65c4d1d77b3b79d76a6cfac9b306c2da710","ssdeep":"","tlshash":"4d21526a3239d43e54e715d3bc8435cad2b21be9a85200d14a798848f5a8f93886afe1","size":1443,"data":"","first_seen":"2023-05-16T22:20:04Z","last_seen":"2026-10-08T04:26:52.404338Z","times_seen":16378,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"almaei-hr.com/","fqdn":"almaei-hr.com","domain":"almaei-hr.com","tld":"com"},"ip":{"addr":"157.180.2.34","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":true,"md5":"e8a88b40933891da3771e6cadc7afd33","sha1":"3e24824b2eadf03a3a5f890a2534bc7ac9cad72f","sha256":"e032b1cbf2da634dc09beb56176a059f52a39d4f63b9dcb638abfeaf7c1c29ef","sha512":"cefa285febe7b2533ccebf53f7e78f5c1709f8c8a9ca79306bf69b0162dc4180c6195531ef271d543a1ecbf44e656477f8f7dbecf4d4b0486cdc08b0946d51a0","ssdeep":"","tlshash":"7541107a3b95645966f208b3f12f2f0f3f2545070089aa368599e9b0283ede1c0fad1d","size":1977,"data":"","first_seen":"2026-10-08T04:18:32.966846Z","last_seen":"2026-10-08T04:26:52.418418Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"almaei-hr.com/wp-content/themes/idol/assets/js/jquery-1.12.4.min.js?ver=4.9.26","fqdn":"almaei-hr.com","domain":"almaei-hr.com","tld":"com"},"ip":{"addr":"157.180.2.34","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":false,"md5":"618538b4ab9639d444e962729a927f15","sha1":"dacc1f76630a9708add066819b1aabf8dce01056","sha256":"27d92130c0321dad5a03760fd5ac98a3d04ed4c94d88418fe6d50da1f7fc5cbe","sha512":"bcb6754ea246939a19a917cc0b810e1753c1b0f1a8b1b7e652128ef15dee4fc79111e4d88fe12f9188449a307e82240d0261af402d783428edfe5785c860372d","ssdeep":"1536:jYE1JVoiB9JqZdXXe2pD3PgoIiulrUdTJ5Fk/zkZ4HjL5o8srOaS9TwDhb7/Jp96:y4J+03jL5TCOauTwDhFdnCVQNLa98Hrc","tlshash":"9693d7d9b6d6706287b734a851bf410bb17aa8eab40c4c60f058c8e47e74e9d507bf2d","size":97168,"data":"","first_seen":"2023-03-07T01:12:12Z","last_seen":"2026-10-08T04:26:52.416269Z","times_seen":6004,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"almaei-hr.com/wp-content/themes/idol/assets/js/isotope.pkgd.min.js?ver=4.9.26","fqdn":"almaei-hr.com","domain":"almaei-hr.com","tld":"com"},"ip":{"addr":"157.180.2.34","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":false,"md5":"39258d5d7a1a2c1df44cb3a40e494e9a","sha1":"a6a23845c95b5551c3ad8850365b5200331e46ab","sha256":"f96151453bf5b861219fab32920589c930580c4f1c427f2e023e7429e7e9f482","sha512":"54304e2250dbb82e155b1189366b85450d0b8b448a903a661b2ba1006e4b4c32ddfdd27f4b458c571ae247663e0b23cbe60ce3a4de1fffa8aa595049961b74b5","ssdeep":"768:NMAyxzGdHc1zfA9ZVP4eAnmc6FumKSsCD6rD6G2UfdEhCDz2wK1Fxt:Mx6dOjARP4Nnmc6FuCsCD6rD6yVEQDzW","tlshash":"25f2d84f73403925468bf166926f160fb137e56c6a4690acba6ad8db1c79c0d6033fbc","size":35313,"data":"","first_seen":"2023-03-07T01:18:00Z","last_seen":"2026-10-08T04:26:52.407121Z","times_seen":3411,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"almaei-hr.com/wp-content/themes/idol/assets/js/app.js?ver=4.9.26","fqdn":"almaei-hr.com","domain":"almaei-hr.com","tld":"com"},"ip":{"addr":"157.180.2.34","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":false,"md5":"febca5d7ed03cc56633f5000236d3ed4","sha1":"da0d3f8785facc9cb4eb05c3801abb72dc2a180f","sha256":"4b6a9b5ef074dee7a579a70c8fe9f91c0b5192da0bf8bbca33c0ed76fac994ad","sha512":"762271e6d6cacb32028537c9b1777e0fa076ca663734293cfff8363e9c72757d7f8fd826df51e3f49f588e21677b5e507877ff96462faa0cd1400990e902e8aa","ssdeep":"","tlshash":"69512329edf41db3105af03508be5247f530895b4d1a3d3aba4c429c5f0ea2d61be7e9","size":2815,"data":"","first_seen":"2026-10-08T04:18:32.956204Z","last_seen":"2026-10-08T04:26:52.403747Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"almaei-hr.com/wp-content/themes/idol/assets/js/wow.min.js?ver=4.9.26","fqdn":"almaei-hr.com","domain":"almaei-hr.com","tld":"com"},"ip":{"addr":"157.180.2.34","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":false,"md5":"36050285bfeeb7395752f0f9bbc08273","sha1":"5924f7bbbf1dfa3f0926851d01f782f23a59e805","sha256":"0ec632e6ab02d4fdd514da7f5edc74aa28c9d4c71af76f1c8b93a1fba85bcc69","sha512":"bf887e087c52583114b77bfb417d7dffa0ee8634d39155af14591a24b2add9ef4c8a0c0555364122800d07a55f5f1fb0c723b39541b069a437ff558ddbf380a3","ssdeep":"96:UrZgL1xvPV6GqKgR6TYLWHFMLJA6pOROVEE1fosvGeaMozHImBaoqbl:Ury9PVfIFrlAJROVEEdos+eatzHILoA","tlshash":"750267c97a967031d75796f6833f0106b6361aeeb028047cb5b88dd57c78868523bf38","size":8415,"data":"","first_seen":"2023-03-07T01:02:45Z","last_seen":"2026-10-08T07:19:18.347209Z","times_seen":14996,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"almaei-hr.com/wp-content/themes/idol/assets/fonts/vazir-fd-wl.woff2","fqdn":"almaei-hr.com","domain":"almaei-hr.com","tld":"com"},"ip":{"addr":"157.180.2.34","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://almaei-hr.com/","date":"2026-10-08T04:26:17.222Z","timestamp":1791433577222,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.almaei-hr.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 29 Sep 2026 13:45:35 GMT","end":"Mon, 28 Dec 2026 13:45:34 GMT"},"fingerprint":{"sha1":"8C:FD:12:F1:63:85:5A:AE:E1:13:BE:69:B2:A7:54:CD:0C:4B:0E:1F","sha256":"AE:24:DA:20:1C:CA:BC:18:AA:07:3C:19:9C:CA:98:82:F5:FD:CE:F3:5D:E5:E2:BB:DD:CB:4D:53:35:78:14:F6"}}},"request":{"raw":"GET /wp-content/themes/idol/assets/fonts/vazir-fd-wl.woff2 HTTP/1.1\r\nHost: almaei-hr.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://almaei-hr.com/wp-content/themes/idol/assets/css/style-vazir.css?ver=4.9.26\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Thu, 15 Oct 2026 04:26:17 GMT\r\ncontent-type: font/woff2\r\nlast-modified: Sat, 27 Jul 2019 12:45:30 GMT\r\naccept-ranges: bytes\r\ncontent-length: 36988\r\ndate: Thu, 08 Oct 2026 04:26:17 GMT\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":36988,"size_decoded":37236,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), CFF, length 36988, version 1.0","md5":"03a42ab14412d5db710d539a0bd14040","sha1":"e75025dba7ee339f0188d11e3932b09ded91ce8d","sha256":"e07584457daa56e63000c4146845671987e55367fba45e814e070c00aa7a4936","sha512":"d622a3bf562e51aeffcaf558f1fd9403137a3b799b8c3a9364873f937b1ff78b62ef08a502797afb68763d0d20180681e0dd3ff2821c1f0f980ddd85176fecf1","ssdeep":"768:NnNrSdpsnekZJ3E4914Z8qBv6Wyd0AxLRmNJk5l9ZjnTpmc:tZEp2RZe48Z8Ov6W4RmCxTn","tlshash":"f7f2f19e1957c000f65eb4c11957b6c10dbfcc40b2f13bb9af39f55a1e274826acda92","first_seen":"2026-10-08T04:18:32.939628Z","last_seen":"2026-10-08T04:26:52.393172Z","times_seen":2,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"almaei-hr.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"almaei-hr.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"almaei-hr.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"almaei-hr.com/wp-content/themes/idol/assets/fonts/fontawesome-webfont.woff2?v=4.7.0","fqdn":"almaei-hr.com","domain":"almaei-hr.com","tld":"com"},"ip":{"addr":"157.180.2.34","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://almaei-hr.com/","date":"2026-10-08T04:26:17.227Z","timestamp":1791433577227,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.almaei-hr.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 29 Sep 2026 13:45:35 GMT","end":"Mon, 28 Dec 2026 13:45:34 GMT"},"fingerprint":{"sha1":"8C:FD:12:F1:63:85:5A:AE:E1:13:BE:69:B2:A7:54:CD:0C:4B:0E:1F","sha256":"AE:24:DA:20:1C:CA:BC:18:AA:07:3C:19:9C:CA:98:82:F5:FD:CE:F3:5D:E5:E2:BB:DD:CB:4D:53:35:78:14:F6"}}},"request":{"raw":"GET /wp-content/themes/idol/assets/fonts/fontawesome-webfont.woff2?v=4.7.0 HTTP/1.1\r\nHost: almaei-hr.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://almaei-hr.com/wp-content/themes/idol/assets/css/font-awesome.min.css?ver=4.9.26\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Thu, 15 Oct 2026 04:26:17 GMT\r\ncontent-type: font/woff2\r\nlast-modified: Sat, 27 Jul 2019 12:45:30 GMT\r\naccept-ranges: bytes\r\ncontent-length: 77160\r\ndate: Thu, 08 Oct 2026 04:26:17 GMT\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":77160,"size_decoded":77408,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 77160, version 4.459","md5":"af7ae505a9eed503f8b8e6982036873e","sha1":"d6f48cba7d076fb6f2fd6ba993a75b9dc1ecbf0c","sha256":"2adefcbc041e7d18fcf2d417879dc5a09997aa64d675b7a3c4b6ce33da13f3fe","sha512":"838fefdbc14901f41edf995a78fdac55764cd4912ccb734b8bea4909194582904d8f2afdf2b6c428667912ce4d65681a1044d045d1bc6de2b14113f0315fc892","ssdeep":"1536:/MkbAPfd1vyBKwHz4kco36ZvIaBfRPlajyXUA2jVTc:L0nXnHdfRVEAS2","tlshash":"7d7302e63b6c4943e03d6460708abe9f104b3ab42fe057e5c876db7f2722992b71552c","first_seen":"2023-04-05T03:30:47Z","last_seen":"2026-10-08T07:41:02.640245Z","times_seen":550135,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"almaei-hr.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"almaei-hr.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"almaei-hr.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"almaei-hr.com/wp-content/uploads/2018/05/favicon.png","fqdn":"almaei-hr.com","domain":"almaei-hr.com","tld":"com"},"ip":{"addr":"157.180.2.34","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://almaei-hr.com/","date":"2026-10-08T04:26:17.402Z","timestamp":1791433577402,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.almaei-hr.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 29 Sep 2026 13:45:35 GMT","end":"Mon, 28 Dec 2026 13:45:34 GMT"},"fingerprint":{"sha1":"8C:FD:12:F1:63:85:5A:AE:E1:13:BE:69:B2:A7:54:CD:0C:4B:0E:1F","sha256":"AE:24:DA:20:1C:CA:BC:18:AA:07:3C:19:9C:CA:98:82:F5:FD:CE:F3:5D:E5:E2:BB:DD:CB:4D:53:35:78:14:F6"}}},"request":{"raw":"GET /wp-content/uploads/2018/05/favicon.png HTTP/1.1\r\nHost: almaei-hr.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://almaei-hr.