{"report_id":"ad008cf4-315b-49d2-8272-88ffab96c98e","version":0,"status":"done","tags":[],"date":"2026-09-14T19:20:12Z","url":{"schema":"http","addr":"mamforme.live/","fqdn":"mamforme.live","domain":"mamforme.live","tld":"live"},"ip":{"addr":"172.67.128.125","port":0,"asn":13335,"as":"Cloudflare, Inc.","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"mamforme.live/","fqdn":"mamforme.live","domain":"mamforme.live","tld":"live"},"title":"Strona główna - Mam Formę","dom":{"size":130486,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (61452)","md5":"02ccc93711cc63ee879dedce1c97776c","sha1":"5bebc18c328bcf50a247643e38ce2f3fddc6b20d","sha256":"193c8d93bcc69ae98254e9db9c6a5f69c8d0b99e9481597b8cdf6853597840d8","sha512":"c32c56a295548769a36de0fd82872370d77bd819b8a12987debb05173438efd2842eb2c84421c98af46109c59dff0dacbe24466cfb64fd90c7a099dd19f534f9","ssdeep":"1536:PXxE+jnFbHfhJiTCrlAujxryp1vPiu5270:Pnsfiu52A","tlshash":"6ed3c9a1a3a01536367b537de58bf74829284623e64e33e6f8bec15c85c9bd710b170e","dom_hash":"domhash77a02c4fcbad5278f6c9d405d8ed8daf","first_seen":"2026-09-14T19:20:15.331466Z","last_seen":"2026-09-14T19:20:15.331466Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"mamforme.live/","fqdn":"mamforme.live","domain":"mamforme.live","tld":"live"},"ip":{"addr":"172.67.128.125","port":0,"asn":13335,"as":"Cloudflare, Inc.","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-10-19T19:20:12Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":5}},"detection":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"mamforme.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"mamforme.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-14","alert":"Phishing Block","trigger":"mamforme.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"mamforme.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"mamforme.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null},"summary":[{"fqdn":"mamforme.live","ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2026-09-14T19:05:23.637194Z","last_seen":"2026-09-14T19:05:23.637194Z","alert_count":175,"request_count":35,"received_data":1031718,"sent_data":17364,"comment":"","tags":null,"fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Spectra","description":"Spectra is a WordPress plugin that provides a collection of new and enhanced blocks for the WordPress Block editor.","website":"https://wpspectra.com","common_platform_enumeration":"","icon":"Spectra.svg","categories":["WordPress plugins"]},{"name":"WordPress:7.1","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"jQuery Migrate","description":"Query Migrate is a javascript library that allows you to preserve the compatibility of your jQuery code developed for versions of jQuery older than 1.9.","website":"https://github.com/jquery/jquery-migrate","common_platform_enumeration":"","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"WordPress Block Editor","description":"Sites using the WordPress Block Editor, also known as Gutenberg.","website":"https://wordpress.org/gutenberg/","common_platform_enumeration":"","icon":"WordPress.svg","categories":["Page builders"]},{"name":"Autoptimize","description":"Autoptimize is a WordPress plugin that optimises website performance by aggregating, minifying, and compressing HTML, CSS, and JavaScript files.","website":"https://autoptimize.com","common_platform_enumeration":"","icon":"Autoptimize.png","categories":["WordPress plugins","Performance"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]},{"name":"WooCommerce:11.1.0","description":"WooCommerce is an open-source ecommerce plugin for WordPress.","website":"https://woocommerce.com","common_platform_enumeration":"","icon":"WooCommerce.svg","categories":["Ecommerce","WordPress plugins"]},{"name":"Elementor:4.2.4","description":"Elementor is a website builder platform for professionals on WordPress.","website":"https://elementor.com","common_platform_enumeration":"","icon":"Elementor.svg","categories":["Page builders","WordPress plugins"]}]},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.178.42","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-09-13T22:43:30.72904Z","alert_count":0,"request_count":1,"received_data":7684,"sent_data":563,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":null,"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"mamforme.live/wp-content/plugins/forminator/assets/forminator-ui/js/forminator-form.min.js","fqdn":"mamforme.live","domain":"mamforme.live","tld":"live"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://mamforme.live/","date":"2026-09-14T19:19:32.835Z","timestamp":1789413572835,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /wp-content/plugins/forminator/assets/forminator-ui/js/forminator-form.min.js HTTP/1.1\r\nHost: mamforme.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://mamforme.live/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-14T21:51:42.575045Z","times_seen":18466627,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"mamforme.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"mamforme.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-14","alert":"Phishing Block","trigger":"mamforme.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"mamforme.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"mamforme.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mamforme.live/wp-content/cache/autoptimize/css/autoptimize_single_a8e6fd045a4a810d84071aa8df689e57.css","fqdn":"mamforme.live","domain":"mamforme.live","tld":"live"},"ip":{"addr":"172.67.128.125","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://mamforme.live/","date":"2026-09-14T19:19:32.795Z","timestamp":1789413572795,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mamforme.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 28 Jul 2026 13:38:12 GMT","end":"Mon, 26 Oct 2026 14:36:38 GMT"},"fingerprint":{"sha1":"30:1F:69:7B:09:71:B7:59:4C:D6:B2:1C:6E:21:79:92:1D:35:7E:4C","sha256":"58:66:79:49:8D:FA:10:27:F4:93:35:A6:12:9B:EF:C0:56:C0:3F:AD:58:04:F6:85:9A:7E:79:30:99:5B:E2:F2"}}},"request":{"raw":"GET /wp-content/cache/autoptimize/css/autoptimize_single_a8e6fd045a4a810d84071aa8df689e57.css HTTP/1.1\r\nHost: mamforme.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://mamforme.live/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=if7MSFI%2F%2BGyVAc%2BlZyGCSUZuErWj0cj2h84U8mfRYI%2F8JWC7tNHv0sISdJLG8HIWmz60pMYIWN1t1rT%2BPybwr89aP5ML94LaT4N3qk6X980mta%2FfYt7KoXEwWgZqUiqV\"}]}\r\ndate: Mon, 14 Sep 2026 19:19:55 GMT\r\ncontent-type: text/css\r\npriority: u=2,i=?0\r\ncf-ray: a3b1be6e0d684404-CPH\r\ncf-cache-status: MISS\r\ncache-control: public, max-age=30672000, immutable\r\ncontent-encoding: gzip\r\netag: W/\"3d765-65b0b27a29c00\"\r\nexpires: Sat, 04 Sep 2027 19:19:36 GMT\r\nlast-modified: Wed, 09 Sep 2026 11:28:48 GMT\r\nserver: cloudflare\r\nvary: accept-encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":251773,"size_decoded":17464,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"9caed3f1d3418edeea429ca63946d95c","sha1":"7a10c52f6f2a7c340b6f2f1fcf354136fc9fea20","sha256":"ef84ef9ce79bf6f2e47402b134e74a5a7699427f66df616c0bd79dbca8ceed50","sha512":"6eef001d57e2e97036b3064fce988f56a4c75b84024b2b1c5d64ba31bff43c4704954d72b388bc9f4f4405800c958067c27692c3ae94e8b1b591d618a040017c","ssdeep":"384:1e7+2SmmnqkWz8dBsxUCBBjoPjQ36T9YZdXf+o1UTPkWTx0t85FuHznu4DmjdIJ0:1e7iqudBsjZ4WjPT2K+DCLI39q7Mea","tlshash":"4834eee11b381bed76799a9d9a0bf4147940d602ef9369cbf442d017f4eebe119e030a","first_seen":"2026-09-14T19:05:33.792639Z","last_seen":"2026-09-14T19:20:15.345331Z","times_seen":2,"resource_available":false,"data":null}},"time_used":22755,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22755,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-14","alert":"Phishing Block","trigger":"mamforme.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"mamforme.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"mamforme.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"mamforme.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"mamforme.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mamforme.live/wp-includes/js/jquery/jquery-migrate.min.js","fqdn":"mamforme.live","domain":"mamforme.live","tld":"live"},"ip":{"addr":"172.67.128.125","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://mamforme.live/","date":"2026-09-14T19:19:32.799Z","timestamp":1789413572799,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mamforme.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 28 Jul 2026 13:38:12 GMT","end":"Mon, 26 Oct 2026 14:36:38 GMT"},"fingerprint":{"sha1":"30:1F:69:7B:09:71:B7:59:4C:D6:B2:1C:6E:21:79:92:1D:35:7E:4C","sha256":"58:66:79:49:8D:FA:10:27:F4:93:35:A6:12:9B:EF:C0:56:C0:3F:AD:58:04:F6:85:9A:7E:79:30:99:5B:E2:F2"}}},"request":{"raw":"GET /wp-includes/js/jquery/jquery-migrate.min.js HTTP/1.1\r\nHost: mamforme.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://mamforme.live/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Mon, 14 Sep 2026 19:19:45 GMT\r\ncontent-encoding: zstd\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\ncache-control: public, max-age=86400\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=aRMvbg8ekAxUtXFBTm26FIK7yPXKAmjjom5HABCtDkg9bKS8hissXEypDTmjhUKXU%2BKRWCDbtnVpQBYpwmamUJaA%2BivU6wGm7w381XhLemBFchIDGXL1dbx69d3YAAxs\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: a3b1be6e0d6e4404-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":13577,"size_decoded":5773,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (13479)","md5":"9ffeb32e2d9efbf8f70caabded242267","sha1":"3ad0c10e501ac2a9bfa18f9cd7e700219b378738","sha256":"5274f11e6fb32ae0cf2dfb9f8043272865c397a7c4223b4cfa7d50ea52fbde89","sha512":"8d6be545508a1c38278b8ad780c3758ae48a25e4e12eee443375aa56031d9b356f8c90f22d4f251140fa3f65603af40523165e33cae2e2d62fc78ec106e3d731","ssdeep":"192:5rprDN+sag6ifKIUpQI99P1tLm9kdgyq1+J3aCJQ+h4MPLORq:5rprxaefKI0LP19m4q1WW+h4Mjp","tlshash":"9952c8adb56679724eb721b8f03bd24f71b205de560d8940d19cc4f6282dc6e812bf78","first_seen":"2023-05-09T19:21:05Z","last_seen":"2026-09-14T21:51:46.335944Z","times_seen":966405,"resource_available":true,"data":null}},"time_used":13050,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13050,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-14","alert":"Phishing Block","trigger":"mamforme.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"mamforme.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"mamforme.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"mamforme.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"mamforme.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mamforme.live/wp-content/plugins/woocommerce/assets/js/js-cookie/js.cookie.min.js","fqdn":"mamforme.live","domain":"mamforme.live","tld":"live"},"ip":{"addr":"172.67.128.125","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://mamforme.live/","date":"2026-09-14T19:19:32.802Z","timestamp":1789413572802,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mamforme.