{"report_id":"b5e5703e-1474-4a18-9a4a-b131875e3315","version":0,"status":"done","tags":[],"date":"2026-09-23T20:09:30Z","url":{"schema":"http","addr":"salsasiempre.live/","fqdn":"salsasiempre.live","domain":"salsasiempre.live","tld":"live"},"ip":{"addr":"172.67.166.231","port":0,"asn":13335,"as":"Cloudflare, Inc.","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"salsasiempre.live/","fqdn":"salsasiempre.live","domain":"salsasiempre.live","tld":"live"},"title":"Szkoła tańca Poznań | kursy i nauka tańca w Poznaniu","dom":{"size":39,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with no line terminators","md5":"086707e4369f60afedcafb16050a7618","sha1":"8216b0cc6876cbd44f01c158e7dff3833ceccd41","sha256":"a7fe83ec64bb23eb28090598db3d166ed98e52e39d1afbbfd74c579553f93e4e","sha512":"aade21843813e2cab329b99185c6f61db7907a556ea974e0315dcf3ad967cab20fee66d4f10db0d0ec43a71e086ce6d700d5524103deaefa3ce5f6be74ba5737","ssdeep":"","tlshash":"6a9000fee0a2000efc303bc00cc2238a0c28c3a830028e002ac038b8c80822bcc032c8","dom_hash":"domhash1f07f384c75181c66badb60ab1ec770b","first_seen":"2023-03-07T01:03:24Z","last_seen":"2026-09-23T21:33:48.311621Z","times_seen":1051499,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"salsasiempre.live/","fqdn":"salsasiempre.live","domain":"salsasiempre.live","tld":"live"},"ip":{"addr":"172.67.166.231","port":0,"asn":13335,"as":"Cloudflare, Inc.","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-10-28T20:09:30Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"31pu2ilhjrkmwpf"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":5}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"salsasiempre.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-23","alert":"Phishing Block","trigger":"salsasiempre.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"salsasiempre.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"salsasiempre.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"salsasiempre.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null},"summary":[{"fqdn":"www.google.com","ip":{"addr":"142.251.154.119","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"1997-09-15","domain_rank":22,"first_seen":"2015-05-10T13:11:19Z","last_seen":"2026-09-20T23:01:40.450976Z","alert_count":0,"request_count":3,"received_data":20195,"sent_data":1829,"comment":"","tags":null,"fingerprints":null},{"fqdn":"salsasiempre.live","ip":{"addr":"104.21.16.74","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":285,"request_count":57,"received_data":3405058,"sent_data":30992,"comment":"","tags":null,"fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"YouTube","description":"YouTube is a video sharing service where users can create their own profile, upload videos, watch, like and comment on other videos.","website":"https://www.youtube.com","common_platform_enumeration":"","icon":"YouTube.png","categories":["Video players"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]},{"name":"reCAPTCHA","description":"reCAPTCHA is a free service from Google that helps protect websites from spam and abuse.","website":"https://www.google.com/recaptcha/","common_platform_enumeration":"","icon":"reCAPTCHA.svg","categories":["Security"]},{"name":"jQuery Migrate:3.4.1","description":"Query Migrate is a javascript library that allows you to preserve the compatibility of your jQuery code developed for versions of jQuery older than 1.9.","website":"https://github.com/jquery/jquery-migrate","common_platform_enumeration":"","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"waitForImages","description":"waitForImages is a lightweight, high-performance JavaScript library that simplifies the handling of image preloading events.","website":"https://github.com/alexanderdickson/waitForImages","common_platform_enumeration":"","icon":"","categories":["JavaScript libraries"]},{"name":"Contact Form 7","description":"Contact Form 7 is an WordPress plugin which can manage multiple contact forms. The form supports Ajax-powered submitting, CAPTCHA, Akismet spam filtering.","website":"https://contactform7.com","common_platform_enumeration":"","icon":"Contact Form 7.png","categories":["WordPress plugins","Form builders"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"WordPress:7.1.2","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"WP Rocket","description":"WP Rocket is a caching and performance optimisation plugin to improve the loading speed of WordPress websites.","website":"https://wp-rocket.me","common_platform_enumeration":"","icon":"WP Rocket.png","categories":["Caching","WordPress plugins"]},{"name":"Slider Revolution:6.5.24","description":"Slider Revolution is a flexible and highly customisable slider.","website":"https://www.sliderrevolution.com","common_platform_enumeration":"","icon":"Slider Revolution.svg","categories":["Widgets","Photo galleries"]},{"name":"PHP:7.4.33","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"wpBakery","description":"WPBakery is a drag and drop visual page builder plugin for WordPress.","website":"https://wpbakery.com","common_platform_enumeration":"","icon":"wpBakery.svg","categories":["Page builders","WordPress plugins"]},{"name":"prettyPhoto","description":"","website":"https://no-margin-for-errors.com/projects/prettyphoto-jquery-lightbox-clone/","common_platform_enumeration":"","icon":"prettyPhoto.png","categories":["JavaScript libraries"]},{"name":"Twitter","description":"Twitter is a 'microblogging' system that allows you to send and receive short posts called tweets.","website":"https://twitter.com","common_platform_enumeration":"","icon":"Twitter.svg","categories":["Widgets"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-09-20T22:43:37.149177Z","alert_count":0,"request_count":12,"received_data":288222,"sent_data":6485,"comment":"","tags":null,"fingerprints":null},{"fqdn":"www.gstatic.com","ip":{"addr":"142.250.178.67","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":146047,"first_seen":"2012-05-29T15:36:17Z","last_seen":"2026-09-20T23:34:05.890074Z","alert_count":0,"request_count":4,"received_data":1777677,"sent_data":2176,"comment":"","tags":null,"fingerprints":null},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.178.42","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-09-20T22:43:34.841753Z","alert_count":0,"request_count":1,"received_data":36150,"sent_data":704,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"www.googletagmanager.com","ip":{"addr":"142.250.178.104","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2011-11-11","domain_rank":283,"first_seen":"2012-10-04T01:07:32Z","last_seen":"2026-09-20T22:44:48.5379Z","alert_count":0,"request_count":2,"received_data":878160,"sent_data":975,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"salsasiempre.live/gtmkit-cf7-js-extra","fqdn":"salsasiempre.live","domain":"salsasiempre.live","tld":"live"},"ip":{"addr":"104.21.16.74","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"55912f615dfd07d38558c174987417c3","sha1":"5cea79e35af99159a1d458ec6e5760c5854414e5","sha256":"9046564078c6aa9683f529e9c69c63e7aff912e6cdd5ea306e0980e97f41728a","sha512":"a02ac2d4e7feb8adff974bf93d4cdd05b91a0f70b5ded843df36d74ab7956d4d8d298d43297fa3e818202bfa53eb0e3cb51e2441104f1e81117de869eb08e5db","ssdeep":"","tlshash":"c0e01249c0601df0585bc8324878c133f0e9dca0ee529494978c001cf0b4c01a140d03","size":293,"data":"","first_seen":"2026-09-23T19:56:10.59966Z","last_seen":"2026-09-23T20:10:01.443117Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"salsasiempre.live/","fqdn":"salsasiempre.live","domain":"salsasiempre.live","tld":"live"},"ip":{"addr":"104.21.16.74","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eval","is_inline":false,"md5":"ec9acf96899d162ac91e89238bb9f460","sha1":"cbf34fb74447073bcad0db06b3776365f71c3c15","sha256":"2e59ecf5c001333d77af228b4e9d229749e69d246e5b2b31d4fef0b7d67f75d3","sha512":"b0a028bf619f907cae0eb94414db494bc3787a9cc6e19ade3d77da1a3ca712e3592ecad2bf2b27556df480c462bc135f5746ae966b6fcb5e6c19d2fe22a57b95","ssdeep":"1536:nx70ffmWH7ZFQHDW5q4x07nlzqeJJTTnvrOm3PxQAw9pFvDpGHnWGhAEufU28MKV:jMc23sBd","tlshash":"4943d78d3180b6f346ea33bfea9f85097b31a163d7066060e051d3a46a72656073bedd","size":58720,"data":"","first_seen":"2023-03-07T01:39:40Z","last_seen":"2026-09-23T21:03:35.182696Z","times_seen":1344,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"salsasiempre.live/wpb_composer_front_js-js-extra","fqdn":"salsasiempre.live","domain":"salsasiempre.live","tld":"live"},"ip":{"addr":"104.21.16.74","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"fb014556fce2bdb98a6eb27eebcaa3f7","sha1":"0dc15e0a4285a901b5007637594d37fc1c2ab534","sha256":"c9d6b1e8b54cafdb8b5ad60a135e9d9685718c0c1b5253e2d7aeb17649e024a0","sha512":"1fcc6262cb176e2a7a605b3e7c80fdf9209b96c5e84303e94b060509c7629935a5fa429b01cb3661da1ce1e5748aed849e4262d6ab928ac6ddcb54f3e1df5bcf","ssdeep":"","tlshash":"a7411215e4a40a60eac389700c27c92d40042353c1a1504db2ccc03406e1800e370006","size":2004,"data":"","first_seen":"2026-09-23T19:56:10.59719Z","last_seen":"2026-09-23T20:10:01.444489Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"salsasiempre.live/wp-content/plugins/timetable/js/jquery.ba-bbq.min.js?ver=7.1.2","fqdn":"salsasiempre.live","domain":"salsasiempre.live","tld":"live"},"ip":{"addr":"104.21.16.74","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"757fbeddff8f67f1f5f4d1211a54f860","sha1":"9f1b4278154d94b7871ee831536585b6d8f7c9f0","sha256":"785cf299c805ec5e17abfb1c1bb2f379b9076d7a6aa87000d5e22aa069896e7c","sha512":"f54638b33b5dfd12f587f52bbce82562fef774ec95967acea5af76aeb3244945a389ffccd2af5f20f29aa8b367ea4d468811901844e7e5312967aa20199a421f","ssdeep":"96:RXmBHiimWSdb3W+jjKPiF6bhRMBFUgAZPmzpHVBPd:RXmIBWgjKG6bh66Pm1HVBl","tlshash":"bba1d7dd72d230660bf2b032969f911eb43ea5a1388d9c0de0a5a4c03d705be5157f4c","size":4673,"data":"","first_seen":"2023-03-07T01:32:35Z","last_seen":"2026-09-23T21:03:35.167601Z","times_seen":825,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"salsasiempre.live/wp-content/themes/vibez/assets/js/modules/plugins/jquery.waypoints.min.js?ver=7.1.2","fqdn":"salsasiempre.live","domain":"salsasiempre.live","tld":"live"},"ip":{"addr":"104.21.16.74","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"1988b2bcaf7a3d5f33face7dabf19202","sha1":"f171e3cf3646fd6f2092312b8ae4b11f5cf13e84","sha256":"7d7a12639877d9be25bde5d92109d05881c4ac6956d32d250e54a21efcee5ff6","sha512":"f11a9f6a97515e61a3d97a730b9d158dda7945672320ee8284b8b4d4d1bbb44982e3430c479f61b3c40d356752aaf9945619999211ed59088e520df36d3ad5e0","ssdeep":"192:mCZzxsMCm1nJDl6hj8E3aPEGnvfiaaLkYluY4pLyUcDWZPeGz+nrFr:mC9oWJDlC8eaPZnvGLkYluYTUcEPeGzs","tlshash":"46126189350134221bdf50fad91f434ab337582ca80680bdb4c8d4ed28f152d676bfba","size":9033,"data":"","first_seen":"2023-03-07T01:18:42Z","last_seen":"2026-09-23T20:10:01.352076Z","times_seen":2467,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"salsasiempre.live/wp-content/plugins/js_composer/assets/js/dist/js_composer_front.min.js?ver=6.9.0","fqdn":"salsasiempre.live","domain":"salsasiempre.live","tld":"live"},"ip":{"addr":"104.21.16.74","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"6ce179ee275d3bd58d0407b79d6366cd","sha1":"fb1393daafde2f3e85f31777543c3194a4ab11d0","sha256":"1bd0097cd9d76a31566f4236a1aaa31cdd43c5857a9502679805fddbc7599a54","sha512":"d4d07e2c7bbac595616905acd6d65c14d8099459243f05a33f630a91d9421d27fe4347a306eb01a652428de1b291d691c9a96a7dbc6492ca1068a6f14fbae303","ssdeep":"384:heUIpaRa7/Jom2xdeuxOqlHxehYzRUfPFzDlMagLSav47Ebq:heUIp/7/Jom2xdeudHkhY1UfPFzDlMa5","tlshash":"de92c858b91070f956b7333bf13b3b197133383a948651206415d8787abed4f222afae","size":20315,"data":"","first_seen":"2023-03-07T01:07:46Z","last_seen":"2026-09-23T20:10:01.436961Z","times_seen":4030,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-BT1HXCHHE7\u0026cx=c\u0026gtm=4e69m0","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.178.104","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"ab961e2c1b0f9337e62bf73f603d74b1","sha1":"9a6b400df5810c1654f0f9802302be83c6592213","sha256":"f8ba2901cb9c310aeec20c3943285f1bc1c0eb9c01b26f27e262d3706fa850d8","sha512":"c14cf2c82deec1670b519ba8129006719403ee44aa74d49899e901aa988438b45d967a3bb5