{"report_id":"b3fe4035-cd22-4cae-8798-0586e4296556","version":6,"status":"done","tags":[],"date":"2026-02-27T13:54:44Z","url":{"schema":"http","addr":"dtw.qlp.mybluehost.me","fqdn":"dtw.qlp.mybluehost.me","domain":"mybluehost.me","tld":"me"},"ip":{"addr":"69.6.192.198","port":0,"asn":0,"as":"","country":"United States","country_code":"US"},"final":{"url":{"schema":"https","addr":"dtw.qlp.mybluehost.me/","fqdn":"dtw.qlp.mybluehost.me","domain":"mybluehost.me","tld":"me"},"title":"Welcome -","dom":{"size":174267,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (18785)","md5":"3646c4b920306e3606b3ee3c3680b428","sha1":"9e5f9739ac17fd2e977f52aa0687829cf33733d7","sha256":"55356503d8dcf90ad605a544886d3e8144e14d76f481c87a86d235f8f9a5bb27","sha512":"eee69c57b85a537c7a0dc06cfd67fd2736e6a418533173c2fb10eaca0526743600811a02441ae51e5c93fb7fbb60b0e084c27609d8ea540578e226d81e7121ed","ssdeep":"3072:kMclkTYBBdpMUEZMbcemlUVug4mFGvd6rXFM9k9L:JclkTudeZMbcemlUVug4m03+","tlshash":"1e04a696b3a444fa747f8a29814db32cf929a540c7093ad5f0f5f330568dafa15a370e","dom_hash":"domhasha913cd2f7217530b43bb80f6e8704728","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"dtw.qlp.mybluehost.me","fqdn":"dtw.qlp.mybluehost.me","domain":"mybluehost.me","tld":"me"},"ip":{"addr":"69.6.192.198","port":0,"asn":0,"as":"","country":"United States","country_code":"US"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-04-03T13:54:44Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-27","alert":"Sinkholed","trigger":"dtw.qlp.mybluehost.me","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"pixel.wp.com","ip":{"addr":"192.0.76.3","port":443,"asn":2635,"as":"AUTOMATTIC","country":"United States","country_code":"US"},"domain_registered":"1997-03-28","domain_rank":22824,"first_seen":"2017-01-30T05:31:40Z","last_seen":"2026-02-22T23:34:16.715977Z","alert_count":0,"request_count":1,"received_data":251,"sent_data":580,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"stats.wp.com","ip":{"addr":"192.0.76.3","port":443,"asn":2635,"as":"AUTOMATTIC","country":"United States","country_code":"US"},"domain_registered":"1997-03-28","domain_rank":22660,"first_seen":"2017-01-30T05:06:59Z","last_seen":"2026-02-22T23:50:14.848789Z","alert_count":0,"request_count":1,"received_data":4265,"sent_data":418,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"dtw.qlp.mybluehost.me","ip":{"addr":"69.6.192.198","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"domain_registered":"2016-10-05","domain_rank":0,"first_seen":"2026-02-27T13:54:45.109306Z","last_seen":"2026-02-27T13:54:45.109306Z","alert_count":10,"request_count":10,"received_data":407900,"sent_data":5602,"comment":"","tags":null,"fingerprints":[{"name":"Bluehost","description":"Bluehost is a large web host known for its WordPress expertise, variety of “one-stop-shop” services, and bargain prices.","website":"https://www.bluehost.com","common_platform_enumeration":"","icon":"Bluehost.svg","categories":["Hosting"]},{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"Nginx:1.27.4","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Yoast SEO:27.0","description":"Yoast SEO is a search engine optimisation plugin for WordPress and other platforms.","website":"https://yoast.com/wordpress/plugins/seo/","common_platform_enumeration":"","icon":"Yoast SEO.png","categories":["SEO","WordPress plugins"]},{"name":"WordPress Block Editor","description":"Sites using the WordPress Block Editor, also known as Gutenberg.","website":"https://wordpress.org/gutenberg/","common_platform_enumeration":"","icon":"WordPress.svg","categories":["Page builders"]},{"name":"WordPress Site Editor","description":"Full Site Editing enables users to design and customize their entire WordPress website with a block-based editor.","website":"https://wordpress.org/documentation/article/site-editor/","common_platform_enumeration":"","icon":"WordPress.svg","categories":["Page builders"]},{"name":"WordPress:6.9.1","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"dtw.qlp.mybluehost.me/wp-includes/js/dist/script-modules/block-library/navigation/view.min.js?ver=b0f909c3ec791c383210","fqdn":"dtw.qlp.mybluehost.me","domain":"mybluehost.me","tld":"me"},"ip":{"addr":"69.6.192.198","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"81f491adccda86aaf56a1ce68fa59b87","sha1":"c27ca491887c7fdad5a3ca67592173427cc861af","sha256":"efc3dac74026580ee6b527716e2e63ba29f2116a90d4a47a691438b9a2b86c2f","sha512":"809037c160df1990ac458f977252a4cb2629c748f1a8133240c9d2897b14ad58d2407d822fea9c61efeb19af1e72dc16b29c09c917dca024f4145f1977d1ff57","ssdeep":"","tlshash":"24610234306576b1aefe5ad8f3148428a3148581640b78717e1cb9ee58eef5391f0bea","size":3401,"data":"","first_seen":"2025-12-03T01:51:42.331168Z","last_seen":"2026-07-25T03:20:16.451305Z","times_seen":11664,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dtw.qlp.mybluehost.me/wp-includes/js/wp-emoji-release.min.js?ver=6.9.1","fqdn":"dtw.qlp.mybluehost.me","domain":"mybluehost.me","tld":"me"},"ip":{"addr":"69.6.192.198","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"f0cc9ba5cf46af0cd73d521803e3b07e","sha1":"7d2a74f87dc70a39eccce3bae1d4cc404cb134f4","sha256":"fd59b0ebf6282ed71647bf2f6e0d1925bbfd1f270865a832079ebb60259aabca","sha512":"7ec44f08676c195547a623504c7105ef3d0acea5839675599598043f3e0b5a3386452e3db6fbea90722f7be9e6effdae1b89c49e2b05b22b8c415616e07d471d","ssdeep":"384:WzevzApRZTbXU/3o//bEPhXgA5POkpJTX:Wsk9XU/3o//YpXgAs+hX","tlshash":"7fa2959ba33a4e8f343e3bd78d968f4dc9da555321c0e079dbefb6c169a00568274c80","size":22762,"data":"","first_seen":"2025-11-10T19:52:32.864936Z","last_seen":"2026-07-25T04:48:08.619057Z","times_seen":308968,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