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 28 Jul 2026 13:38:12 GMT","end":"Mon, 26 Oct 2026 14:36:38 GMT"},"fingerprint":{"sha1":"30:1F:69:7B:09:71:B7:59:4C:D6:B2:1C:6E:21:79:92:1D:35:7E:4C","sha256":"58:66:79:49:8D:FA:10:27:F4:93:35:A6:12:9B:EF:C0:56:C0:3F:AD:58:04:F6:85:9A:7E:79:30:99:5B:E2:F2"}}},"request":{"raw":"GET /wp-content/plugins/woocommerce/assets/js/js-cookie/js.cookie.min.js HTTP/1.1\r\nHost: mamforme.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://mamforme.live/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Mon, 14 Sep 2026 19:19:33 GMT\r\ncontent-encoding: zstd\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\ncache-control: public, max-age=86400\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Idlus7MvEFPS4XJT9AhwgDYH%2BtfKK20Pk2eLNmt1U94JFHRRpfvtmgVWHW3jhHhFdcRRsghAp66iVEd12%2Bnp37Za%2FkmZjQP%2FviNWDDAefmO11VCslb2nwgbzHhX137Cn\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: a3b1be6e0d714404-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1720,"size_decoded":1455,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (1690)","md5":"691a1e43450e7cda541a3bd6f10fd5db","sha1":"d3a78cb77ccec297c9d32fee99a2a4761f604a8c","sha256":"8b083f64f2e9e8ac445c730dfce7013cc6449ce155fd1c2f42b60edba4ecb4b1","sha512":"a32ebe942e704da64381e392ffc20ed4f9d8daf71227a06f2dc0ca5c037675ab67e5b5a5ddf9bcb77b1872308daa780cc0e6ec5a2469bcd51444ece4f3b3de0d","ssdeep":"","tlshash":"c031b6d93095a8da06071490463f1207f2f91e27eecd98906264e8f50ab077a01ebf6b","first_seen":"2024-03-20T13:06:17Z","last_seen":"2026-09-14T21:51:46.284033Z","times_seen":158118,"resource_available":true,"data":null}},"time_used":393,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":393,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"mamforme.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"mamforme.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-14","alert":"Phishing Block","trigger":"mamforme.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"mamforme.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"mamforme.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mamforme.live/wp-content/plugins/woocommerce/assets/js/frontend/woocommerce.min.js","fqdn":"mamforme.live","domain":"mamforme.live","tld":"live"},"ip":{"addr":"172.67.128.125","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://mamforme.live/","date":"2026-09-14T19:19:32.804Z","timestamp":1789413572804,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mamforme.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 28 Jul 2026 13:38:12 GMT","end":"Mon, 26 Oct 2026 14:36:38 GMT"},"fingerprint":{"sha1":"30:1F:69:7B:09:71:B7:59:4C:D6:B2:1C:6E:21:79:92:1D:35:7E:4C","sha256":"58:66:79:49:8D:FA:10:27:F4:93:35:A6:12:9B:EF:C0:56:C0:3F:AD:58:04:F6:85:9A:7E:79:30:99:5B:E2:F2"}}},"request":{"raw":"GET /wp-content/plugins/woocommerce/assets/js/frontend/woocommerce.min.js HTTP/1.1\r\nHost: mamforme.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://mamforme.live/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Mon, 14 Sep 2026 19:19:33 GMT\r\ncontent-encoding: zstd\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\ncache-control: public, max-age=86400\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=fSBpJY1mcbNc4BQ%2BTmdjabuzLVHmV5g57%2BgifWA1z0CNh%2F7fdWHVulXbOz5IC53dJP4qT8UUk4rpam%2F8pLYXrMBNewkO%2Bgb84yA0rvvvokSNQPVVG8P20df3TvKSOWoO\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: a3b1be6e1d734404-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4281,"size_decoded":2251,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (4281), with no line terminators","md5":"7543a2da8054e263cbb8c7d702a5c060","sha1":"b6b0996bf1431c8858ef336369a2498e64c5ad3a","sha256":"a83bd8463b628e661482010504cbb69143b13461a0178cb4f7b929aa28efa96f","sha512":"a970a5e80f3b63ab8cb8461a1d7f903e78091d46272b0b85265962e3c62bdc8260a7be52402948d1498523b9fa75e419459bf5dd40973eca6af64520787877f4","ssdeep":"48:0ncEupIicboNb9j5okOBRQJ8H6xJsnDpr6r75eGSqlwpZswn+uOujAvKsPPF3cLa:0cEQxc4xN6a8EJWrO75ekwp1lEvtsd85","tlshash":"3791661b74216d7322eb75ba2c9ee98414331639a4414501b509cf6c3b7e8ca7737b6e","first_seen":"2026-08-31T14:42:45.211396Z","last_seen":"2026-09-14T22:22:10.688675Z","times_seen":641,"resource_available":true,"data":null}},"time_used":429,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":429,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"mamforme.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"mamforme.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"mamforme.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-14","alert":"Phishing Block","trigger":"mamforme.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"mamforme.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mamforme.live/wp-content/plugins/forminator/assets/forminator-ui/css/src/grid/forminator-grid.open.min.css","fqdn":"mamforme.live","domain":"mamforme.live","tld":"live"},"ip":{"addr":"172.67.128.125","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://mamforme.live/","date":"2026-09-14T19:19:32.810Z","timestamp":1789413572810,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mamforme.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 28 Jul 2026 13:38:12 GMT","end":"Mon, 26 Oct 2026 14:36:38 GMT"},"fingerprint":{"sha1":"30:1F:69:7B:09:71:B7:59:4C:D6:B2:1C:6E:21:79:92:1D:35:7E:4C","sha256":"58:66:79:49:8D:FA:10:27:F4:93:35:A6:12:9B:EF:C0:56:C0:3F:AD:58:04:F6:85:9A:7E:79:30:99:5B:E2:F2"}}},"request":{"raw":"GET /wp-content/plugins/forminator/assets/forminator-ui/css/src/grid/forminator-grid.open.min.css HTTP/1.1\r\nHost: mamforme.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://mamforme.live/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=iPN4v8gZIwXLa1yLexVKUE8Dm1cKJ0lz3ZTpcHlzPKsRmgVrnqcSxIQu%2B0BR2GSWwQFsx8XPJsQwEBpiDHRk%2FwrVIPEc%2BZ9x3U3VjnRDQLeCaytrovJKkM7Jrm8rB82W\"}]}\r\ndate: Mon, 14 Sep 2026 19:19:40 GMT\r\ncontent-type: text/css\r\npriority: u=2,i=?0\r\ncf-ray: a3b1be6e1d784404-CPH\r\ncf-cache-status: MISS\r\ncache-control: max-age=14400\r\ncontent-encoding: gzip\r\netag: W/\"1456-65b0b25ab11c0\"\r\nlast-modified: Wed, 09 Sep 2026 11:28:15 GMT\r\nserver: cloudflare\r\nvary: accept-encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5206,"size_decoded":1328,"mime_type":"text/css","magic":"ASCII text, with very long lines (5062)","md5":"94585ddc196845fb277330318167528a","sha1":"1fb2046e3038810e15d26bc315f796e47466c604","sha256":"bf8f40da4832a13bcd91915ad22cb00f8a6f52eb4f36e89b44d4bef7a2c93fd9","sha512":"1a75a453a416e7b8fd57589d31416d6b7f332858d7c30fb8e12737dfe36b6233ec82d571f66086e1ca225ccd9cc3bf99861a616014eab93559aaecd520271a9f","ssdeep":"96:Wtvt2t4t3t0thtrt2tXtqotmtROtEtFqfthtWmthttgtptVtPtdtrt/t0tyQt1tO:Wtvt2t4t3t0thtrt2tXtqotmtROtEtFf","tlshash":"b5b16da6bcbc277431623d30d7ea6dd0441297142622efd21fedcc462a4a7e66707bb4","first_seen":"2025-05-07T13:22:46.686915Z","last_seen":"2026-09-14T21:50:20.089642Z","times_seen":1747,"resource_available":false,"data":null}},"time_used":7788,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7788,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"mamforme.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-14","alert":"Phishing Block","trigger":"mamforme.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"mamforme.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"mamforme.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"mamforme.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mamforme.live/wp-content/plugins/woocommerce/assets/js/sourcebuster/sourcebuster.min.js","fqdn":"mamforme.live","domain":"mamforme.live","tld":"live"},"ip":{"addr":"172.67.128.125","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://mamforme.live/","date":"2026-09-14T19:19:32.827Z","timestamp":1789413572827,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mamforme.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 28 Jul 2026 13:38:12 GMT","end":"Mon, 26 Oct 2026 14:36:38 GMT"},"fingerprint":{"sha1":"30:1F:69:7B:09:71:B7:59:4C:D6:B2:1C:6E:21:79:92:1D:35:7E:4C","sha256":"58:66:79:49:8D:FA:10:27:F4:93:35:A6:12:9B:EF:C0:56:C0:3F:AD:58:04:F6:85:9A:7E:79:30:99:5B:E2:F2"}}},"request":{"raw":"GET /wp-content/plugins/woocommerce/assets/js/sourcebuster/sourcebuster.min.js HTTP/1.1\r\nHost: mamforme.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://mamforme.live/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Mon, 14 Sep 2026 19:19:55 GMT\r\ncontent-encoding: zstd\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\ncache-control: public, max-age=86400\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xyiSJV9%2BSDaReYrZdVA0hSoJ2IieUJhe%2FQzUAisEuNrczR4ARLljP%2BWmGTQXEo3%2FsNxm8E1PLLh7aVQoWx2xgtsqUETKGzzkcOWPhjQAw1CQ%2FPkTIR81bGPJuFRGcNJF\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: a3b1be6e3d824404-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":15315,"size_decoded":5698,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (15315), with no line terminators","md5":"fc06080ebf979384eaf92a5f1cd7a50b","sha1":"1474b07026c758629a82df51a5e4fbb7abf531df","sha256":"c50a0b33030ba0ec063be642c297f48af94359e2222ff140817248d591faf837","sha512":"d6443028105566717f328c56d17a0694e13905aa008bd36ba744e76bc5181e854ab80563be1d3167d728bf5eba6c502d7e36aebf0ed74504c88e47125cc710aa","ssdeep":"384:1wNWSiRVRS4tdanZkYH5FL736ePkPakFX:qNdi7anPH5FL736ePkP/","tlshash":"fc62e945756050358aa511ac283b018f613adc3aa6f46834ef18e4ae387cede51fbb7d","first_seen":"2024-06-19T04:58:57Z","last_seen":"2026-09-14T21:48:22.229582Z","times_seen":154542,"resource_available":true,"data":null}},"time_used":22902,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22901,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"mamforme.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"mamforme.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"mamforme.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"mamforme.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-14","alert":"Phishing Block","trigger":"mamforme.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mamforme.live/wp-content/plugins/forminator/assets/js/library/jquery.validate.min.js","fqdn":"mamforme.live","domain":"mamforme.live","tld":"live"},"ip":{"addr":"172.67.128.125","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://mamforme.live/","date":"2026-09-14T19:19:32.833Z","timestamp":1789413572833,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mamforme.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 28 Jul 2026 13:38:12 GMT","end":"Mon, 26 Oct 2026 14:36:38 GMT"},"fingerprint":{"sha1":"30:1F:69:7B:09:71:B7:59:4C:D6:B2:1C:6E:21:79:92:1D:35:7E:4C","sha256":"58:66:79:49:8D:FA:10:27:F4:93:35:A6:12:9B:EF:C0:56:C0:3F:AD:58:04:F6:85:9A:7E:79:30:99:5B:E2:F2"}}},"request":{"raw":"GET /wp-content/plugins/forminator/assets/js/library/jquery.validate.min.js HTTP/1.1\r\nHost: mamforme.