af0b36ac685adb81073964d0ab5c58214445a72007c0293914cc3c","ssdeep":"6144:Ey717Fo0swMYwVgjrtYdAcUabxE+B3adXjrL9yHv89mfrWtQm:PFoCFweLjVyPeEO","tlshash":"e1b4f8ce73c674229396f178903f01cba57b29a2b45cc89af289dce42d3465a5163f7c","size":524375,"data":"","first_seen":"2026-09-23T20:10:01.405347Z","last_seen":"2026-09-23T20:10:01.405347Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"salsasiempre.live/","fqdn":"salsasiempre.live","domain":"salsasiempre.live","tld":"live"},"ip":{"addr":"104.21.16.74","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"ce71388c2d441cfb9ef0985bc4e5bb71","sha1":"1e74c490ed76f671eb45ab0b45c9c9f5b9b89f0f","sha256":"efb5a648656ae8f944fbf74e5644126464160ab50197a288c8b587e74edd575a","sha512":"8ccd39ea8643980590cf71014ceee6bb774de11bc87aa162d3b1e48b0f6c392399186fabf147e0cbe9990950cf75e5517d78a357b01e6afbdb00472909db3a1d","ssdeep":"","tlshash":"89f0bef14158513f2ae2190a5412b2a63d7300baf3067080d46d9c605274ba9862afaa","size":476,"data":"","first_seen":"2023-03-07T01:02:50Z","last_seen":"2026-09-23T21:49:04.366489Z","times_seen":48731,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"salsasiempre.live/","fqdn":"salsasiempre.live","domain":"salsasiempre.live","tld":"live"},"ip":{"addr":"104.21.16.74","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"8d2b4edf675082da10ddad842d77a961","sha1":"bcc60928977810b6ac4b23b8b2ab6a425eaf1803","sha256":"48d39642ade849558bc31851d212a8514f7c1dc8f103b8c0bfc30630594f8385","sha512":"5df6e1ad178f02277939db983a1a86e8b33ace1f26b101e80863f0cddc8ff350a7cf1bd6857d37d564bee34f09de167ae59730e14df95146fff69834d6b58c1c","ssdeep":"192:5C9/Hwbc2GIM1ovboSBADD50a5IwXcmgIHS8LjrtkKqWjrPlM+:0f35T/SBADNd5/XcmgE9frt3h7v","tlshash":"4722d6ba37696d722ae492a7a23ef702f32111d25003402c352dedd9580cedb35b5bb0","size":9951,"data":"","first_seen":"2023-04-18T01:55:12Z","last_seen":"2026-09-23T20:10:01.447327Z","times_seen":13796,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"salsasiempre.live/","fqdn":"salsasiempre.live","domain":"salsasiempre.live","tld":"live"},"ip":{"addr":"104.21.16.74","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"6aed559b90a078df4224d2e59b5495e2","sha1":"f49d671961832666df570f4366e82abf94cc058c","sha256":"9487fcacc7a2a6f44c06ca776388ee67ff0450a46ad7d14e3fbeaeb7ecbcc154","sha512":"c702ddccdea78d30527412e67e7189a97e257843025e853037289eb03d01f24274520b24bf1742ff1d180181e5143f6c4844d63443436bf62f93438f5e942f30","ssdeep":"","tlshash":"432124c42b8e523500e9222ddfaf339b34fa65f620a44851de982d2d70a9c1fc204fec","size":1281,"data":"","first_seen":"2026-06-11T03:16:27.364091Z","last_seen":"2026-09-23T20:10:01.448219Z","times_seen":136,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"salsasiempre.live/","fqdn":"salsasiempre.live","domain":"salsasiempre.live","tld":"live"},"ip":{"addr":"104.21.16.74","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"deed001ab5fb4b90f645746bd29885cb","sha1":"772dbc4f530db4be13fc66a35aca27edd99dc727","sha256":"b94c1d773a57c414ad552bfaab0050ddcda5ddb29903ed6a6e93de1113cc83f1","sha512":"6ac4c72df1a5f4cf1c7b4659abac94198efed6a8809e31695d53786644505c92ea935fdeea74b26f916075c04eeaecd189c3410bdfe62c482bcc5ccd4c7d00f7","ssdeep":"","tlshash":"79e023c7b92019f670de0cfb3370a015b1835004d4056c12edeec5241925d8744425cc","size":437,"data":"","first_seen":"2026-09-23T19:56:10.56894Z","last_seen":"2026-09-23T20:10:01.449006Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"salsasiempre.live/","fqdn":"salsasiempre.live","domain":"salsasiempre.live","tld":"live"},"ip":{"addr":"104.21.16.74","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"9a88591691557fd57a1a30b967cc09be","sha1":"6533e39443170c795f12390791fa762b2685a86e","sha256":"0094fd8ba86be7d72eebecf7d6f7c8c7c5a6ab852a0320e707fd1644f093ab86","sha512":"8d87ee1455f78fe34be9d5a7a82599bc12d2d87da11750302f57deb6f6638e8ada5113abdbb3c707fd39860186da1e1d2a259e6a1ceb51087624e8469076f51a","ssdeep":"","tlshash":"3fb0124900601df0185bc4324474c133f0a9dca0ee1254949788001cf074c01a140d03","size":101,"data":"","first_seen":"2026-06-08T09:57:54.819486Z","last_seen":"2026-09-23T20:10:01.456029Z","times_seen":27,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"salsasiempre.live/","fqdn":"salsasiempre.live","domain":"salsasiempre.live","tld":"live"},"ip":{"addr":"104.21.16.74","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"4fecd6d4c5cb6cc62242bfd426f80a0b","sha1":"74150e215637064c4e6f73c8d396b5aa905c8566","sha256":"8e7417921f589113e62ceb8d7c4860ec4f8afe2fe18e1b151af63b22f1aa5ad2","sha512":"8673558264d02b9981f5a740248e5e35be4c491a7e9b69113c01d65aed465c4ef93912c498e242656389081fcebfcccb0d8a1b9a5ba9311107db3b71a24bfb70","ssdeep":"","tlshash":"10c09b54f5992f1c51df17192769813750f878c4b5121c04d4943cb43571c033514457","size":135,"data":"","first_seen":"2026-06-03T19:04:43.807951Z","last_seen":"2026-09-23T20:10:01.456839Z","times_seen":173,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"salsasiempre.live/","fqdn":"salsasiempre.live","domain":"salsasiempre.live","tld":"live"},"ip":{"addr":"104.21.16.74","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"eb468107c53c2229d8e95e75efff67bd","sha1":"b7d1ce6ce94de492b710385dbf6f9d8ba0444b7a","sha256":"4584c9fc3d99b4ed7104323f908d4ea614e6fcd5474e57060ff61f6ecd981778","sha512":"74ebcd87db5c7b2fca0380e6d7c86e25ebd8bad7224e41ffb1bd4355a0e7571888e86b892125c5809282c93687e0957c7ed1b461b44ff055f16554ffa5be9e87","ssdeep":"","tlshash":"94c08ce07a661e2002e317835fcbb1022882b200f08028a068953c1cb0e9e82b4c4e52","size":168,"data":"","first_seen":"2026-06-04T19:50:30.37422Z","last_seen":"2026-09-23T20:10:01.458576Z","times_seen":47,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"salsasiempre.live/","fqdn":"salsasiempre.live","domain":"salsasiempre.live","tld":"live"},"ip":{"addr":"104.21.16.74","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"f0bef95e258d5b84f82c5d4e29252176","sha1":"eac5936c555c039bc38816d0916e13c0b364d797","sha256":"a6c3ffec54ef5f2ca033b1fcdf84e1feac93437a3d8d4439667e9276ca2a9836","sha512":"f47a30db240fb698187a60be7b12013b3c2db946f3cee1857a7ad39cd1ad2dcde6957f49a9785a474c2f122f5719cb67314b6b559ea65ea35f7620f699609c9f","ssdeep":"","tlshash":"24419f829b5c80e8882636699d395349a67ecc7303090972bc4d2c5dec54d27c3d75be","size":2267,"data":"","first_seen":"2023-03-07T01:10:07Z","last_seen":"2026-09-23T21:03:35.199332Z","times_seen":74737,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"salsasiempre.live/","fqdn":"salsasiempre.live","domain":"salsasiempre.live","tld":"live"},"ip":{"addr":"104.21.16.74","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"8c4a568da03f26ee707263cedfea5578","sha1":"39d39f0ee63d0cf6459b58021ed6f18dcd88abd8","sha256":"9024c7002044e6ad22cdc86b0083013fe617f876ea540caee883c87b3cdfb31c","sha512":"e1dcd71bb6f4d314a967c06d86f6018169f27f00239196dda71ecf05713f0d25bdeaef1bc73920b7926a42adf960aefbfc5a4eafd426ede62d259b276da11d4d","ssdeep":"","tlshash":"16f0a71a08d5144d047e3914e29b6728f8e677b3820b00f4839d1ee93ca519391de1c5","size":440,"data":"","first_seen":"2026-06-27T19:44:24.037321Z","last_seen":"2026-09-23T20:10:01.465018Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"salsasiempre.live/","fqdn":"salsasiempre.live","domain":"salsasiempre.live","tld":"live"},"ip":{"addr":"104.21.16.74","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"5a67476cdd6dfae7afe41ad08ef0dc5e","sha1":"8a829750cddbf13323079bc6d08a1100cb9a176f","sha256":"75983dae7fb3754430bd4322cadb22760d112a6d14ac8c34fec9936a358fa6b4","sha512":"c1e9748b801ddb274c17ef9215fe896f54e328db465794e01cf79d03361a945700ab4954d12eca8d4a0aeb53887730c083ea6c96e60dbbab4c6285474bf88b58","ssdeep":"","tlshash":"02e002aa19a8099e413c780deb9a3250f4d762e6829914a99f0c09de2970543d1fc4a1","size":325,"data":"","first_seen":"2023-03-07T01:02:56Z","last_seen":"2026-09-23T20:11:46.319045Z","times_seen":7703,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"salsasiempre.live/","fqdn":"salsasiempre.live","domain":"salsasiempre.live","tld":"live"},"ip":{"addr":"104.21.16.74","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"24655bbe6f0df60c75c94bb614ea3d24","sha1":"751125a208cd3747c4d0848ad081c3a18562605a","sha256":"1b75c4142af5b7d79f9a6975d2719f17d03e490a4cf8293276c3d492a47cda0c","sha512":"c609092f6fef08caba1605ecd31b442c198e75d32c580ba6600e9446cfcf7c2be7c48257587d560746f21657c8fe784d2a203ef1a8765a5ee1812624b2f18217","ssdeep":"","tlshash":"95f00e2d0d46403f61bd11646628c4e4f8a46f3412076054d9ad40aff090a4d8fa39fc","size":489,"data":"","first_seen":"2023-03-07T14:55:06Z","last_seen":"2026-09-23T20:11:46.320436Z","times_seen":4454,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"salsasiempre.live/","fqdn":"salsasiempre.live","domain":"salsasiempre.live","tld":"live"},"ip":{"addr":"104.21.16.74","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"7ea8631ceba27cb1ca6a692005881195","sha1":"1f2c560972013826fc0ad2ed779c4d1c7f603915","sha256":"12348055bd6b70493c00f34fedecc163d5df0410f4cc3eaeefe44752195e23e4","sha512":"bffc4a771a491316e3cf5177bc201ec0a1b5fa9998e9c388361ba6451054b39585ab786922d8dbb21d99a2d8b5a28022df26cb1477083295d2d369eaeb7ddeea","ssdeep":"","tlshash":"8cc02b3f6da82f0740c01fdc6268fb330f50fb86de710008774a24484020852ce594af","size":139,"data":"","first_seen":"2026-09-23T19:56:10.57927Z","last_seen":"2026-09-23T20:10:01.486312Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"salsasiempre.live/","fqdn":"salsasiempre.live","domain":"salsasiempre.live","tld":"live"},"ip":{"addr":"104.21.16.74","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"fd80bf8ae38a769c0d5c466606036851","sha1":"8978bd335ae8cff3e40c07628dd39c5560201707","sha256":"899d89673a80fe812900fb5eb895e8452af1eac17878e08a2ea254d1ca906b7c","sha512":"33fb6bbe4c1215aa283828b329303454b2796df570c765e6b2bc4ee4ad6cf1d25e65f507f3962fb6c29d4c0b2a012863ace6ea40554d06645526ed1c602b64ec","ssdeep":"","tlshash":"f1d0a7d83b29031403db451d0116422d854e4fb781029d3faeb8786a09bfd846152e21","size":231,"data":"","first_seen":"2025-12-05T21:42:41.22185Z","last_seen":"2026-09-23T20:11:14.640424Z","times_seen":4424,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"salsasiempre.live/","fqdn":"salsasiempre.live","domain":"salsasiempre.live","tld":"live"},"ip":{"addr":"104.21.16.74","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"42c74ca8f08a38ffbdac7b45a55e642b","sha1":"a34114160679a7cf745c0d1c8853e9a0ead05a9b","sha256":"bb0891aab5c169192257d5477e6ea181af2844a35e0736978e338619a837341e","sha512":"f08728fd97f866b5100b66efec9f86912d6c9331e98adca961062568bdceeba2bdc1c25f5f1087ceaedc6f75c2dc7a7ae8ec02285c563a99622c691f13e93fd7","ssdeep":"","tlshash":"d4f05ca07b1d2bb0e9057991e88b4f0423ce861c6e6221907bc8c02f32b00beb68008a","size":478,"data":"","first_seen":"2026-09-23T19:56:10.586428Z","last_seen":"2026-09-23T20:10:01.493125Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"salsasiempre.live/","fqdn":"salsasiempre.live","domain":"salsasiempre.live","tld":"live"},"ip":{"addr":"104.21.16.74","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"c709c8475749d18ce21e62089f0c32af","sha1":"7515f9d5b106630bd3427075d3789dcc9c136169","sha256":"dfc624dfdedfda5c2d406cac55b8e96be92b691a315ed4dcb73810796c5f46ce","sha512":"ade11cc9ebd34494e29edd30190c3506c6bc2c1301cd54f80f217472fef015642cc0650e2b52c82c24cf08f257422e2b78a6d9e81469e29f2c3f4125f97af885","ssdeep":"","tlshash":"27d0a96cedb00cd20aea0c00a42e0a01ba11846bc35a1e2db1ae421c0ff80d7a400a08","size":217,"data":"","first_seen":"2026-09-23T19:56:10.587856Z","last_seen":"2026-09-23T20:10:01.495054Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"salsasiempre.live/","fqdn":"salsasiempre.live","domain":"salsasiempre.live","tld":"live"},"ip":{"addr":"104.21.16.74","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"c2f0448d778706b0b7a3026b78d6b034","sha1":"8d83e10ddd2e49349d494c80e52c33507304b282","sha256":"d409716dde4d8f0e5f42b92dcfa4f7891a1b8a0a43cf0e8a2020a937ff00773f","sha512":"6256f3c106d7dfc362d9cd5f0d5b82531e9ef3285c1839afd3a5aaa83842ebe9570177f561fffc9f107c44de51570948452400611268c9fb94ae459b9d35b3f3","ssdeep":"","tlshash":"7fb0121524a40a60eac345500c23c92c40042353c161104db2cc803406e1800e370006","size":92,"data":"","first_seen":"2026-09-23T19:56:10.589306Z","last_seen":"2026-09-23T20:10:01.496155Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