dtw.qlp.mybluehost.me/wp-block-template-skip-link-js-after","fqdn":"dtw.qlp.mybluehost.me","domain":"mybluehost.me","tld":"me"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"f5d230e85f3241e40ff174dc09491c33","sha1":"79c7bca8dd10f874263325bd0c54cb093c83f527","sha256":"09299b1f108ef9a8d2c625c621627357c8fc29d57dc821963889d0685f1ce0a6","sha512":"b7c8e93e7c5a6615ffb6703de46087f025794d7a7c4b0c2f3916e3bd45234ec8ac07ee347c170ada368b5d82871bed0efa49416a6499ea5a0720fcd6088b732f","ssdeep":"","tlshash":"352198c4f21406f401651a39c0385bc9e2b92998f6db1ca7cc0c8c1ca1b256f46b6e7e","size":1443,"data":"","first_seen":"2026-02-27T13:54:48.28232Z","last_seen":"2026-05-10T23:47:13.795584Z","times_seen":4,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dtw.qlp.mybluehost.me/wp-content/plugins/bluehost-wordpress-plugin/vendor/newfold-labs/wp-module-performance/build/assets/image-lazy-loader.min.js?ver=1772084882","fqdn":"dtw.qlp.mybluehost.me","domain":"mybluehost.me","tld":"me"},"ip":{"addr":"69.6.192.198","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"f29b55a856eeef0981c3dfdc79de621f","sha1":"274eccca7f637aa2f5ab8fb5bfe57117bd25721c","sha256":"07a9d76765da91c44292b73ab80501fb821be92cb2098867a1924d1c35293e6e","sha512":"fd7f875c745697dfc43f09402ba7364786962e36873e0795809278ddd69e49b8ca75f391ea3557724835f901a89b40b448f5846bfa40dee36beebd089aadb815","ssdeep":"","tlshash":"66f002e8805551332d4a84dd90e093918874131a384e09d426344c9bc5cbfc24af7e59","size":609,"data":"","first_seen":"2026-02-11T08:31:04.744135Z","last_seen":"2026-07-25T03:28:04.229604Z","times_seen":1559,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dtw.qlp.mybluehost.me/linkprefetcher-js-before","fqdn":"dtw.qlp.mybluehost.me","domain":"mybluehost.me","tld":"me"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"3d8470041245687aafd210c8e2b56aeb","sha1":"cdffad7b42d5e5f9824c738e677374f92f4c7862","sha256":"1a453a098ce4b6ce5c5c7cdf320bad0606265d8b63932fec365680c6ee9b2928","sha512":"9bc9060b1911c30edf895908cba55a618ce1e5350c9b0dc906d4884662d3be0d941403b87a2ea5a06c9d4e88a3cf3f27177c50c1625846a83327855751257552","ssdeep":"","tlshash":"8cf0976dc9ed383a0a8107b952031ad2f0c01065e0548810f0af5c44233fc4b4e4505b","size":627,"data":"","first_seen":"2025-12-20T03:19:47.824017Z","last_seen":"2026-07-18T23:45:32.930123Z","times_seen":10,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dtw.qlp.mybluehost.me/jetpack-stats-js-before","fqdn":"dtw.qlp.mybluehost.me","domain":"mybluehost.me","tld":"me"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"72788511f9d4dee47d47d85a5540f7da","sha1":"b90a51f6265909e49f263932580ed4a1709c8d53","sha256":"7993eae107765c896a91d82eaefb2bc1b92e4b356ffeb07b34e1e5c551cc2988","sha512":"eace25bf8615c7cf1b387109eaac962536235a79a69b8ad0ab8603dcce640f58bf5b2442958dfdedf6b3a07f3b7cd98edce6d66eacb3bc3be91aaf68f3122a27","ssdeep":"","tlshash":"eaf02b2dc3ad0c2e41674a3420af87ba64d80121c1500d40a88b1e24517d9a720936d0","size":649,"data":"","first_seen":"2026-02-27T13:54:48.284542Z","last_seen":"2026-02-27T14:13:10.365051Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"stats.wp.com/e-202609.js","fqdn":"stats.wp.com","domain":"wp.com","tld":"com"},"ip":{"addr":"192.0.76.3","port":443,"asn":2635,"as":"AUTOMATTIC","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"b1e85b83d13876fefcf2d873fde8da3e","sha1":"09d271f2a7dd17e66a19fcbfca887734d951ed2f","sha256":"2abd616c43c16e7a2d01f1f1c761d6c12acf4b2ed9a9a411289ee3bb5a681ffe","sha512":"a1ab2e32190702e46c440606a45e51dd073168fa11828683764aef077fb2b495343bd91ee784974244c37d0a52a8225d1a6359ffe0ddf0ec6971aeb7c50e3ec8","ssdeep":"","tlshash":"6b71646536c5f0381af630a5235f630af5ba8b7a7d4a9044c37cd4b07c79e8b9412f9a","size":3812,"data":"","first_seen":"2025-06-09T00:15:30.881783Z","last_seen":"2026-07-25T04:41:16.830494Z","times_seen":73158,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dtw.qlp.mybluehost.me/wp-content/plugins/bluehost-wordpress-plugin/vendor/newfold-labs/wp-module-performance/build/assets/link-prefetch.min.js?ver=4.13.2","fqdn":"dtw.qlp.mybluehost.me","domain":"mybluehost.me","tld":"me"},"ip":{"addr":"69.6.192.198","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"4d435bcbf5d4144eb493da3e2491eee7","sha1":"97bc718e6ead9e86bc4ae9bedf887c07619bb770","sha256":"3c267c4b193abe1f6d7ee3694b17bd35957433ec65922f6fc2f83dcde7ca0029","sha512":"8985355b6c59300c152f95d3bdc375e6c071c28e16a2d36442d717f709aec358888d690c5f01119b0787f436ce4c89c57af393dd084c76810347b37bc97514bc","ssdeep":"","tlshash":"24518364d06d197b059084abf3246180f77a69cd70278054387e0eda6f6fe8112d3dbf","size":2736,"data":"","first_seen":"2026-02-10T23:20:39.365027Z","last_seen":"2026-07-25T00:58:29.198883Z","times_seen":2997,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dtw.qlp.mybluehost.me/wp-includes/js/wp-emoji-loader.min.js","fqdn":"dtw.qlp.mybluehost.me","domain":"mybluehost.me","tld":"me"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"32c900ce33cb98d5eb6351d93ee39a07","sha1":"4e4b15e6448650caa4c3cac6b2a9982d226c0678","sha256":"e4359960634b320881a0eb8eed55e55a934676576ae509a96c55a900e39f4c7c","sha512":"bff05c16f216e5d10d9c56b24f499da72a490d546dfe3efa671f77ae55c9c3657aeaf2ca2f67dd1a141dafabbf9ae3fd6174d126563c541d654980bd692dbd23","ssdeep":"","tlshash":"3e61969ae7763cdbb2f900f2697e0e47eb614435d6c8d438c9bda3141cb5893c274a46","size":3381,"data":"","first_seen":"2026-02-27T13:54:48.285508Z","last_seen":"2026-02-27T14:13:10.36721Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dtw.qlp.mybluehost.me/wp-includes/js/dist/script-modules/interactivity/index.min.js?ver=66c613f68580994bb00a","fqdn":"dtw.qlp.mybluehost.me","domain":"mybluehost.me","tld":"me"},"ip":{"addr":"69.6.192.198","