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://mamforme.live/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Mon, 14 Sep 2026 19:19:35 GMT\r\ncontent-encoding: zstd\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\ncache-control: public, max-age=86400\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=PuFFlcrg0eI0hN0vslaS6ItlYgAazr0P%2FsDVCUO5wdVseHB8CSOzw9AAe0118mJH6xpYpjzNkx%2FjNzaIjn%2Fo5Fl%2BlgKJ4P2UZCSRlyKLvR%2Fgxgo%2BDKYZ5yKNCs3Xsx%2FM\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: a3b1be6e4d864404-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":25095,"size_decoded":9314,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (24955)","md5":"aa64af3761af4d692bc69a2f676a28e3","sha1":"07b35ef1d3551db7b44c034ae4a1d22878b5675c","sha256":"6a771e69902d8e674992bb366177ec9ea7a697da9e65107c92473a672ad82415","sha512":"c98b6f6b04a4d2e5d67d9f457848e35c9de4264d9a3451a266778c6802fd7808e1394ee3fa57f5a27ec7a96529b5ee3de7d810177bb3497975937592e902230d","ssdeep":"768:ycWZ6/8lHJdkMioFpg5SUBQyQEny+L+gxV4Ky47ZD4:yg0d3ioFpg5SUBQyQEny+PaKyCd4","tlshash":"50b2a78976d670065e9720f4909ba60b61b66961e008e83c75b8e4d1bef8fcc50f7f78","first_seen":"2024-06-29T13:37:30Z","last_seen":"2026-09-14T21:50:20.073651Z","times_seen":3585,"resource_available":true,"data":null}},"time_used":2332,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2332,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"mamforme.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"mamforme.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"mamforme.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-14","alert":"Phishing Block","trigger":"mamforme.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"mamforme.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mamforme.live/wp-includes/css/dist/block-library/style.min.css","fqdn":"mamforme.live","domain":"mamforme.live","tld":"live"},"ip":{"addr":"172.67.128.125","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://mamforme.live/","date":"2026-09-14T19:19:32.788Z","timestamp":1789413572788,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mamforme.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 28 Jul 2026 13:38:12 GMT","end":"Mon, 26 Oct 2026 14:36:38 GMT"},"fingerprint":{"sha1":"30:1F:69:7B:09:71:B7:59:4C:D6:B2:1C:6E:21:79:92:1D:35:7E:4C","sha256":"58:66:79:49:8D:FA:10:27:F4:93:35:A6:12:9B:EF:C0:56:C0:3F:AD:58:04:F6:85:9A:7E:79:30:99:5B:E2:F2"}}},"request":{"raw":"GET /wp-includes/css/dist/block-library/style.min.css HTTP/1.1\r\nHost: mamforme.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://mamforme.live/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5X3WsVTLGvrdt%2BmUi4J0jOuSfGFkkSoKuqeK5v%2FjJ8LDiajG6pFydjsEtfirSS5dzKLL1ttRmJj%2FMMuMk1oK0x%2F6ZXr4UoJgpgrUNOVCstjgeu3LXR16IEaXMAo8PUL7\"}]}\r\ndate: Mon, 14 Sep 2026 19:19:57 GMT\r\ncontent-type: text/css\r\npriority: u=2,i=?0\r\ncf-ray: a3b1be6dfd644404-CPH\r\ncf-cache-status: MISS\r\ncache-control: max-age=14400\r\ncontent-encoding: gzip\r\netag: W/\"225d9-6597a7bca4680\"\r\nlast-modified: Thu, 20 Aug 2026 13:27:38 GMT\r\nserver: cloudflare\r\nvary: accept-encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":140761,"size_decoded":19779,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"b12a7235c8af04a3cf65c292105d50f9","sha1":"15e81b16add79ff2d6ac53c8a6bba1b05834e995","sha256":"81511e960d89082868da3036ac2ba90cf8fd027102aac32abe1b82e72b1c1591","sha512":"485beb619d58efaf00c08b7ae0efc303372bc0ad4f8ecd1dd70df44e66f5c2a21aad380f06ae15b7f7a517292608d174b95c5ee67a30a16ba089aa5ddbd771ba","ssdeep":"3072:mkeJG/pQg5Mmjx+qehFP01nckRiBmgT0cTrnbO23kIzcZozg:1/pQg5Mmjx+qehFP01nckoPkIQZz","tlshash":"8fd3821413b4dcf934ffa73a5e4ee358a607aa01c68967e6e066d190618ca490df3f0f","first_seen":"2026-07-27T02:53:03.055053Z","last_seen":"2026-09-14T22:10:58.165353Z","times_seen":1879,"resource_available":false,"data":null}},"time_used":24420,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":24420,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"mamforme.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"mamforme.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-14","alert":"Phishing Block","trigger":"mamforme.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"mamforme.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"mamforme.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mamforme.live/wp-content/themes/astra/assets/js/minified/frontend.min.js","fqdn":"mamforme.live","domain":"mamforme.live","tld":"live"},"ip":{"addr":"172.67.128.125","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://mamforme.live/","date":"2026-09-14T19:19:32.815Z","timestamp":1789413572815,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mamforme.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 28 Jul 2026 13:38:12 GMT","end":"Mon, 26 Oct 2026 14:36:38 GMT"},"fingerprint":{"sha1":"30:1F:69:7B:09:71:B7:59:4C:D6:B2:1C:6E:21:79:92:1D:35:7E:4C","sha256":"58:66:79:49:8D:FA:10:27:F4:93:35:A6:12:9B:EF:C0:56:C0:3F:AD:58:04:F6:85:9A:7E:79:30:99:5B:E2:F2"}}},"request":{"raw":"GET /wp-content/themes/astra/assets/js/minified/frontend.min.js HTTP/1.1\r\nHost: mamforme.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://mamforme.live/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Mon, 14 Sep 2026 19:19:33 GMT\r\ncontent-encoding: zstd\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\ncache-control: public, max-age=86400\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=fx%2B8ZoS22KrUzne5fwu4xwxd%2BhXR69NmSJ4xswS%2BAK1L0hb8xO%2Fciirx66ymgQ0De5HDZTQFvK2UFxCIeBSYxOLpBfWpOWhRyNSLQ%2BRcYNJGP2muH%2BrCYH9VVNeKTxVZ\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: a3b1be6e2d7c4404-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":25719,"size_decoded":7261,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (25719), with no line terminators","md5":"a5803d1e6c10a93561d597d9cfb8477c","sha1":"e266c7046d41dc35d0f3eaf5b6e1020cf8dbaefc","sha256":"83eda8e5540512ca57e2216df1c90dd4bb2cb49f3f58188345de9582855648e0","sha512":"496675fe192e9de999bf7140e2e37d2a569bd509e0d22a54b123a5821d45eb1b578d436a7fd3fde6fb7a5ddb2beae9be5c3e4a63d2cb99441ecc125fe314ee95","ssdeep":"768:MtPx6KoYcFDTHjGropoCoRoXCjZRcjC1LlJtmxTwB2V7sEuUU2tfSrgt8zQmIFhx:4Px6ViOCjZRcjulLmxTwg/ZSnWhdcFIz","tlshash":"43b271a667002a3604fe17e7f5daabc17671149ffa0944115838cc2e29a8fc361f1af9","first_seen":"2026-06-02T18:26:47.183631Z","last_seen":"2026-09-14T22:03:10.759976Z","times_seen":3815,"resource_available":true,"data":null}},"time_used":443,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":443,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"mamforme.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-14","alert":"Phishing Block","trigger":"mamforme.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"mamforme.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"mamforme.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"mamforme.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mamforme.live/wp-content/plugins/woocommerce/assets/js/frontend/add-to-cart.min.js","fqdn":"mamforme.live","domain":"mamforme.live","tld":"live"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://mamforme.live/","date":"2026-09-14T19:19:32.817Z","timestamp":1789413572817,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /wp-content/plugins/woocommerce/assets/js/frontend/add-to-cart.min.js HTTP/1.1\r\nHost: mamforme.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://mamforme.live/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-14T21:51:42.575045Z","times_seen":18466627,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"mamforme.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"mamforme.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"mamforme.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"mamforme.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-14","alert":"Phishing Block","trigger":"mamforme.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mamforme.live/wp-content/plugins/ultimate-addons-for-gutenberg/assets/js/uagb-button-child.min.js","fqdn":"mamforme.live","domain":"mamforme.live","tld":"live"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://mamforme.live/","date":"2026-09-14T19:19:32.823Z","timestamp":1789413572823,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /wp-content/plugins/ultimate-addons-for-gutenberg/assets/js/uagb-button-child.min.js HTTP/1.1\r\nHost: mamforme.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://mamforme.live/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-14T21:51:42.575045Z","times_seen":18466627,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"mamforme.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"mamforme.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"mamforme.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-14","alert":"Phishing Block","trigger":"mamforme.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"mamforme.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mamforme.live/wp-content/plugins/forminator/assets/js/library/intlTelInput.min.js","fqdn":"mamforme.live","domain":"mamforme.live","tld":"live"},"ip":{"addr":"172.67.128.125","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://mamforme.live/","date":"2026-09-14T19:19:32.841Z","timestamp":1789413572841,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mamforme.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 28 Jul 2026 13:38:12 GMT","end":"Mon, 26 Oct 2026 14:36:38 GMT"},"fingerprint":{"sha1":"30:1F:69:7B:09:71:B7:59:4C:D6:B2:1C:6E:21:79:92:1D:35:7E:4C","sha256":"58:66:79:49:8D:FA:10:27:F4:93:35:A6:12:9B:EF:C0:56:C0:3F:AD:58:04:F6:85:9A:7E:79:30:99:5B:E2:F2"}}},"request":{"raw":"GET /wp-content/plugins/forminator/assets/js/library/intlTelInput.min.js HTTP/1.1\r\nHost: mamforme.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://mamforme.live/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Mon, 14 Sep 2026 19:19:46 GMT\r\ncontent-encoding: zstd\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\ncache-control: public, max-age=86400\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2BjJHLQ9NrFD1qVW4SvAOIP4QApRSg3BYhZ9kcg6ydYtmfZO5O7PYvPtd2snvCIYPJVXFZRYcYMOirag8mf1Dqrqi7XmbwuPlw2soJbwPBVloHWATJrr9QjAa7e29jodu\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: a3b1be6e4d894404-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":32400,"size_decoded":13367,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (32032)","md5":"dc78f34e405da28259d3e921a3821f28","sha1":"2ea6b45ca29d1673724d2fec489ce54bd8a7a64d","sha256":"34ddb368fac27d033f559ca42da91a145538c1fdc3f3c31ea2c131272b225026","sha512":"276a1e528264d36aab3cba4e0252af263f48aff4063a950bb45681a0dbe843ecfb7e30c7f87a6987fc5757276cfec8eb62ae15f46e24fb9df25e2f3c57fd201c","ssdeep":"768:X5l03XVqC/iPIgVXpwJxCqnUgqaMNjUA7Ydg24mh53T:XhPIghqnidEdL5","tlshash":"32e2e7aeb3656b37abfd82a270f44503ae7f79444604042d78ac8ede1189ed171f5b38","first_seen":"2026-04-15T05:46:21.22721Z","last_seen":"2026-09-14T19:40:33.817682Z","times_seen":559,"resource_available":true,"data":null}},"time_used":13606,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":13606,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"mamforme.