"salsasiempre.live/","fqdn":"salsasiempre.live","domain":"salsasiempre.live","tld":"live"},"ip":{"addr":"104.21.16.74","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"e5f2e4a6cf64e10280719d54416fcbb3","sha1":"3e85b4cddbc43a557d02486235967f20a1d3512e","sha256":"8125f74d8df46d584a98beb31d8eb730ba5a93fd15c4d7732ec9a8b0e831a68f","sha512":"c9267aa6a59c6a136c4b7f0b6e0e78bcc3d721a6eb312ee55772443df25a092b8510247e4b6bda9900b4072369d97bbb1a5640eea60fc380686a9f6326db85c6","ssdeep":"","tlshash":"3d410fc45aac24cf857b650ba21e62d8e47de8b29d1e10f6f26c2d5a3824117c39e1e9","size":2292,"data":"","first_seen":"2026-09-23T19:56:10.59061Z","last_seen":"2026-09-23T20:10:01.497015Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"salsasiempre.live/","fqdn":"salsasiempre.live","domain":"salsasiempre.live","tld":"live"},"ip":{"addr":"104.21.16.74","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"d8c8affb8db50a19f545450d49ec3509","sha1":"c3b2998aff813284ea71334180093b95f53d5d5d","sha256":"7cf5deb705b1e36e7c8cbdb9e8eacdb50432bc5551e3f068b647992ad7e4e784","sha512":"7681625edc88cc11309ca2f2d7eebcceb3d30a4dc12047db0f7101815238ca8df1e05fe9f24738df4a4e0f50a6070ae502774cd0bdc8984ffb24059474ae198d","ssdeep":"","tlshash":"dc31abd3326bc41abcbb2413237f132a342079276f406562aee9c86644b9e83355769d","size":1816,"data":"","first_seen":"2023-03-07T01:07:48Z","last_seen":"2026-09-23T22:03:40.958173Z","times_seen":40285,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"salsasiempre.live/","fqdn":"salsasiempre.live","domain":"salsasiempre.live","tld":"live"},"ip":{"addr":"104.21.16.74","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":true,"md5":"4d618d82624633b726b8ca4675077d05","sha1":"58ca15a1121ea56a04cbe212d8b3d56a6946b55d","sha256":"b270e52c99f4ae819e88b3a0b91a97249ffe17749236ee478439cdf1f4d0d4ca","sha512":"2f3a4fb7a6c60636f023e47060041d8f09bfed3cf731510ed3c16000b0743c172143c8d0582909482c8cd665a740ed10379caa96746850a81670666e78803d89","ssdeep":"","tlshash":"072112b232409e379d5205cfd57ca9c87731371aa982e138a848dcd5265cde13cf65ee","size":1289,"data":"","first_seen":"2023-05-21T12:43:10Z","last_seen":"2026-09-23T20:10:01.500177Z","times_seen":2274,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"salsasiempre.live/gtmkit-container-js-after","fqdn":"salsasiempre.live","domain":"salsasiempre.live","tld":"live"},"ip":{"addr":"104.21.16.74","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"21e3caaa498b4c8bc9bde36207665f70","sha1":"9582c03ed575788fcc3b918ec475a769a8d40a84","sha256":"d36148819f279e44ae0093743421478a6141e2620eabbdc03b90a21efd3b03d3","sha512":"8403521fefc9c0fda95abea2eee02806c2c25521a9d24933316e16b3e26e51942bf8d706dbb274ba3a5ef8c02f5a5afaa319358e837f86c60e8717ec73e8e97b","ssdeep":"","tlshash":"93f023c7f92019f670de0cfb33b0a416b1836004d4057c12edeec5241926d8744425cc","size":618,"data":"","first_seen":"2026-09-23T19:56:10.561734Z","last_seen":"2026-09-23T20:10:01.503034Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"salsasiempre.live/wp-content/themes/vibez/assets/js/modules/plugins/jquery.nicescroll.min.js?ver=7.1.2","fqdn":"salsasiempre.live","domain":"salsasiempre.live","tld":"live"},"ip":{"addr":"104.21.16.74","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"748e1e3e433b75ea475c47004204b7cd","sha1":"79c7d774e945bd93f5e0fe10a082c48aaf0cb75b","sha256":"e8e1490eed412063977fc0476fb398bf600a37a8d7e1f12f2a6ed6c77760fca8","sha512":"e808041021173170e1474d29b572679208fa7495a67e620a4871024acc3d7e57efe4e0e308bdb9ccaf44ff002d8587f7f25647cdd4d2959757ab03badef14bbe","ssdeep":"768:AlGj4MQ0pkUR1XMmQA/P/NHNOlZSBgTM38ifLCid+HA8FGOM:w/oTMm9/pNOlZSBh8ifAA8JM","tlshash":"8c5394ddba10305a44de53b8d28b464a602ae892774784f8702dccf47f25a75b2f6b7c","size":63834,"data":"","first_seen":"2023-03-08T11:48:44Z","last_seen":"2026-09-23T20:10:01.425499Z","times_seen":554,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"salsasiempre.live/wp-content/cache/min/1/wp-content/themes/vibez/assets/js/modules/plugins/jquery.easing.1.3.js?ver=1790191063","fqdn":"salsasiempre.live","domain":"salsasiempre.live","tld":"live"},"ip":{"addr":"104.21.16.74","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"3289d6f94a4bd1acdde31735ce7b54de","sha1":"71ce9692ef245c7e6ab529c146c95d2ef290b3fe","sha256":"da922096c724f17ea05b00a1b23c92b1881f28315f362b9db91b97f57a520de5","sha512":"2d0eda6a3eee10566a3a4d0ede6f9532eff0d960fc52a6596a6474550daf9841a334659878391d616e04ca9f5a889a1f3ba9459440c9d75e706a183c53409f22","ssdeep":"","tlshash":"af71668974f6b51d638133f010b6201b72adace5164d6804e4b49dda787f2bc8bbb87d","size":3590,"data":"","first_seen":"2023-03-08T16:17:35Z","last_seen":"2026-09-23T20:10:01.43517Z","times_seen":133,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"salsasiempre.live/wp-content/cache/min/1/wp-content/plugins/contact-form-7/modules/recaptcha/index.js?ver=1790191063","fqdn":"salsasiempre.live","domain":"salsasiempre.live","tld":"live"},"ip":{"addr":"104.21.16.74","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"ec0187677793456f98473f49d9e9b95f","sha1":"8c55e0f4a29865e871f3d54be8d480a0665891d9","sha256":"df0ec8330290d184b1084527076cb87d41b33ba706ff5ab579d761f0cb6a744b","sha512":"84b468de22634404405e52cda2844d626b4d47054739971d677f0e63fd683dcca100550419b945391236846df54b65fb43ee4d6e7f7692eb0d414584e2594108","ssdeep":"","tlshash":"9811e1305a3031740967ca6182eb53e1be31e461f0a3898159fc4e141f7ced598b3d86","size":934,"data":"","first_seen":"2023-03-07T12:57:48Z","last_seen":"2026-09-23T21:49:04.261019Z","times_seen":114942,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/recaptcha/releases/kemdRjWFxNjgsGdhRslyEPwU/recaptcha__en.js","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.67","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"3b3d07079c8c1c29eacc08f7459be74d","sha1":"e59d089e1dfa3c8f804efcf9e1511ae9b03fe526","sha256":"33247e39ab5e5e2b83c5dd99e9642c461c0d8c38d8aeb90917ce6c0514f5195b","sha512":"fc8cdd2e87ef744444f70ae3587299eb89e5bd076ebb8aff18d44cb69344feddf4d44b32110e96d8167d451085ad13cb70a75ace6d06961fefad3986c6faf071","ssdeep":"6144:EmXAYWWlqL5uNbmCLq0ACoxqV/puv+dMQ/C8oJbsqeJcr+i6MDzBb/5RmSGs6RKh:3XRBqrXQlbFotsqeJcr6WbPDvEAJJ6u","tlshash":"97052ad8741271a55332b9f2607b218923be9532c4cd1a6e71e4d8f02ef484a72b5fb7","size":848285,"data":"","first_seen":"2026-09-22T05:52:13.920048Z","last_seen":"2026-09-23T22:30:50.907273Z","times_seen":1002,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"salsasiempre.live/","fqdn":"salsasiempre.live","domain":"salsasiempre.live","tld":"live"},"ip":{"addr":"104.21.16.74","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"eventHandler","is_inline":false,"md5":"7c3c3ddeb80438dcbb3d081d2d00e152","sha1":"5a4016732ee72ec77b4f6ab17047bcea6d2ea34d","sha256":"321b4f657afbf8ba49518e6ab4cbad07ea967d0b4c68f71c7deed05ed09c1187","sha512":"b252f7dc795284fe8ce404711809130d8e16670a8e49b271f9a24b04a542a0fccb7a8c7238c12b37db35fe73a2fbf1cdb374468574db4e6d39975a17dca547a3","ssdeep":"","tlshash":"de6000f0003000000003c30000330cf300000c0f00ccc30cfc0000c000c00000000c03","size":16,"data":"","first_seen":"2023-04-10T15:57:29Z","last_seen":"2026-09-23T21:54:04.140413Z","times_seen":370054,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"salsasiempre.live/wp-includes/js/jquery/jquery.min.js?ver=3.7.1","fqdn":"salsasiempre.live","domain":"salsasiempre.live","tld":"live"},"ip":{"addr":"104.21.16.74","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"826eb77e86b02ab7724fe3d0141ff87c","sha1":"79cd3587d565afe290076a8d36c31c305a573d18","sha256":"cb6f2d32c49d1c2b25e9ffc9aaafa3f83075346c01bcd4ae6eb187392a4292cf","sha512":"fc79fdb76763025dc39fac045a215ff155ef2f492a0e9640079d6f089fa6218af2b3ab7c6eaf636827dee9294e6939a95ab24554e870c976679c25567ad6374c","ssdeep":"1536:0RUX9uDgwxcy2KVBNwchN6SLaHEk2BSrBESp+a/IEk4aAocVi8SMBQ47GKO:sHNwcv9VBQpLl88SMBQ47GKO","tlshash":"7483f8df77ca702247ab30b9006f550bf276199d684d4400f159d8e9bcb8a4a827bf7e","size":87553,"data":"","first_seen":"2023-11-03T09:26:43Z","last_seen":"2026-09-23T21:49:04.28989Z","times_seen":1067420,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"salsasiempre.live/wp-content/cache/min/1/wp-content/themes/vibez/assets/js/modules/plugins/jquery.prettyPhoto.js?ver=1790191063","fqdn":"salsasiempre.live","domain":"salsasiempre.live","tld":"live"},"ip":{"addr":"104.21.16.74","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"220903542ac6b40087b7acfdbb2a2fcc","sha1":"123756190fa293fa8a96c7a05c72b2388d8579a6","sha256":"3fc2950d69c7f8e894260a55e502d70252679c446ae1bbb3835e4a7de2a997ba","sha512":"2909dcdcd54dfee567c399ef5ce820822d1ed4e975e5be6de5687fb8f569d7d0692c9130085852e97bc9839405979a2a9f55e57795cfa5427008583bef1929db","ssdeep":"384:Nq8MTFam8FfdR+zubzguhP3l+CBb3+8rBEpiijfIj7lU+glBgLJbp40a19ATrhrG:q8Fgull+Cp3+gxq+2qyr1CfhrO2ouXc","tlshash":"3d92b628552068efc393a362f407572d51328e37da16d870b278ec752af4ac66536fcd","size":21224,"data":"","first_seen":"2023-03-26T00:12:37Z","last_seen":"2026-09-23T20:10:01.412877Z","times_seen":176,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"salsasiempre.live/wp-content/themes/vibez/assets/js/modules/plugins/jquery.multiscroll.min.js?ver=7.1.2","fqdn":"salsasiempre.live","domain":"salsasiempre.live","tld":"live"},"ip":{"addr":"104.21.16.74","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"106b8fdf9f3eb206fbcbf290742d8186","sha1":"6b7a3a22f1b1d05493c80f59c9d2e526eaa25a43","sha256":"a0e4f1ca992ca8e63367bfdd41d985a7b20511d71b67945e69adbdc99191d164","sha512":"06bcae387ceb1eb85ec4772782c13ec21db39352bcbc200854216f0440746ad71073a68070f86e0add2492433d1f8333ab0bedd9998f30e1604c047f0f08310a","ssdeep":"192:IxreT5l1aHG+XTyVs35feelDJyzk1D/ja0T/aqm3Png0iEhLhaQJYnntgqBcHXj:IxrolpGdty0D+0TrgecHXj","tlshash":"4852b80eb400322541ef32f3f5ab17415635e5234aa1a0d4f4b6aee21fb897b9347a4f","size":13427,"data":"","first_seen":"2023-03-07T01:40:51Z","last_seen":"2026-09-23T20:10:01.435982Z","times_seen":3421,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"salsasiempre.live/gtmkit-js-before","fqdn":"salsasiempre.live","domain":"salsasiempre.live","tld":"live"},"ip":{"addr":"104.21.16.74","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"bc75b3c803a37e902a1a2176165c073d","sha1":"0a9bf5e4a071065a988b308ed1f53f708f8aa1c1","sha256":"84d32f2667601934a0f7c2a162dfd0a494f0e727b78af0726ac734c6d86e3791","sha512":"12379ff840c4eca5b28153b704a4c61e5476f57c1b4a7ec3992c6cc3cb34813dd2bb148a33264838644ebd87c12dc79da06f50e4a06a1b7063e58aaf37c32aa3","ssdeep":"","tlshash":"ee21f3c4ea8a513500e9223d9fab339b34ba65f6e0a44451de981d2d70a9c1bc204fec","size":1433,"data":"","first_seen":"2026-09-23T19:56:10.603788Z","last_seen":"2026-09-23T20:10:01.506576Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"salsasiempre.live/gtmkit-engagement-events-js-extra","fqdn":"salsasiempre.live","domain":"salsasiempre.live","tld":"live"},"ip":{"addr":"104.21.16.74","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"ee1d6ed897e8ebc7fb537fa25f70dac5","sha1":"f3224bb5a56f26d898e72c1ad593630a98d899f4","sha256":"8b95259b1b566ab6be75fa54d1010cae435c29a7ea5ada7ad5699eef119b6e92","sha512":"645a40bf93c7a69508b76e1e6553a81d5fec073f98cf9b482c0d2cf33087452cb8836af8b91dbf7ba4a0576380e71501749363b2f6510f9a51ba26146a4679cd","ssdeep":"","tlshash":"99e09b54f5992f1c51df57392b6d813750f878c4f5521c04d4987cb435b1c033514457","size":334,"data":"","first_seen":"2026-09-23T19:56:10.601063Z","last_seen":"2026-09-23T20:10:01.507527Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/recaptcha/api.js?render=6LfhUZMtAAAAAOCWVhW340havzfC_SwnC4yozkYJ\u0026ver=3.0","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.251.154.119","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"54c1bb0b7af8856d67ed0cc1ca975177","sha1":"1dd7b467771da1599470a4771610f2c593567b4d","sha256":"44f729019969bd7cec0b715f831dc94b3a0b93d4f567c2490bc9e2a158646717","sha512":"87b5a171b4481c9f3061609b05d0ac66e8a506ea6ad145da1851c74bc541cc2d81558bc5971f4d573dd4018d775c2c4c6b340b658d5c65eb8fc2dfa4ba519861","ssdeep":"","tlshash":"cc1102b31914a0350b7209e5e1ffcb75e552701cf15845e8d925dad41eaaccbce05545","size":1010,"data":"","first_seen":"2026-09-23T19:56:10.482084Z","last_seen":"2026-09-23T20:10:01.37619Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"salsasiempre.live/wpcf7-recaptcha-js-before","fqdn":"salsasiempre.live","domain":"salsasiempre.live","tld":"live"},"ip":{"addr":"104.21.16.74","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"e61d578e31ceb946c0aaeb05518eff1a","sha1":"fc5b4aa607eefb807f3169f03ff2bc3818ddbc5e","sha256":"65dcefd8a420a0073b67ee72393b9788605643a8d53776a6c0addd3275525065","sha512":"73c2c09079cc2d2420f451acac5f4b108f19f570d6a791eea7ca7b20a1ff7a5fddcf61fc3a166c69f38f4bc27f08ac9a485c429ce90f6c2ee1f0ae541e32bd0f","ssdeep":"","tlshash":"0e41a96ceeb00cd20aea0c30a82e0a01ba11846bc35a1e2db1ae821c0ff80d7a404a08","size":2118,"data":"","first_seen":"2026-09-23T19:56:10.594344Z","last_seen":"2026-09-23T20:10:01.508447Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"salsasiempre.live/wp-content/cache/min/1/wp-content/themes/vibez/assets/js/modules/plugins/jquery.plugin.js?ver=1790191063","fqdn":"salsasiempre.live","domain":"salsasiempre.live","tld":"live"},"ip":{"addr":"104.21.16.74","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"f559e7685160a2324f58d06dbba05c4f","sha1":"20d31e9e32037db891244cfb2c76538c1725f3e5","sha256":"5a81d447a263ba284351d0a6d3d75604f30b1595e087de6f352e11e6aa5692d4","sha512":"58f558f652bab04f9243bfeaa3734fe2d3023304d3861e21cd93daacbe4c5f1660d4770b0b468e0e81d0c31f9ea944db81089d7884e9f2d1847a6f321dd41910","ssdeep":"","tlshash":"d47145893687228d85d318e204bf3a09653de745c1944099bdb847f93b7a929f023f3c","size":3796,"data":"","first_seen":"2023-03-08T16:17:35Z","last_seen":"2026-09-23T20:10:01.433976Z","times_seen":57,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"salsasiempre.live/wp-content/plugins/wp-rocket/assets/js/lazyload/17.8.3/lazyload.min.js","fqdn":"salsasiempre.live","domain":"salsasiempre.live","tld":"live"},"ip":{"addr":"104.21.16.74","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"fb15a10a641a318f91e7e912e4f9c184","sha1":"bd41f67233facb96976ed7b8e7207d52c03d340e","sha256":"f40767552e5e94b2d5f9a65d7f640cfa7d225298023dbd682095e040809a3d1a","sha512":"49570d36e5b1ae3c3a4965f7d054258ff676326bee0d9399aa990926e9a762f699de1d09078debadc43b363ae51d740ba33f2e8c64bb223a73d3c62872ebb3d2","ssdeep":"192:pDvu5/2Pbq1Ztbat1oeeC9X8UnZ/HuuwJgbClRL/YeFG/uW1evaO3Ve:pTw/4QOx+R8puVY","tlshash":"b60233487946746b3973f0f6218f02ca353a24426ced6854a6e1f8e82d7858d1463f7d","size":8892,"data":"","first_seen":"2023-03-07T01:19:39Z","last_seen":"2026-09-23T22:03:40.897052Z","times_seen":76783,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"salsasiempre.live/vibez-elated-script-modules-js-extra","fqdn":"salsasiempre.live","domain":"salsasiempre.live","tld":"live"},"ip":{"addr":"104.21.16.74","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"f3228800e8b1d6aaa801f267623089c6","sha1":"2ef4f53e53277a7fd5b2b63b19c09a667f1b7c28","sha256":"8c47dc8b1bfb890388e9e48c9811a7ef87f78d7953fb61c97ac4acf465fab3a4","sha512":"9956d9a4ea834f2a6ba71d461538b28eb5a78227a62ea53b372f522e0d14606f9033a173bfd68b481f5c3f03af2a62bb08d8f242424a53993ccf6b754cc6fba7","ssdeep":"","tlshash":"4b4152a0fb1d2b70e9057971e88b4f0523ce461ced6161507bc8c01f32f00beb68008a","size":2324,"data":"","first_seen":"2026-09-23T19:56:10.60262Z","last_seen":"2026-09-23T20:10:01.509665Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"salsasiempre.live/wp-content/themes/vibez/assets/js/modules/plugins/jquery.fullPage.min.js?ver=7.1.2","fqdn":"salsasiempre.live","domain":"salsasiempre.live","tld":"live"},"ip":{"addr":"104.21.16.74","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"d3572ce38d7b3060eb523a169e5f0fbc","sha1":"994860cd33222eb1d22be29137a002d726431d49","sha256":"b7822d0aabc757a94e4bcfb28eea2cf12724f37af64b2a690d55ed4b76ddb16d","sha512":"89dd24057e39db3f3a77151cac0129960d8264076cfe44a4d01aa2fd2609c006f3d6c72ac7ac9caac2ab5633b698d30e5650d03194fc69be8a01356d46cb3f01","ssdeep":"768:0zr7rnp3JuAsD3B3zz3zbJYEI60+xxueSrZFoHrfOQZ:0v7rnpZzsDB3zzY4ceSrZF0fOQZ","tlshash":"f0d2d599741434a653ef117680af150ba232de378a058150f416fdf87ef9a7c1387eae","size":29751,"data":"","first_seen":"2023-03-08T11:50:30Z","last_seen":"2026-09-23T20:10:01.346219Z","times_seen":182,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"salsasiempre.live/wp-content/plugins/revslider/public/assets/js/rbtools.min.js?ver=6.5.18","fqdn":"salsasiempre.live","domain":"salsasiempre.live","tld":"live"},"ip":{"addr":"104.21.16.74","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"fb0dc63ed31433d3e16526f9e415d57e","sha1":"3d4029b9f66e3f3c086eba04a02c140660a94acb","sha256":"559f367b8631134334b4870bed568b019af144c801b574a252e337d4e837a05a","sha512":"4ac5f5ad6fffb12bb24061529af19507896ac0ab9ed93fd69a6b674e64ef6fdf4a63f4d5fbb625c5d1eebef88c419f3d71b0faedbbafb7058a624baaca71f04e","ssdeep":"1536:xrex7yX+Iz6ZKQpn8qwuQTBfvk6RtmSkgHJpZ7t0Zif/8m/xwYE/uVEmgX6wvBpL:lz6twBfvk4t55CifEm/Y+E1XXBNJqu","tlshash":"cbc34cdd7251b432129626a5452f0a0ff23b9d19740b452cf368e4c87d389a990fffba","size":128668,"data":"","first_seen":"2023-03-07T01:07:22Z","last_seen":"2026-09-23T20:10:01.395925Z","times_seen":4006,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"salsasiempre.live/wp-content/plugins/revslider/public/assets/js/rs6.min.js?ver=6.5.24","fqdn":"salsasiempre.live","domain":"salsasiempre.live","tld":"live"},"ip":{"addr":"104.21.16.74","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"dbe49ccea4cb977e99af1fc13b5df0c2","sha1":"7cd5bc888582bf9c3b4c32190963aec3faf76eb4","sha256":"20260a2b327f69ddfd34a15f57c728f790778989af847470220c5a5f0b929e27","sha512":"7d896a08a760bc4cc6c5bc1f25d897adf3eb81343a05084d1171c72d15333b84f69bccba1fb92a7780de0ac8cf1bb4790ea48ec852919f36d4f644e82e5cce7c","ssdeep":"6144:Fca0nB0pLeH4NgCXH2Zz/jGWcLaTXQLPkBFuTCVBc4m3bUARnvg:OhBZH4NaGWwLPkBFuTuBB+UI4","tlshash":"30843ce4a530387900fb4397d06e45147275e96aa7078490b2bbe2695c5ca8e02ffffd","size":390034,"data":"","first_seen":"2023-03-07T01:33:09Z","last_seen":"2026-09-23T20:10:01.355609Z","times_seen":1571,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"salsasiempre.live/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.4.1","fqdn":"salsasiempre.live","domain":"salsasiempre.live","tld":"live"},"ip":{"addr":"104.21.16.74","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"9ffeb32e2d9efbf8f70caabded242267","sha1":"3ad0c10e501ac2a9bfa18f9cd7e700219b378738","sha256":"5274f11e6fb32ae0cf2dfb9f8043272865c397a7c4223b4cfa7d50ea52fbde89","sha512":"8d6be545508a1c38278b8ad780c3758ae48a25e4e12eee443375aa56031d9b356f8c90f22d4f251140fa3f65603af40523165e33cae2e2d62fc78ec106e3d731","ssdeep":"192:5rprDN+sag6ifKIUpQI99P1tLm9kdgyq1+J3aCJQ+h4MPLORq:5rprxaefKI0LP19m4q1WW+h4Mjp","tlshash":"9952c8adb56679724eb721b8f03bd24f71b205de560d8940d19cc4f6282dc6e812bf78","size":13577,"data":"","first_seen":"2023-05-09T19:21:05Z","last_seen":"2026-09-23T21:50:30.24031Z","times_seen":975582,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"salsasiempre.live/gtmkit-datalayer-js-before","fqdn":"salsasiempre.live","domain":"salsasiempre.live","tld":"live"},"ip":{"addr":"104.21.16.74","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"e5977e2ea5a52ffca7452ce70223b769","sha1":"4d9be177bef7b114326727980b6125879890469a","sha256":"3515c7c142f7f4787babf58006fc12006d5fb8d49cfa431f815e98acb35008a1","sha512":"9264168f667bd4d4b5ac517ef0994f3283707d2a8b9e23ee615fd5a505bc508ecd0f17398df154ee8698cd4f45d5dccd15d9413b7abe3a4ccb31aa78ce98f8ff","ssdeep":"","tlshash":"03e08ce0fb671e2003e717b35fcbb1022882b204f08168a068953c1cb0e9e82b4c8e52","size":372,"data":"","first_seen":"2026-09-23T19:56:10.605487Z","last_seen":"2026-09-23T20:10:01.510484Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"salsasiempre.live/wp-content/plugins/timetable/js/jquery.qtip.min.js?ver=7.1.2","fqdn":"salsasiempre.live","domain":"salsasiempre.live","tld":"live"},"ip":{"addr":"104.21.16.74","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"e1933cf43209c6c5f1523056d0c376fa","sha1":"1828d6b7f97548e43662c62ffd283e3bf8e2dd89","sha256":"6be3d1ab735bc8adc6d3c0688a8f57ebec85887a53488adb13bbb366faa60da7","sha512":"07125115d4ca57ce5f845530fa894faf407e504ce4f054cbc5107b740761a10ed25e6c0c1028f52380654a665f7a849fcb439503cc452d30f239bbb736fd45a1","ssdeep":"768:zttYN++3XWur42gMUt/Tnrr/ACFErmDFgHecwQSUiEfco5MafXUiO/SGobO6ZZq1:z4N+qXWuE2gMUt/Tn//JFErmDFgHRwQy","tlshash":"7613189ab2a335139193a2b0516b0207a037d858b2484d3c7578dafe2e7de5432b7f7d","size":44303,"data":"","first_seen":"2023-03-07T01:06:47Z","last_seen":"2026-09-23T21:03:35.058595Z","times_seen":2873,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"salsasiempre.live/wp-content/cache/min/1/wp-content/plugins/timetable/js/jquery.carouFredSel-6.2.1-packed.js?ver=1790191063","fqdn":"salsasiempre.live","domain":"salsasiempre.live","tld":"live"},"ip":{"addr":"104.21.16.74","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"88af35a72cccb0112ec0be97beb99eab","sha1":"e521a5328f336b60d2db24b0eed74669a2851d57","sha256":"d7266520e5e9600e49deeaa8a07766a9860b1fa522c0959fca68e3d08783b5db","sha512":"171496ef0e2a6d494361ea2582d0b9ebe469c0b0cfdd064877fc8d3395b8f22dcd7e52c0b7b7d875de779c1c4e28e65ca8ed95755c85838981804546750e672e","ssdeep":"768:HXeG8AJ1zIKAso9UpXOspvsd5P9zSpBFH2UPm2:HuG80pAso9UpJpvsJoFHLPD","tlshash":"26f2f8aa3841439f01d5d2ec55cd108e3fe3246ed9f19265bdc0c947cb66aff88e264a","size":35720,"data":"","first_seen":"2023-03-10T20:08:15Z","last_seen":"2026-09-23T20:10:01.345222Z","times_seen":40,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"salsasiempre.live/wp-content/themes/vibez/assets/js/modules/plugins/jquery.countdown.min.js?ver=7.1.2","fqdn":"salsasiempre.live","domain":"salsasiempre.live","tld":"live"},"ip":{"addr":"104.21.16.74","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"21fd34fca546436fb42189648b8ec6ea","sha1":"709477c553e398cc6238b7cca1d18ca8f32704d4","sha256":"88ca875d14c480e1478cacb3edbd3962433fd21a4775666b387988738038a63a","sha512":"efb374e6f2ca8a77b019d9a3f388eaaccb145a740f12a8ec7f933677e6dd22a6fd199a2c3f10d48eab70caec63f8e3b7577f35ceb37f867975f921c9bd732e91","ssdeep":"192:FDuI0btowaZYMFCXg0EQBig9DFYuk6Kvdi9iyHkKSegQHzadYZlqF9No0C4hLkOw:ZcBfZQaBJ9D8m1HKpQTlZlq1SrU8ZecJ","tlshash":"0652984551705742aea310bb413b620b347d8727a944a93c7b2f86cf6f385db933faa4","size":13605,"data":"","first_seen":"2023-03-07T12:04:10Z","last_seen":"2026-09-23T20:10:01.409951Z","times_seen":1826,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtm.js?id=GTM-KJRN5VPN","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.178.104","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"783927c1d9b8d8f907ee981f6ae0c306","sha1":"68f293c9af39a59e64fdfcbecbabb552807c70af","sha256":"92d78ee1758301366c4e068079ad2beae087ad1754158860db5d5d7caba526b7","sha512":"371bb9e69566c4b6d57b8c688a0f780eaa6662571b3fc10e100d6172ca10bce30087dac9b90e537cb0750bdf9c0c838b71d06bb8227964da26ccf59c56119113","ssdeep":"6144:z71HUwElw7RHndAcUabxE+B3advLh14UB5m:hYwSLhO","tlshash":"d07408ccb7d6742283a3b574503f018bb27a79a2b84cc898f286e9d42d7465a4177f7c","size":352551,"data":"","first_seen":"2026-09-23T20:10:01.377259Z","last_seen":"2026-09-23T20:10:01.377259Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"salsasiempre.live/timetable_main-js-extra","fqdn":"salsasiempre.live","domain":"salsasiempre.live","tld":"live"},"ip":{"addr":"104.21.16.74","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"466cd2006baabf2eab67e5be03cb206c","sha1":"065b3c38c3634d565960c78bfa75bf314fb0ecc8","sha256":"18c100f42cca43338342ac0e023a682c22bbdbffcca102d597c4874c8bb8200a","sha512":"2fb85f4ff3dd542611a901f7f8a727ed48fc356be839507f7e7fc898f837afc64f5a7defa2597e204d85e7aeffef0c8a12b7279efbd1db33fda13c86d408c79d","ssdeep":"","tlshash":"33418c3ae9a82e0780805ef86668fa330b90ba86dab14008664a644840608528a594ae","size":1945,"data":"","first_seen":"2026-09-23T19:56:10.593007Z","last_seen":"2026-09-23T20:10:01.511323Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"salsasiempre.live/mediaelement-js-extra","fqdn":"salsasiempre.live","domain":"salsasiempre.live","tld":"live"},"ip":{"addr":"104.21.16.74","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"47ff377d4b1f9b9e77ea6e50a27dff0d","sha1":"309ec614cc0e0af8ba3b2452e75cfa7196278d1a","sha256":"07ddf484342958913270450776978e93faf61995a57761ec39cfae4cf5fc2337","sha512":"a40a7b9e5521a9ab35998c02caa4aec76b8d9137ec787c8