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=2592000\r\nexpires: Sat, 07 Nov 2026 04:26:17 GMT\r\ncontent-type: image/png\r\nlast-modified: Sat, 27 Jul 2019 12:45:32 GMT\r\naccept-ranges: bytes\r\ncontent-length: 3099\r\ndate: Thu, 08 Oct 2026 04:26:17 GMT\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":3099,"size_decoded":3346,"mime_type":"image/png","magic":"PNG image data, 40 x 40, 8-bit/color RGB, non-interlaced","md5":"5bd1fd7909581167a2d46acb02c673de","sha1":"73712bf88cb828c71b43923562a350171a330541","sha256":"ddba6734ddf50563a1fc192da8ac8b7452aacec2b2ba1e4da0fc17ce49ffcef5","sha512":"6384ba60993cfd30d31acf34bb1417c62d188b92f2e1c7c0af21e721eb5ad1e475b3c21afd8759eef1b90d0ee72872d5373c9df676ae32a6de790975cfd3f85e","ssdeep":"","tlshash":"8c518eefcd60f58db9dd785108dd0581e36821bcd647373880c195ee1455d0b6b260b6","first_seen":"2026-10-08T04:18:32.922504Z","last_seen":"2026-10-08T04:26:52.394937Z","times_seen":2,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"almaei-hr.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"almaei-hr.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"almaei-hr.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"almaei-hr.com/wp-content/themes/idol/assets/js/wow.min.js?ver=4.9.26","fqdn":"almaei-hr.com","domain":"almaei-hr.com","tld":"com"},"ip":{"addr":"157.180.2.34","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://almaei-hr.com/","date":"2026-10-08T04:26:17.049Z","timestamp":1791433577049,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.almaei-hr.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 29 Sep 2026 13:45:35 GMT","end":"Mon, 28 Dec 2026 13:45:34 GMT"},"fingerprint":{"sha1":"8C:FD:12:F1:63:85:5A:AE:E1:13:BE:69:B2:A7:54:CD:0C:4B:0E:1F","sha256":"AE:24:DA:20:1C:CA:BC:18:AA:07:3C:19:9C:CA:98:82:F5:FD:CE:F3:5D:E5:E2:BB:DD:CB:4D:53:35:78:14:F6"}}},"request":{"raw":"GET /wp-content/themes/idol/assets/js/wow.min.js?ver=4.9.26 HTTP/1.1\r\nHost: almaei-hr.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://almaei-hr.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=0\r\nexpires: Thu, 08 Oct 2026 04:26:17 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\nlast-modified: Sat, 27 Jul 2019 12:45:30 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 2572\r\ndate: Thu, 08 Oct 2026 04:26:17 GMT\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":8415,"size_decoded":2879,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (8385)","md5":"36050285bfeeb7395752f0f9bbc08273","sha1":"5924f7bbbf1dfa3f0926851d01f782f23a59e805","sha256":"0ec632e6ab02d4fdd514da7f5edc74aa28c9d4c71af76f1c8b93a1fba85bcc69","sha512":"bf887e087c52583114b77bfb417d7dffa0ee8634d39155af14591a24b2add9ef4c8a0c0555364122800d07a55f5f1fb0c723b39541b069a437ff558ddbf380a3","ssdeep":"96:UrZgL1xvPV6GqKgR6TYLWHFMLJA6pOROVEE1fosvGeaMozHImBaoqbl:Ury9PVfIFrlAJROVEEdos+eatzHILoA","tlshash":"750267c97a967031d75796f6833f0106b6361aeeb028047cb5b88dd57c78868523bf38","first_seen":"2023-03-07T01:02:45Z","last_seen":"2026-10-08T07:19:18.347209Z","times_seen":14996,"resource_available":true,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"almaei-hr.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"almaei-hr.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"almaei-hr.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"almaei-hr.com/wp-content/themes/idol/assets/js/scripts.js?ver=4.9.26","fqdn":"almaei-hr.com","domain":"almaei-hr.com","tld":"com"},"ip":{"addr":"157.180.2.34","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://almaei-hr.com/","date":"2026-10-08T04:26:17.060Z","timestamp":1791433577060,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.almaei-hr.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 29 Sep 2026 13:45:35 GMT","end":"Mon, 28 Dec 2026 13:45:34 GMT"},"fingerprint":{"sha1":"8C:FD:12:F1:63:85:5A:AE:E1:13:BE:69:B2:A7:54:CD:0C:4B:0E:1F","sha256":"AE:24:DA:20:1C:CA:BC:18:AA:07:3C:19:9C:CA:98:82:F5:FD:CE:F3:5D:E5:E2:BB:DD:CB:4D:53:35:78:14:F6"}}},"request":{"raw":"GET /wp-content/themes/idol/assets/js/scripts.js?ver=4.9.26 HTTP/1.1\r\nHost: almaei-hr.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://almaei-hr.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=0\r\nexpires: Thu, 08 Oct 2026 04:26:17 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\nlast-modified: Sat, 27 Jul 2019 12:45:30 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 1510\r\ndate: Thu, 08 Oct 2026 04:26:17 GMT\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":6004,"size_decoded":1817,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with CRLF line terminators","md5":"d044423f94128b37f443bcdf334f4a28","sha1":"c40f37738b84a7d9131ddbfff6d3d3192baee36a","sha256":"007e6a6cb83801aa0bb05ecd45e41b11a4f6c49a09d8e4e8a8d54f273d81c79d","sha512":"c59568c7c22bbacd2b67c6baafdc7e2c140c5108c9e48a733a6149ad210bfcaa4205853693617efcd0a0ba2d53889f48e4a6b00e93390b3853ae5017ecd1a4d6","ssdeep":"48:z5R7nvlOups/Tnw/w3dtMfaNFmX/qPsvcvTogAj2Do3QmyNvK7+tsG09pHhvf5kq:bRZ0TqSFfvMgAjXAmyNvKqSSmCJeZ9","tlshash":"c3c141443fafa07e16fbf219863e9941df2dc032810713b1b9ba46289c28369524ed7c","first_seen":"2026-10-08T04:18:32.957325Z","last_seen":"2026-10-08T04:26:52.396482Z","times_seen":2,"resource_available":true,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"almaei-hr.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"almaei-hr.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"almaei-hr.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"almaei-hr.com/wp-content/uploads/2019/07/hesabrasi-100x100.png","fqdn":"almaei-hr.com","domain":"almaei-hr.com","tld":"com"},"ip":{"addr":"157.180.2.34","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://almaei-hr.com/","date":"2026-10-08T04:26:17.068Z","timestamp":1791433577068,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.almaei-hr.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 29 Sep 2026 13:45:35 GMT","end":"Mon, 28 Dec 2026 13:45:34 GMT"},"fingerprint":{"sha1":"8C:FD:12:F1:63:85:5A:AE:E1:13:BE:69:B2:A7:54:CD:0C:4B:0E:1F","sha256":"AE:24:DA:20:1C:CA:BC:18:AA:07:3C:19:9C:CA:98:82:F5:FD:CE:F3:5D:E5:E2:BB:DD:CB:4D:53:35:78:14:F6"}}},"request":{"raw":"GET /wp-content/uploads/2019/07/hesabrasi-100x100.png HTTP/1.1\r\nHost: almaei-hr.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://almaei-hr.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=2592000\r\nexpires: Sat, 07 Nov 2026 04:26:17 GMT\r\ncontent-type: image/png\r\nlast-modified: Sat, 27 Jul 2019 17:19:12 GMT\r\naccept-ranges: bytes\r\ncontent-length: 14800\r\ndate: Thu, 08 Oct 2026 04:26:17 GMT\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":14800,"size_decoded":15048,"mime_type":"image/png","magic":"PNG image data, 100 x 100, 8-bit/color RGBA, non-interlaced","md5":"e73980d8b432ab8c60479809eea20b8c","sha1":"45e0eae7834e1a3de41a7c1dc222f8e07155e90e","sha256":"2d55268fbe1ab0fe44ae85adafad5fb357d67b4ca3438f65551342931088d8d2","sha512":"994f34ebba310a0e65ffd59d59aaba7138afccfccf3325eac4bac666bdc81f10c515c5ac3edb0632abc9ba95b5a7f952141d3d2b6b1efb66af9b9e23e3151975","ssdeep":"384:+gcAxCKpCdQ+dlGL47PRUAu0sIbrqs/OA:+HopO/5UAu7Iisd","tlshash":"e362c0d31b7fb562d55a12e9465cdf37c9e650b047a72318263d74004fae14af47ca88","first_seen":"2026-10-08T04:18:32.917455Z","last_seen":"2026-10-08T04:26:52.397834Z","times_seen":2,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"almaei-hr.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"almaei-hr.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"almaei-hr.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"almaei-hr.com/wp-content/uploads/2019/07/modir-maali-100x100.jpg","fqdn":"almaei-hr.com","domain":"almaei-hr.com","tld":"com"},"ip":{"addr":"157.180.2.34","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://almaei-hr.com/","date":"2026-10-08T04:26:17.074Z","timestamp":1791433577074,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.almaei-hr.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 29 Sep 2026 13:45:35 GMT","end":"Mon, 28 Dec 2026 13:45:34 GMT"},"fingerprint":{"sha1":"8C:FD:12:F1:63:85:5A:AE:E1:13:BE:69:B2:A7:54:CD:0C:4B:0E:1F","sha256":"AE:24:DA:20:1C:CA:BC:18:AA:07:3C:19:9C:CA:98:82:F5:FD:CE:F3:5D:E5:E2:BB:DD:CB:4D:53:35:78:14:F6"}}},"request":{"raw":"GET /wp-content/uploads/2019/07/modir-maali-100x100.jpg HTTP/1.1\r\nHost: almaei-hr.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://almaei-hr.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=2592000\r\nexpires: Sat, 07 Nov 2026 04:26:17 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Sat, 27 Jul 2019 17:26:56 GMT\r\naccept-ranges: bytes\r\ncontent-length: 4075\r\ndate: Thu, 08 Oct 2026 04:26:17 GMT\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":4075,"size_decoded":4323,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 82\", baseline, precision 8, 100x100, components 3","md5":"4e7f2ad5ec43e3625815cca0a71486d2","sha1":"5e758dda8bab1b6bed7d845a59eca82d949251c7","sha256":"a9144396afad76cff2df64d6d318962c6f69d2c99fa76f7d5a68696faada5afd","sha512":"f08e6a3f6eff2af21c4197456ad22d4a4f81e4c9070ff306aab7a9e63182528eb22046f3d4c8655b7d3b6a324b8268d6b0d1edcaf652842bd7a49991508461e7","ssdeep":"","tlshash":"98816d2d0f6f02d3d42f8d70066f6294929915d47bd646801bb3d2bbae042e09d58388","first_seen":"2026-10-08T04:18:32.965582Z","last_seen":"2026-10-08T04:26:52.398511Z","times_seen":2,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"almaei-hr.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"almaei-hr.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"almaei-hr.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"almaei-hr.com/wp-content/themes/idol/assets/css/magnific-popup.css?ver=4.9.26","fqdn":"almaei-hr.com","domain":"almaei-hr.com","tld":"com"},"ip":{"addr":"157.180.2.34","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://almaei-hr.com/","date":"2026-10-08T04:26:17.025Z","timestamp":1791433577025,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.almaei-hr.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 29 Sep 2026 13:45:35 GMT","end":"Mon, 28 Dec 2026 13:45:34 GMT"},"fingerprint":{"sha1":"8C:FD:12:F1:63:85:5A:AE:E1:13:BE:69:B2:A7:54:CD:0C:4B:0E:1F","sha256":"AE:24:DA:20:1C:CA:BC:18:AA:07:3C:19:9C:CA:98:82:F5:FD:CE:F3:5D:E5:E2:BB:DD:CB:4D:53:35:78:14:F6"}}},"request":{"raw":"GET /wp-content/themes/idol/assets/css/magnific-popup.css?ver=4.9.26 HTTP/1.1\r\nHost: almaei-hr.