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"mamforme.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"mamforme.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-14","alert":"Phishing Block","trigger":"mamforme.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"mamforme.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mamforme.live/wp-content/themes/astra/assets/css/minified/compatibility/woocommerce/woocommerce-grid.min.css","fqdn":"mamforme.live","domain":"mamforme.live","tld":"live"},"ip":{"addr":"172.67.128.125","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://mamforme.live/","date":"2026-09-14T19:19:32.791Z","timestamp":1789413572791,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mamforme.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 28 Jul 2026 13:38:12 GMT","end":"Mon, 26 Oct 2026 14:36:38 GMT"},"fingerprint":{"sha1":"30:1F:69:7B:09:71:B7:59:4C:D6:B2:1C:6E:21:79:92:1D:35:7E:4C","sha256":"58:66:79:49:8D:FA:10:27:F4:93:35:A6:12:9B:EF:C0:56:C0:3F:AD:58:04:F6:85:9A:7E:79:30:99:5B:E2:F2"}}},"request":{"raw":"GET /wp-content/themes/astra/assets/css/minified/compatibility/woocommerce/woocommerce-grid.min.css HTTP/1.1\r\nHost: mamforme.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://mamforme.live/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=02ZcpjhhPJWvB9pKBw5F1TlYQnW3%2FQ8%2FPgMDhP8fflevGn9UtLQi%2F68%2Bd2%2BWQIgHvAzlfbNTUzvVBL5y7u0%2BEPwt2SdC8vPi6FxRDBG0QfoMbEISZK%2FNdRoN%2FdsO5Mdg\"}]}\r\ndate: Mon, 14 Sep 2026 19:19:33 GMT\r\ncontent-type: text/css\r\npriority: u=2,i=?0\r\ncf-ray: a3b1be6dfd664404-CPH\r\ncf-cache-status: MISS\r\ncache-control: max-age=14400\r\ncontent-encoding: gzip\r\netag: W/\"1cfcd-6561e292bae00\"\r\nlast-modified: Wed, 08 Jul 2026 19:03:20 GMT\r\nserver: cloudflare\r\nvary: accept-encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":118733,"size_decoded":17140,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (65534), with no line terminators","md5":"cbaacffc89aa2bc70ef8bd86a009520d","sha1":"34ce3174d6fdf788626be11e445686cb17611c36","sha256":"c2c65a202133e47be74ebb31ead0345a2a32d79519f928b8304d4f09d571d1ee","sha512":"ace2687c56c67ec48cc51ade11d92c9a8979fcb4d0ad3a610423dfe4e1cbfcb15a28366754c3e2f03007e0dcdb480bb34832e67228630ce5a1020c63d3b08daa","ssdeep":"3072:rE51S8C3n0zmp7POtUAS69LMFZxC2QX6eynyPJAdXmnOtxOVr5+0vqR8mrYU/lDE:r+z","tlshash":"65c34f67a1b02cb837eda7d8ac41baca7e10d13df2450530de9a5f1d42ca9e73522b4d","first_seen":"2026-03-25T03:44:41.382546Z","last_seen":"2026-09-14T19:20:15.354212Z","times_seen":2126,"resource_available":false,"data":null}},"time_used":439,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":439,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"mamforme.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"mamforme.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-14","alert":"Phishing Block","trigger":"mamforme.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"mamforme.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"mamforme.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mamforme.live/wp-content/cache/autoptimize/css/autoptimize_single_e90feb910aca3f0fbb8043de800ca8fe.css","fqdn":"mamforme.live","domain":"mamforme.live","tld":"live"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://mamforme.live/","date":"2026-09-14T19:19:32.806Z","timestamp":1789413572806,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /wp-content/cache/autoptimize/css/autoptimize_single_e90feb910aca3f0fbb8043de800ca8fe.css HTTP/1.1\r\nHost: mamforme.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://mamforme.live/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-14T21:51:42.575045Z","times_seen":18466627,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"mamforme.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"mamforme.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"mamforme.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-14","alert":"Phishing Block","trigger":"mamforme.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"mamforme.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mamforme.live/wp-content/plugins/ultimate-addons-for-gutenberg/assets/js/spectra-block-positioning.min.js","fqdn":"mamforme.live","domain":"mamforme.live","tld":"live"},"ip":{"addr":"172.67.128.125","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://mamforme.live/","date":"2026-09-14T19:19:32.821Z","timestamp":1789413572821,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mamforme.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 28 Jul 2026 13:38:12 GMT","end":"Mon, 26 Oct 2026 14:36:38 GMT"},"fingerprint":{"sha1":"30:1F:69:7B:09:71:B7:59:4C:D6:B2:1C:6E:21:79:92:1D:35:7E:4C","sha256":"58:66:79:49:8D:FA:10:27:F4:93:35:A6:12:9B:EF:C0:56:C0:3F:AD:58:04:F6:85:9A:7E:79:30:99:5B:E2:F2"}}},"request":{"raw":"GET /wp-content/plugins/ultimate-addons-for-gutenberg/assets/js/spectra-block-positioning.min.js HTTP/1.1\r\nHost: mamforme.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://mamforme.live/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Mon, 14 Sep 2026 19:19:36 GMT\r\ncontent-encoding: zstd\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\ncache-control: public, max-age=86400\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=wbxHfm48wFgmll27HDXCwZpUQFSBO7vdOnGIPezBBwJnoVb%2BzwQ0lSM%2Bhq%2BtUTNo4zQxMup1XXL%2FjZEx0Q0eRHpWSOOg9mjjii%2BnPmWbIK74hDgRJgTq8dOOjDKpqQRl\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: a3b1be6e2d7f4404-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4450,"size_decoded":1763,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (4450), with no line terminators","md5":"eb5d7efb1bc838480f4ca0d67c124249","sha1":"0292349ba263236243a33fb7fdded5527e17bf6a","sha256":"bac6add1bf7ec50484cc9c7336db1c6333b0f911675eb2a95c6af5d28b15adab","sha512":"4c7a0a52d7917f8387fefa7e266a9fd195fa28d077bcfb767bd985d197a32a09068cc58101d275d921d954b3f2edd390bba382ef8662ff27a6fdc3fc007da1db","ssdeep":"48:czXyS1kQcF8P32bUIP9I9s0nv2RGc+Auuk7XulA4MzU27XuTIo657XufNPh4gnzS:q/q8EI9sgv4COIUMiAqNPfEPonGik","tlshash":"0a91b08003021e3bd2a3279571dab9443330456dd7e6d47183fa9a2b6398cc768b3af9","first_seen":"2024-10-13T03:11:06.787751Z","last_seen":"2026-09-14T20:35:06.79863Z","times_seen":7318,"resource_available":true,"data":null}},"time_used":3583,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":3583,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"mamforme.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-14","alert":"Phishing Block","trigger":"mamforme.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"mamforme.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"mamforme.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"mamforme.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mamforme.live/wp-content/themes/astra/assets/css/minified/main.min.css","fqdn":"mamforme.live","domain":"mamforme.live","tld":"live"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://mamforme.live/","date":"2026-09-14T19:19:32.783Z","timestamp":1789413572783,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /wp-content/themes/astra/assets/css/minified/main.min.css HTTP/1.1\r\nHost: mamforme.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://mamforme.live/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-14T21:51:42.575045Z","times_seen":18466627,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"mamforme.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-14","alert":"Phishing Block","trigger":"mamforme.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"mamforme.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"mamforme.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"mamforme.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mamforme.live/wp-includes/js/jquery/jquery.min.js","fqdn":"mamforme.live","domain":"mamforme.live","tld":"live"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://mamforme.live/","date":"2026-09-14T19:19:32.798Z","timestamp":1789413572798,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /wp-includes/js/jquery/jquery.min.js HTTP/1.1\r\nHost: mamforme.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://mamforme.live/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-14T21:51:42.575045Z","times_seen":18466627,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"mamforme.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"mamforme.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"mamforme.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"mamforme.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-14","alert":"Phishing Block","trigger":"mamforme.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mamforme.live/wp-content/plugins/woocommerce/assets/js/jquery-blockui/jquery.blockUI.min.js","fqdn":"mamforme.live","domain":"mamforme.live","tld":"live"},"ip":{"addr":"172.67.128.125","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://mamforme.live/","date":"2026-09-14T19:19:32.801Z","timestamp":1789413572801,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mamforme.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 28 Jul 2026 13:38:12 GMT","end":"Mon, 26 Oct 2026 14:36:38 GMT"},"fingerprint":{"sha1":"30:1F:69:7B:09:71:B7:59:4C:D6:B2:1C:6E:21:79:92:1D:35:7E:4C","sha256":"58:66:79:49:8D:FA:10:27:F4:93:35:A6:12:9B:EF:C0:56:C0:3F:AD:58:04:F6:85:9A:7E:79:30:99:5B:E2:F2"}}},"request":{"raw":"GET /wp-content/plugins/woocommerce/assets/js/jquery-blockui/jquery.blockUI.min.js HTTP/1.1\r\nHost: mamforme.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://mamforme.live/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Mon, 14 Sep 2026 19:19:43 GMT\r\ncontent-encoding: zstd\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\ncache-control: public, max-age=86400\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=R5rKmF16eQMz5vXJuk2qgP%2FQ%2BKefxhxowFBXGxBC3lgYe4sNmClCPe54PjpPZbm44GfYgZSZT9FQhtcohSVfP%2BjzKUUAgcZKHW%2FHnbSPQN%2F9YRQjlEuqPL8A23r9Tztn\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: a3b1be6e0d6f4404-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9636,"size_decoded":4372,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (9242)","md5":"ef56117d1bb5cc41aa6bd127a49c7640","sha1":"b9c2ed774177fc0fceba5cb58113024b23fe4fb7","sha256":"d151f8c0b2659cfb63704d68654ad8d9437ae9da4410536f63ddec21689a0620","sha512":"0ec9039dbb47470815ad8bf58fd206672717a146b3a99bcb12444687e8489698e06664e6c6cc38a5d2954fa919e5a6c3bc57e44f3be2655f92b801bac43ec763","ssdeep":"192:x9cCxjlRE8iST7TMcPvedRUtV7uLEUfHqo/gH5P5AxTov7fG3ex2NrMP:x9RjlRE8iSf4cPmgtV7uoOKIgxaxTovp","tlshash":"9f12e96831f3215780b7b1907cf7e38f73b2553c648798d1d0acd4692aacd7a2622f09","first_seen":"2023-08-09T05:33:46Z","last_seen":"2026-09-14T21:51:46.327053Z","times_seen":179253,"resource_available":true,"data":null}},"time_used":11183,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11183,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"mamforme.