a37b9eb915fe04d5146316cc97e37263806041e5fc2401009a2ff6fb20fd2cbcbaeeb59f52632fa5f","ssdeep":"","tlshash":"e441a7d8fb29031403db893d051a422d854e4fb7c1029d3faebc786a09bfd846152e21","size":2050,"data":"","first_seen":"2026-04-01T08:17:50.395641Z","last_seen":"2026-09-23T20:10:01.512338Z","times_seen":6,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"salsasiempre.live/wp-content/cache/min/1/wp-content/themes/vibez/assets/js/modules/plugins/jquery.appear.js?ver=1790191063","fqdn":"salsasiempre.live","domain":"salsasiempre.live","tld":"live"},"ip":{"addr":"104.21.16.74","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"93eb6558373ef7d629786ef0d98789ca","sha1":"c2ead7e6aa6e39beb15049ae785afcff77267b19","sha256":"193bd1cccf14d6b9bda8ae584fb75c571f6bc43f1581425f71687e7a6a260254","sha512":"a26d3e12cf4a84fe45fbec513ff9c0a0823d79751322f8cf4158d2a89f2d198ed1f6556de1a3a5cf37f05f5d394a90115a2575240be668d5c4117b5ee8d8bacc","ssdeep":"","tlshash":"6931ef6b35db3e9446fb303f762f72155221c53b4251e4629afadd7c38b2d817813a44","size":1524,"data":"","first_seen":"2023-03-08T16:17:35Z","last_seen":"2026-09-23T20:10:01.409252Z","times_seen":233,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"salsasiempre.live/wp-content/cache/min/1/wp-content/themes/vibez/assets/js/modules/plugins/jquery.waitforimages.js?ver=1790191063","fqdn":"salsasiempre.live","domain":"salsasiempre.live","tld":"live"},"ip":{"addr":"104.21.16.74","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"3defedef15d476c11353cf6e81f12767","sha1":"33849780516c7d910adfcb6dfe45e0d5c70ff230","sha256":"1589926acdc3d1f8cae135eb54fcf34d9e1c4952a5deeb279e422ccbf32f0fe9","sha512":"f1df61b59ba14364549f28ade868183dfd4a346ed042b236a19146cd4cc113da35d8bcbfaf80339273523b0fa328a539383cd487e992b1f1a8f9ee8cf8117df0","ssdeep":"","tlshash":"ef41a498b9b4b1c316737c52b03b570ba07898387418ca34a33bf5e428b8f6b2051f89","size":1890,"data":"","first_seen":"2023-03-08T16:17:35Z","last_seen":"2026-09-23T20:10:01.372377Z","times_seen":28,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/recaptcha/api2/anchor?ar=1\u0026k=6LfhUZMtAAAAAOCWVhW340havzfC_SwnC4yozkYJ\u0026co=aHR0cHM6Ly9zYWxzYXNpZW1wcmUubGl2ZTo0NDM.\u0026hl=en\u0026v=kemdRjWFxNjgsGdhRslyEPwU\u0026size=invisible\u0026anchor-ms=20000\u0026execute-ms=30000\u0026cb=tc16s4wvlgr6","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.251.154.119","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"8d8463112156f537e64bc0cc795dc133","sha1":"3b21c915761369b640a86538e29ba402098ba12a","sha256":"b270cb1a41b1cf6fda1dd535019b54da06652f28e7ea11037dcc4393c60647d7","sha512":"f9906d38d98f0ed74ab190030b94625a420425ffdd4cb75114c533d13eff6873af4def45fc015dd2be63d6c62793164fe93616183f43e3dd8ab0d65308c53ee9","ssdeep":"","tlshash":"c3d0a7eb1441cdf7cda09dab9743d1a678efd0b780a981f405e04c522ce1c9110245ac","size":252,"data":"","first_seen":"2026-05-25T21:58:32.98547Z","last_seen":"2026-09-23T21:39:14.637676Z","times_seen":3014,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":[{"level":"log","text":"JQMIGRATE: Migrate is installed, version 3.4.1","filename":"https://salsasiempre.live/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.4.1","line_number":2,"column_number":981}]},"http":[{"url":{"schema":"https","addr":"www.google.com/recaptcha/api2/anchor?ar=1\u0026k=6LfhUZMtAAAAAOCWVhW340havzfC_SwnC4yozkYJ\u0026co=aHR0cHM6Ly9zYWxzYXNpZW1wcmUubGl2ZTo0NDM.\u0026hl=en\u0026v=kemdRjWFxNjgsGdhRslyEPwU\u0026size=invisible\u0026anchor-ms=20000\u0026execute-ms=30000\u0026cb=tc16s4wvlgr6","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.251.154.119","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"subdocument","requested_by":"https://salsasiempre.live/","date":"2026-09-23T20:08:45.931Z","timestamp":1790194125931,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Fri, 04 Sep 2026 08:04:41 GMT","end":"Fri, 27 Nov 2026 08:04:40 GMT"},"fingerprint":{"sha1":"95:51:3A:74:B2:D6:48:05:37:67:B4:98:88:41:81:F2:F0:9E:EC:4E","sha256":"27:A0:25:F5:B2:3F:C8:25:B7:BF:72:41:6C:48:6A:75:BC:C8:0D:C3:44:11:27:96:CE:FB:61:3D:59:34:73:06"}}},"request":{"raw":"GET /recaptcha/api2/anchor?ar=1\u0026k=6LfhUZMtAAAAAOCWVhW340havzfC_SwnC4yozkYJ\u0026co=aHR0cHM6Ly9zYWxzYXNpZW1wcmUubGl2ZTo0NDM.\u0026hl=en\u0026v=kemdRjWFxNjgsGdhRslyEPwU\u0026size=invisible\u0026anchor-ms=20000\u0026execute-ms=30000\u0026cb=tc16s4wvlgr6 HTTP/1.1\r\nHost: www.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://salsasiempre.live/\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: iframe\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/html; charset=utf-8\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-embedder-policy: require-corp\r\nreport-to: {\"group\":\"recaptcha\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/recaptcha\"}]}, {\"group\":\"coop_38fac9d5b82543fc4729580d18ff2d3d\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/38fac9d5b82543fc4729580d18ff2d3d\"}]}\r\ncache-control: no-cache, no-store, max-age=0, must-revalidate\r\npragma: no-cache\r\nexpires: Mon, 01 Jan 1990 00:00:00 GMT\r\ndate: Wed, 23 Sep 2026 20:08:45 GMT\r\ncontent-security-policy: script-src 'nonce-YBGSZu0S8t82PEXs9vP_zw' 'unsafe-inline' 'strict-dynamic' https: http: 'unsafe-eval';object-src 'none';base-uri 'self';report-uri https://csp.withgoogle.com/csp/recaptcha/1\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"coop_38fac9d5b82543fc4729580d18ff2d3d\"\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":16860,"size_decoded":3174,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (1572)","md5":"93d144d7c99657b3c4d296140182416c","sha1":"9f52d8c43a2531ce71a81c7766c2a16e38d5f6a0","sha256":"42d9b55f26bcd50feaf37a1567227a160c9cdf2f09dadd0e35d81cd953dd275f","sha512":"782ff8020f816c5428eab705d6205e068d8ec2f4ea7e36b6da562dc389af60d525693bdb549810ca53e80e59235e8620b6175dde6c3b33758803860d2745935a","ssdeep":"384:OjfZjYjnjbjyEj/qY4WjgjAjzjfCjPjwjkjy7j/qY49jXj3j/jfmjDjUjAjyXj/m:OFkD/OE/hkc3+bsIO7/KbzbK3YcOX/+B","tlshash":"e2720e50041744009b835ce223ce7f30fe4e92517246d0b1abfd9b6beedbda6926939d","first_seen":"2026-09-23T20:10:01.325106Z","last_seen":"2026-09-23T20:10:01.325106Z","times_seen":1,"resource_available":true,"data":null}},"time_used":25,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":25,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"salsasiempre.live/wp-content/uploads/2026/07/Dominika-Szczesniak-Rosiak-2026-07-19T094028.909.png","fqdn":"salsasiempre.live","domain":"salsasiempre.live","tld":"live"},"ip":{"addr":"104.21.16.74","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://salsasiempre.live/","date":"2026-09-23T20:09:07.251Z","timestamp":1790194147251,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"salsasiempre.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 27 Jul 2026 18:03:30 GMT","end":"Sun, 25 Oct 2026 19:02:05 GMT"},"fingerprint":{"sha1":"60:D3:B1:F9:B7:A7:CE:68:D7:19:24:D9:4B:8B:85:6D:0B:8D:99:D3","sha256":"22:3E:3E:6D:A5:95:E5:BE:22:F5:ED:E8:1B:A9:51:E8:91:69:F5:C0:67:41:84:4C:39:B5:5A:DA:B2:85:35:90"}}},"request":{"raw":"GET /wp-content/uploads/2026/07/Dominika-Szczesniak-Rosiak-2026-07-19T094028.909.png HTTP/1.1\r\nHost: salsasiempre.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://salsasiempre.live/\r\nCookie: _ga_BT1HXCHHE7=GS2.1.s1790194126$o1$g0$t1790194126$j60$l0$h0; _ga=GA1.1.1712374491.1790194126\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Wed, 23 Sep 2026 20:09:07 GMT\r\ncontent-type: image/webp\r\npriority: u=5,i\r\ncf-ray: a3fc2f6c5bdb0b49-OSL\r\ncf-cache-status: BYPASS\r\naccept-ranges: bytes\r\ncache-control: private\r\nexpires: Thu, 23 Sep 2027 20:09:07 GMT\r\nlast-modified: Sun, 19 Jul 2026 07:40:37 GMT\r\nserver: cloudflare\r\nvary: User-Agent,Accept-Encoding,Accept\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-litespeed-cache-control: no-cache\r\nx-turbo-charged-by: LiteSpeed\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xldBKwkUW9HDijCCOC2wIqh2sPv1xOBtufiYeL9Cm8m2B%2Fvo2%2FcvA%2Bgo7KfjOx0Uh%2FtqaFtCmVy3zfdIANlV%2BF4qaWaItybXn92Exipdie%2FVlxr2PMg%2BY7%2F4KMNcRPZ201ob6g%3D%3D\"}]}\r\ncontent-length: 107462\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":107462,"size_decoded":108291,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 1920x1080, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"c188d3dd7bc4d23c11dc7fe14590b029","sha1":"29342c785dafd58e86651758858e22c27d715aec","sha256":"4ebd411d668d1c2349b1c62cd6b09fb5c2e49281ed5d5c64085cb30ad88f89b1","sha512":"f6d4132340414d9251c9f2eded618f6ea90108e6a8721b9bf3f2386abb52b31c5a6ce2a4a32af092a2a1c8961000105817ac70cebb0194bdcb678a2dc4179426","ssdeep":"3072:AdMMo8idgYsJMVYHN7C/EaI5RCh+WfReP:uz+mVqVqNm/EShDpeP","tlshash":"92b3125cada01556e74d30b87a33ac9dd7f01b3828d16b2a4a35f62c0633be4bb1175e","first_seen":"2026-09-23T19:56:10.432169Z","last_seen":"2026-09-23T20:10:01.327491Z","times_seen":2,"resource_available":false,"data":null}},"time_used":283,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":211,"receive":72,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"salsasiempre.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-23","alert":"Phishing Block","trigger":"salsasiempre.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"salsasiempre.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"salsasiempre.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"salsasiempre.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"salsasiempre.live/wp-content/plugins/timetable/js/jquery.ba-bbq.min.js?ver=7.1.2","fqdn":"salsasiempre.live","domain":"salsasiempre.live","tld":"live"},"ip":{"addr":"104.21.16.74","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://salsasiempre.live/","date":"2026-09-23T20:08:45.124Z","timestamp":1790194125124,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"salsasiempre.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 27 Jul 2026 18:03:30 GMT","end":"Sun, 25 Oct 2026 19:02:05 GMT"},"fingerprint":{"sha1":"60:D3:B1:F9:B7:A7:CE:68:D7:19:24:D9:4B:8B:85:6D:0B:8D:99:D3","sha256":"22:3E:3E:6D:A5:95:E5:BE:22:F5:ED:E8:1B:A9:51:E8:91:69:F5:C0:67:41:84:4C:39:B5:5A:DA:B2:85:35:90"}}},"request":{"raw":"GET /wp-content/plugins/timetable/js/jquery.ba-bbq.min.js?ver=7.1.2 HTTP/1.1\r\nHost: salsasiempre.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://salsasiempre.live/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Wed, 23 Sep 2026 20:08:45 GMT\r\ncontent-encoding: zstd\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\ncache-control: public, max-age=86400\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=F%2By3sU%2B9SLuRQdgK911s2efZK7BiOny%2BlDrTuMIt223YefbIeMC95TIyeKsR4RsDaUSm%2BiWgJGlqZm%2BydMHiwpePt4tXkFlcAFzi6qrCEUVd729E5QrtQK5UC1V5QxzyjxIHPg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: a3fc2ee209b40b49-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":4673,"size_decoded":3131,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (2697)","md5":"757fbeddff8f67f1f5f4d1211a54f860","sha1":"9f1b4278154d94b7871ee831536585b6d8f7c9f0","sha256":"785cf299c805ec5e17abfb1c1bb2f379b9076d7a6aa87000d5e22aa069896e7c","sha512":"f54638b33b5dfd12f587f52bbce82562fef774ec95967acea5af76aeb3244945a389ffccd2af5f20f29aa8b367ea4d468811901844e7e5312967aa20199a421f","ssdeep":"96:RXmBHiimWSdb3W+jjKPiF6bhRMBFUgAZPmzpHVBPd:RXmIBWgjKG6bh66Pm1HVBl","tlshash":"bba1d7dd72d230660bf2b032969f911eb43ea5a1388d9c0de0a5a4c03d705be5157f4c","first_seen":"2023-03-07T01:32:35Z","last_seen":"2026-09-23T21:03:35.167601Z","times_seen":825,"resource_available":true,"data":null}},"time_used":41,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":41,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"salsasiempre.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"salsasiempre.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-23","alert":"Phishing Block","trigger":"salsasiempre.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"salsasiempre.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"salsasiempre.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/oswald/v57/TK3iWkUHHAIjg752Fz8Ghe4.