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://almaei-hr.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=2592000\r\nexpires: Sat, 07 Nov 2026 04:26:17 GMT\r\ncontent-type: text/css; charset=utf-8\r\nlast-modified: Sat, 27 Jul 2019 12:45:30 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 1683\r\ndate: Thu, 08 Oct 2026 04:26:17 GMT\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":7302,"size_decoded":1989,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with CRLF line terminators","md5":"c03fe8704d90e35eba342d2ca2c5a530","sha1":"74a41372d833195b77dd9e167f82ca395cc4702d","sha256":"1155981e8193622f58553eed0bba2fa43512af362a3d54dedef64c46970bb371","sha512":"0de3ac5d97701cc10e70418347b307399ca94e3b2c2e5fee3ad8f30a3bd44f5fd119e669895495ce566011de827ff69dab617ca5b5d6d96c093a88b55e990d46","ssdeep":"192:NN4yXVw9SfoRyEBpEbxHq98Z/vzz/89aO:OSUL8xH2","tlshash":"8de1cf16db212342e537e7b5e7938729e7220063e30304abbfd15845ebfda484661fd9","first_seen":"2023-04-05T15:18:30Z","last_seen":"2026-10-08T05:23:55.953814Z","times_seen":8442,"resource_available":true,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"almaei-hr.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"almaei-hr.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"almaei-hr.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"almaei-hr.com/wp-content/themes/idol/assets/css/bootstrap.min.css?ver=4.9.26","fqdn":"almaei-hr.com","domain":"almaei-hr.com","tld":"com"},"ip":{"addr":"157.180.2.34","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://almaei-hr.com/","date":"2026-10-08T04:26:17.028Z","timestamp":1791433577028,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.almaei-hr.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 29 Sep 2026 13:45:35 GMT","end":"Mon, 28 Dec 2026 13:45:34 GMT"},"fingerprint":{"sha1":"8C:FD:12:F1:63:85:5A:AE:E1:13:BE:69:B2:A7:54:CD:0C:4B:0E:1F","sha256":"AE:24:DA:20:1C:CA:BC:18:AA:07:3C:19:9C:CA:98:82:F5:FD:CE:F3:5D:E5:E2:BB:DD:CB:4D:53:35:78:14:F6"}}},"request":{"raw":"GET /wp-content/themes/idol/assets/css/bootstrap.min.css?ver=4.9.26 HTTP/1.1\r\nHost: almaei-hr.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://almaei-hr.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=2592000\r\nexpires: Sat, 07 Nov 2026 04:26:17 GMT\r\ncontent-type: text/css; charset=utf-8\r\nlast-modified: Sat, 27 Jul 2019 12:45:30 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 18300\r\ndate: Thu, 08 Oct 2026 04:26:17 GMT\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":123202,"size_decoded":18607,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (65371)","md5":"f3cdfe4be028e78e944c3e7608f7e522","sha1":"82fd15671a3edc5eaf7b80806feab3a31a213de8","sha256":"458d9923ff8e573236896a490c61075e0c19b33fede4f42d4492331077de48b5","sha512":"3033326d06de7611bd024ad88b1b282284c9df5f8bd1d49d45c89f572250c759ee02f56c48f532ec0118425545c5d33594de32c2ef090db3fbae2e5d0f6c22f0","ssdeep":"768:Vy9exw/bc/yw/3ZtUSIuYH3m5mpIN8CAduF/cc2ctumE2mmAOHCBi0tDvH1Fw:dw/A1HIuYH3m5mA8hAck1A44i0a","tlshash":"dfc3b6a0f12031ea7333c54a75d0ed8a3619a153e55b4eb7f22f29d84f846ca1673f1a","first_seen":"2023-05-22T10:45:02Z","last_seen":"2026-10-08T04:26:52.401728Z","times_seen":14,"resource_available":true,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"almaei-hr.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"almaei-hr.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"almaei-hr.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"almaei-hr.com/wp-content/themes/idol/assets/css/style-vazir.css?ver=4.9.26","fqdn":"almaei-hr.com","domain":"almaei-hr.com","tld":"com"},"ip":{"addr":"157.180.2.34","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://almaei-hr.com/","date":"2026-10-08T04:26:17.030Z","timestamp":1791433577030,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.almaei-hr.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 29 Sep 2026 13:45:35 GMT","end":"Mon, 28 Dec 2026 13:45:34 GMT"},"fingerprint":{"sha1":"8C:FD:12:F1:63:85:5A:AE:E1:13:BE:69:B2:A7:54:CD:0C:4B:0E:1F","sha256":"AE:24:DA:20:1C:CA:BC:18:AA:07:3C:19:9C:CA:98:82:F5:FD:CE:F3:5D:E5:E2:BB:DD:CB:4D:53:35:78:14:F6"}}},"request":{"raw":"GET /wp-content/themes/idol/assets/css/style-vazir.css?ver=4.9.26 HTTP/1.1\r\nHost: almaei-hr.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://almaei-hr.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=2592000\r\nexpires: Sat, 07 Nov 2026 04:26:17 GMT\r\ncontent-type: text/css; charset=utf-8\r\nlast-modified: Sat, 27 Jul 2019 12:45:30 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 5977\r\ndate: Thu, 08 Oct 2026 04:26:17 GMT\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":40249,"size_decoded":6283,"mime_type":"text/css; charset=utf-8","magic":"assembler source, ASCII text, with CRLF line terminators","md5":"8d85c5c704ac66d9f3590a2c26496fbf","sha1":"48b9f16365e19ee858557bd0f02f4ce925c229e1","sha256":"5474f98d28e6dbc0b20fa97faa27fde69c78f44e5ea78990294170fa18cd2a11","sha512":"a60cce3719a7e6e5b4099be4688483c7c2c2ba3888ff2c2d60704949b7cc9749743a0270157b4280720dd2355d97d2058fd739f9c8887594b9788264eac62e90","ssdeep":"768:BW4Em6Qb7gRc3qSLx0oLtx7qCnhuCjerkJhp4jsJU/DxSUU6Ri6KZ1/4r6oxG/3i:bJ17f72d67qvMf72d6kxO36D6f6sSr6y","tlshash":"3f037779ee56204f6313dea9b7f06f60cf1450635a0b499eb5e1241d92806bc2f6f2ce","first_seen":"2026-10-08T04:18:32.913459Z","last_seen":"2026-10-08T04:26:52.403105Z","times_seen":2,"resource_available":true,"data":null}},"time_used":17,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"almaei-hr.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"almaei-hr.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"almaei-hr.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"almaei-hr.com/wp-content/themes/idol/assets/js/app.js?ver=4.9.26","fqdn":"almaei-hr.com","domain":"almaei-hr.com","tld":"com"},"ip":{"addr":"157.180.2.34","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://almaei-hr.com/","date":"2026-10-08T04:26:17.047Z","timestamp":1791433577047,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.almaei-hr.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 29 Sep 2026 13:45:35 GMT","end":"Mon, 28 Dec 2026 13:45:34 GMT"},"fingerprint":{"sha1":"8C:FD:12:F1:63:85:5A:AE:E1:13:BE:69:B2:A7:54:CD:0C:4B:0E:1F","sha256":"AE:24:DA:20:1C:CA:BC:18:AA:07:3C:19:9C:CA:98:82:F5:FD:CE:F3:5D:E5:E2:BB:DD:CB:4D:53:35:78:14:F6"}}},"request":{"raw":"GET /wp-content/themes/idol/assets/js/app.js?ver=4.9.26 HTTP/1.1\r\nHost: almaei-hr.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://almaei-hr.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=0\r\nexpires: Thu, 08 Oct 2026 04:26:17 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\nlast-modified: Sat, 27 Jul 2019 12:45:30 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 805\r\ndate: Thu, 08 Oct 2026 04:26:17 GMT\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":2815,"size_decoded":1111,"mime_type":"text/javascript; charset=utf-8","magic":"ASCII text","md5":"febca5d7ed03cc56633f5000236d3ed4","sha1":"da0d3f8785facc9cb4eb05c3801abb72dc2a180f","sha256":"4b6a9b5ef074dee7a579a70c8fe9f91c0b5192da0bf8bbca33c0ed76fac994ad","sha512":"762271e6d6cacb32028537c9b1777e0fa076ca663734293cfff8363e9c72757d7f8fd826df51e3f49f588e21677b5e507877ff96462faa0cd1400990e902e8aa","ssdeep":"","tlshash":"69512329edf41db3105af03508be5247f530895b4d1a3d3aba4c429c5f0ea2d61be7e9","first_seen":"2026-10-08T04:18:32.956204Z","last_seen":"2026-10-08T04:26:52.403747Z","times_seen":2,"resource_available":true,"data":null}},"time_used":21,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"almaei-hr.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"almaei-hr.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"almaei-hr.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"almaei-hr.com/wp-includes/js/wp-embed.min.js?ver=4.9.26","fqdn":"almaei-hr.com","domain":"almaei-hr.com","tld":"com"},"ip":{"addr":"157.180.2.34","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://almaei-hr.com/","date":"2026-10-08T04:26:17.063Z","timestamp":1791433577063,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.almaei-hr.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 29 Sep 2026 13:45:35 GMT","end":"Mon, 28 Dec 2026 13:45:34 GMT"},"fingerprint":{"sha1":"8C:FD:12:F1:63:85:5A:AE:E1:13:BE:69:B2:A7:54:CD:0C:4B:0E:1F","sha256":"AE:24:DA:20:1C:CA:BC:18:AA:07:3C:19:9C:CA:98:82:F5:FD:CE:F3:5D:E5:E2:BB:DD:CB:4D:53:35:78:14:F6"}}},"request":{"raw":"GET /wp-includes/js/wp-embed.min.js?ver=4.9.26 HTTP/1.1\r\nHost: almaei-hr.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://almaei-hr.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=0\r\nexpires: Thu, 08 Oct 2026 04:26:17 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\nlast-modified: Tue, 16 May 2023 18:29:27 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 677\r\ndate: Thu, 08 Oct 2026 04:26:17 GMT\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1443,"size_decoded":983,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (1443), with no line terminators","md5":"43928880ff5ebadcd513755b011732cd","sha1":"d0fdb17db490123ed700c2caa5d2d764794cb6d5","sha256":"37c5f58f12814dd0ecc28f15b7765c6bcd31a9479d330b4ef896e140bf89dc38","sha512":"ba9ec90a842c0aad802294c3fe144c0ed737e51586ed19dc15dcf518dd0c9790e6ba5a1a8bc9e8a09d48cac3941df65c4d1d77b3b79d76a6cfac9b306c2da710","ssdeep":"","tlshash":"4d21526a3239d43e54e715d3bc8435cad2b21be9a85200d14a798848f5a8f93886afe1","first_seen":"2023-05-16T22:20:04Z","last_seen":"2026-10-08T04:26:52.404338Z","times_seen":16378,"resource_available":true,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"almaei-hr.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"almaei-hr.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"almaei-hr.