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-14","alert":"Phishing Block","trigger":"mamforme.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"mamforme.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"mamforme.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"mamforme.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mamforme.live/wp-content/plugins/forminator/assets/forminator-ui/css/src/form/forminator-form-default.base.min.css","fqdn":"mamforme.live","domain":"mamforme.live","tld":"live"},"ip":{"addr":"172.67.128.125","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://mamforme.live/","date":"2026-09-14T19:19:32.812Z","timestamp":1789413572812,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mamforme.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 28 Jul 2026 13:38:12 GMT","end":"Mon, 26 Oct 2026 14:36:38 GMT"},"fingerprint":{"sha1":"30:1F:69:7B:09:71:B7:59:4C:D6:B2:1C:6E:21:79:92:1D:35:7E:4C","sha256":"58:66:79:49:8D:FA:10:27:F4:93:35:A6:12:9B:EF:C0:56:C0:3F:AD:58:04:F6:85:9A:7E:79:30:99:5B:E2:F2"}}},"request":{"raw":"GET /wp-content/plugins/forminator/assets/forminator-ui/css/src/form/forminator-form-default.base.min.css HTTP/1.1\r\nHost: mamforme.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://mamforme.live/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=GBnZUKFaSFWFMuqOZtk7I3rCKbBBhzqiLCswonDraBAFJoi4ekcDHQO2wpFq3t8KmWm%2Bm04%2BMgdjs6pOp0hGFH%2FeKkjDEQIaQdydBt2Qvh9rkAdAUkFwmmOHw18RVVRi\"}]}\r\ndate: Mon, 14 Sep 2026 19:19:59 GMT\r\ncontent-type: text/css\r\npriority: u=2,i=?0\r\ncf-ray: a3b1be6e1d794404-CPH\r\ncf-cache-status: MISS\r\ncache-control: max-age=14400\r\ncontent-encoding: gzip\r\netag: W/\"cbf5-65b0b25ab11c0\"\r\nlast-modified: Wed, 09 Sep 2026 11:28:15 GMT\r\nserver: cloudflare\r\nvary: accept-encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":52213,"size_decoded":7014,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (52065)","md5":"6a1732541f776eadbbc4f7ab307b95b9","sha1":"5dcea87fbeb62440aebd4d8c013b58cb682620e1","sha256":"473b15cc572c0ae92b25a91a17959ec37314e96d213136a535f033f86676a5ad","sha512":"ca5cf2ee751dc9733c958144fcefa781cb389a6c00c3a7bd0a948e51b7379ca55491db9480ab6446069270ebc46fde22a1b9c76f572e0e599e3ec0fcb2ed92c4","ssdeep":"384:olNbFOCCOCyOOegTaP2DkZQCRz1EeIUBhV3ESJQFuywPNw:6OOtpUBl2ITa","tlshash":"6a334562bdfc236475223935ebc81dc09142db0615a2ffd65eecec95a2a86ed2703374","first_seen":"2026-08-13T02:03:53.354223Z","last_seen":"2026-09-14T19:40:33.823707Z","times_seen":78,"resource_available":false,"data":null}},"time_used":27177,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":27177,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-14","alert":"Phishing Block","trigger":"mamforme.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"mamforme.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"mamforme.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"mamforme.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"mamforme.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mamforme.live/wp-includes/css/buttons.min.css","fqdn":"mamforme.live","domain":"mamforme.live","tld":"live"},"ip":{"addr":"172.67.128.125","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://mamforme.live/","date":"2026-09-14T19:19:32.814Z","timestamp":1789413572814,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mamforme.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 28 Jul 2026 13:38:12 GMT","end":"Mon, 26 Oct 2026 14:36:38 GMT"},"fingerprint":{"sha1":"30:1F:69:7B:09:71:B7:59:4C:D6:B2:1C:6E:21:79:92:1D:35:7E:4C","sha256":"58:66:79:49:8D:FA:10:27:F4:93:35:A6:12:9B:EF:C0:56:C0:3F:AD:58:04:F6:85:9A:7E:79:30:99:5B:E2:F2"}}},"request":{"raw":"GET /wp-includes/css/buttons.min.css HTTP/1.1\r\nHost: mamforme.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://mamforme.live/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=X%2F1hwgJ0EV6ZjFqa5XycgJreDgAb3V%2FSZVTBMSWL0k2ku2uUtTZRY%2Bjh4f1PHLzWXMwWndUuoiDEm93tObSw5f%2F8UUp5icsRqSDKoHeI%2Fw8mwgjJB61msF3bNuYt%2Fhzp\"}]}\r\ndate: Mon, 14 Sep 2026 19:19:33 GMT\r\ncontent-type: text/css\r\npriority: u=2,i=?0\r\ncf-ray: a3b1be6e2d7b4404-CPH\r\ncf-cache-status: MISS\r\ncache-control: max-age=14400\r\ncontent-encoding: gzip\r\netag: W/\"2034-6597a7bca4680\"\r\nlast-modified: Thu, 20 Aug 2026 13:27:38 GMT\r\nserver: cloudflare\r\nvary: accept-encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8244,"size_decoded":2351,"mime_type":"text/css","magic":"ASCII text, with very long lines (8209)","md5":"d502717ee6e741cc56e7692b896ec739","sha1":"f29e2a1d107f2b1b63ee0a0669582b1297b78ac7","sha256":"fe06e445e6050a140df1d2db928b1854e4fd7f8116edd3e0d695e076338a72bc","sha512":"cffe14ffc5111d71b68e93bf3703c28219fbccce5e3fa5ed34b51d5b43c38805fac4614fd152b9255f6f7f65e790017ee7a7bcccf6522fb81b82678bcbad28ee","ssdeep":"96:lBIi3eNQxABppWOzyLTODCRHuNWXvtzF3HohBmjSlOI126n7Te7koDBXHdf6O7GW:bc/j8CIpky9dLd","tlshash":"0102ccebe411d32a3e1263d883626ebdb36bfb11656537d1fc4462e881c50b13c1da9b","first_seen":"2026-08-20T00:13:35.978345Z","last_seen":"2026-09-14T21:53:46.543792Z","times_seen":597,"resource_available":false,"data":null}},"time_used":478,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":478,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"mamforme.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"mamforme.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-14","alert":"Phishing Block","trigger":"mamforme.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"mamforme.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"mamforme.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mamforme.live/","fqdn":"mamforme.live","domain":"mamforme.live","tld":"live"},"ip":{"addr":"172.67.128.125","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-09-14T19:19:31.835Z","timestamp":1789413571835,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mamforme.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 28 Jul 2026 13:38:12 GMT","end":"Mon, 26 Oct 2026 14:36:38 GMT"},"fingerprint":{"sha1":"30:1F:69:7B:09:71:B7:59:4C:D6:B2:1C:6E:21:79:92:1D:35:7E:4C","sha256":"58:66:79:49:8D:FA:10:27:F4:93:35:A6:12:9B:EF:C0:56:C0:3F:AD:58:04:F6:85:9A:7E:79:30:99:5B:E2:F2"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: mamforme.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Mon, 14 Sep 2026 19:19:32 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncf-ray: a3b1be688f285a94-CPH\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nserver: cloudflare\r\nvary: accept-encoding\r\nx-cache-handler: cache-enabler-engine\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=YSI1su10HqEU59yVc7Svi%2B%2BCWFltc2CVrf72o%2FYS4NsI6ZPKptfqYtx9oZLgNStHyN6TmjVVUYXzvrcmdrCXH%2FVNbdUR92LlM%2F4ugYtfcmmQC8Ko2vrZTI167qEBLs9%2B\"}]}\r\ncontent-encoding: zstd\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Spectra","description":"Spectra is a WordPress plugin that provides a collection of new and enhanced blocks for the WordPress Block editor.","website":"https://wpspectra.com","common_platform_enumeration":"","icon":"Spectra.svg","categories":["WordPress plugins"]},{"name":"WordPress:7.1","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"jQuery Migrate","description":"Query Migrate is a javascript library that allows you to preserve the compatibility of your jQuery code developed for versions of jQuery older than 1.9.","website":"https://github.com/jquery/jquery-migrate","common_platform_enumeration":"","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"WordPress Block Editor","description":"Sites using the WordPress Block Editor, also known as Gutenberg.","website":"https://wordpress.org/gutenberg/","common_platform_enumeration":"","icon":"WordPress.svg","categories":["Page builders"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Autoptimize","description":"Autoptimize is a WordPress plugin that optimises website performance by aggregating, minifying, and compressing HTML, CSS, and JavaScript files.","website":"https://autoptimize.com","common_platform_enumeration":"","icon":"Autoptimize.png","categories":["WordPress plugins","Performance"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]},{"name":"WooCommerce:11.1.0","description":"WooCommerce is an open-source ecommerce plugin for WordPress.","website":"https://woocommerce.com","common_platform_enumeration":"","icon":"WooCommerce.svg","categories":["Ecommerce","WordPress plugins"]},{"name":"Elementor:4.2.4","description":"Elementor is a website builder platform for professionals on WordPress.","website":"https://elementor.com","common_platform_enumeration":"","icon":"Elementor.svg","categories":["Page builders","WordPress plugins"]}],"data":{"size":229832,"size_decoded":43932,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (61390)","md5":"d2dc9fd57df1a8fd52c6c3e5b01c30de","sha1":"f2a609bc116293777bb54b1dcb99f4f2dfc81003","sha256":"e8a24a6f98c28edabbbe53e222ce5bd7ffa50487de54a97628f6c46ed6e22b69","sha512":"7ce890e33f6c28bca147e8a9a2dfe2d71bc67333ef6aa21fb9754330f527cb54ea1ffe1e77b6726446ff1bba508c7b874c5a908e600e45f9e35a1068863ec3bd","ssdeep":"3072:XCAWiu52JK62HMHsU2eewMMohwPa2I1ml8KVjL:ySJK62HMHsU2rwsh8a2qM8KVjL","tlshash":"d8241ab1a3a4257a327b53bcf59af70825568113da0e22e5f9fdc28c46c9fd215b130e","first_seen":"2026-09-14T19:05:33.75255Z","last_seen":"2026-09-14T19:20:15.357716Z","times_seen":2,"resource_available":false,"data":null}},"time_used":472,"timings":{"blocked":-1,"dns":4,"connect":21,"send":0,"wait":390,"receive":0,"ssl":57},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"mamforme.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"mamforme.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"mamforme.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"mamforme.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-14","alert":"Phishing Block","trigger":"mamforme.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mamforme.live/wp-content/plugins/forminator/build/front/front.multi.min.js","fqdn":"mamforme.live","domain":"mamforme.live","tld":"live"},"ip":{"addr":"172.67.128.125","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://mamforme.live/","date":"2026-09-14T19:19:32.836Z","timestamp":1789413572836,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mamforme.