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://salsasiempre.live/","date":"2026-09-23T20:08:45.409Z","timestamp":1790194125409,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Thu, 10 Sep 2026 19:23:28 GMT","end":"Thu, 03 Dec 2026 19:23:27 GMT"},"fingerprint":{"sha1":"99:42:CC:AA:D1:36:35:7D:FF:39:32:44:00:41:07:B9:D3:00:EE:31","sha256":"48:CD:EE:73:11:77:6B:F0:EE:10:C6:1D:DF:58:7C:4B:88:0D:95:F3:9C:64:15:44:E2:93:5B:17:4F:6A:8E:6E"}}},"request":{"raw":"GET /s/oswald/v57/TK3iWkUHHAIjg752Fz8Ghe4.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://salsasiempre.live\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 23952\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 21 Sep 2026 16:03:33 GMT\r\nexpires: Tue, 21 Sep 2027 16:03:33 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Wed, 10 Sep 2025 16:49:06 GMT\r\ncontent-type: font/woff2\r\nage: 187512\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":23952,"size_decoded":24765,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 23952, version 1.0","md5":"192877db9c1654497c91e1143ae01aac","sha1":"7036927c267bd1a6553913593470211f51504592","sha256":"7989ccc7770f5aeffa67e088bcd3b294d42fae2f8b0eca3c3c51b953d1f735cc","sha512":"332dff4e49295eff8dddb3929813304f08c7ee88bd5ee2dd79f20304610eb629566bd749e18a1f1ea6bec5c2f7041d25f29fb2196fe04a9a3ac8c7683f819dcd","ssdeep":"384:fuXl7DxSQRVT9HW7jp4FAQqnZfyJFovo2HDf3vnDHrHmv7RjWA2OKOWkL4okHy8m:WDthiDZfycw2HDXn3Hs7AAAOWk0FY","tlshash":"20b2e1d7113a4b2fc5d7397214f6c3ee37d9216548ff022b182ee5d8a43219eaa13e61","first_seen":"2025-09-13T08:33:13.515993Z","last_seen":"2026-09-23T20:10:01.329315Z","times_seen":1404,"resource_available":false,"data":null}},"time_used":125,"timings":{"blocked":35,"dns":0,"connect":0,"send":0,"wait":59,"receive":31,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/lato/v25/S6u9w4BMUTPHh6UVSwiPGQ.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://salsasiempre.live/","date":"2026-09-23T20:08:45.414Z","timestamp":1790194125414,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Thu, 10 Sep 2026 19:23:28 GMT","end":"Thu, 03 Dec 2026 19:23:27 GMT"},"fingerprint":{"sha1":"99:42:CC:AA:D1:36:35:7D:FF:39:32:44:00:41:07:B9:D3:00:EE:31","sha256":"48:CD:EE:73:11:77:6B:F0:EE:10:C6:1D:DF:58:7C:4B:88:0D:95:F3:9C:64:15:44:E2:93:5B:17:4F:6A:8E:6E"}}},"request":{"raw":"GET /s/lato/v25/S6u9w4BMUTPHh6UVSwiPGQ.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://salsasiempre.live\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 23040\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 21 Sep 2026 15:52:30 GMT\r\nexpires: Tue, 21 Sep 2027 15:52:30 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Mon, 15 Sep 2025 17:11:31 GMT\r\ncontent-type: font/woff2\r\nage: 188175\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":23040,"size_decoded":23853,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 23040, version 1.0","md5":"de69cf9e514df447d1b0bb16f49d2457","sha1":"2ac78601179c3a63ba3f3f3081556b12ddcaf655","sha256":"c447dd7677b419db7b21dbdfc6277c7816a913ffda76fd2e52702df538de0e49","sha512":"4aebb7e54d88827d4a02808f04901c0d09b756c518202b056a6c0f664948f5585221d16967f546e064187c6545acef15d59b68d0a7a59897bd899d3e9dda37b1","ssdeep":"384:adpABC4a0HkBpR1HWtGu06B6lsoAKiwY0HcLKglV6Z+DVb35PJZDdiZeJ1vqYg:0AHa0Ezf2tZn6lsoABwTKK46ZQb3V7wD","tlshash":"fca2e1c05cc1e2d4ae02daf7fda5a4eab4e2f01123a8f65f8f114b75d505993640fe01","first_seen":"2023-04-05T13:28:45Z","last_seen":"2026-09-23T21:54:34.531004Z","times_seen":193314,"resource_available":false,"data":null}},"time_used":122,"timings":{"blocked":33,"dns":0,"connect":0,"send":0,"wait":32,"receive":57,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"salsasiempre.live/wp-content/themes/vibez/assets/css/linear-icons/fonts/Linearicons-Free.woff2?w118d","fqdn":"salsasiempre.live","domain":"salsasiempre.live","tld":"live"},"ip":{"addr":"104.21.16.74","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://salsasiempre.live/","date":"2026-09-23T20:08:45.513Z","timestamp":1790194125513,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"salsasiempre.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 27 Jul 2026 18:03:30 GMT","end":"Sun, 25 Oct 2026 19:02:05 GMT"},"fingerprint":{"sha1":"60:D3:B1:F9:B7:A7:CE:68:D7:19:24:D9:4B:8B:85:6D:0B:8D:99:D3","sha256":"22:3E:3E:6D:A5:95:E5:BE:22:F5:ED:E8:1B:A9:51:E8:91:69:F5:C0:67:41:84:4C:39:B5:5A:DA:B2:85:35:90"}}},"request":{"raw":"GET /wp-content/themes/vibez/assets/css/linear-icons/fonts/Linearicons-Free.woff2?w118d HTTP/1.1\r\nHost: salsasiempre.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://salsasiempre.live/wp-content/cache/min/1/wp-content/themes/vibez/assets/css/linear-icons/style.css?ver=1790191063\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Wed, 23 Sep 2026 20:08:45 GMT\r\ncontent-type: font/woff2\r\npriority: u=3,i=?0\r\ncf-ray: a3fc2ee479f50b49-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 826\r\ncache-control: public, max-age=10368000\r\nexpires: Thu, 21 Jan 2027 19:54:58 GMT\r\nlast-modified: Sun, 22 Oct 2023 22:00:00 GMT\r\nserver: cloudflare\r\nvary: User-Agent,Accept-Encoding\r\nx-turbo-charged-by: LiteSpeed\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=qizqCRjQ0anT2xvrnglmBRkrMW84ATRQR5Je93idHxQYznxarft4K5zKi534Q%2FddKG4gTVJ%2BLZxkPrv596PjBl32t0lEFJozDZRvbqqFW9%2BJinZ5LEYHnknp%2BeG8Gl2%2Bi3LcQQ%3D%3D\"}]}\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 21780\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":21780,"size_decoded":22585,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 21780, version 1.0","md5":"03e91f122aa5fd425abbe23c85546eb0","sha1":"c87a3db06c5db4e75e639382f174eafa439aeb27","sha256":"296945e5922e764eef17b1b4a3ee3e60dc202b3c7f074150b62158915bf74e33","sha512":"d551461a9767cda29ecd44e381596dc6948f0123c5decbeb1dc9b1a20a7adf7911d67ff8457891442779e0cc3b1fe66456ffc7034e624cd8b2d7a020583c66c3","ssdeep":"384:rDy+B9/t2wjYl2hTxw7o6TEs9MpsAMFddYKDYpe/bjgq:rD9jsI4qs9MpsAUN","tlshash":"8ca2e1a285cd0cd388dbbe467493c42da3ba1500c306cfa9f54a5e6914b9ea7df0cc5a","first_seen":"2023-04-07T12:41:33Z","last_seen":"2026-09-23T20:10:01.331196Z","times_seen":11370,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"salsasiempre.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"salsasiempre.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"salsasiempre.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"salsasiempre.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-23","alert":"Phishing Block","trigger":"salsasiempre.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/recaptcha/releases/kemdRjWFxNjgsGdhRslyEPwU/recaptcha__en.js","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.67","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.google.com/recaptcha/api2/anchor?ar=1\u0026k=6LfhUZMtAAAAAOCWVhW340havzfC_SwnC4yozkYJ\u0026co=aHR0cHM6Ly9zYWxzYXNpZW1wcmUubGl2ZTo0NDM.\u0026hl=en\u0026v=kemdRjWFxNjgsGdhRslyEPwU\u0026size=invisible\u0026anchor-ms=20000\u0026execute-ms=30000\u0026cb=tc16s4wvlgr6","date":"2026-09-23T20:08:46.062Z","timestamp":1790194126062,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Thu, 10 Sep 2026 19:23:28 GMT","end":"Thu, 03 Dec 2026 19:23:27 GMT"},"fingerprint":{"sha1":"99:42:CC:AA:D1:36:35:7D:FF:39:32:44:00:41:07:B9:D3:00:EE:31","sha256":"48:CD:EE:73:11:77:6B:F0:EE:10:C6:1D:DF:58:7C:4B:88:0D:95:F3:9C:64:15:44:E2:93:5B:17:4F:6A:8E:6E"}}},"request":{"raw":"GET /recaptcha/releases/kemdRjWFxNjgsGdhRslyEPwU/recaptcha__en.js HTTP/1.1\r\nHost: www.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.google.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha-scs\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups; report-to=\"recaptcha-scs\"\r\nreport-to: {\"group\":\"recaptcha-scs\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/recaptcha-scs\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 354446\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 21 Sep 2026 18:50:36 GMT\r\nexpires: Tue, 21 Sep 2027 18:50:36 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Mon, 21 Sep 2026 04:02:44 GMT\r\ncontent-type: text/javascript\r\nvary: Accept-Encoding\r\nage: 177490\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":848285,"size_decoded":355333,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (656)","md5":"3b3d07079c8c1c29eacc08f7459be74d","sha1":"e59d089e1dfa3c8f804efcf9e1511ae9b03fe526","sha256":"33247e39ab5e5e2b83c5dd99e9642c461c0d8c38d8aeb90917ce6c0514f5195b","sha512":"fc8cdd2e87ef744444f70ae3587299eb89e5bd076ebb8aff18d44cb69344feddf4d44b32110e96d8167d451085ad13cb70a75ace6d06961fefad3986c6faf071","ssdeep":"6144:EmXAYWWlqL5uNbmCLq0ACoxqV/puv+dMQ/C8oJbsqeJcr+i6MDzBb/5RmSGs6RKh:3XRBqrXQlbFotsqeJcr6WbPDvEAJJ6u","tlshash":"97052ad8741271a55332b9f2607b218923be9532c4cd1a6e71e4d8f02ef484a72b5fb7","first_seen":"2026-09-22T05:52:13.920048Z","last_seen":"2026-09-23T22:30:50.907273Z","times_seen":1002,"resource_available":true,"data":null}},"time_used":70,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":16,"receive":54,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"salsasiempre.live/wp-content/cache/min/1/wp-content/plugins/timetable/style/superfish.css?ver=1790191063","fqdn":"salsasiempre.live","domain":"salsasiempre.live","tld":"live"},"ip":{"addr":"104.21.16.74","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://salsasiempre.live/","date":"2026-09-23T20:08:45.087Z","timestamp":1790194125087,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"salsasiempre.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 27 Jul 2026 18:03:30 GMT","end":"Sun, 25 Oct 2026 19:02:05 GMT"},"fingerprint":{"sha1":"60:D3:B1:F9:B7:A7:CE:68:D7:19:24:D9:4B:8B:85:6D:0B:8D:99:D3","sha256":"22:3E:3E:6D:A5:95:E5:BE:22:F5:ED:E8:1B:A9:51:E8:91:69:F5:C0:67:41:84:4C:39:B5:5A:DA:B2:85:35:90"}}},"request":{"raw":"GET /wp-content/cache/min/1/wp-content/plugins/timetable/style/superfish.css?ver=1790191063 HTTP/1.1\r\nHost: salsasiempre.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://salsasiempre.live/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=GXZaiU1zP7rCsiTyIy2%2F1RIXDHtqL4WpNDSHQs%2BLe9VroQE%2FWQcVCAb3aWaj2ldkDHuLxESUNwHGvbeLdooQuM3taxNfsPJmrxEf2bDlzro2xkV1mDlB7FpzOioGb7H%2FJSTynA%3D%3D\"}]}\r\ndate: Wed, 23 Sep 2026 20:08:45 GMT\r\ncontent-type: text/css; charset=UTF-8\r\npriority: u=2,i=?0\r\ncf-ray: a3fc2ee1c9960b49-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 829\r\ncache-control: public, max-age=31536000\r\ncontent-encoding: br\r\nexpires: Thu, 23 Sep 2027 19:54:55 GMT\r\nlast-modified: Wed, 23 Sep 2026 19:17:43 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding,User-Agent,Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":1347,"size_decoded":1177,"mime_type":"text/css; charset=UTF-8","magic":"ASCII text, with very long lines (1347), with no line terminators","md5":"e356c725ed1f69e4f7773a30f792930b","sha1":"488bb14970eadba2494dee62a4fa86b7705c910a","sha256":"af64f8b801bf311b91907c99ca3747d4958cebe8ab4369574a157e1a30ca9b83","sha512":"5c1f75e53ec3e9b0b8b550ceabfd3cbb3e1f41efe3045d1f3dee8829099f63930ffc312c0e6969d74912edf4c99edb8d144e33620d30c340806e79c132fee579","ssdeep":"","tlshash":"90215542f3eaf47d6da5d339f43045ef033956949baa363537a291b89f0642802e7c84","first_seen":"2025-07-03T03:02:39.114295Z","last_seen":"2026-09-23T20:10:01.334785Z","times_seen":36,"resource_available":true,"data":null}},"time_used":80,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":80,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"salsasiempre.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"salsasiempre.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"salsasiempre.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-23","alert":"Phishing Block","trigger":"salsasiempre.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"salsasiempre.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"salsasiempre.live/wp-content/cache/min/1/wp-content/themes/vibez/assets/css/elegant-icons/style.min.css?ver=1790191063","fqdn":"salsasiempre.live","domain":"salsasiempre.live","tld":"live"},"ip":{"addr":"104.21.16.74","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://salsasiempre.live/","date":"2026-09-23T20:08:45.103Z","timestamp":1790194125103,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"salsasiempre.