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"almaei-hr.com/wp-content/uploads/2019/07/manager-100x100.png","fqdn":"almaei-hr.com","domain":"almaei-hr.com","tld":"com"},"ip":{"addr":"157.180.2.34","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://almaei-hr.com/","date":"2026-10-08T04:26:17.072Z","timestamp":1791433577072,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.almaei-hr.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 29 Sep 2026 13:45:35 GMT","end":"Mon, 28 Dec 2026 13:45:34 GMT"},"fingerprint":{"sha1":"8C:FD:12:F1:63:85:5A:AE:E1:13:BE:69:B2:A7:54:CD:0C:4B:0E:1F","sha256":"AE:24:DA:20:1C:CA:BC:18:AA:07:3C:19:9C:CA:98:82:F5:FD:CE:F3:5D:E5:E2:BB:DD:CB:4D:53:35:78:14:F6"}}},"request":{"raw":"GET /wp-content/uploads/2019/07/manager-100x100.png HTTP/1.1\r\nHost: almaei-hr.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://almaei-hr.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=2592000\r\nexpires: Sat, 07 Nov 2026 04:26:17 GMT\r\ncontent-type: image/png\r\nlast-modified: Sat, 27 Jul 2019 17:31:08 GMT\r\naccept-ranges: bytes\r\ncontent-length: 11330\r\ndate: Thu, 08 Oct 2026 04:26:17 GMT\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":11330,"size_decoded":11578,"mime_type":"image/png","magic":"PNG image data, 100 x 100, 8-bit/color RGBA, non-interlaced","md5":"d11115dbaa179ab22af31060e0f86f30","sha1":"d912a68071772dbdb96fe363bcfec42d71a3d25f","sha256":"cf0291f9ce072fbdf69bf4d4f8f9b55dc877f689e5287014292c1f8ac8f8241b","sha512":"4cdb7e71687917c0391ce531802cebe4a7823e763dd8e401d9892c02a4c1ad7719c2a7be126eb4812a409ad7252a5add822d48f5a6a205fbbace90ad8e7d43bb","ssdeep":"192:gUIsFoqKVxpfbLm0PT+5W+vH7ov4T86z+IQZ6ZCphKil20gjKe8hiZoWTWi:gUIsFpKVxppPSrvH7ow3cph5oZKesG","tlshash":"4f32bffe7c6da23bc067a920645255484f2f3f8eae685521b879a434220f4d2479bd3e","first_seen":"2026-10-08T04:18:32.961135Z","last_seen":"2026-10-08T04:26:52.404926Z","times_seen":2,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"almaei-hr.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"almaei-hr.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"almaei-hr.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"almaei-hr.com/wp-content/uploads/2019/07/cropped-IMG-20190722-WA0031-1.jpg","fqdn":"almaei-hr.com","domain":"almaei-hr.com","tld":"com"},"ip":{"addr":"157.180.2.34","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://almaei-hr.com/","date":"2026-10-08T04:26:17.194Z","timestamp":1791433577194,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.almaei-hr.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 29 Sep 2026 13:45:35 GMT","end":"Mon, 28 Dec 2026 13:45:34 GMT"},"fingerprint":{"sha1":"8C:FD:12:F1:63:85:5A:AE:E1:13:BE:69:B2:A7:54:CD:0C:4B:0E:1F","sha256":"AE:24:DA:20:1C:CA:BC:18:AA:07:3C:19:9C:CA:98:82:F5:FD:CE:F3:5D:E5:E2:BB:DD:CB:4D:53:35:78:14:F6"}}},"request":{"raw":"GET /wp-content/uploads/2019/07/cropped-IMG-20190722-WA0031-1.jpg HTTP/1.1\r\nHost: almaei-hr.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://almaei-hr.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=2592000\r\nexpires: Sat, 07 Nov 2026 04:26:17 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Sat, 27 Jul 2019 17:08:46 GMT\r\naccept-ranges: bytes\r\ncontent-length: 160901\r\ndate: Thu, 08 Oct 2026 04:26:17 GMT\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":160901,"size_decoded":161151,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 82\", baseline, precision 8, 1920x1080, components 3","md5":"34074e7ac78aefe49c9d0ae6e2d64c9b","sha1":"2958acea063eb95375c95cb66e8143492692e95d","sha256":"5fd6179561d0bec6623acb8634dd72de65b065531c51d5c25bee9c0bddb23535","sha512":"70b4d721653ecfe2de315b83d4b2cb689add4fa9f487ae040ee0caaf7938ef08dd7e76491e8dd3ed772f40c6a7f3a2e10afae29a09ad467dd1e2388c2164ab46","ssdeep":"3072:Vr3O3ecgbbuu38WlCUmW1tEGbrXnJZStbVxeQwcr0NFEsls1WFAvEVMKrZ/qXTb:l0mbbuuM9TdGbrZZgVxe+0NFEsTw6rEn","tlshash":"58f31203641a59c3194a9bb4fc831c8b3b81525d24a3a5fa43234fcf7e247d27d5baad","first_seen":"2026-10-08T04:18:32.953009Z","last_seen":"2026-10-08T04:26:52.405537Z","times_seen":2,"resource_available":false,"data":null}},"time_used":36,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":23,"receive":13,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"almaei-hr.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"almaei-hr.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"almaei-hr.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"almaei-hr.com/wp-content/themes/idol/assets/fonts/vazir-bold-fd-wl.woff2","fqdn":"almaei-hr.com","domain":"almaei-hr.com","tld":"com"},"ip":{"addr":"157.180.2.34","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://almaei-hr.com/","date":"2026-10-08T04:26:17.225Z","timestamp":1791433577225,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.almaei-hr.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 29 Sep 2026 13:45:35 GMT","end":"Mon, 28 Dec 2026 13:45:34 GMT"},"fingerprint":{"sha1":"8C:FD:12:F1:63:85:5A:AE:E1:13:BE:69:B2:A7:54:CD:0C:4B:0E:1F","sha256":"AE:24:DA:20:1C:CA:BC:18:AA:07:3C:19:9C:CA:98:82:F5:FD:CE:F3:5D:E5:E2:BB:DD:CB:4D:53:35:78:14:F6"}}},"request":{"raw":"GET /wp-content/themes/idol/assets/fonts/vazir-bold-fd-wl.woff2 HTTP/1.1\r\nHost: almaei-hr.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://almaei-hr.com/wp-content/themes/idol/assets/css/style-vazir.css?ver=4.9.26\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=604800\r\nexpires: Thu, 15 Oct 2026 04:26:17 GMT\r\ncontent-type: font/woff2\r\nlast-modified: Sat, 27 Jul 2019 12:45:30 GMT\r\naccept-ranges: bytes\r\ncontent-length: 42848\r\ndate: Thu, 08 Oct 2026 04:26:17 GMT\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":42848,"size_decoded":43096,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), CFF, length 42848, version 1.0","md5":"87842d777c5733b26d5170a3edc5ece5","sha1":"80277328874e922142a8044b47d3fee431be7d25","sha256":"d6164ced930f60925c3586143c2e9bf36ccbe953b711510882be247687b0fcae","sha512":"93775a6dae991183d30f2d7afd59975775e80b06e9df919d93fe2a3f99d782f044f2905309791a7828c381a5211277673ab5c3aed27544c5f35eef2b743915b7","ssdeep":"768:jQvmNJzzRdbQF7wjhkDQUsWsGbpmrKDmLp+ImspMkBnXd0rCIxaJ+VfLXu4+:zJzzYF7wNN3WsGbYrPptXMyXi24I+Bw","tlshash":"fe13f2512580fe7bd0a747aaec3c0317e887611d0801f373dfba6b4daa97c91e84995e","first_seen":"2026-10-08T04:18:32.920607Z","last_seen":"2026-10-08T04:26:52.406186Z","times_seen":2,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"almaei-hr.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"almaei-hr.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"almaei-hr.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"almaei-hr.com/wp-content/themes/idol/assets/js/isotope.pkgd.min.js?ver=4.9.26","fqdn":"almaei-hr.com","domain":"almaei-hr.com","tld":"com"},"ip":{"addr":"157.180.2.34","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://almaei-hr.com/","date":"2026-10-08T04:26:17.042Z","timestamp":1791433577042,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.almaei-hr.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 29 Sep 2026 13:45:35 GMT","end":"Mon, 28 Dec 2026 13:45:34 GMT"},"fingerprint":{"sha1":"8C:FD:12:F1:63:85:5A:AE:E1:13:BE:69:B2:A7:54:CD:0C:4B:0E:1F","sha256":"AE:24:DA:20:1C:CA:BC:18:AA:07:3C:19:9C:CA:98:82:F5:FD:CE:F3:5D:E5:E2:BB:DD:CB:4D:53:35:78:14:F6"}}},"request":{"raw":"GET /wp-content/themes/idol/assets/js/isotope.pkgd.min.js?ver=4.9.26 HTTP/1.1\r\nHost: almaei-hr.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://almaei-hr.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=0\r\nexpires: Thu, 08 Oct 2026 04:26:17 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\nlast-modified: Sat, 27 Jul 2019 12:45:30 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 9596\r\ndate: Thu, 08 Oct 2026 04:26:17 GMT\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":35313,"size_decoded":9903,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (32014)","md5":"39258d5d7a1a2c1df44cb3a40e494e9a","sha1":"a6a23845c95b5551c3ad8850365b5200331e46ab","sha256":"f96151453bf5b861219fab32920589c930580c4f1c427f2e023e7429e7e9f482","sha512":"54304e2250dbb82e155b1189366b85450d0b8b448a903a661b2ba1006e4b4c32ddfdd27f4b458c571ae247663e0b23cbe60ce3a4de1fffa8aa595049961b74b5","ssdeep":"768:NMAyxzGdHc1zfA9ZVP4eAnmc6FumKSsCD6rD6G2UfdEhCDz2wK1Fxt:Mx6dOjARP4Nnmc6FuCsCD6rD6yVEQDzW","tlshash":"25f2d84f73403925468bf166926f160fb137e56c6a4690acba6ad8db1c79c0d6033fbc","first_seen":"2023-03-07T01:18:00Z","last_seen":"2026-10-08T04:26:52.407121Z","times_seen":3411,"resource_available":true,"data":null}},"time_used":38,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":26,"receive":12,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"almaei-hr.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"almaei-hr.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"almaei-hr.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"almaei-hr.com/wp-includes/js/wp-emoji-release.min.js?ver=4.9.26","fqdn":"almaei-hr.com","domain":"almaei-hr.com","tld":"com"},"ip":{"addr":"157.180.2.34","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://almaei-hr.com/","date":"2026-10-08T04:26:17.133Z","timestamp":1791433577133,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.almaei-hr.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 29 Sep 2026 13:45:35 GMT","end":"Mon, 28 Dec 2026 13:45:34 GMT"},"fingerprint":{"sha1":"8C:FD:12:F1:63:85:5A:AE:E1:13:BE:69:B2:A7:54:CD:0C:4B:0E:1F","sha256":"AE:24:DA:20:1C:CA:BC:18:AA:07:3C:19:9C:CA:98:82:F5:FD:CE:F3:5D:E5:E2:BB:DD:CB:4D:53:35:78:14:F6"}}},"request":{"raw":"GET /wp-includes/js/wp-emoji-release.min.js?ver=4.9.26 HTTP/1.1\r\nHost: almaei-hr.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://almaei-hr.