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 28 Jul 2026 13:38:12 GMT","end":"Mon, 26 Oct 2026 14:36:38 GMT"},"fingerprint":{"sha1":"30:1F:69:7B:09:71:B7:59:4C:D6:B2:1C:6E:21:79:92:1D:35:7E:4C","sha256":"58:66:79:49:8D:FA:10:27:F4:93:35:A6:12:9B:EF:C0:56:C0:3F:AD:58:04:F6:85:9A:7E:79:30:99:5B:E2:F2"}}},"request":{"raw":"GET /wp-content/plugins/forminator/build/front/front.multi.min.js HTTP/1.1\r\nHost: mamforme.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://mamforme.live/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 520 \r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=BBfK1Dgn59QdZA5LuRFjukouj0hhM7bJ5JTBLzvx16tGiNAm9zPZNq6%2B%2B%2Fj8fzAGY6DpH5MzzNJcH8SHI93KutAT7SUxC1S2fDKYGMblAydMMhUc%2Frz9iV26EImd6FEx\"}]}\r\ndate: Mon, 14 Sep 2026 19:20:06 GMT\r\ncontent-type: text/html; charset=UTF-8\r\npriority: u=3,i=?0\r\ncf-ray: a3b1be6e4d884404-CPH\r\ncache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0\r\nexpires: Thu, 01 Jan 1970 00:00:01 GMT\r\nretry-after: 60\r\nserver: cloudflare\r\nreferrer-policy: same-origin\r\nx-frame-options: SAMEORIGIN\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"520","status_text":"","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7334,"size_decoded":8085,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (578)","md5":"171d9d8b64c3d9528ec99cdaf30d6dea","sha1":"7ba483445c2139d6c5416b00e1e3ac3043420f75","sha256":"4b7db5f7dbf4fab7015f208fa269c6c252d624c6358890ddd7b52b82d8aed516","sha512":"93904a1fa5c88835971fd04a94d68a2cd443521bfd346bca646db78423f4311af7e990f0241a3c438dcecd4aeb222648e8d4aed0f379fc83d3233c6b1f15d728","ssdeep":"96:1j9jwIjYjGqDK/D9KU4KG4Fh8/G4F5+424F4+skKmv9eQmN7UWu4IpE7RJlSaQxP:1j9jhjYjXK/BzenOV8VIruB+7vl9eP","tlshash":"c6e17772b1b51277109382a23695eb5a7ae0c213c7ff55d4b3ddc2632f9ee819903294","first_seen":"2026-09-14T19:20:15.358673Z","last_seen":"2026-09-14T19:20:15.358673Z","times_seen":1,"resource_available":false,"data":null}},"time_used":34161,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":34161,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"mamforme.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"mamforme.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"mamforme.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-14","alert":"Phishing Block","trigger":"mamforme.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"mamforme.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mamforme.live/wp-content/themes/astra/assets/css/minified/compatibility/woocommerce/woocommerce-layout-grid.min.css","fqdn":"mamforme.live","domain":"mamforme.live","tld":"live"},"ip":{"addr":"172.67.128.125","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://mamforme.live/","date":"2026-09-14T19:19:32.789Z","timestamp":1789413572789,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mamforme.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 28 Jul 2026 13:38:12 GMT","end":"Mon, 26 Oct 2026 14:36:38 GMT"},"fingerprint":{"sha1":"30:1F:69:7B:09:71:B7:59:4C:D6:B2:1C:6E:21:79:92:1D:35:7E:4C","sha256":"58:66:79:49:8D:FA:10:27:F4:93:35:A6:12:9B:EF:C0:56:C0:3F:AD:58:04:F6:85:9A:7E:79:30:99:5B:E2:F2"}}},"request":{"raw":"GET /wp-content/themes/astra/assets/css/minified/compatibility/woocommerce/woocommerce-layout-grid.min.css HTTP/1.1\r\nHost: mamforme.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://mamforme.live/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=yMtshznVd%2B2MWrTNXDGoME9Fxqm9QHx%2Flznybm303s6EfNxCJdLw0UD8dl14mGWwEScLg%2BerkltuRvLBAPdw5eRG%2BCPASP%2BS9UoiynHPmkiziIHbYxEzdZiFwjvN4J7H\"}]}\r\ndate: Mon, 14 Sep 2026 19:19:45 GMT\r\ncontent-type: text/css\r\npriority: u=2,i=?0\r\ncf-ray: a3b1be6dfd654404-CPH\r\ncf-cache-status: MISS\r\ncache-control: max-age=14400\r\ncontent-encoding: gzip\r\netag: W/\"4164-6561e292bae00\"\r\nlast-modified: Wed, 08 Jul 2026 19:03:20 GMT\r\nserver: cloudflare\r\nvary: accept-encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":16740,"size_decoded":2695,"mime_type":"text/css","magic":"ASCII text, with very long lines (16740), with no line terminators","md5":"4a30be73b97fea0a05297b6e4b8ac6e3","sha1":"30a7bee00527ac9e702ca662d3ecc44a1aa3c8b7","sha256":"cdc69b44144ee2b8991a424a55467f11241be70349b2040a1dc083df445cf838","sha512":"12c9d92464f69665a3ec2825121a06f9539aa40e14c0ad0fed5aff669e9dd65c1c1aecb46db34d8b414ea5a5ece43a8b83a54fdd3f7a7cff5aaac62001eede8b","ssdeep":"384:OtVUXkEzOm9Oq/tGChyIchGe0RGAKGApU9a:vGAKGApU4","tlshash":"fc72e1eb84382d7477edb59d7c4030d63c26d13cbb482179aca51b0d86da6eb36a170e","first_seen":"2026-03-10T13:15:23.286884Z","last_seen":"2026-09-14T19:20:15.360578Z","times_seen":3439,"resource_available":false,"data":null}},"time_used":12267,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12267,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"mamforme.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"mamforme.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"mamforme.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-14","alert":"Phishing Block","trigger":"mamforme.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"mamforme.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mamforme.live/wp-content/plugins/ultimate-addons-for-gutenberg/assets/css/spectra-block-positioning.min.css","fqdn":"mamforme.live","domain":"mamforme.live","tld":"live"},"ip":{"addr":"172.67.128.125","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://mamforme.live/","date":"2026-09-14T19:19:32.793Z","timestamp":1789413572793,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mamforme.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 28 Jul 2026 13:38:12 GMT","end":"Mon, 26 Oct 2026 14:36:38 GMT"},"fingerprint":{"sha1":"30:1F:69:7B:09:71:B7:59:4C:D6:B2:1C:6E:21:79:92:1D:35:7E:4C","sha256":"58:66:79:49:8D:FA:10:27:F4:93:35:A6:12:9B:EF:C0:56:C0:3F:AD:58:04:F6:85:9A:7E:79:30:99:5B:E2:F2"}}},"request":{"raw":"GET /wp-content/plugins/ultimate-addons-for-gutenberg/assets/css/spectra-block-positioning.min.css HTTP/1.1\r\nHost: mamforme.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://mamforme.live/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=JPsxkmyUtorKgFWGsEFHO1%2FbW8T8F7M6mUccx9v6wn4bhUfaKZ4j3QlOwWLEUeWCpSJvWkXgz716sWL4YN0MI0lhFtn9LhG%2FLUebGy2LcfpRHRyhZTVHeO2mvIB6YFu2\"}]}\r\ndate: Mon, 14 Sep 2026 19:19:42 GMT\r\ncontent-type: text/css\r\npriority: u=2,i=?0\r\ncf-ray: a3b1be6e0d674404-CPH\r\ncf-cache-status: MISS\r\ncache-control: max-age=14400\r\ncontent-encoding: gzip\r\netag: W/\"14f-65b0b2615e180\"\r\nlast-modified: Wed, 09 Sep 2026 11:28:22 GMT\r\nserver: cloudflare\r\nvary: accept-encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":335,"size_decoded":859,"mime_type":"text/css","magic":"ASCII text, with very long lines (335), with no line terminators","md5":"7b197104afdf6f3f918fd92a5aa1c657","sha1":"f40aef07a4afcbe679aaff6f3a8cef6a20cb1fe6","sha256":"edba0fcba74296c16b2ce9016b6fb6f20c7cf68f3d48665c6d5fd3947824b449","sha512":"24dd57053c08b906a9ebb9ca256b09fdd6ce2cd6e62b1a923fb163d5b992b5edf99717f05bffc820e3fe5abb6d420420d971eb44094773c64fb802b7b3c18304","ssdeep":"","tlshash":"58e0df5197007ea1d867b34925e658148230ce00dfd22cbd732ad383f2c309018b3bc8","first_seen":"2024-10-13T03:11:06.747915Z","last_seen":"2026-09-14T20:35:06.784259Z","times_seen":7615,"resource_available":false,"data":null}},"time_used":9267,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":9267,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"mamforme.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"mamforme.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"mamforme.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-14","alert":"Phishing Block","trigger":"mamforme.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"mamforme.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mamforme.live/wp-content/cache/autoptimize/css/autoptimize_single_048ff0d6f5099e462f6d512db037f332.css","fqdn":"mamforme.live","domain":"mamforme.live","tld":"live"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://mamforme.live/","date":"2026-09-14T19:19:32.796Z","timestamp":1789413572796,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /wp-content/cache/autoptimize/css/autoptimize_single_048ff0d6f5099e462f6d512db037f332.css HTTP/1.1\r\nHost: mamforme.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://mamforme.live/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-14T21:51:42.575045Z","times_seen":18466627,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"mamforme.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-14","alert":"Phishing Block","trigger":"mamforme.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"mamforme.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"mamforme.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"mamforme.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mamforme.live/wp-content/themes/astra/assets/js/minified/mobile-cart.min.js","fqdn":"mamforme.live","domain":"mamforme.live","tld":"live"},"ip":{"addr":"172.67.128.125","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://mamforme.live/","date":"2026-09-14T19:19:32.820Z","timestamp":1789413572820,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mamforme.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 28 Jul 2026 13:38:12 GMT","end":"Mon, 26 Oct 2026 14:36:38 GMT"},"fingerprint":{"sha1":"30:1F:69:7B:09:71:B7:59:4C:D6:B2:1C:6E:21:79:92:1D:35:7E:4C","sha256":"58:66:79:49:8D:FA:10:27:F4:93:35:A6:12:9B:EF:C0:56:C0:3F:AD:58:04:F6:85:9A:7E:79:30:99:5B:E2:F2"}}},"request":{"raw":"GET /wp-content/themes/astra/assets/js/minified/mobile-cart.min.js HTTP/1.1\r\nHost: mamforme.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://mamforme.live/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Mon, 14 Sep 2026 19:19:41 GMT\r\ncontent-encoding: zstd\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\ncache-control: public, max-age=86400\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=lWhDRLPUmXunmbLrfKU3DfFMi66nh31LrVaq8dmTFmjVUDSyKumuwKanIXLMGMmSbvs8BPf%2BPOoueKXIpWo1pNW4ISlTXRPRnlneyxIGKlB%2FTWJ5jLXZGBNOquff6iEA\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: a3b1be6e2d7e4404-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":5654,"size_decoded":2396,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (5654), with no line terminators","md5":"b618e52e39937ce36fc0a1102f62242b","sha1":"468cce9b1889d2d2928258c3d8eacbd652bda3e7","sha256":"cd5f359a0c131bb6fd3aad8ba2b218df00316a3cde57ede69052dcac3ce97ad0","sha512":"35a427c9321c1fab8c25ba3de256d3fadedbe7b2d59d4804ad1f612963ac0409647b05de6b5d15e760599796c73a275ee86bc413ee4ee1dcf8698285b56cb694","ssdeep":"96:yKPuoNf2p0XCp82kQUzyDaIyk3z6gac6/R6h26qkX6xDRGvRfTS3c2oMu6wQQTKB:yc/XoPvUzyuIyA6/z6as6DE7S3ju6d2m","tlshash":"aac133646230b87108fb5657b6b7ebc4393268df641a0051282d9c9d2bbdfc251a1eef","first_seen":"2026-07-02T00:51:19.012204Z","last_seen":"2026-09-14T19:20:15.361805Z","times_seen":245,"resource_available":true,"data":null}},"time_used":8789,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":8789,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"mamforme.