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"introduction_type":"importedModule","is_inline":false,"md5":"4dc1083fadc3146eef9e178a635322d7","sha1":"4e30da47cbbd6c3b4bc243ef9196fdb54b8a5648","sha256":"222102c59fbeb8df4f97e143c264d83d794d74a6123486b03b9ecf32a5471918","sha512":"aa096ebe4c95e43225ee1f09450521632db53c9cd732d01e1492747a1f45cb0254cc2a443cd1f024314c86fa0eec441f20ae33c5ef4a55d6cb95bcb7b84d3384","ssdeep":"768:HeW4693pQRsx45G/0vTVhtFiBa7jJEbYlrEdORuHhYlxuQLSZEXdYqAOmp9mI66f:HeQ93u6/0vxh17thuhyQpgFbonUWqeou","tlshash":"bc03c7a4b065f03047e614a6907b051bf3356618344fc0e0f769e8ea78b919f6567f3e","size":41194,"data":"","first_seen":"2026-02-04T02:31:53.531475Z","last_seen":"2026-07-24T20:37:42.218806Z","times_seen":5816,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dtw.qlp.mybluehost.me/nfd-performance-lazy-loader-js-before","fqdn":"dtw.qlp.mybluehost.me","domain":"mybluehost.me","tld":"me"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"b94a3fdb14c3fc9a0f8690b9153744ec","sha1":"f0ac5b9388c9f92de4cc9dbc86e94430910b93f3","sha256":"3316565d010bec563af173403be9f030b9c83b4c716831711fa967255bda7980","sha512":"56837451a09a59075caddc31fa73c0f7cedc300943316014a202bce6d7890745cd227f9770db9263c77f7c0ff7ad251b9c10ca732aaaa6158ed194dffda5a47b","ssdeep":"","tlshash":"591189fef28114115d3b547cb65b2602a52a27bbc0804f26a5fee045571745772a120e","size":857,"data":"","first_seen":"2025-12-20T03:19:47.823239Z","last_seen":"2026-07-18T23:45:32.920208Z","times_seen":9,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dtw.qlp.mybluehost.me/nfd-wonder-blocks-utilities-js-after","fqdn":"dtw.qlp.mybluehost.me","domain":"mybluehost.me","tld":"me"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"b3e9884579ec0ecc0614d380c36e94ff","sha1":"84dd79b3f717e24d798c9c3d1dac3b617c9284e4","sha256":"bd6c4d89f7608da2ecc75937c80d2dc101e3e3b06ff339134615e5fdf97db0b2","sha512":"0efc51f44507ed78e9e455e9f16ddbd9baab65458b53afe987a2b822108ad9314a176774d40db6ab99d8102fe12b69a0f55f9f922358ab9efda3325ee3c43418","ssdeep":"","tlshash":"8d6131f1f12449fe0abb46b6e2be9bc0bd241040d08200b5a53cd89f456cd8147f6b6f","size":3461,"data":"","first_seen":"2025-12-04T06:06:54.118344Z","last_seen":"2026-03-08T18:32:44.803009Z","times_seen":20,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"dtw.qlp.mybluehost.me/wp-content/plugins/bluehost-wordpress-plugin/vendor/newfold-labs/wp-module-performance/build/assets/image-lazy-loader.min.js?ver=1772084882","fqdn":"dtw.qlp.mybluehost.me","domain":"mybluehost.me","tld":"me"},"ip":{"addr":"69.6.192.198","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://dtw.qlp.mybluehost.me/","date":"2026-02-27T13:54:23.579Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cpcontacts.dtw.qlp.mybluehost.me","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 26 Jan 2026 12:54:50 GMT","end":"Sun, 26 Apr 2026 12:54:49 GMT"},"fingerprint":{"sha1":"A8:2F:38:03:2B:7C:2F:A3:81:CE:18:0C:45:54:85:C3:B2:EF:F2:BA","sha256":"D9:47:60:CD:8D:CB:8A:AE:3A:02:E1:F7:D4:17:38:A7:96:61:39:E0:A1:32:04:45:96:CD:88:1B:DF:6E:A3:68"}}},"request":{"raw":"GET /wp-content/plugins/bluehost-wordpress-plugin/vendor/newfold-labs/wp-module-performance/build/assets/image-lazy-loader.min.js?ver=1772084882 HTTP/1.1\r\nHost: dtw.qlp.mybluehost.me\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dtw.qlp.mybluehost.me/\r\nCookie: nfd-enable-cf-opt=63a6825d27cab0f204d3b602\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Thu, 26 Feb 2026 05:48:02 GMT\r\naccept-ranges: bytes\r\ncache-control: max-age=86400\r\nexpires: Sat, 28 Feb 2026 13:54:23 GMT\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nhost-header: c2hhcmVkLmJsdWVob3N0LmNvbQ==\r\ncontent-length: 385\r\ncontent-type: text/javascript\r\ndate: Fri, 27 Feb 2026 13:54:23 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bluehost","description":"Bluehost is a large web host known for its WordPress expertise, variety of “one-stop-shop” services, and bargain prices.","website":"https://www.bluehost.com","common_platform_enumeration":"","icon":"Bluehost.svg","categories":["Hosting"]},{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":609,"size_decoded":0,"mime_type":"text/javascript","magic":"ASCII text, with very long lines (609), with no line terminators","md5":"f29b55a856eeef0981c3dfdc79de621f","sha1":"274eccca7f637aa2f5ab8fb5bfe57117bd25721c","sha256":"07a9d76765da91c44292b73ab80501fb821be92cb2098867a1924d1c35293e6e","sha512":"fd7f875c745697dfc43f09402ba7364786962e36873e0795809278ddd69e49b8ca75f391ea3557724835f901a89b40b448f5846bfa40dee36beebd089aadb815","ssdeep":"","tlshash":"66f002e8805551332d4a84dd90e093918874131a384e09d426344c9bc5cbfc24af7e59","first_seen":"2026-02-11T08:31:04.744135Z","last_seen":"2026-07-25T03:28:04.229604Z","times_seen":1559,"resource_available":true,"data":null}},"time_used":53,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":53,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-27","alert":"Sinkholed","trigger":"dtw.qlp.mybluehost.me","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dtw.qlp.mybluehost.me/wp-content/plugins/bluehost-wordpress-plugin/vendor/newfold-labs/wp-module-performance/build/assets/link-prefetch.min.js?ver=4.13.2","fqdn":"dtw.qlp.mybluehost.me","domain":"mybluehost.me","tld":"me"},"ip":{"addr":"69.6.192.198","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://dtw.qlp.mybluehost.me/","date":"2026-02-27T13:54:23.581Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cpcontacts.dtw.qlp.mybluehost.me","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 26 Jan 2026 12:54:50 GMT","end":"Sun, 26 Apr 2026 12:54:49 