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=0\r\nexpires: Thu, 08 Oct 2026 04:26:17 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\nlast-modified: Thu, 15 Apr 2021 06:28:08 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 4053\r\ndate: Thu, 08 Oct 2026 04:26:17 GMT\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":11943,"size_decoded":4360,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (9063)","md5":"fe0575b66568074463f12485d90f6d4c","sha1":"aeedd9ab3b7874e63f647042963cb1301a38b391","sha256":"647a6b36f3fd1f21bae171270111096b4613c23a47e6621628a51bae9c82b0b7","sha512":"0d209cbc9550cfcf49ca7ca5a1243e1578c0a42f9fb28c1fa8d353cea26f24eed282547f47fe858126e1ba9a4aa4d8ddbd2cbdef9db5a45f24cfbfd6383bff9e","ssdeep":"192:WuKiKqdccoXJW+TJr3J//bEvAbWXXR6AooHyrOUVsbEJEoesM0m3dJXWP/2//:0qlkJW+TJr3J//bEI+XgA5UCOeffJmW3","tlshash":"8032229f732b5f9b743e36db8e96cf4d95d949932580e038cafef68129e005983b4850","first_seen":"2023-03-07T01:02:46Z","last_seen":"2026-10-08T04:26:52.407734Z","times_seen":7428,"resource_available":true,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"almaei-hr.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"almaei-hr.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"almaei-hr.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"almaei-hr.com/wp-content/uploads/2019/07/cropped-IMG-20190722-WA0007.jpg","fqdn":"almaei-hr.com","domain":"almaei-hr.com","tld":"com"},"ip":{"addr":"157.180.2.34","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://almaei-hr.com/","date":"2026-10-08T04:26:17.189Z","timestamp":1791433577189,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.almaei-hr.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 29 Sep 2026 13:45:35 GMT","end":"Mon, 28 Dec 2026 13:45:34 GMT"},"fingerprint":{"sha1":"8C:FD:12:F1:63:85:5A:AE:E1:13:BE:69:B2:A7:54:CD:0C:4B:0E:1F","sha256":"AE:24:DA:20:1C:CA:BC:18:AA:07:3C:19:9C:CA:98:82:F5:FD:CE:F3:5D:E5:E2:BB:DD:CB:4D:53:35:78:14:F6"}}},"request":{"raw":"GET /wp-content/uploads/2019/07/cropped-IMG-20190722-WA0007.jpg HTTP/1.1\r\nHost: almaei-hr.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://almaei-hr.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=2592000\r\nexpires: Sat, 07 Nov 2026 04:26:17 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Sat, 27 Jul 2019 13:25:36 GMT\r\naccept-ranges: bytes\r\ncontent-length: 100267\r\ndate: Thu, 08 Oct 2026 04:26:17 GMT\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":100267,"size_decoded":100517,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 82\", baseline, precision 8, 1920x1080, components 3","md5":"10a08b22142d2648f19e2f05fab01b72","sha1":"80934706efa5e92352eebc8b2f37d37b9c5f7d46","sha256":"b773f661df755bc79eb5bbcf907617aea8c8c4628cefa5d0a4ffcc8d1b559d8c","sha512":"a357ece3b7ac08a3573bac45cce8b4f078cf2754caa01ca503e8207be4021162dc28714ab447ab150ba69f2b5dacf69eaa39f91c0c5b46549be12f684cf945af","ssdeep":"3072:mQWJurRR/Um7iWLjO79B59abyHD07qmMROtw3Mr:mQfLIMjiCW7Obr","tlshash":"f1a36d134d448b83a029d7e8bf174ead2f4a2b0dd9863dff51124ecb3e242964c9d06e","first_seen":"2026-10-08T04:18:32.938332Z","last_seen":"2026-10-08T04:26:52.408372Z","times_seen":2,"resource_available":false,"data":null}},"time_used":26,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":12,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"almaei-hr.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"almaei-hr.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"almaei-hr.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"almaei-hr.com/wp-content/uploads/2018/05/favicon.png","fqdn":"almaei-hr.com","domain":"almaei-hr.com","tld":"com"},"ip":{"addr":"157.180.2.34","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://almaei-hr.com/","date":"2026-10-08T04:26:17.404Z","timestamp":1791433577404,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.almaei-hr.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 29 Sep 2026 13:45:35 GMT","end":"Mon, 28 Dec 2026 13:45:34 GMT"},"fingerprint":{"sha1":"8C:FD:12:F1:63:85:5A:AE:E1:13:BE:69:B2:A7:54:CD:0C:4B:0E:1F","sha256":"AE:24:DA:20:1C:CA:BC:18:AA:07:3C:19:9C:CA:98:82:F5:FD:CE:F3:5D:E5:E2:BB:DD:CB:4D:53:35:78:14:F6"}}},"request":{"raw":"GET /wp-content/uploads/2018/05/favicon.png HTTP/1.1\r\nHost: almaei-hr.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://almaei-hr.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=2592000\r\nexpires: Sat, 07 Nov 2026 04:26:17 GMT\r\ncontent-type: image/png\r\nlast-modified: Sat, 27 Jul 2019 12:45:32 GMT\r\naccept-ranges: bytes\r\ncontent-length: 3099\r\ndate: Thu, 08 Oct 2026 04:26:17 GMT\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":3099,"size_decoded":3346,"mime_type":"image/png","magic":"PNG image data, 40 x 40, 8-bit/color RGB, non-interlaced","md5":"5bd1fd7909581167a2d46acb02c673de","sha1":"73712bf88cb828c71b43923562a350171a330541","sha256":"ddba6734ddf50563a1fc192da8ac8b7452aacec2b2ba1e4da0fc17ce49ffcef5","sha512":"6384ba60993cfd30d31acf34bb1417c62d188b92f2e1c7c0af21e721eb5ad1e475b3c21afd8759eef1b90d0ee72872d5373c9df676ae32a6de790975cfd3f85e","ssdeep":"","tlshash":"8c518eefcd60f58db9dd785108dd0581e36821bcd647373880c195ee1455d0b6b260b6","first_seen":"2026-10-08T04:18:32.922504Z","last_seen":"2026-10-08T04:26:52.394937Z","times_seen":2,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"almaei-hr.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"almaei-hr.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"almaei-hr.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"almaei-hr.com/","fqdn":"almaei-hr.com","domain":"almaei-hr.com","tld":"com"},"ip":{"addr":"157.180.2.34","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-10-08T04:26:16.470Z","timestamp":1791433576470,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.almaei-hr.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 29 Sep 2026 13:45:35 GMT","end":"Mon, 28 Dec 2026 13:45:34 GMT"},"fingerprint":{"sha1":"8C:FD:12:F1:63:85:5A:AE:E1:13:BE:69:B2:A7:54:CD:0C:4B:0E:1F","sha256":"AE:24:DA:20:1C:CA:BC:18:AA:07:3C:19:9C:CA:98:82:F5:FD:CE:F3:5D:E5:E2:BB:DD:CB:4D:53:35:78:14:F6"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: almaei-hr.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/html; charset=UTF-8\r\nlink: \u003chttps://almaei-hr.com/wp-json/\u003e; rel=\"https://api.w.org/\", \u003chttps://almaei-hr.com/\u003e; rel=shortlink\r\ncache-control: public, max-age=0\r\nexpires: Thu, 08 Oct 2026 04:26:16 GMT\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Thu, 08 Oct 2026 04:26:16 GMT\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"parallax.js:4.9.26","description":"Simple parallax scrolling effect.","website":"https://github.com/pixelcog/parallax.js","common_platform_enumeration":"","icon":"","categories":["JavaScript libraries"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Bootstrap","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]},{"name":"jQuery:1.12.4","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"particles.js","description":"Particles.js is a JavaScript library for creating particles.","website":"https://github.com/VincentGarreau/particles.js","common_platform_enumeration":"","icon":"","categories":["JavaScript graphics"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]},{"name":"OWL Carousel","description":"OWL Carousel is an enabled jQuery plugin that lets you create responsive carousel sliders.","website":"https://owlcarousel2.github.io/OwlCarousel2/","common_platform_enumeration":"","icon":"OWL Carousel.png","categories":["JavaScript libraries"]},{"name":"WOW:4.9.26","description":"Reveal CSS animation as you scroll down a page.","website":"https://www.delac.io/WOW","common_platform_enumeration":"","icon":"","categories":["JavaScript frameworks","Web frameworks","JavaScript graphics"]},{"name":"WordPress:4.9.26","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"Magnific Popup:4.9.26","description":"Magnific Popup is a responsive lightbox \u0026 dialog script with focus on performance and providing best experience for user with any device.","website":"https://dimsemenov.com/plugins/magnific-popup/","common_platform_enumeration":"","icon":"Magnific Popup.png","categories":["JavaScript libraries"]}],"data":{"size":38549,"size_decoded":8776,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (1690), with CRLF, LF line terminators","md5":"b74c3dc6d9c3edad46f4d7bec16a0a7a","sha1":"5721bcbebfbbbb1ec3415c1697e14437b11c8d59","sha256":"562ee6e5138d35ca124d6cb11f91f97e483acc33b61c8e4b9318208ef7daf614","sha512":"d40e6812d179df734989861a3e463d16882c5c11c3ad70a15534a5715ace2ff40cdeeec799f7b9d9c2ef31da0242a9690b5519728a74f841a62110c628fa9857","ssdeep":"768:Ug7lRC7tmBdQ6qnfmqaLN02CY4wD5LjlqsgcyGI2FYT8BK:Ug7lRC7tmBdQ6qnfmqaLN0W4G5L5qRc8","tlshash":"1503db62359d95374613869780723269d7afde31c72be491baf207374ac2f03eb0b526","first_seen":"2026-10-08T04:18:32.943853Z","last_seen":"2026-10-08T04:26:52.409049Z","times_seen":2,"resource_available":true,"data":null}},"time_used":238,"timings":{"blocked":-1,"dns":4,"connect":14,"send":0,"wait":196,"receive":0,"ssl":23},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"almaei-hr.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"almaei-hr.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"almaei-hr.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"almaei-hr.com/wp-content/themes/idol/assets/css/font-awesome.min.css?ver=4.9.26","fqdn":"almaei-hr.com","domain":"almaei-hr.com","tld":"com"},"ip":{"addr":"157.180.2.34","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://almaei-hr.com/","date":"2026-10-08T04:26:17.017Z","timestamp":1791433577017,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.almaei-hr.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 29 Sep 2026 13:45:35 GMT","end":"Mon, 28 Dec 2026 13:45:34 GMT"},"fingerprint":{"sha1":"8C:FD:12:F1:63:85:5A:AE:E1:13:BE:69:B2:A7:54:CD:0C:4B:0E:1F","sha256":"AE:24:DA:20:1C:CA:BC:18:AA:07:3C:19:9C:CA:98:82:F5:FD:CE:F3:5D:E5:E2:BB:DD:CB:4D:53:35:78:14:F6"}}},"request":{"raw":"GET /wp-content/themes/idol/assets/css/font-awesome.min.css?ver=4.9.26 HTTP/1.1\r\nHost: almaei-hr.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://almaei-hr.