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"mamforme.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"mamforme.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"mamforme.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-14","alert":"Phishing Block","trigger":"mamforme.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mamforme.live/wp-content/cache/autoptimize/js/autoptimize_single_fb170dc190cc3d1def63654a202e6f2a.js","fqdn":"mamforme.live","domain":"mamforme.live","tld":"live"},"ip":{"addr":"172.67.128.125","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://mamforme.live/","date":"2026-09-14T19:19:32.826Z","timestamp":1789413572826,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mamforme.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 28 Jul 2026 13:38:12 GMT","end":"Mon, 26 Oct 2026 14:36:38 GMT"},"fingerprint":{"sha1":"30:1F:69:7B:09:71:B7:59:4C:D6:B2:1C:6E:21:79:92:1D:35:7E:4C","sha256":"58:66:79:49:8D:FA:10:27:F4:93:35:A6:12:9B:EF:C0:56:C0:3F:AD:58:04:F6:85:9A:7E:79:30:99:5B:E2:F2"}}},"request":{"raw":"GET /wp-content/cache/autoptimize/js/autoptimize_single_fb170dc190cc3d1def63654a202e6f2a.js HTTP/1.1\r\nHost: mamforme.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://mamforme.live/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Mon, 14 Sep 2026 19:19:55 GMT\r\ncontent-encoding: zstd\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\ncache-control: public, max-age=86400\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=TOJLTUTEnpyBQHp%2BkoIxbKD5THohBrM8Ld73HqZKOBCsMJcZ0meXG%2FgJcfq%2FADjHJbPpsLYu8YUGDZYYt0g0YkmFYhwHyCu9JHxc5B8CT7MpCFYDcTTnhLqHW34oyfEQ\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: a3b1be6e3d834404-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6849,"size_decoded":2865,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (1699)","md5":"7a2d82fac266c7c7a8dd3af06d2a4961","sha1":"de8379d536fe16356184f279a08cf909173c1123","sha256":"cd686c5e44001e66152681fab98b040253ef0216d729812a01f7b64baa6b33f9","sha512":"adc999ebec9ad12084ae128a81e122353360f7aa44a252b72125c4ad36627b87ae3e62b2207e1e15ee53387dd738b6cab505152da20a8482b5b15c1506a65e57","ssdeep":"96:SSzx20DGhTuUrTEBzVBln+Tn+KCTVcbbwMJWmbZE93gTGPAvW/TcZZdESUvU/qZ:hF2eGhT13YzVb+T+jmwwZ3W/0dZL/qZ","tlshash":"dbe1b785f061107396eeb7fd65ff8a0b1b315a41aeafd408d80c04942663e6bd93de48","first_seen":"2026-09-14T19:05:33.778975Z","last_seen":"2026-09-14T19:20:15.362263Z","times_seen":2,"resource_available":true,"data":null}},"time_used":22470,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":22470,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-14","alert":"Phishing Block","trigger":"mamforme.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"mamforme.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"mamforme.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"mamforme.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"mamforme.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css?family=Hind:400|Montserrat:700|Montserrat:600%2C600italic\u0026display=swap\u0026ver=4.13.6","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.42","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://mamforme.live/","date":"2026-09-14T19:19:32.786Z","timestamp":1789413572786,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 10 Aug 2026 08:39:11 GMT","end":"Mon, 02 Nov 2026 08:39:10 GMT"},"fingerprint":{"sha1":"97:55:92:07:19:C2:C2:85:E6:88:C9:C8:47:76:A5:6A:F2:45:6E:8D","sha256":"04:DC:D7:95:F1:60:AD:D7:D0:1C:2C:83:57:A1:87:FF:3E:5F:D7:B4:AC:EF:0D:A5:1F:03:CD:E3:6E:05:0A:2F"}}},"request":{"raw":"GET /css?family=Hind:400|Montserrat:700|Montserrat:600%2C600italic\u0026display=swap\u0026ver=4.13.6 HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://mamforme.live/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Mon, 14 Sep 2026 19:19:32 GMT\r\ndate: Mon, 14 Sep 2026 19:19:32 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":7000,"size_decoded":1476,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"c486934489d2fa0b461a4603c3b79fe1","sha1":"c855504c09d21fa433d9303a029df492bcf29750","sha256":"b9858f123e59ba328ffbc838025cac018fe4a24e9c2931480962a4a9af430dd4","sha512":"7ae5e635dd605dcc39a9ddb531dbeb4f2b823930f0c9f1d7de7d0a6804610bc0f8792894c7ad53a40688d140aed77675d27bfb673a701c4bbcb4e6e84e675534","ssdeep":"192:jKMoAElwEyFEjDEIuEtRS719Ocu6RB7W+Oju8:zEwpFOIcajde","tlshash":"a6e1cd91005ba500eb472cc623cf7e37de4e65627494c5796ffe1ca8adeac260325b2d","first_seen":"2026-09-14T19:05:33.754587Z","last_seen":"2026-09-14T19:20:15.367597Z","times_seen":2,"resource_available":false,"data":null}},"time_used":81,"timings":{"blocked":-1,"dns":0,"connect":15,"send":0,"wait":34,"receive":0,"ssl":32},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"mamforme.live/wp-content/plugins/forminator/assets/forminator-ui/css/src/forminator-utilities.min.css","fqdn":"mamforme.live","domain":"mamforme.live","tld":"live"},"ip":{"addr":"172.67.128.125","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://mamforme.live/","date":"2026-09-14T19:19:32.809Z","timestamp":1789413572809,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mamforme.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 28 Jul 2026 13:38:12 GMT","end":"Mon, 26 Oct 2026 14:36:38 GMT"},"fingerprint":{"sha1":"30:1F:69:7B:09:71:B7:59:4C:D6:B2:1C:6E:21:79:92:1D:35:7E:4C","sha256":"58:66:79:49:8D:FA:10:27:F4:93:35:A6:12:9B:EF:C0:56:C0:3F:AD:58:04:F6:85:9A:7E:79:30:99:5B:E2:F2"}}},"request":{"raw":"GET /wp-content/plugins/forminator/assets/forminator-ui/css/src/forminator-utilities.min.css HTTP/1.1\r\nHost: mamforme.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://mamforme.live/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7p5RdHaFQjnhh%2Fx%2FhL5v65FcQF%2Fr3h89tHR9ta7YxvsHZZ2RXFf%2B3gb52olztxuT0QMGUhOmrif335BHBWOzTykMG0ucb7%2BkcYquNCbOTe%2Bq3MqJ%2Ffp%2FI1zxVjcFKgR8\"}]}\r\ndate: Mon, 14 Sep 2026 19:19:40 GMT\r\ncontent-type: text/css\r\npriority: u=2,i=?0\r\ncf-ray: a3b1be6e1d774404-CPH\r\ncf-cache-status: MISS\r\ncache-control: max-age=14400\r\ncontent-encoding: gzip\r\netag: W/\"27c-65b0b25ab11c0\"\r\nlast-modified: Wed, 09 Sep 2026 11:28:15 GMT\r\nserver: cloudflare\r\nvary: accept-encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":636,"size_decoded":1047,"mime_type":"text/css","magic":"ASCII text, with very long lines (492)","md5":"02413208206794312655aed4313b5500","sha1":"d8204d1cf48b0482af1ba7229829b7f882e901b6","sha256":"6d11d34f8e3d4168dc0b96d3587507e835289033f47838d8d633fdd6d8157fd5","sha512":"d5f76e029d1600e73b85f610be428393affc07d76da5be55c5fe09656536094c7de28940a23ed12f444b241fa097f4a435b335c52b259b7cab4c51220e84d4b2","ssdeep":"","tlshash":"97f04977f9a02204d2205d749b837fbe8a3e426417018f69a988fbb403014df0703b28","first_seen":"2024-12-20T15:59:59.191091Z","last_seen":"2026-09-14T21:50:20.107371Z","times_seen":2907,"resource_available":false,"data":null}},"time_used":7815,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":7815,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"mamforme.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"mamforme.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"mamforme.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"mamforme.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-14","alert":"Phishing Block","trigger":"mamforme.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mamforme.live/wp-content/plugins/forminator/assets/css/intlTelInput.min.css","fqdn":"mamforme.live","domain":"mamforme.live","tld":"live"},"ip":{"addr":"172.67.128.125","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://mamforme.live/","date":"2026-09-14T19:19:32.813Z","timestamp":1789413572813,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mamforme.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 28 Jul 2026 13:38:12 GMT","end":"Mon, 26 Oct 2026 14:36:38 GMT"},"fingerprint":{"sha1":"30:1F:69:7B:09:71:B7:59:4C:D6:B2:1C:6E:21:79:92:1D:35:7E:4C","sha256":"58:66:79:49:8D:FA:10:27:F4:93:35:A6:12:9B:EF:C0:56:C0:3F:AD:58:04:F6:85:9A:7E:79:30:99:5B:E2:F2"}}},"request":{"raw":"GET /wp-content/plugins/forminator/assets/css/intlTelInput.min.css HTTP/1.1\r\nHost: mamforme.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://mamforme.live/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=uiy2hBnFKA7XCrQ04jOG6t05inCL2PeY5d%2Fb6pKappMwWLItpPmCymnvfzIfwQNwC5eW903pYGRMfXxNyAmkFZ946zt0U%2Fl79EKzqLDXczXAU7ZWj2WJ4XnlvWVbm6JC\"}]}\r\ndate: Mon, 14 Sep 2026 19:19:50 GMT\r\ncontent-type: text/css\r\npriority: u=2,i=?0\r\ncf-ray: a3b1be6e2d7a4404-CPH\r\ncf-cache-status: MISS\r\ncache-control: max-age=14400\r\ncontent-encoding: gzip\r\netag: W/\"557e-65b0b25ab11c0\"\r\nlast-modified: Wed, 09 Sep 2026 11:28:15 GMT\r\nserver: cloudflare\r\nvary: accept-encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":21886,"size_decoded":3809,"mime_type":"text/css","magic":"ASCII text, with very long lines (21885)","md5":"44ddcc388b133353a4aa8e48c181ad4d","sha1":"bf9209935c7239687621b2267b40dd2e510cf95d","sha256":"8f7062bec6fc2d5ff1b4035dec5f9c87e99b46c2c171bec8207b13888282c640","sha512":"bf081fd010705ec6ada30ca62d5851680c4545b5964125bf26305b30f78718e03896adb507c84c414ab38ba6ea91941d17e068d0744c6ba7141af06cb1e9346e","ssdeep":"192:eb5CeTWLNF5kaDusoLFhrSKPftPpStm3xsO/nUrHmgxhc/qNuDrvRxAaoUFSr:uFW/ZDjoL9/nyKbY","tlshash":"02a2bc1359243a2b9279e8b8b3d24df9336b56c034d28ad29dee861154437d143eff78","first_seen":"2026-04-22T09:18:25.789957Z","last_seen":"2026-09-14T19:40:33.842317Z","times_seen":450,"resource_available":false,"data":null}},"time_used":17625,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":17625,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"mamforme.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-14","alert":"Phishing Block","trigger":"mamforme.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"mamforme.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"mamforme.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"mamforme.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mamforme.live/wp-content/cache/autoptimize/js/autoptimize_single_95ce2b1331b63e5b673e0147f8ad6260.js","fqdn":"mamforme.live","domain":"mamforme.live","tld":"live"},"ip":{"addr":"172.67.128.125","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://mamforme.live/","date":"2026-09-14T19:19:32.824Z","timestamp":1789413572824,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mamforme.