GMT"},"fingerprint":{"sha1":"A8:2F:38:03:2B:7C:2F:A3:81:CE:18:0C:45:54:85:C3:B2:EF:F2:BA","sha256":"D9:47:60:CD:8D:CB:8A:AE:3A:02:E1:F7:D4:17:38:A7:96:61:39:E0:A1:32:04:45:96:CD:88:1B:DF:6E:A3:68"}}},"request":{"raw":"GET /wp-content/plugins/bluehost-wordpress-plugin/vendor/newfold-labs/wp-module-performance/build/assets/link-prefetch.min.js?ver=4.13.2 HTTP/1.1\r\nHost: dtw.qlp.mybluehost.me\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dtw.qlp.mybluehost.me/\r\nCookie: nfd-enable-cf-opt=63a6825d27cab0f204d3b602\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Thu, 26 Feb 2026 05:48:02 GMT\r\naccept-ranges: bytes\r\ncache-control: max-age=86400\r\nexpires: Sat, 28 Feb 2026 13:54:23 GMT\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nhost-header: c2hhcmVkLmJsdWVob3N0LmNvbQ==\r\ncontent-length: 1175\r\ncontent-type: text/javascript\r\ndate: Fri, 27 Feb 2026 13:54:23 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bluehost","description":"Bluehost is a large web host known for its WordPress expertise, variety of “one-stop-shop” services, and bargain prices.","website":"https://www.bluehost.com","common_platform_enumeration":"","icon":"Bluehost.svg","categories":["Hosting"]},{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":2736,"size_decoded":0,"mime_type":"text/javascript","magic":"ASCII text, with very long lines (2736), with no line terminators","md5":"4d435bcbf5d4144eb493da3e2491eee7","sha1":"97bc718e6ead9e86bc4ae9bedf887c07619bb770","sha256":"3c267c4b193abe1f6d7ee3694b17bd35957433ec65922f6fc2f83dcde7ca0029","sha512":"8985355b6c59300c152f95d3bdc375e6c071c28e16a2d36442d717f709aec358888d690c5f01119b0787f436ce4c89c57af393dd084c76810347b37bc97514bc","ssdeep":"","tlshash":"24518364d06d197b059084abf3246180f77a69cd70278054387e0eda6f6fe8112d3dbf","first_seen":"2026-02-10T23:20:39.365027Z","last_seen":"2026-07-25T00:58:29.198883Z","times_seen":2997,"resource_available":true,"data":null}},"time_used":54,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":54,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-27","alert":"Sinkholed","trigger":"dtw.qlp.mybluehost.me","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dtw.qlp.mybluehost.me/wp-content/themes/bluehost-blueprint/assets/fonts/roboto-flex/roboto-flex-variable.woff2","fqdn":"dtw.qlp.mybluehost.me","domain":"mybluehost.me","tld":"me"},"ip":{"addr":"69.6.192.198","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://dtw.qlp.mybluehost.me/","date":"2026-02-27T13:54:23.662Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cpcontacts.dtw.qlp.mybluehost.me","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 26 Jan 2026 12:54:50 GMT","end":"Sun, 26 Apr 2026 12:54:49 GMT"},"fingerprint":{"sha1":"A8:2F:38:03:2B:7C:2F:A3:81:CE:18:0C:45:54:85:C3:B2:EF:F2:BA","sha256":"D9:47:60:CD:8D:CB:8A:AE:3A:02:E1:F7:D4:17:38:A7:96:61:39:E0:A1:32:04:45:96:CD:88:1B:DF:6E:A3:68"}}},"request":{"raw":"GET /wp-content/themes/bluehost-blueprint/assets/fonts/roboto-flex/roboto-flex-variable.woff2 HTTP/1.1\r\nHost: dtw.qlp.mybluehost.me\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dtw.qlp.mybluehost.me/\r\nCookie: nfd-enable-cf-opt=63a6825d27cab0f204d3b602\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Thu, 19 Feb 2026 23:59:55 GMT\r\naccept-ranges: bytes\r\ncontent-length: 136828\r\ncache-control: max-age=86400\r\nexpires: Sat, 28 Feb 2026 13:54:23 GMT\r\nhost-header: c2hhcmVkLmJsdWVob3N0LmNvbQ==\r\ncontent-type: font/woff2\r\ndate: Fri, 27 Feb 2026 13:54:23 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bluehost","description":"Bluehost is a large web host known for its WordPress expertise, variety of “one-stop-shop” services, and bargain prices.","website":"https://www.bluehost.com","common_platform_enumeration":"","icon":"Bluehost.svg","categories":["Hosting"]},{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":136828,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 136828, version 3.13107","md5":"a5135ba69c22f6c5b5083d12c8621625","sha1":"925c4c2035bc5aab8f3c7b59d1a8f092986b1cc6","sha256":"4ada5e9de20605ddb6b72a49f014b2b446908b79236e27147811e970c42f2ae4","sha512":"6b14550979ac41d0ab0b8fae3dfd131f97c78321f5566c4d1064ae895bf73e68c6456659b14464187d552a1f38647e4ca8e36717b390b2499e836da01801d49f","ssdeep":"3072:/SU2GSYlXjoALNaP39XJX8YkBjXB1ioQWRUpwnDp:AGSYlToA4nX8B1ioQWOOd","tlshash":"3cd31231af8f4f154a9092c2505193db3988ffd9a08cca8d6694b954d972b0accf4ba3","first_seen":"2025-07-08T12:32:00.007415Z","last_seen":"2026-07-24T09:40:20.29692Z","times_seen":358,"resource_available":false,"data":null}},"time_used":112,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":58,"receive":54,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-27","alert":"Sinkholed","trigger":"dtw.qlp.mybluehost.me","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dtw.qlp.mybluehost.me/wp-includes/js/dist/script-modules/interactivity/index.min.js?ver=66c613f68580994bb00a","fqdn":"dtw.qlp.mybluehost.me","domain":"mybluehost.me","tld":"me"},"ip":{"addr":"69.6.192.198","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://dtw.qlp.mybluehost.me/","date":"2026-02-27T13:54:23.680Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cpcontacts.dtw.qlp.mybluehost.me","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 26 Jan 2026 12:54:50 GMT","end":"Sun, 26 Apr 2026 12:54:49 GMT"},"fingerprint":{"sha1":"A8:2F:38:03:2B:7C:2F:A3:81:CE:18:0C:45:54:85:C3:B2:EF:F2:BA","sha256":"D9:47:60:CD:8D:CB:8A:AE:3A:02:E1:F7:D4:17:38:A7:96:61:39:E0:A1:32:04:45:96:CD:88:1B:DF:6E:A3:68"}}},"request":{"raw":"GET /wp-includes/js/dist/script-modules/interactivity/index.min.js?ver=66c613f68580994bb00a HTTP/1.1\r\nHost: dtw.qlp.mybluehost.me\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dtw.qlp.mybluehost.me/wp-includes/js/dist/script-modules/block-library/navigation/view.min.js?ver=b0f909c3ec791c383210\r\nCookie: nfd-enable-cf-opt=63a6825d27cab0f204d3b602\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Tue, 03 Feb 2026 18:26:26 GMT\r\naccept-ranges: bytes\r\ncache-control: max-age=86400\r\nexpires: Sat, 28 Feb 2026 13:54:23 GMT\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nhost-header: c2hhcmVkLmJsdWVob3N0LmNvbQ==\r\ncontent-type: text/javascript\r\ndate: Fri, 27 Feb 2026 13:54:23 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bluehost","description":"Bluehost is a large web host known for its WordPress expertise, variety of “one-stop-shop” services, and bargain prices.","website":"https://www.bluehost.com","common_platform_enumeration":"","icon":"Bluehost.svg","categories":["Hosting"]},{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":41194,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (41194), with no line terminators","md5":"4dc1083fadc3146eef9e178a635322d7","sha1":"4e30da47cbbd6c3b4bc243ef9196fdb54b8a5648","sha256":"222102c59fbeb8df4f97e143c264d83d794d74a6123486b03b9ecf32a5471918","sha512":"aa096ebe4c95e43225ee1f09450521632db53c9cd732d01e1492747a1f45cb0254cc2a443cd1f024314c86fa0eec441f20ae33c5ef4a55d6cb95bcb7b84d3384","ssdeep":"768:HeW4693pQRsx45G/0vTVhtFiBa7jJEbYlrEdORuHhYlxuQLSZEXdYqAOmp9mI66f:HeQ93u6/0vxh17thuhyQpgFbonUWqeou","tlshash":"bc03c7a4b065f03047e614a6907b051bf3356618344fc0e0f769e8ea78b919f6567f3e","first_seen":"2026-02-04T02:31:53.531475Z","last_seen":"2026-07-24T20:37:42.218806Z","times_seen":5816,"resource_available":true,"data":null}},"time_used":93,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":93,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-27","alert":"Sinkholed","trigger":"dtw.qlp.mybluehost.me","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dtw.qlp.mybluehost.me/wp-includes/blocks/cover/style.min.css?ver=6.9.1","fqdn":"dtw.qlp.mybluehost.me","domain":"mybluehost.me","tld":"me"},"ip":{"addr":"69.6.192.198","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://dtw.qlp.mybluehost.me/","date":"2026-02-27T13:54:23.571Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cpcontacts.dtw.qlp.mybluehost.me","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 26 Jan 2026 12:54:50 GMT","end":"Sun, 26 Apr 2026 12:54:49 GMT"},"fingerprint":{"sha1":"A8:2F:38:03:2B:7C:2F:A3:81:CE:18:0C:45:54:85:C3:B2:EF:F2:BA","sha256":"D9:47:60:CD:8D:CB:8A:AE:3A:02:E1:F7:D4:17:38:A7:96:61:39:E0:A1:32:04:45:96:CD:88:1B:DF:6E:A3:68"}}},"request":{"raw":"GET /wp-includes/blocks/cover/style.min.css?ver=6.9.1 HTTP/1.1\r\nHost: dtw.qlp.mybluehost.me\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dtw.qlp.mybluehost.me/\r\nCookie: nfd-enable-cf-opt=63a6825d27cab0f204d3b602\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Mon, 26 Jan 2026 10:30:44 GMT\r\naccept-ranges: bytes\r\ncache-control: max-age=86400\r\nexpires: Sat, 28 Feb 2026 13:54:23 GMT\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nhost-header: c2hhcmVkLmJsdWVob3N0LmNvbQ==\r\ncontent-length: 1900\r\ncontent-type: text/css\r\ndate: Fri, 27 Feb 2026 13:54:23 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bluehost","description":"Bluehost is a large web host known for its WordPress expertise, variety of “one-stop-shop” services, and bargain prices.","website":"https://www.bluehost.com","common_platform_enumeration":"","icon":"Bluehost.svg","categories":["Hosting"]},{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":19126,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (19126), with no line terminators","md5":"63572908f5c4f1b77ab8bfb90a43d92f","sha1":"4dcca32b8b9143635264dccf437b80e1acf6525e","sha256":"666570bb7ac88a83bf11ede14a09166cd5cc1d83c4e2610f6b207e8a4596f6b6","sha512":"b71a51aa3808b586465a647285348b267ca721fe0609094988621e62f74498fb54d57b66240e055119146e444cd12cbf95e494a54de46710ebb8fb7afa3ea47c","ssdeep":"384:n95x4jp56/P14vPFgJUe3T1MHhZna/ZcBZDn/sNNgBgkgNgGg3xgc:n0eJ0GLaZmc","tlshash":"c7827a4122e58cfd75dfbe691f3deb88670b5c11c1894fdba53ae054634ca8888b3b16","first_seen":"2025-04-16T10:49:17.675381Z","last_seen":"2026-07-25T03:20:16.429525Z","times_seen":6525,"resource_available":false,"data":null}},"time_used":54,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":54,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-27","alert":"Sinkholed","trigger":"dtw.qlp.mybluehost.me","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dtw.qlp.mybluehost.me/wp-includes/js/dist/script-modules/block-library/navigation/view.min.js?ver=b0f909c3ec791c383210","fqdn":"dtw.qlp.mybluehost.me","domain":"mybluehost.me","tld":"me"},"ip":{"addr":"69.6.192.198","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://dtw.qlp.mybluehost.me/","date":"2026-02-27T13:54:23.576Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cpcontacts.dtw.qlp.mybluehost.me","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 26 Jan 2026 12:54:50 GMT","end":"Sun, 26 Apr 2026 12:54:49 GMT"},"fingerprint":{"sha1":"A8:2F:38:03:2B:7C:2F:A3:81:CE:18:0C:45:54:85:C3:B2:EF:F2:BA","sha256":"D9:47:60:CD:8D:CB:8A:AE:3A:02:E1:F7:D4:17:38:A7:96:61:39:E0:A1:32:04:45:96:CD:88:1B:DF:6E:A3:68"}}},"request":{"raw":"GET /wp-includes/js/dist/script-modules/block-library/navigation/view.min.js?ver=b0f909c3ec791c383210 HTTP/1.1\r\nHost: dtw.qlp.mybluehost.me\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dtw.qlp.mybluehost.me/\r\nCookie: nfd-enable-cf-opt=63a6825d27cab0f204d3b602\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Mon, 26 Jan 2026 10:30:44 GMT\r\naccept-ranges: bytes\r\ncache-control: max-age=86400\r\nexpires: Sat, 28 Feb 2026 13:54:23 GMT\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nhost-header: c2hhcmVkLmJsdWVob3N0LmNvbQ==\r\ncontent-length: 1209\r\ncontent-type: text/javascript\r\ndate: Fri, 27 Feb 2026 13:54:23 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bluehost","description":"Bluehost is a large web host known for its WordPress expertise, variety of “one-stop-shop” services, and bargain prices.","website":"https://www.bluehost.com","common_platform_enumeration":"","icon":"Bluehost.svg","categories":["Hosting"]},{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":3401,"size_decoded":0,"mime_type":"text/javascript","magic":"ASCII text, with very long lines (3401), with no line terminators","md5":"81f491adccda86aaf56a1ce68fa59b87","sha1":"c27ca491887c7fdad5a3ca67592173427cc861af","sha256":"efc3dac74026580ee6b527716e2e63ba29f2116a90d4a47a691438b9a2b86c2f","sha512":"809037c160df1990ac458f977252a4cb2629c748f1a8133240c9d2897b14ad58d2407d822fea9c61efeb19af1e72dc16b29c09c917dca024f4145f1977d1ff57","ssdeep":"","tlshash":"24610234306576b1aefe5ad8f3148428a3148581640b78717e1cb9ee58eef5391f0bea","first_seen":"2025-12-03T01:51:42.331168Z","last_seen":"2026-07-25T03:20:16.451305Z","times_seen":11664,"resource_available":true,"data":null}},"time_used":55,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":55,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-27","alert":"Sinkholed","trigger":"dtw.qlp.mybluehost.me","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"pixel.wp.com/g.gif?v=ext\u0026blog=252106348\u0026post=0\u0026tz=0\u0026srv=dtw.qlp.mybluehost.me\u0026arch_home=1\u0026j=1%3A15.5\u0026host=dtw.qlp.mybluehost.me\u0026ref=\u0026fcp=612\u0026rand=0.16374617570663752","fqdn":"pixel.wp.com","domain":"wp.com","tld":"com"},"ip":{"addr":"192.0.76.3","port":443,"asn":2635,"as":"AUTOMATTIC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dtw.qlp.mybluehost.me/","date":"2026-02-27T13:54:23.800Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wp.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 02 Feb 2026 19:44:49 GMT","end":"Sun, 03 May 2026 19:44:48 GMT"},"fingerprint":{"sha1":"74:16:DF:29:E8:C6:D5:FE:A5:36:94:0A:16:BE:D1:6C:47:5D:73:4E","sha256":"6B:F6:59:57:FF:CF:20:B1:02:F4:62:B9:0B:13:CF:BC:2A:97:53:23:B5:D3:82:11:79:85:81:64:BE:85:54:75"}}},"request":{"raw":"GET /g.gif?v=ext\u0026blog=252106348\u0026post=0\u0026tz=0\u0026srv=dtw.qlp.mybluehost.me\u0026arch_home=1\u0026j=1%3A15.5\u0026host=dtw.qlp.mybluehost.me\u0026ref=\u0026fcp=612\u0026rand=0.16374617570663752 HTTP/1.1\r\nHost: pixel.wp.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dtw.qlp.mybluehost.me/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\nserver: nginx\r\ndate: Fri, 27 Feb 2026 13:54:23 GMT\r\ncontent-type: image/gif\r\ncontent-length: 50\r\ncache-control: no-cache\r\naccess-control-allow-origin: *\r\nalt-svc: h3=\":443\"; ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":50,"size_decoded":0,"mime_type":"image/gif","magic":"GIF image data, version 89a, 6 x 5","md5":"e4d673a55c5656f19ef81563fb10884c","sha1":"1f2d8ed221d39329251ad3a6ff1edb20b7219443","sha256":"f3a8992acb9ab911e0fa4ae12f4b85ef8e61008619f13ee51c7a121ff87f63b1","sha512":"e0b03411282a979cf772f700d9e5634b0c25c612e380ad33c0d59059b1b479d027016d5beb148403ef185430db35f5faed362f36ce2c8ecad0e6d8e30cea97b4","ssdeep":"","tlshash":"69900201f9a08180c1206535091a035c62049256490443062255751c5d546650616254","first_seen":"2023-04-05T23:53:38Z","last_seen":"2026-07-25T04:41:16.820933Z","times_seen":114857,"resource_available":true,"data":null}},"time_used":11,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"dtw.qlp.mybluehost.me/favicon.ico","fqdn":"dtw.qlp.mybluehost.me","domain":"mybluehost.me","tld":"me"},"ip":{"addr":"69.6.192.198","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://dtw.qlp.mybluehost.me/","date":"2026-02-27T13:54:23.816Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cpcontacts.dtw.qlp.mybluehost.me","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 26 Jan 2026 12:54:50 GMT","end":"Sun, 26 Apr 2026 12:54:49 GMT"},"fingerprint":{"sha1":"A8:2F:38:03:2B:7C:2F:A3:81:CE:18:0C:45:54:85:C3:B2:EF:F2:BA","sha256":"D9:47:60:CD:8D:CB:8A:AE:3A:02:E1:F7:D4:17:38:A7:96:61:39:E0:A1:32:04:45:96:CD:88:1B:DF:6E:A3:68"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: dtw.qlp.mybluehost.me\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dtw.qlp.mybluehost.me/\r\nCookie: nfd-enable-cf-opt=63a6825d27cab0f204d3b602\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\ndate: Fri, 27 Feb 2026 13:54:23 GMT\r\nserver: nginx/1.27.4\r\ncontent-type: text/html; charset=iso-8859-1\r\ncontent-length: 355\r\nhost-header: c2hhcmVkLmJsdWVob3N0LmNvbQ==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Nginx:1.27.4","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Bluehost","description":"Bluehost is a large web host known for its WordPress expertise, variety of “one-stop-shop” services, and bargain prices.","website":"https://www.bluehost.com","common_platform_enumeration":"","icon":"Bluehost.svg","categories":["Hosting"]}],"data":{"size":355,"size_decoded":0,"mime_type":"text/html; charset=iso-8859-1","magic":"HTML document, ASCII