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=2592000\r\nexpires: Sat, 07 Nov 2026 04:26:16 GMT\r\ncontent-type: text/css; charset=utf-8\r\nlast-modified: Sat, 27 Jul 2019 12:45:30 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 6658\r\ndate: Thu, 08 Oct 2026 04:26:16 GMT\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":31000,"size_decoded":7022,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (30837)","md5":"269550530cc127b6aa5a35925a7de6ce","sha1":"512c7d79033e3028a9be61b540cf1a6870c896f8","sha256":"799aeb25cc0373fdee0e1b1db7ad6c2f6a0e058dfadaa3379689f583213190bd","sha512":"49f4e24e55fa924faa8ad7debe5ffb2e26d439e25696df6b6f20e7f766b50ea58ec3dbd61b6305a1acacd2c80e6e659accee4140f885b9c9e71008e9001fbf4b","ssdeep":"384:wHu5yWeTUKW+KlkJ5de2UYDyVfwYUas2l8yQ/8dwmaU8G:wwlr+Klk3Yi+fwYUf2l8yQ/e9vf","tlshash":"78d241e8e54c01d66731c48bff81b36862b6fb3dd5854da9f01f290c29d226522c5fba","first_seen":"2023-04-05T03:13:25Z","last_seen":"2026-10-08T07:32:42.327705Z","times_seen":321200,"resource_available":true,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"almaei-hr.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"almaei-hr.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"almaei-hr.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"almaei-hr.com/wp-content/themes/idol/assets/css/owl.carousel.min.css?ver=4.9.26","fqdn":"almaei-hr.com","domain":"almaei-hr.com","tld":"com"},"ip":{"addr":"157.180.2.34","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://almaei-hr.com/","date":"2026-10-08T04:26:17.023Z","timestamp":1791433577023,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.almaei-hr.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 29 Sep 2026 13:45:35 GMT","end":"Mon, 28 Dec 2026 13:45:34 GMT"},"fingerprint":{"sha1":"8C:FD:12:F1:63:85:5A:AE:E1:13:BE:69:B2:A7:54:CD:0C:4B:0E:1F","sha256":"AE:24:DA:20:1C:CA:BC:18:AA:07:3C:19:9C:CA:98:82:F5:FD:CE:F3:5D:E5:E2:BB:DD:CB:4D:53:35:78:14:F6"}}},"request":{"raw":"GET /wp-content/themes/idol/assets/css/owl.carousel.min.css?ver=4.9.26 HTTP/1.1\r\nHost: almaei-hr.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://almaei-hr.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=2592000\r\nexpires: Sat, 07 Nov 2026 04:26:17 GMT\r\ncontent-type: text/css; charset=utf-8\r\nlast-modified: Sat, 27 Jul 2019 12:45:30 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 789\r\ndate: Thu, 08 Oct 2026 04:26:17 GMT\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":2936,"size_decoded":1094,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (2846)","md5":"de0dfbabe627afa1b718d848b6b58e97","sha1":"73d8a692734089983b00005d99ef8e5e5b0dadeb","sha256":"016ab0bd0de4839680e4a717a57db9b182a8c2c5fdeec4c24db7a8df761fca4d","sha512":"1aa3ffa639729b094f6fa55deca993e586daa6fa30a6d791abd7dfbee7e25d8669d18a4c4ed47db48ebfbf75378458b537d310997ba6ff205f10bc6863e4b533","ssdeep":"","tlshash":"7251bde4354b215f480fc32219d85e87293ecd52d8260a5a92bbd718479ae2d113ffcf","first_seen":"2023-04-05T08:37:21Z","last_seen":"2026-10-08T07:16:32.121087Z","times_seen":13526,"resource_available":true,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"almaei-hr.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"almaei-hr.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"almaei-hr.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"almaei-hr.com/wp-content/themes/idol/assets/js/owl.carousel.min.js?ver=4.9.26","fqdn":"almaei-hr.com","domain":"almaei-hr.com","tld":"com"},"ip":{"addr":"157.180.2.34","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://almaei-hr.com/","date":"2026-10-08T04:26:17.055Z","timestamp":1791433577055,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.almaei-hr.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 29 Sep 2026 13:45:35 GMT","end":"Mon, 28 Dec 2026 13:45:34 GMT"},"fingerprint":{"sha1":"8C:FD:12:F1:63:85:5A:AE:E1:13:BE:69:B2:A7:54:CD:0C:4B:0E:1F","sha256":"AE:24:DA:20:1C:CA:BC:18:AA:07:3C:19:9C:CA:98:82:F5:FD:CE:F3:5D:E5:E2:BB:DD:CB:4D:53:35:78:14:F6"}}},"request":{"raw":"GET /wp-content/themes/idol/assets/js/owl.carousel.min.js?ver=4.9.26 HTTP/1.1\r\nHost: almaei-hr.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://almaei-hr.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=0\r\nexpires: Thu, 08 Oct 2026 04:26:17 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\nlast-modified: Sat, 27 Jul 2019 12:45:30 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 10649\r\ndate: Thu, 08 Oct 2026 04:26:17 GMT\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"YouTube","description":"YouTube is a video sharing service where users can create their own profile, upload videos, watch, like and comment on other videos.","website":"https://www.youtube.com","common_platform_enumeration":"","icon":"YouTube.png","categories":["Video players"]}],"data":{"size":42766,"size_decoded":10957,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (32000)","md5":"b7b9c97cd68ec336d01a79d5be48c58d","sha1":"1a99890b57c9859a622337ed0b2f989d6e30cc0e","sha256":"b394d33b2a7ec654a6b037ebfda6618341b3f897a362be624c923c2711b54a43","sha512":"968e18822c24c6c54827999ec766fe54750a9489d22b6a45b641854731ec00beb8fd93b9bda8823e67463f7a99ab587d333673821ae90cfdf7e92716ba050c4e","ssdeep":"768:JBA7PMMFA0tdlXKNSR4vlGRep2lcwJeL+C2jQdc7/CORUQuFBt33:HAIMFFdYMxAcLQDV","tlshash":"cb137346b3202d2a869b61a0663f160bb23a291ce414507d7d7da6de6d7dc4c213fbfc","first_seen":"2023-03-07T01:03:18Z","last_seen":"2026-10-08T06:47:03.275149Z","times_seen":21433,"resource_available":true,"data":null}},"time_used":24,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"almaei-hr.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"almaei-hr.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"almaei-hr.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"almaei-hr.com/wp-content/uploads/2019/07/modir-fani-100x100.jpg","fqdn":"almaei-hr.com","domain":"almaei-hr.com","tld":"com"},"ip":{"addr":"157.180.2.34","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://almaei-hr.com/","date":"2026-10-08T04:26:17.072Z","timestamp":1791433577072,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.almaei-hr.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 29 Sep 2026 13:45:35 GMT","end":"Mon, 28 Dec 2026 13:45:34 GMT"},"fingerprint":{"sha1":"8C:FD:12:F1:63:85:5A:AE:E1:13:BE:69:B2:A7:54:CD:0C:4B:0E:1F","sha256":"AE:24:DA:20:1C:CA:BC:18:AA:07:3C:19:9C:CA:98:82:F5:FD:CE:F3:5D:E5:E2:BB:DD:CB:4D:53:35:78:14:F6"}}},"request":{"raw":"GET /wp-content/uploads/2019/07/modir-fani-100x100.jpg HTTP/1.1\r\nHost: almaei-hr.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://almaei-hr.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=2592000\r\nexpires: Sat, 07 Nov 2026 04:26:17 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Sat, 27 Jul 2019 17:34:30 GMT\r\naccept-ranges: bytes\r\ncontent-length: 2918\r\ndate: Thu, 08 Oct 2026 04:26:17 GMT\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":2918,"size_decoded":3166,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 82\", baseline, precision 8, 100x100, components 3","md5":"ac717b50d8663bc8464dc31c21a76443","sha1":"07f8008a014f4cb9d374b0a1020bad715e681b67","sha256":"1b7f7045a5586ee9855151357a7f0bfcb5f89f84f93f4927235f778b08ad538c","sha512":"9b2b10e39546b5fdefcc873bc66a4c5c128068f7d2916e2cf21920fa956dbfc4044d51f1c3a6351526d318aa75ce5fa2a55d4434b2548d8800d15da37a3485d8","ssdeep":"","tlshash":"fd514b6cc64b42e00eb88db4655716ddc28e8ca3394437562e39c6c7e1204c88bd4ebf","first_seen":"2026-10-08T04:18:32.962756Z","last_seen":"2026-10-08T04:26:52.411626Z","times_seen":2,"resource_available":false,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"almaei-hr.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"almaei-hr.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"almaei-hr.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"almaei-hr.com/wp-content/themes/idol/assets/js/particles.min.js?ver=4.9.26","fqdn":"almaei-hr.com","domain":"almaei-hr.com","tld":"com"},"ip":{"addr":"157.180.2.34","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://almaei-hr.com/","date":"2026-10-08T04:26:17.045Z","timestamp":1791433577045,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.almaei-hr.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 29 Sep 2026 13:45:35 GMT","end":"Mon, 28 Dec 2026 13:45:34 GMT"},"fingerprint":{"sha1":"8C:FD:12:F1:63:85:5A:AE:E1:13:BE:69:B2:A7:54:CD:0C:4B:0E:1F","sha256":"AE:24:DA:20:1C:CA:BC:18:AA:07:3C:19:9C:CA:98:82:F5:FD:CE:F3:5D:E5:E2:BB:DD:CB:4D:53:35:78:14:F6"}}},"request":{"raw":"GET /wp-content/themes/idol/assets/js/particles.min.js?ver=4.9.26 HTTP/1.1\r\nHost: almaei-hr.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://almaei-hr.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=0\r\nexpires: Thu, 08 Oct 2026 04:26:17 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\nlast-modified: Sat, 27 Jul 2019 12:45:30 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 5735\r\ndate: Thu, 08 Oct 2026 04:26:17 GMT\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":23364,"size_decoded":6042,"mime_type":"text/javascript; charset=utf-8","magic":"ASCII text, with very long lines (23002)","md5":"00debcf6cf0789a19cee2278011afcd4","sha1":"8017f8b1869077db728573f1ca4684a00af69462","sha256":"faee7815a5fd27e938d1e01c8392b66332024908eb118048f608eee671371df6","sha512":"29e7f9b1cee07d369c47b4d929e95cad1b35e62a5fefeb7e9fb661ea628d25b996fbf4517425bd9f07cb9f8617d2cda73ba2afe58d8286a8086a4682e8f5b4f4","ssdeep":"384:NkfJtGvWjT6uYvqhCz8wSEHESxtVAFPQcYpeib+9rOEKXWd/:NC7T6uYvn8wRxwyryVOEKXW5","tlshash":"61a2934d23f73e77378ab2e09be9d122c774a4d1399b04b0f93c667da52549201ee7a0","first_seen":"2023-03-07T01:16:44Z","last_seen":"2026-10-08T04:26:52.41238Z","times_seen":5942,"resource_available":true,"data":null}},"time_used":32,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":11,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"almaei-hr.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"almaei-hr.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"almaei-hr.