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 27 Jul 2026 18:03:30 GMT","end":"Sun, 25 Oct 2026 19:02:05 GMT"},"fingerprint":{"sha1":"60:D3:B1:F9:B7:A7:CE:68:D7:19:24:D9:4B:8B:85:6D:0B:8D:99:D3","sha256":"22:3E:3E:6D:A5:95:E5:BE:22:F5:ED:E8:1B:A9:51:E8:91:69:F5:C0:67:41:84:4C:39:B5:5A:DA:B2:85:35:90"}}},"request":{"raw":"GET /wp-content/cache/min/1/wp-content/themes/vibez/assets/css/elegant-icons/style.min.css?ver=1790191063 HTTP/1.1\r\nHost: salsasiempre.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://salsasiempre.live/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=r9iVe3hoilfz0Xd93teCoTrQmyr2upiCff0bGS%2FYKbetfjbtYzIdDaHb4QCa8IRFLTr4Bd%2F8Ef474cawkLgaTVpKKc8GK66uLhdtMZhV9wG3nLqPqLCBUZ5Cg7cCUS2SDo0QgA%3D%3D\"}]}\r\ndate: Wed, 23 Sep 2026 20:08:45 GMT\r\ncontent-type: text/css; charset=UTF-8\r\npriority: u=2,i=?0\r\ncf-ray: a3fc2ee1e9a10b49-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 829\r\ncache-control: public, max-age=31536000\r\ncontent-encoding: br\r\nexpires: Thu, 23 Sep 2027 19:54:55 GMT\r\nlast-modified: Wed, 23 Sep 2026 19:17:43 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding,User-Agent,Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":22097,"size_decoded":4955,"mime_type":"text/css; charset=UTF-8","magic":"ASCII text, with very long lines (22097), with no line terminators","md5":"308fea543cf5a26199a038bcce49d0ba","sha1":"c45e45605e8ab213bf19ce20908a430103812d2d","sha256":"833ea19126dfef658950e6d8cac22889b5fef464de887d7a0266481ebf2be50b","sha512":"2d25eb0f3a15880f4af8694fbf21eac9c0a4c9faaad9fede7a64bf6c80871ff2335032f3b0e3e830127408c099ccea751f879865f652e2530988696a72cf22ef","ssdeep":"384:5qEyGZhJzoqrOLEsvCXRMzzXi3WW3Mc6FGt1qzZ7hPfWLFMzlGuFFtchHFngh0YQ:EqrOLHzzXi3H3b6FGt1qzZ7hPfWLFMz8","tlshash":"6ca27de1da5c79cab721c802c315a378dc9af2349ef11c17f05b848c2bf5356a6d6a6c","first_seen":"2026-09-23T19:56:10.510065Z","last_seen":"2026-09-23T20:10:01.335736Z","times_seen":2,"resource_available":true,"data":null}},"time_used":52,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":52,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"salsasiempre.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"salsasiempre.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"salsasiempre.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-23","alert":"Phishing Block","trigger":"salsasiempre.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"salsasiempre.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"salsasiempre.live/wp-content/plugins/revslider/public/assets/assets/dummy.png","fqdn":"salsasiempre.live","domain":"salsasiempre.live","tld":"live"},"ip":{"addr":"104.21.16.74","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://salsasiempre.live/","date":"2026-09-23T20:08:45.119Z","timestamp":1790194125119,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"salsasiempre.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 27 Jul 2026 18:03:30 GMT","end":"Sun, 25 Oct 2026 19:02:05 GMT"},"fingerprint":{"sha1":"60:D3:B1:F9:B7:A7:CE:68:D7:19:24:D9:4B:8B:85:6D:0B:8D:99:D3","sha256":"22:3E:3E:6D:A5:95:E5:BE:22:F5:ED:E8:1B:A9:51:E8:91:69:F5:C0:67:41:84:4C:39:B5:5A:DA:B2:85:35:90"}}},"request":{"raw":"GET /wp-content/plugins/revslider/public/assets/assets/dummy.png HTTP/1.1\r\nHost: salsasiempre.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://salsasiempre.live/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 403 \r\npriority: u=3,i\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Wed, 23 Sep 2026 20:08:45 GMT\r\ncontent-type: text/html\r\ncontent-encoding: zstd\r\ncf-ray: a3fc2ee1f9ae0b49-OSL\r\ncf-cache-status: BYPASS\r\ncache-control: private, no-cache, no-store, must-revalidate, max-age=0\r\nserver: cloudflare\r\nvary: User-Agent,Accept-Encoding\r\npragma: no-cache\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Hh0PZ1%2B8qbxjhuWwzlSFnkyaac1usX56sGD6YgCK23zJRUkFJ%2BwhE9tp%2B83ezzd%2BaCSKh9%2BOMDGCVDqvJoKmFXnH53Ley0mLiPJrMk0DQF8hx1FNi%2Bf5eQDx9JfiGwVIhUvqgA%3D%3D\"}]}\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"403","status_text":"Forbidden","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1242,"size_decoded":1489,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF, LF line terminators","md5":"c6a5abb575f4c14729b299058539998f","sha1":"90a8e0cfc7695944c9d28f3cf908ecbeb3367d0c","sha256":"7271dd5c11fb9a1052a5e91a09afbe7d148fd3388dc51c338df62a0a16f06739","sha512":"80fa0b7d01774d4a68e42ffd4b874c60a129684d86af168699905342e95af7ff7bc84559ea5a2619a600d75346b41664522b621b7bbe3fc7b5d14448568865af","ssdeep":"","tlshash":"7721843ac1c1061af0334264fb81f7983619825192970f603b9eb177facd0bb52a37c8","first_seen":"2024-02-20T08:09:53Z","last_seen":"2026-09-23T20:10:01.3399Z","times_seen":3121,"resource_available":true,"data":null}},"time_used":337,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":337,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"salsasiempre.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-23","alert":"Phishing Block","trigger":"salsasiempre.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"salsasiempre.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"salsasiempre.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"salsasiempre.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"salsasiempre.live/wp-content/plugins/timetable/js/jquery.qtip.min.js?ver=7.1.2","fqdn":"salsasiempre.live","domain":"salsasiempre.live","tld":"live"},"ip":{"addr":"104.21.16.74","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://salsasiempre.live/","date":"2026-09-23T20:08:45.123Z","timestamp":1790194125123,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"salsasiempre.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 27 Jul 2026 18:03:30 GMT","end":"Sun, 25 Oct 2026 19:02:05 GMT"},"fingerprint":{"sha1":"60:D3:B1:F9:B7:A7:CE:68:D7:19:24:D9:4B:8B:85:6D:0B:8D:99:D3","sha256":"22:3E:3E:6D:A5:95:E5:BE:22:F5:ED:E8:1B:A9:51:E8:91:69:F5:C0:67:41:84:4C:39:B5:5A:DA:B2:85:35:90"}}},"request":{"raw":"GET /wp-content/plugins/timetable/js/jquery.qtip.min.js?ver=7.1.2 HTTP/1.1\r\nHost: salsasiempre.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://salsasiempre.live/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Wed, 23 Sep 2026 20:08:45 GMT\r\ncontent-encoding: zstd\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\ncache-control: public, max-age=86400\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7xCLYVzZhM7Egb9LqYOZBXTnLvrAvMlfEsCFimODi%2Bmh3X80WSPXIiFVdAli5g%2FcHEApUTKC028tf1SSirYBoAvHvUfCDrZMe1ATChyKBF3kxVOqgxzKROHeeJ%2BSpCV8ZQfJGA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: a3fc2ee209b10b49-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":44303,"size_decoded":17773,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (32049)","md5":"e1933cf43209c6c5f1523056d0c376fa","sha1":"1828d6b7f97548e43662c62ffd283e3bf8e2dd89","sha256":"6be3d1ab735bc8adc6d3c0688a8f57ebec85887a53488adb13bbb366faa60da7","sha512":"07125115d4ca57ce5f845530fa894faf407e504ce4f054cbc5107b740761a10ed25e6c0c1028f52380654a665f7a849fcb439503cc452d30f239bbb736fd45a1","ssdeep":"768:zttYN++3XWur42gMUt/Tnrr/ACFErmDFgHecwQSUiEfco5MafXUiO/SGobO6ZZq1:z4N+qXWuE2gMUt/Tn//JFErmDFgHRwQy","tlshash":"7613189ab2a335139193a2b0516b0207a037d858b2484d3c7578dafe2e7de5432b7f7d","first_seen":"2023-03-07T01:06:47Z","last_seen":"2026-09-23T21:03:35.058595Z","times_seen":2873,"resource_available":true,"data":null}},"time_used":36,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":36,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"salsasiempre.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-23","alert":"Phishing Block","trigger":"salsasiempre.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"salsasiempre.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"salsasiempre.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"salsasiempre.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"salsasiempre.live/wp-content/cache/min/1/wp-content/plugins/timetable/js/jquery.carouFredSel-6.2.1-packed.js?ver=1790191063","fqdn":"salsasiempre.live","domain":"salsasiempre.live","tld":"live"},"ip":{"addr":"104.21.16.74","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://salsasiempre.live/","date":"2026-09-23T20:08:45.125Z","timestamp":1790194125125,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"salsasiempre.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 27 Jul 2026 18:03:30 GMT","end":"Sun, 25 Oct 2026 19:02:05 GMT"},"fingerprint":{"sha1":"60:D3:B1:F9:B7:A7:CE:68:D7:19:24:D9:4B:8B:85:6D:0B:8D:99:D3","sha256":"22:3E:3E:6D:A5:95:E5:BE:22:F5:ED:E8:1B:A9:51:E8:91:69:F5:C0:67:41:84:4C:39:B5:5A:DA:B2:85:35:90"}}},"request":{"raw":"GET /wp-content/cache/min/1/wp-content/plugins/timetable/js/jquery.carouFredSel-6.2.1-packed.js?ver=1790191063 HTTP/1.1\r\nHost: salsasiempre.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://salsasiempre.live/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Wed, 23 Sep 2026 20:08:45 GMT\r\ncontent-encoding: zstd\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\ncache-control: public, max-age=86400\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=hVmVN6nBOH190gcIo9yV8e8gW0CW6seag2zHVit%2BMjx%2BDUl93V0kTlTvietEDvd239B0FZJ2eLGIMS1yODmP3s%2FseRM1rlT2S4Izj6B6vjvCBGRa48%2FQ2aeTy9tqlUuV2DfWqA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: a3fc2ee209b50b49-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":35720,"size_decoded":15624,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (35720), with no line terminators","md5":"88af35a72cccb0112ec0be97beb99eab","sha1":"e521a5328f336b60d2db24b0eed74669a2851d57","sha256":"d7266520e5e9600e49deeaa8a07766a9860b1fa522c0959fca68e3d08783b5db","sha512":"171496ef0e2a6d494361ea2582d0b9ebe469c0b0cfdd064877fc8d3395b8f22dcd7e52c0b7b7d875de779c1c4e28e65ca8ed95755c85838981804546750e672e","ssdeep":"768:HXeG8AJ1zIKAso9UpXOspvsd5P9zSpBFH2UPm2:HuG80pAso9UpJpvsJoFHLPD","tlshash":"26f2f8aa3841439f01d5d2ec55cd108e3fe3246ed9f19265bdc0c947cb66aff88e264a","first_seen":"2023-03-10T20:08:15Z","last_seen":"2026-09-23T20:10:01.345222Z","times_seen":40,"resource_available":true,"data":null}},"time_used":43,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":43,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"salsasiempre.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"salsasiempre.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"salsasiempre.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-23","alert":"Phishing Block","trigger":"salsasiempre.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"salsasiempre.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"salsasiempre.live/wp-content/themes/vibez/assets/js/modules/plugins/jquery.fullPage.min.js?ver=7.1.2","fqdn":"salsasiempre.live","domain":"salsasiempre.live","tld":"live"},"ip":{"addr":"104.21.16.74","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://salsasiempre.live/","date":"2026-09-23T20:08:45.142Z","timestamp":1790194125142,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"salsasiempre.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 27 Jul 2026 18:03:30 GMT","end":"Sun, 25 Oct 2026 19:02:05 GMT"},"fingerprint":{"sha1":"60:D3:B1:F9:B7:A7:CE:68:D7:19:24:D9:4B:8B:85:6D:0B:8D:99:D3","sha256":"22:3E:3E:6D:A5:95:E5:BE:22:F5:ED:E8:1B:A9:51:E8:91:69:F5:C0:67:41:84:4C:39:B5:5A:DA:B2:85:35:90"}}},"request":{"raw":"GET /wp-content/themes/vibez/assets/js/modules/plugins/jquery.fullPage.min.js?ver=7.1.2 HTTP/1.1\r\nHost: salsasiempre.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://salsasiempre.live/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Wed, 23 Sep 2026 20:08:45 GMT\r\ncontent-encoding: zstd\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\ncache-control: public, max-age=86400\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=kzf3hnCJHe%2BNNxx8F53pl5F4z8ZCHmtS8897sbqqzpWCQ%2FnzdyWJ%2BP5PtBNfpVjTYHJhKup%2FD7BbWCffLkuS0nIO1LWhWBuAX%2B3Av3Wf3Sn64z8NHn5RTO%2BZoGPfYrKeXDTDWw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: a3fc2ee229c20b49-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":29751,"size_decoded":11267,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (29585)","md5":"d3572ce38d7b3060eb523a169e5f0fbc","sha1":"994860cd33222eb1d22be29137a002d726431d49","sha256":"b7822d0aabc757a94e4bcfb28eea2cf12724f37af64b2a690d55ed4b76ddb16d","sha512":"89dd24057e39db3f3a77151cac0129960d8264076cfe44a4d01aa2fd2609c006f3d6c72ac7ac9caac2ab5633b698d30e5650d03194fc69be8a01356d46cb3f01","ssdeep":"768:0zr7rnp3JuAsD3B3zz3zbJYEI60+xxueSrZFoHrfOQZ:0v7rnpZzsDB3zzY4ceSrZF0fOQZ","tlshash":"f0d2d599741434a653ef117680af150ba232de378a058150f416fdf87ef9a7c1387eae","first_seen":"2023-03-08T11:50:30Z","last_seen":"2026-09-23T20:10:01.346219Z","times_seen":182,"resource_available":true,"data":null}},"time_used":40,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":40,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"salsasiempre.