text","md5":"4525b2d648f7c457a689fd96421783a5","sha1":"11bfe30ce44585a15a38e86bc094224ddfe2c08e","sha256":"cc0b4e42510d49c6decd464123ecf3b14ae9b47f9b4ed2ee64893e2d6520a264","sha512":"94e3e8246cf38ff7740e51aa115c8c455b14f78e672c2686b782c0ce30b6fa2dbd91a78b29b3964d9c0414aabd4b9391fd5db326665e25b4b8e73dae60ffe979","ssdeep":"","tlshash":"71e0c04f4057b3474011a2907dc01291e505236b38a152f93ac09467500897dc4aa2dd","first_seen":"2025-12-09T03:51:58.5943Z","last_seen":"2026-07-25T04:26:34.107033Z","times_seen":47051,"resource_available":true,"data":null}},"time_used":68,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":68,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-27","alert":"Sinkholed","trigger":"dtw.qlp.mybluehost.me","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dtw.qlp.mybluehost.me/wp-includes/js/wp-emoji-release.min.js?ver=6.9.1","fqdn":"dtw.qlp.mybluehost.me","domain":"mybluehost.me","tld":"me"},"ip":{"addr":"69.6.192.198","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://dtw.qlp.mybluehost.me/","date":"2026-02-27T13:54:23.861Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cpcontacts.dtw.qlp.mybluehost.me","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 26 Jan 2026 12:54:50 GMT","end":"Sun, 26 Apr 2026 12:54:49 GMT"},"fingerprint":{"sha1":"A8:2F:38:03:2B:7C:2F:A3:81:CE:18:0C:45:54:85:C3:B2:EF:F2:BA","sha256":"D9:47:60:CD:8D:CB:8A:AE:3A:02:E1:F7:D4:17:38:A7:96:61:39:E0:A1:32:04:45:96:CD:88:1B:DF:6E:A3:68"}}},"request":{"raw":"GET /wp-includes/js/wp-emoji-release.min.js?ver=6.9.1 HTTP/1.1\r\nHost: dtw.qlp.mybluehost.me\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dtw.qlp.mybluehost.me/\r\nCookie: nfd-enable-cf-opt=63a6825d27cab0f204d3b602\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Mon, 26 Jan 2026 10:30:44 GMT\r\naccept-ranges: bytes\r\ncache-control: max-age=86400\r\nexpires: Sat, 28 Feb 2026 13:54:23 GMT\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nhost-header: c2hhcmVkLmJsdWVob3N0LmNvbQ==\r\ncontent-length: 5657\r\ncontent-type: text/javascript\r\ndate: Fri, 27 Feb 2026 13:54:23 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Bluehost","description":"Bluehost is a large web host known for its WordPress expertise, variety of “one-stop-shop” services, and bargain prices.","website":"https://www.bluehost.com","common_platform_enumeration":"","icon":"Bluehost.svg","categories":["Hosting"]},{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":22762,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (19823)","md5":"f0cc9ba5cf46af0cd73d521803e3b07e","sha1":"7d2a74f87dc70a39eccce3bae1d4cc404cb134f4","sha256":"fd59b0ebf6282ed71647bf2f6e0d1925bbfd1f270865a832079ebb60259aabca","sha512":"7ec44f08676c195547a623504c7105ef3d0acea5839675599598043f3e0b5a3386452e3db6fbea90722f7be9e6effdae1b89c49e2b05b22b8c415616e07d471d","ssdeep":"384:WzevzApRZTbXU/3o//bEPhXgA5POkpJTX:Wsk9XU/3o//YpXgAs+hX","tlshash":"7fa2959ba33a4e8f343e3bd78d968f4dc9da555321c0e079dbefb6c169a00568274c80","first_seen":"2025-11-10T19:52:32.864936Z","last_seen":"2026-07-25T04:48:08.619057Z","times_seen":308968,"resource_available":true,"data":null}},"time_used":55,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":55,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-27","alert":"Sinkholed","trigger":"dtw.qlp.mybluehost.me","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dtw.qlp.mybluehost.me/","fqdn":"dtw.qlp.mybluehost.me","domain":"mybluehost.me","tld":"me"},"ip":{"addr":"69.6.192.198","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-02-27T13:54:23.109Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cpcontacts.dtw.qlp.mybluehost.me","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 26 Jan 2026 12:54:50 GMT","end":"Sun, 26 Apr 2026 12:54:49 GMT"},"fingerprint":{"sha1":"A8:2F:38:03:2B:7C:2F:A3:81:CE:18:0C:45:54:85:C3:B2:EF:F2:BA","sha256":"D9:47:60:CD:8D:CB:8A:AE:3A:02:E1:F7:D4:17:38:A7:96:61:39:E0:A1:32:04:45:96:CD:88:1B:DF:6E:A3:68"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: dtw.qlp.mybluehost.me\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Fri, 27 Feb 2026 13:54:23 GMT\r\nserver: nginx/1.27.4\r\ncontent-type: text/html; charset=UTF-8\r\npermissions-policy: private-state-token-redemption=(self \"https://www.google.com\" \"https://www.gstatic.com\" \"https://recaptcha.net\" \"https://challenges.cloudflare.com\" \"https://hcaptcha.com\"), private-state-token-issuance=(self \"https://www.google.com\" \"https://www.gstatic.com\" \"https://recaptcha.net\" \"https://challenges.cloudflare.com\" \"https://hcaptcha.com\")\r\nlink: \u003chttps://dtw.qlp.mybluehost.me/wp-json/\u003e; rel=\"https://api.w.org/\"\r\ncache-control: max-age=7200\r\nexpires: Fri, 27 Feb 2026 15:54:23 GMT\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nhost-header: c2hhcmVkLmJsdWVob3N0LmNvbQ==\r\nx-server-cache: false\r\nset-cookie: nfd-enable-cf-opt=63a6825d27cab0f204d3b602; path=/; Max-Age=86400; HttpOnly\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Yoast SEO:27.0","description":"Yoast SEO is a search engine optimisation plugin for WordPress and other platforms.","website":"https://yoast.com/wordpress/plugins/seo/","common_platform_enumeration":"","icon":"Yoast SEO.png","categories":["SEO","WordPress plugins"]},{"name":"WordPress Block Editor","description":"Sites using the WordPress Block Editor, also known as Gutenberg.","website":"https://wordpress.org/gutenberg/","common_platform_enumeration":"","icon":"WordPress.svg","categories":["Page builders"]},{"name":"WordPress Site Editor","description":"Full Site Editing enables users to design and customize their entire WordPress website with a block-based editor.","website":"https://wordpress.org/documentation/article/site-editor/","common_platform_enumeration":"","icon":"WordPress.svg","categories":["Page builders"]},{"name":"Bluehost","description":"Bluehost is a large web host known for its WordPress expertise, variety of “one-stop-shop” services, and bargain