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"almaei-hr.com/wp-content/themes/idol/assets/js/bootstrap.min.js?ver=4.9.26","fqdn":"almaei-hr.com","domain":"almaei-hr.com","tld":"com"},"ip":{"addr":"157.180.2.34","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://almaei-hr.com/","date":"2026-10-08T04:26:17.051Z","timestamp":1791433577051,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.almaei-hr.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 29 Sep 2026 13:45:35 GMT","end":"Mon, 28 Dec 2026 13:45:34 GMT"},"fingerprint":{"sha1":"8C:FD:12:F1:63:85:5A:AE:E1:13:BE:69:B2:A7:54:CD:0C:4B:0E:1F","sha256":"AE:24:DA:20:1C:CA:BC:18:AA:07:3C:19:9C:CA:98:82:F5:FD:CE:F3:5D:E5:E2:BB:DD:CB:4D:53:35:78:14:F6"}}},"request":{"raw":"GET /wp-content/themes/idol/assets/js/bootstrap.min.js?ver=4.9.26 HTTP/1.1\r\nHost: almaei-hr.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://almaei-hr.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=0\r\nexpires: Thu, 08 Oct 2026 04:26:17 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\nlast-modified: Sat, 27 Jul 2019 12:45:30 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 9564\r\ndate: Thu, 08 Oct 2026 04:26:17 GMT\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":37249,"size_decoded":9871,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (32094)","md5":"fc6f0acd7dc4cfeebdf0f5f5bc42eb22","sha1":"8e330d542c72c1acea329fd2d5deeb0c89126576","sha256":"8d305146449ba0f4fe550ce0d90b89b1fbd145c1e6efbed6a112c3a82eefa2e8","sha512":"d70e10fabe38709df847bd90405dd5d7bfee8787daa26bf8845a97121a530a3f415a0bf3e088face359df68eee6f2df3cf2c2c5152107a8a3bac08be9e236844","ssdeep":"768:p2rGy27UwlNqMl95qNmCFeNh0Z8snmi+CSFXPlx8Gf3Zq7Q:Yg73dh0ZG/lJ3ZKQ","tlshash":"b9f28606b23031a147efb1e1525b020e72396a6ee906907c78b99af53db5c48717bf3d","first_seen":"2023-03-12T16:40:41Z","last_seen":"2026-10-08T04:26:52.413012Z","times_seen":21,"resource_available":true,"data":null}},"time_used":28,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"almaei-hr.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"almaei-hr.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"almaei-hr.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"almaei-hr.com/wp-content/themes/idol/assets/js/magnific-popup.min.js?ver=4.9.26","fqdn":"almaei-hr.com","domain":"almaei-hr.com","tld":"com"},"ip":{"addr":"157.180.2.34","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://almaei-hr.com/","date":"2026-10-08T04:26:17.054Z","timestamp":1791433577054,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.almaei-hr.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 29 Sep 2026 13:45:35 GMT","end":"Mon, 28 Dec 2026 13:45:34 GMT"},"fingerprint":{"sha1":"8C:FD:12:F1:63:85:5A:AE:E1:13:BE:69:B2:A7:54:CD:0C:4B:0E:1F","sha256":"AE:24:DA:20:1C:CA:BC:18:AA:07:3C:19:9C:CA:98:82:F5:FD:CE:F3:5D:E5:E2:BB:DD:CB:4D:53:35:78:14:F6"}}},"request":{"raw":"GET /wp-content/themes/idol/assets/js/magnific-popup.min.js?ver=4.9.26 HTTP/1.1\r\nHost: almaei-hr.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://almaei-hr.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=0\r\nexpires: Thu, 08 Oct 2026 04:26:17 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\nlast-modified: Sat, 27 Jul 2019 12:45:30 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 7061\r\ndate: Thu, 08 Oct 2026 04:26:17 GMT\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":20226,"size_decoded":7368,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (20092), with CRLF line terminators","md5":"95cde8fa56b25aad0d8116d0f8b27187","sha1":"27e4df74cb10e5d4c6c9d17a6489274795239950","sha256":"1bec77eccb01b598b3a5e1d3299f231a1ef855489f766eee3584f97ee4a3ae35","sha512":"a7b4643012b072d563ea94f717d42931c84d9f17e561ce6240a2e9fff355bb16d0af210f3f0750d15a60d6f6ee844e1d88f5f5a3005838dc41bab685af0ba2fd","ssdeep":"384:iPhVPXQ2G2XAQyqVxRQ5giCCMLtA15h5/F6l8aZwHwztLCpMst:iPBIt8I5h5t1qkOLCist","tlshash":"c7921894f2b2b21383a735b8686f70093a729952ed06c855b55d94d87efcec89027f3c","first_seen":"2026-10-08T04:18:32.936121Z","last_seen":"2026-10-08T04:26:52.413607Z","times_seen":2,"resource_available":true,"data":null}},"time_used":26,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":7,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"almaei-hr.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"almaei-hr.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"almaei-hr.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"almaei-hr.com/wp-content/uploads/2019/07/cropped-IMG-20190722-WA0034.jpg","fqdn":"almaei-hr.com","domain":"almaei-hr.com","tld":"com"},"ip":{"addr":"157.180.2.34","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://almaei-hr.com/","date":"2026-10-08T04:26:17.090Z","timestamp":1791433577090,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.almaei-hr.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 29 Sep 2026 13:45:35 GMT","end":"Mon, 28 Dec 2026 13:45:34 GMT"},"fingerprint":{"sha1":"8C:FD:12:F1:63:85:5A:AE:E1:13:BE:69:B2:A7:54:CD:0C:4B:0E:1F","sha256":"AE:24:DA:20:1C:CA:BC:18:AA:07:3C:19:9C:CA:98:82:F5:FD:CE:F3:5D:E5:E2:BB:DD:CB:4D:53:35:78:14:F6"}}},"request":{"raw":"GET /wp-content/uploads/2019/07/cropped-IMG-20190722-WA0034.jpg HTTP/1.1\r\nHost: almaei-hr.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://almaei-hr.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=2592000\r\nexpires: Sat, 07 Nov 2026 04:26:17 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Sat, 27 Jul 2019 17:46:22 GMT\r\naccept-ranges: bytes\r\ncontent-length: 36063\r\ndate: Thu, 08 Oct 2026 04:26:17 GMT\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":36063,"size_decoded":36312,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 82\", baseline, precision 8, 360x605, components 3","md5":"d8900c165a0b1ca13c98ceb34ffdcaac","sha1":"41db51786c4e7399c1130ac2209c72bdc6187df1","sha256":"431ff743b144f0908320bc080ce2e1dfa9234f6b944a8258bd8e1d271a3a6978","sha512":"104eed2e0b95497054fdc3d5e87f85d84bc5dbdae8be94250d0b43f0b83d55ab777e1888345e7099d4b01da8850abe68121a2ce7117f1ce64a6d89008ce39259","ssdeep":"768:iVejtaU1eqjR/UAou/uSPM1C2bs3AjiVEac:iVtU1eqjR/UAof99qKJ","tlshash":"80f2f18fb6e5a624c8454cb8153b531bbb7b0358a3641b19aa3df298ce335c56db80d8","first_seen":"2026-10-08T04:18:32.949772Z","last_seen":"2026-10-08T04:26:52.414219Z","times_seen":2,"resource_available":false,"data":null}},"time_used":19,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"almaei-hr.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"almaei-hr.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"almaei-hr.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"almaei-hr.com/wp-content/themes/idol/assets/css/animate.css?ver=4.9.26","fqdn":"almaei-hr.com","domain":"almaei-hr.com","tld":"com"},"ip":{"addr":"157.180.2.34","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://almaei-hr.com/","date":"2026-10-08T04:26:17.021Z","timestamp":1791433577021,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.almaei-hr.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 29 Sep 2026 13:45:35 GMT","end":"Mon, 28 Dec 2026 13:45:34 GMT"},"fingerprint":{"sha1":"8C:FD:12:F1:63:85:5A:AE:E1:13:BE:69:B2:A7:54:CD:0C:4B:0E:1F","sha256":"AE:24:DA:20:1C:CA:BC:18:AA:07:3C:19:9C:CA:98:82:F5:FD:CE:F3:5D:E5:E2:BB:DD:CB:4D:53:35:78:14:F6"}}},"request":{"raw":"GET /wp-content/themes/idol/assets/css/animate.css?ver=4.9.26 HTTP/1.1\r\nHost: almaei-hr.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://almaei-hr.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=2592000\r\nexpires: Sat, 07 Nov 2026 04:26:17 GMT\r\ncontent-type: text/css; charset=utf-8\r\nlast-modified: Sat, 27 Jul 2019 12:45:30 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 3736\r\ndate: Thu, 08 Oct 2026 04:26:17 GMT\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":52790,"size_decoded":4042,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (52592)","md5":"d14d93614583b5e1211adba58181854c","sha1":"f0c74db8238ef5df5ec7db99cf32b8f507e983a9","sha256":"0ab525f34fd194333c8cbfd5e5f0cfa585a77f2d71ab415dc6e456a4c6c10e30","sha512":"fd6ae650673343fd6e691d3f2af1e7ef8eb01558c50ad161950ee459541d4736dcdedcc38d3428b6e22a27bd51eeae3fa19187fccc585f369be9c907f289e413","ssdeep":"768:KkZcIOIVjl2eIWInPywe1aAvkqDX3oyq5BrieD0OTbsysF:KkZ8Pywe1aAvkqDX3oyq5BrieD0OTU","tlshash":"223305ae5891129950274f67c7cc5ea8872dc7a714621cde33826c4b8b47fde33da607","first_seen":"2023-05-07T17:56:11Z","last_seen":"2026-10-08T04:26:52.414865Z","times_seen":169,"resource_available":true,"data":null}},"time_used":14,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"almaei-hr.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"almaei-hr.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"almaei-hr.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"almaei-hr.com/wp-content/themes/idol/assets/css/responsive.css?ver=4.9.26","fqdn":"almaei-hr.com","domain":"almaei-hr.com","tld":"com"},"ip":{"addr":"157.180.2.34","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://almaei-hr.com/","date":"2026-10-08T04:26:17.036Z","timestamp":1791433577036,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.almaei-hr.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 29 Sep 2026 13:45:35 GMT","end":"Mon, 28 Dec 2026 13:45:34 GMT"},"fingerprint":{"sha1":"8C:FD:12:F1:63:85:5A:AE:E1:13:BE:69:B2:A7:54:CD:0C:4B:0E:1F","sha256":"AE:24:DA:20:1C:CA:BC:18:AA:07:3C:19:9C:CA:98:82:F5:FD:CE:F3:5D:E5:E2:BB:DD:CB:4D:53:35:78:14:F6"}}},"request":{"raw":"GET /wp-content/themes/idol/assets/css/responsive.css?ver=4.9.26 HTTP/1.1\r\nHost: almaei-hr.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://almaei-hr.