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 28 Jul 2026 13:38:12 GMT","end":"Mon, 26 Oct 2026 14:36:38 GMT"},"fingerprint":{"sha1":"30:1F:69:7B:09:71:B7:59:4C:D6:B2:1C:6E:21:79:92:1D:35:7E:4C","sha256":"58:66:79:49:8D:FA:10:27:F4:93:35:A6:12:9B:EF:C0:56:C0:3F:AD:58:04:F6:85:9A:7E:79:30:99:5B:E2:F2"}}},"request":{"raw":"GET /wp-content/cache/autoptimize/js/autoptimize_single_95ce2b1331b63e5b673e0147f8ad6260.js HTTP/1.1\r\nHost: mamforme.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://mamforme.live/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Mon, 14 Sep 2026 19:19:35 GMT\r\ncontent-encoding: zstd\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\ncache-control: public, max-age=86400\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4%2ByV6JOzZxPAoi4Lm6kK4kFXbY7w8lLIWWE5YKlNkYGRyH6BAq%2FfQ6Q5m5%2Fkx75JPzjrE%2BHFzTJMw9XjMsFqb%2F4dwdKDso6gfRNWylrFxj4M%2FuV1iNE%2BUXhD%2BCGBd6Cc\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: a3b1be6e3d814404-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":779,"size_decoded":794,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (779), with no line terminators","md5":"292daf90d1fd2e89de77103ae65b61ff","sha1":"e8bdbf0dea40cfb8c4b2253600cab139f5d821d2","sha256":"47562f0cb13f161f78e0601c2096694de30db3feb08c7812f74efdc465024802","sha512":"40c5de5c780994fcdf5a18c8fd3b0d4348c00d731b5de2916dcb9bb2698546790873140fc0cc1e809cfd75d7a6eceee0872b91bf7d235800d663ccebc434e212","ssdeep":"","tlshash":"d901695599176f77146af624693ffb466d2f025288109cc0272588e1ba704c1dcd78c7","first_seen":"2026-09-14T19:05:33.773355Z","last_seen":"2026-09-14T19:20:15.370772Z","times_seen":2,"resource_available":true,"data":null}},"time_used":2608,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":2608,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"mamforme.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"mamforme.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-14","alert":"Phishing Block","trigger":"mamforme.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"mamforme.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"mamforme.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mamforme.live/wp-content/plugins/woocommerce/assets/js/frontend/order-attribution.min.js","fqdn":"mamforme.live","domain":"mamforme.live","tld":"live"},"ip":{"addr":"172.67.128.125","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://mamforme.live/","date":"2026-09-14T19:19:32.831Z","timestamp":1789413572831,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mamforme.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 28 Jul 2026 13:38:12 GMT","end":"Mon, 26 Oct 2026 14:36:38 GMT"},"fingerprint":{"sha1":"30:1F:69:7B:09:71:B7:59:4C:D6:B2:1C:6E:21:79:92:1D:35:7E:4C","sha256":"58:66:79:49:8D:FA:10:27:F4:93:35:A6:12:9B:EF:C0:56:C0:3F:AD:58:04:F6:85:9A:7E:79:30:99:5B:E2:F2"}}},"request":{"raw":"GET /wp-content/plugins/woocommerce/assets/js/frontend/order-attribution.min.js HTTP/1.1\r\nHost: mamforme.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://mamforme.live/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Mon, 14 Sep 2026 19:19:33 GMT\r\ncontent-encoding: zstd\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\ncache-control: public, max-age=86400\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=caNdBloZ9C4F%2BqDKNh6idUb5HRulNsIy7ojnB1Q3WWpNBg6HWW1wia9Mz8InmA4AtqTKQ2czhONZC07uapwZgQg4wh1VXhzckQo7Ev3YR8Oh%2FAHPTDAXPU4w%2FDbjMSiv\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: a3b1be6e3d844404-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2439,"size_decoded":1779,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (2439), with no line terminators","md5":"46a816ff38bdd095e2118365ad4c618b","sha1":"c58ae69eeea5bf2846b88a6c7cbaaa7728a2444d","sha256":"0eb862a5891526d089b727fdfa30222cca4b4d75b5835727bf57df17436256f6","sha512":"b6650185967270b09fed48ef9937d21ae45b37010aef6b6a6a4ce3efb295bd39d3734b1cce7535e126cb255b1a3b40c27dd97322f1b70ee0e1c67163e2539cf4","ssdeep":"","tlshash":"41418335b001a826c37782d997aba651b335662d760290dca19c8cb43a39c0b7972cbf","first_seen":"2026-02-05T17:32:11.552459Z","last_seen":"2026-09-14T21:54:17.708211Z","times_seen":47002,"resource_available":true,"data":null}},"time_used":431,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":431,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"mamforme.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-14","alert":"Phishing Block","trigger":"mamforme.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"mamforme.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"mamforme.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"mamforme.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mamforme.live/wp-content/plugins/autoptimize/classes/external/js/lazysizes.min.js","fqdn":"mamforme.live","domain":"mamforme.live","tld":"live"},"ip":{"addr":"172.67.128.125","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://mamforme.live/","date":"2026-09-14T19:19:32.805Z","timestamp":1789413572805,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mamforme.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 28 Jul 2026 13:38:12 GMT","end":"Mon, 26 Oct 2026 14:36:38 GMT"},"fingerprint":{"sha1":"30:1F:69:7B:09:71:B7:59:4C:D6:B2:1C:6E:21:79:92:1D:35:7E:4C","sha256":"58:66:79:49:8D:FA:10:27:F4:93:35:A6:12:9B:EF:C0:56:C0:3F:AD:58:04:F6:85:9A:7E:79:30:99:5B:E2:F2"}}},"request":{"raw":"GET /wp-content/plugins/autoptimize/classes/external/js/lazysizes.min.js HTTP/1.1\r\nHost: mamforme.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://mamforme.live/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Mon, 14 Sep 2026 19:19:33 GMT\r\ncontent-encoding: zstd\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\ncache-control: public, max-age=86400\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=vraE4ylvHq%2FqSn82UiZCAk1346LgrodLW%2BW3fmEGCA8I3PONVtbqfweSZJVavHT9DVk3a98QLMbiPCCESCTJsTo5sxLYMwbDFHVARZKd7JJIoqTpTPzi7g03BzriKwJ%2B\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: a3b1be6e1d744404-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9813,"size_decoded":4950,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (7862)","md5":"d1edbffbde50cd32ab770746b4140906","sha1":"6e120f03a5ac9fddc25e7830d204b202721d8879","sha256":"c4fada4accfa24704b54248bc5ce84acac50b6a059828b7714fe3006786c80c1","sha512":"8de8f4bd102a51d75c02309792068486a4f6f7d232d2d80b5f85f0186f7afb0629a878fca377a2dcd4ae9063543547adb30c7a49b75436c6ef5dc0eabefa21a3","ssdeep":"192:XamIJHXkovHIdcC9vaE6cyxqI1qwLcIRAKEFkNB+xb+25CqqBFPvAxO+GSXiauCB:Xam2kNdcC9J6co91qwLcI6KgkixbdjqU","tlshash":"b312d6df365534b3aeeb34b0406f610f663234339d46e561e2aad091893cc8a6327f2d","first_seen":"2023-03-07T01:02:44Z","last_seen":"2026-09-14T21:58:07.012259Z","times_seen":13101,"resource_available":true,"data":null}},"time_used":428,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":427,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"mamforme.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-14","alert":"Phishing Block","trigger":"mamforme.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"mamforme.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"mamforme.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"mamforme.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mamforme.live/wp-content/plugins/forminator/assets/forminator-ui/css/forminator-icons.min.css","fqdn":"mamforme.live","domain":"mamforme.live","tld":"live"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://mamforme.live/","date":"2026-09-14T19:19:32.807Z","timestamp":1789413572807,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /wp-content/plugins/forminator/assets/forminator-ui/css/forminator-icons.min.css HTTP/1.1\r\nHost: mamforme.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://mamforme.live/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-14T21:51:42.575045Z","times_seen":18466627,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"mamforme.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-14","alert":"Phishing Block","trigger":"mamforme.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"mamforme.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"mamforme.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"mamforme.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"mamforme.live/wp-content/plugins/woocommerce/assets/js/frontend/cart-fragments.min.js","fqdn":"mamforme.live","domain":"mamforme.live","tld":"live"},"ip":{"addr":"172.67.128.125","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://mamforme.live/","date":"2026-09-14T19:19:32.832Z","timestamp":1789413572832,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"mamforme.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 28 Jul 2026 13:38:12 GMT","end":"Mon, 26 Oct 2026 14:36:38 GMT"},"fingerprint":{"sha1":"30:1F:69:7B:09:71:B7:59:4C:D6:B2:1C:6E:21:79:92:1D:35:7E:4C","sha256":"58:66:79:49:8D:FA:10:27:F4:93:35:A6:12:9B:EF:C0:56:C0:3F:AD:58:04:F6:85:9A:7E:79:30:99:5B:E2:F2"}}},"request":{"raw":"GET /wp-content/plugins/woocommerce/assets/js/frontend/cart-fragments.min.js HTTP/1.1\r\nHost: mamforme.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://mamforme.live/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Mon, 14 Sep 2026 19:19:45 GMT\r\ncontent-encoding: zstd\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\ncache-control: public, max-age=86400\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zQtd9CWg7HnTGHNy5iotJpAKwzwD9VYtQ%2BHLs2yJ2JPSdJ6XXr41I3WNTbZ4V34CprUSAdp8XDHJT0%2FZVl2IP6bkAxzoD21HUqAMNA6RGBwpALWdC%2FBp5iZd1pW0YPTr\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: a3b1be6e4d854404-CPH\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":2939,"size_decoded":1710,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (2939), with no line terminators","md5":"ae52867db002b2f95a21b85b3b518a04","sha1":"4b1615786f2e5240bec4229c7dc5c6f865c92ebe","sha256":"592acc60b8eea94fc366110175d8406604a609201d6debe5eb008a6debfbdc3b","sha512":"cb641d54680e78ff8f575ca1746319f42acba15c3422bb40f011421545ac0647cad018635834fc9ed553c7a61e0789d329c18a774d1dcd5fdb52d207e69768cd","ssdeep":"","tlshash":"7551321fb0208e9618b3187e613a719622329d69f2098670a015dca42eece4b1777dcf","first_seen":"2023-08-09T19:51:14Z","last_seen":"2026-09-14T21:48:22.260289Z","times_seen":64537,"resource_available":true,"data":null}},"time_used":12370,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":12370,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"mamforme.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"mamforme.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"mamforme.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-14","alert":"Sinkholed","trigger":"mamforme.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-14","alert":"Phishing Block","trigger":"mamforme.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}}]}