prices.","website":"https://www.bluehost.com","common_platform_enumeration":"","icon":"Bluehost.svg","categories":["Hosting"]},{"name":"Nginx:1.27.4","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"WordPress:6.9.1","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]}],"data":{"size":173801,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (18785)","md5":"c2e6ac7ca6024100bdd765854fce5875","sha1":"36e8cd195de1d364181ac7eb64f0830e74008bfd","sha256":"7e2a841b3866b30a972e6bfcb35da77ba3fcba7683a8d3ff9dac3cdfa64a84aa","sha512":"cd3a6b9bb55dc24e88fbcc3d4943ae123accd0862b64a6b4e60aa13bf1b6eaa5b2a29a77123ac7950726b996b737b6878d71a6263771f9c5c20fdd510c9201df","ssdeep":"3072:KSclkUY7bdDM8QZcpp4wvSAIeNV7Gvd6rXSM4k9Z:JclkUKdCZcpp4wvSAIeNVStM","tlshash":"5004a756b3a448fa747f8a29814db32cf929a540c7093ad5f0f5f330568dafa15a370e","first_seen":"2026-02-27T13:54:48.280035Z","last_seen":"2026-02-27T14:13:10.356985Z","times_seen":2,"resource_available":false,"data":null}},"time_used":400,"timings":{"blocked":118,"dns":7,"connect":52,"send":0,"wait":164,"receive":0,"ssl":57},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-27","alert":"Sinkholed","trigger":"dtw.qlp.mybluehost.me","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"dtw.qlp.mybluehost.me/wp-content/themes/bluehost-blueprint/style.css?ver=1.0.0","fqdn":"dtw.qlp.mybluehost.me","domain":"mybluehost.me","tld":"me"},"ip":{"addr":"69.6.192.198","port":443,"asn":0,"as":"","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://dtw.qlp.mybluehost.me/","date":"2026-02-27T13:54:23.574Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cpcontacts.dtw.qlp.mybluehost.me","organization":""},"issuer":{"commonName":"R13","organization":"Let's Encrypt"},"validity":{"start":"Mon, 26 Jan 2026 12:54:50 GMT","end":"Sun, 26 Apr 2026 12:54:49 GMT"},"fingerprint":{"sha1":"A8:2F:38:03:2B:7C:2F:A3:81:CE:18:0C:45:54:85:C3:B2:EF:F2:BA","sha256":"D9:47:60:CD:8D:CB:8A:AE:3A:02:E1:F7:D4:17:38:A7:96:61:39:E0:A1:32:04:45:96:CD:88:1B:DF:6E:A3:68"}}},"request":{"raw":"GET /wp-content/themes/bluehost-blueprint/style.css?ver=1.0.0 HTTP/1.1\r\nHost: dtw.qlp.mybluehost.me\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dtw.qlp.mybluehost.me/\r\nCookie: nfd-enable-cf-opt=63a6825d27cab0f204d3b602\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nlast-modified: Thu, 19 Feb 2026 23:59:55 GMT\r\naccept-ranges: bytes\r\ncache-control: max-age=86400\r\nexpires: Sat, 28 Feb 2026 13:54:23 GMT\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\nhost-header: c2hhcmVkLmJsdWVob3N0LmNvbQ==\r\ncontent-length: 1406\r\ncontent-type: text/css\r\ndate: Fri, 27 Feb 2026 13:54:23 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"Bluehost","description":"Bluehost is a large web host known for its WordPress expertise, variety of “one-stop-shop” services, and bargain prices.","website":"https://www.bluehost.com","common_platform_enumeration":"","icon":"Bluehost.svg","categories":["Hosting"]}],"data":{"size":3150,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (388)","md5":"812a9a0b70cead18ace56192347d1649","sha1":"feb1f865840b7e5642a375806a4a97226a9b9cb0","sha256":"2916888979e739dc0be40a6445a9cd75c99fdaa3dd18c9d8bf82e6b0ef4de508","sha512":"d816122aadc7fa7e611fe7028711193cc596352e2616a162af4905881ed4f7be2bb4f4d019357dc49563baf895ae6740f46d2b2713f95ecc08cc9340ce7f1c4d","ssdeep":"","tlshash":"7651852ab63105f02eea53613fcd59c4690ec311a74f1ed0e69680bc9b8e1a609f1b4d","first_seen":"2025-10-03T21:55:07.559123Z","last_seen":"2026-07-01T18:34:23.824822Z","times_seen":225,"resource_available":false,"data":null}},"time_used":53,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":53,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-02-27","alert":"Sinkholed","trigger":"dtw.qlp.mybluehost.me","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"stats.wp.com/e-202609.js","fqdn":"stats.wp.com","domain":"wp.com","tld":"com"},"ip":{"addr":"192.0.76.3","port":443,"asn":2635,"as":"AUTOMATTIC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://dtw.qlp.mybluehost.me/","date":"2026-02-27T13:54:23.584Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wp.com","organization":""},"issuer":{"commonName":"E7","organization":"Let's Encrypt"},"validity":{"start":"Mon, 02 Feb 2026 19:44:49 GMT","end":"Sun, 03 May 2026 19:44:48 GMT"},"fingerprint":{"sha1":"74:16:DF:29:E8:C6:D5:FE:A5:36:94:0A:16:BE:D1:6C:47:5D:73:4E","sha256":"6B:F6:59:57:FF:CF:20:B1:02:F4:62:B9:0B:13:CF:BC:2A:97:53:23:B5:D3:82:11:79:85:81:64:BE:85:54:75"}}},"request":{"raw":"GET /e-202609.js HTTP/1.1\r\nHost: stats.wp.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://dtw.qlp.mybluehost.me/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nserver: nginx\r\ndate: Fri, 27 Feb 2026 13:54:23 GMT\r\ncontent-type: application/javascript\r\nvary: Accept-Encoding\r\nx-minify: t\r\nx-minify-cache: hit\r\netag: W/7134-1748959715126.2634\r\na8c-edge-cache: cache\r\ncontent-encoding: br\r\nexpires: Sat, 20 Feb 2027 09:46:38 GMT\r\ncache-control: max-age=31536000\r\naccess-control-allow-methods: GET, HEAD\r\naccess-control-allow-origin: *\r\nx-nc: HIT arn\r\nalt-svc: h3=\":443\"; ma=86400\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3812,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (3812), with no line terminators","md5":"b1e85b83d13876fefcf2d873fde8da3e","sha1":"09d271f2a7dd17e66a19fcbfca887734d951ed2f","sha256":"2abd616c43c16e7a2d01f1f1c761d6c12acf4b2ed9a9a411289ee3bb5a681ffe","sha512":"a1ab2e32190702e46c440606a45e51dd073168fa11828683764aef077fb2b495343bd91ee784974244c37d0a52a8225d1a6359ffe0ddf0ec6971aeb7c50e3ec8","ssdeep":"","tlshash":"6b71646536c5f0381af630a5235f630af5ba8b7a7d4a9044c37cd4b07c79e8b9412f9a","first_seen":"2025-06-09T00:15:30.881783Z","last_seen":"2026-07-25T04:41:16.830494Z","times_seen":73158,"resource_available":true,"data":null}},"time_used":293,"timings":{"blocked":136,"dns":121,"connect":7,"send":0,"wait":7,"receive":0,"ssl":19},"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]}