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=2592000\r\nexpires: Sat, 07 Nov 2026 04:26:17 GMT\r\ncontent-type: text/css; charset=utf-8\r\nlast-modified: Sat, 27 Jul 2019 12:45:30 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 1062\r\ndate: Thu, 08 Oct 2026 04:26:17 GMT\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":5519,"size_decoded":1368,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with CRLF line terminators","md5":"ebcd1810dabd857ac2203c8141b76d8d","sha1":"4e1d785fa31b3e2b26ef5e812018c95c19338686","sha256":"b7e617a5e17bb797fd0e9f3eaace05a56d3e0cf93fb3739b918a87fa8086fdcf","sha512":"7edcda4bb1c7eea96c18ce7769092fdd3a62bfd4de7f2fc2264e29ce4684067b70f968759b217962469e3a213f0c5539ec01680c4285de4c1e3ba377ea278243","ssdeep":"48:ORCl0fMaxEUdMw+GpmB6vkZq1xQ7QRdQ/IsmWTEnMROL+Zcs+AvKVEGQ0TQwaxEK:zlwtMBUR29Ti0OLmcsDhaEOFh5jGxPyg","tlshash":"eeb1ee61bb16204d238967c6b3f20d729e71d06753eb91fae8619514e1f0b0c46f1adb","first_seen":"2026-10-08T04:18:32.914712Z","last_seen":"2026-10-08T04:26:52.415484Z","times_seen":2,"resource_available":true,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"almaei-hr.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"almaei-hr.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"almaei-hr.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"almaei-hr.com/wp-content/themes/idol/assets/js/jquery-1.12.4.min.js?ver=4.9.26","fqdn":"almaei-hr.com","domain":"almaei-hr.com","tld":"com"},"ip":{"addr":"157.180.2.34","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://almaei-hr.com/","date":"2026-10-08T04:26:17.040Z","timestamp":1791433577040,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.almaei-hr.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 29 Sep 2026 13:45:35 GMT","end":"Mon, 28 Dec 2026 13:45:34 GMT"},"fingerprint":{"sha1":"8C:FD:12:F1:63:85:5A:AE:E1:13:BE:69:B2:A7:54:CD:0C:4B:0E:1F","sha256":"AE:24:DA:20:1C:CA:BC:18:AA:07:3C:19:9C:CA:98:82:F5:FD:CE:F3:5D:E5:E2:BB:DD:CB:4D:53:35:78:14:F6"}}},"request":{"raw":"GET /wp-content/themes/idol/assets/js/jquery-1.12.4.min.js?ver=4.9.26 HTTP/1.1\r\nHost: almaei-hr.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://almaei-hr.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=0\r\nexpires: Thu, 08 Oct 2026 04:26:17 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\nlast-modified: Sat, 27 Jul 2019 12:45:30 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 32859\r\ndate: Thu, 08 Oct 2026 04:26:17 GMT\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":97168,"size_decoded":33167,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (32077), with CRLF line terminators","md5":"618538b4ab9639d444e962729a927f15","sha1":"dacc1f76630a9708add066819b1aabf8dce01056","sha256":"27d92130c0321dad5a03760fd5ac98a3d04ed4c94d88418fe6d50da1f7fc5cbe","sha512":"bcb6754ea246939a19a917cc0b810e1753c1b0f1a8b1b7e652128ef15dee4fc79111e4d88fe12f9188449a307e82240d0261af402d783428edfe5785c860372d","ssdeep":"1536:jYE1JVoiB9JqZdXXe2pD3PgoIiulrUdTJ5Fk/zkZ4HjL5o8srOaS9TwDhb7/Jp96:y4J+03jL5TCOauTwDhFdnCVQNLa98Hrc","tlshash":"9693d7d9b6d6706287b734a851bf410bb17aa8eab40c4c60f058c8e47e74e9d507bf2d","first_seen":"2023-03-07T01:12:12Z","last_seen":"2026-10-08T04:26:52.416269Z","times_seen":6004,"resource_available":true,"data":null}},"time_used":26,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":11,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"almaei-hr.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"almaei-hr.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"almaei-hr.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"almaei-hr.com/wp-content/themes/idol/assets/js/parallax.min.js?ver=4.9.26","fqdn":"almaei-hr.com","domain":"almaei-hr.com","tld":"com"},"ip":{"addr":"157.180.2.34","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://almaei-hr.com/","date":"2026-10-08T04:26:17.059Z","timestamp":1791433577059,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.almaei-hr.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 29 Sep 2026 13:45:35 GMT","end":"Mon, 28 Dec 2026 13:45:34 GMT"},"fingerprint":{"sha1":"8C:FD:12:F1:63:85:5A:AE:E1:13:BE:69:B2:A7:54:CD:0C:4B:0E:1F","sha256":"AE:24:DA:20:1C:CA:BC:18:AA:07:3C:19:9C:CA:98:82:F5:FD:CE:F3:5D:E5:E2:BB:DD:CB:4D:53:35:78:14:F6"}}},"request":{"raw":"GET /wp-content/themes/idol/assets/js/parallax.min.js?ver=4.9.26 HTTP/1.1\r\nHost: almaei-hr.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://almaei-hr.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=0\r\nexpires: Thu, 08 Oct 2026 04:26:17 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\nlast-modified: Sat, 27 Jul 2019 12:45:30 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 720\r\ndate: Thu, 08 Oct 2026 04:26:17 GMT\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1837,"size_decoded":1026,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with CRLF line terminators","md5":"81e0b0f668eacf2a03a6837d1725b5e4","sha1":"fc5ccfb2acc1373fe0bc98deb05cf17527308932","sha256":"01a1f3673b0aded595d51abe806812fb9385fa22f1fff9ebd33ab7f422caab30","sha512":"0dbd90c9e97d90c1018931089b5e8f6c1f8923b1ee24cc4e489722ae12e1bc3f8efe551c542867389213b26eef62d09015b1fc1ea2dd77907c6503071bb9cccb","ssdeep":"","tlshash":"193145a8339f3105c876636f5a3f935cf23bd15184878020d9aee46c3950a2b77b1da8","first_seen":"2023-03-07T01:29:00Z","last_seen":"2026-10-08T04:26:52.416732Z","times_seen":494,"resource_available":true,"data":null}},"time_used":18,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":18,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"almaei-hr.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"almaei-hr.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"almaei-hr.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"almaei-hr.com/wp-content/uploads/2019/07/IMG-20190722-WA0008.jpg","fqdn":"almaei-hr.com","domain":"almaei-hr.com","tld":"com"},"ip":{"addr":"157.180.2.34","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://almaei-hr.com/","date":"2026-10-08T04:26:17.192Z","timestamp":1791433577192,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.almaei-hr.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 29 Sep 2026 13:45:35 GMT","end":"Mon, 28 Dec 2026 13:45:34 GMT"},"fingerprint":{"sha1":"8C:FD:12:F1:63:85:5A:AE:E1:13:BE:69:B2:A7:54:CD:0C:4B:0E:1F","sha256":"AE:24:DA:20:1C:CA:BC:18:AA:07:3C:19:9C:CA:98:82:F5:FD:CE:F3:5D:E5:E2:BB:DD:CB:4D:53:35:78:14:F6"}}},"request":{"raw":"GET /wp-content/uploads/2019/07/IMG-20190722-WA0008.jpg HTTP/1.1\r\nHost: almaei-hr.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://almaei-hr.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=2592000\r\nexpires: Sat, 07 Nov 2026 04:26:17 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Sat, 27 Jul 2019 13:23:32 GMT\r\naccept-ranges: bytes\r\ncontent-length: 93688\r\ndate: Thu, 08 Oct 2026 04:26:17 GMT\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":93688,"size_decoded":93937,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, baseline, precision 8, 640x640, components 3","md5":"1bfc17fa7634d9a996f52200d8bb63ca","sha1":"b6a28495f97128923b6eadade25e43a4be77be03","sha256":"7944610d5de5a085a00bfbd1db9521eb558cd4a5f7102fbf51f91d6b469b792f","sha512":"c8cd7a880cf6b1daa98e74d55acd5b4d350dea6c4ab4c8b3c5dbf610047276bd0b8380645b9707b14c8770104b0fdfd4b61aabbc0f8a3b808713c80095aa6b12","ssdeep":"1536:LsVBDDoXZ3FCoJZlkupqiqvdeTCFX+LPbQGecRcq6TuH03P88zbbRM6C/CkVC:MlQ1FxZlkupqBvTSM5XnbECl","tlshash":"4d9302d74392cf5707a80834f8c39cc53149422acaf2fa1ad97bb4ce81d7645f653a69","first_seen":"2026-10-08T04:18:32.942504Z","last_seen":"2026-10-08T04:26:52.417306Z","times_seen":2,"resource_available":false,"data":null}},"time_used":32,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":21,"receive":11,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"almaei-hr.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"almaei-hr.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"almaei-hr.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"almaei-hr.com/wp-content/uploads/2019/07/accounting-100x100.jpg","fqdn":"almaei-hr.com","domain":"almaei-hr.com","tld":"com"},"ip":{"addr":"157.180.2.34","port":443,"asn":24940,"as":"Hetzner Online GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://almaei-hr.com/","date":"2026-10-08T04:26:17.070Z","timestamp":1791433577070,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.almaei-hr.com","organization":""},"issuer":{"commonName":"YR1","organization":"Let's Encrypt"},"validity":{"start":"Tue, 29 Sep 2026 13:45:35 GMT","end":"Mon, 28 Dec 2026 13:45:34 GMT"},"fingerprint":{"sha1":"8C:FD:12:F1:63:85:5A:AE:E1:13:BE:69:B2:A7:54:CD:0C:4B:0E:1F","sha256":"AE:24:DA:20:1C:CA:BC:18:AA:07:3C:19:9C:CA:98:82:F5:FD:CE:F3:5D:E5:E2:BB:DD:CB:4D:53:35:78:14:F6"}}},"request":{"raw":"GET /wp-content/uploads/2019/07/accounting-100x100.jpg HTTP/1.1\r\nHost: almaei-hr.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://almaei-hr.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncache-control: public, max-age=2592000\r\nexpires: Sat, 07 Nov 2026 04:26:17 GMT\r\ncontent-type: image/jpeg\r\nlast-modified: Sat, 27 Jul 2019 17:14:44 GMT\r\naccept-ranges: bytes\r\ncontent-length: 3071\r\ndate: Thu, 08 Oct 2026 04:26:17 GMT\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":3071,"size_decoded":3319,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, aspect ratio, density 1x1, segment length 16, comment: \"CREATOR: gd-jpeg v1.0 (using IJG JPEG v62), quality = 82\", baseline, precision 8, 100x100, components 3","md5":"d6d182e33453fd954f0d965cf45a35ac","sha1":"037c05fb07d70bf9756029e80627efb89d9cdc8a","sha256":"5c294aa080b11f46ba32badc60a6c7910913ce308d4e140a03881a7b6a83b337","sha512":"85eaba91088db47c0a17b965ac5fe900ce6f2ccd8ef203957a088e2a5428d42c51eda621c1de39fcd906f09eaff1b8785c1449021f6b0df82eb7c09d78b7212e","ssdeep":"","tlshash":"0f516f5d57139691d912be3f0b23413f91ea1f16dee9592c2bf1f5e08241cf248c519d","first_seen":"2026-10-08T04:18:32.951871Z","last_seen":"2026-10-08T04:26:52.417827Z","times_seen":2,"resource_available":false,"data":null}},"time_used":15,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":15,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"almaei-hr.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"almaei-hr.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-08","alert":"Sinkholed","trigger":"almaei-hr.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}