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"salsasiempre.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-23","alert":"Phishing Block","trigger":"salsasiempre.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"salsasiempre.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"salsasiempre.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/lato/v25/S6u9w4BMUTPHh7USSwiPGQ.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://salsasiempre.live/","date":"2026-09-23T20:08:45.511Z","timestamp":1790194125511,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Thu, 10 Sep 2026 19:23:28 GMT","end":"Thu, 03 Dec 2026 19:23:27 GMT"},"fingerprint":{"sha1":"99:42:CC:AA:D1:36:35:7D:FF:39:32:44:00:41:07:B9:D3:00:EE:31","sha256":"48:CD:EE:73:11:77:6B:F0:EE:10:C6:1D:DF:58:7C:4B:88:0D:95:F3:9C:64:15:44:E2:93:5B:17:4F:6A:8E:6E"}}},"request":{"raw":"GET /s/lato/v25/S6u9w4BMUTPHh7USSwiPGQ.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://salsasiempre.live\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 23236\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 21 Sep 2026 15:52:30 GMT\r\nexpires: Tue, 21 Sep 2027 15:52:30 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Mon, 15 Sep 2025 17:09:18 GMT\r\ncontent-type: font/woff2\r\nage: 188175\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":23236,"size_decoded":24049,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 23236, version 1.0","md5":"716309aab2bca045f9627f63ad79d0bf","sha1":"38804233a29aaf975d557fe14e762c627bef76e0","sha256":"115f6a626ca115d4ad5581b59275327e0e860b30330a52b0f785561332dd2429","sha512":"adb0bc6cb9b230eda5dac7396a94a9a4dba9c8ba0b2eb73f5f21a20c3ca3d14651420bc6a17e67a71b5bba624f5a4e92d55cbbb898985dcca838184f6dfb2b15","ssdeep":"384:AHLaTYDpoR9l+9cJHxkGk3kbFpW88POLvFd9EDtwntxiFyLs86d975a2sfbAh:AHLKSSD49c0SFQ1wFnCajiws86dJ59WK","tlshash":"8aa2e10a0b99e00ff53655ba7504daa0b1c554b9c3ed69a2a12115c7b4eeecbf83138e","first_seen":"2023-04-05T15:38:53Z","last_seen":"2026-09-23T22:23:40.945306Z","times_seen":60710,"resource_available":false,"data":null}},"time_used":60,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":34,"receive":26,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"salsasiempre.live/wp-content/cache/min/1/wp-content/themes/vibez/assets/css/font-awesome/css/font-awesome.min.css?ver=1790191063","fqdn":"salsasiempre.live","domain":"salsasiempre.live","tld":"live"},"ip":{"addr":"104.21.16.74","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://salsasiempre.live/","date":"2026-09-23T20:08:45.101Z","timestamp":1790194125101,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"salsasiempre.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 27 Jul 2026 18:03:30 GMT","end":"Sun, 25 Oct 2026 19:02:05 GMT"},"fingerprint":{"sha1":"60:D3:B1:F9:B7:A7:CE:68:D7:19:24:D9:4B:8B:85:6D:0B:8D:99:D3","sha256":"22:3E:3E:6D:A5:95:E5:BE:22:F5:ED:E8:1B:A9:51:E8:91:69:F5:C0:67:41:84:4C:39:B5:5A:DA:B2:85:35:90"}}},"request":{"raw":"GET /wp-content/cache/min/1/wp-content/themes/vibez/assets/css/font-awesome/css/font-awesome.min.css?ver=1790191063 HTTP/1.1\r\nHost: salsasiempre.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://salsasiempre.live/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zAGy1pxaPSsipvLf8JNNvwX1QyRAsf00EEBdHc4eNFs9kIvpjKULJOXGNW%2BOzqTX%2FUWD6MCJc5z3gz8SwKJR2H6Dsv4ErBhfH5%2FgJY4lpZ%2Fr9UNnStTqUJ0Lxla1H%2F0nR4zvqw%3D%3D\"}]}\r\ndate: Wed, 23 Sep 2026 20:08:45 GMT\r\ncontent-type: text/css; charset=UTF-8\r\npriority: u=2,i=?0\r\ncf-ray: a3fc2ee1e99f0b49-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 829\r\ncache-control: public, max-age=31536000\r\ncontent-encoding: br\r\nexpires: Thu, 23 Sep 2027 19:54:55 GMT\r\nlast-modified: Wed, 23 Sep 2026 19:17:43 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding,User-Agent,Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":31381,"size_decoded":7537,"mime_type":"text/css; charset=UTF-8","magic":"ASCII text, with very long lines (31219)","md5":"b29eb638a5f3be19d06cca78f3a3c625","sha1":"83efc17519f6a12aaeeb7e3d257187c53c74a09b","sha256":"6f4ea21ec2f3533d76e869208214b3b9a089a46fccc1aad72d04ec631be83d37","sha512":"b0c022b4887861043d463433b13756c8570605df341fde3dc74662b73fb26a137f841024397e6ac2d7b1bd4975010d0702c21bf8a3004e3e6b18e6bb322469cc","ssdeep":"384:AQK5yWeTUKW+KlkJ5de2UYDyVfwYUas2l8yQ/8dwmaUX:A7lr+Klk3Yi+fwYUf2l8yQ/e9vX","tlshash":"92e252f8e50c01d66731c48bff81b36862b6fb3dd5854da9f01f291c29d226522c5bba","first_seen":"2026-09-23T19:56:10.471986Z","last_seen":"2026-09-23T20:10:01.348737Z","times_seen":2,"resource_available":true,"data":null}},"time_used":54,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":54,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"salsasiempre.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"salsasiempre.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"salsasiempre.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-23","alert":"Phishing Block","trigger":"salsasiempre.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"salsasiempre.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"salsasiempre.live/wp-includes/js/jquery/jquery.min.js?ver=3.7.1","fqdn":"salsasiempre.live","domain":"salsasiempre.live","tld":"live"},"ip":{"addr":"104.21.16.74","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://salsasiempre.live/","date":"2026-09-23T20:08:45.115Z","timestamp":1790194125115,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"salsasiempre.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 27 Jul 2026 18:03:30 GMT","end":"Sun, 25 Oct 2026 19:02:05 GMT"},"fingerprint":{"sha1":"60:D3:B1:F9:B7:A7:CE:68:D7:19:24:D9:4B:8B:85:6D:0B:8D:99:D3","sha256":"22:3E:3E:6D:A5:95:E5:BE:22:F5:ED:E8:1B:A9:51:E8:91:69:F5:C0:67:41:84:4C:39:B5:5A:DA:B2:85:35:90"}}},"request":{"raw":"GET /wp-includes/js/jquery/jquery.min.js?ver=3.7.1 HTTP/1.1\r\nHost: salsasiempre.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://salsasiempre.live/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Wed, 23 Sep 2026 20:08:45 GMT\r\ncontent-encoding: zstd\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\ncache-control: public, max-age=86400\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=QB2VYFoksZxCceVREXiQH56OxcAH2N%2Ff6vM3Y7TJC0TH7uFIf9P%2FlK7J%2BUMsubmXMyU7j7CDWnfKxs24s3bcX2Z9OjFWvBhkPtDTX3F5aX29Stv%2BeSnhACymq0xfWpWmysqhCw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\ncf-ray: a3fc2ee1f9aa0b49-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":87553,"size_decoded":32871,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65447)","md5":"826eb77e86b02ab7724fe3d0141ff87c","sha1":"79cd3587d565afe290076a8d36c31c305a573d18","sha256":"cb6f2d32c49d1c2b25e9ffc9aaafa3f83075346c01bcd4ae6eb187392a4292cf","sha512":"fc79fdb76763025dc39fac045a215ff155ef2f492a0e9640079d6f089fa6218af2b3ab7c6eaf636827dee9294e6939a95ab24554e870c976679c25567ad6374c","ssdeep":"1536:0RUX9uDgwxcy2KVBNwchN6SLaHEk2BSrBESp+a/IEk4aAocVi8SMBQ47GKO:sHNwcv9VBQpLl88SMBQ47GKO","tlshash":"7483f8df77ca702247ab30b9006f550bf276199d684d4400f159d8e9bcb8a4a827bf7e","first_seen":"2023-11-03T09:26:43Z","last_seen":"2026-09-23T21:49:04.28989Z","times_seen":1067420,"resource_available":true,"data":null}},"time_used":47,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":47,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"salsasiempre.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"salsasiempre.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-23","alert":"Phishing Block","trigger":"salsasiempre.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"salsasiempre.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"salsasiempre.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"salsasiempre.live/wp-content/themes/vibez/assets/js/modules/plugins/jquery.waypoints.min.js?ver=7.1.2","fqdn":"salsasiempre.live","domain":"salsasiempre.live","tld":"live"},"ip":{"addr":"104.21.16.74","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://salsasiempre.live/","date":"2026-09-23T20:08:45.134Z","timestamp":1790194125134,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"salsasiempre.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 27 Jul 2026 18:03:30 GMT","end":"Sun, 25 Oct 2026 19:02:05 GMT"},"fingerprint":{"sha1":"60:D3:B1:F9:B7:A7:CE:68:D7:19:24:D9:4B:8B:85:6D:0B:8D:99:D3","sha256":"22:3E:3E:6D:A5:95:E5:BE:22:F5:ED:E8:1B:A9:51:E8:91:69:F5:C0:67:41:84:4C:39:B5:5A:DA:B2:85:35:90"}}},"request":{"raw":"GET /wp-content/themes/vibez/assets/js/modules/plugins/jquery.waypoints.min.js?ver=7.1.2 HTTP/1.1\r\nHost: salsasiempre.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://salsasiempre.live/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Wed, 23 Sep 2026 20:08:45 GMT\r\ncontent-encoding: zstd\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\ncache-control: public, max-age=86400\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=EKlezg1Q%2B5Iia%2BbqiumQ39cRao9D%2FjeuPOCRBtxeg1whgwb5g9voYXin6VJjTcDUhIJmy9MzI8D03es6SQcT2aA0n7F7aUEt3giWqCDuEi%2B7PBcll6bvMbLflr62mPwnhR41rg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: a3fc2ee219b90b49-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9033,"size_decoded":3527,"mime_type":"application/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (8863)","md5":"1988b2bcaf7a3d5f33face7dabf19202","sha1":"f171e3cf3646fd6f2092312b8ae4b11f5cf13e84","sha256":"7d7a12639877d9be25bde5d92109d05881c4ac6956d32d250e54a21efcee5ff6","sha512":"f11a9f6a97515e61a3d97a730b9d158dda7945672320ee8284b8b4d4d1bbb44982e3430c479f61b3c40d356752aaf9945619999211ed59088e520df36d3ad5e0","ssdeep":"192:mCZzxsMCm1nJDl6hj8E3aPEGnvfiaaLkYluY4pLyUcDWZPeGz+nrFr:mC9oWJDlC8eaPZnvGLkYluYTUcEPeGzs","tlshash":"46126189350134221bdf50fad91f434ab337582ca80680bdb4c8d4ed28f152d676bfba","first_seen":"2023-03-07T01:18:42Z","last_seen":"2026-09-23T20:10:01.352076Z","times_seen":2467,"resource_available":true,"data":null}},"time_used":64,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":64,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"salsasiempre.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-23","alert":"Phishing Block","trigger":"salsasiempre.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"salsasiempre.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"salsasiempre.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"salsasiempre.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/recaptcha/releases/kemdRjWFxNjgsGdhRslyEPwU/styles__ltr.css","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.67","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.google.com/recaptcha/api2/anchor?ar=1\u0026k=6LfhUZMtAAAAAOCWVhW340havzfC_SwnC4yozkYJ\u0026co=aHR0cHM6Ly9zYWxzYXNpZW1wcmUubGl2ZTo0NDM.\u0026hl=en\u0026v=kemdRjWFxNjgsGdhRslyEPwU\u0026size=invisible\u0026anchor-ms=20000\u0026execute-ms=30000\u0026cb=tc16s4wvlgr6","date":"2026-09-23T20:08:46.059Z","timestamp":1790194126059,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Thu, 10 Sep 2026 19:23:28 GMT","end":"Thu, 03 Dec 2026 19:23:27 GMT"},"fingerprint":{"sha1":"99:42:CC:AA:D1:36:35:7D:FF:39:32:44:00:41:07:B9:D3:00:EE:31","sha256":"48:CD:EE:73:11:77:6B:F0:EE:10:C6:1D:DF:58:7C:4B:88:0D:95:F3:9C:64:15:44:E2:93:5B:17:4F:6A:8E:6E"}}},"request":{"raw":"GET /recaptcha/releases/kemdRjWFxNjgsGdhRslyEPwU/styles__ltr.css HTTP/1.1\r\nHost: www.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.google.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha-scs\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups; report-to=\"recaptcha-scs\"\r\nreport-to: {\"group\":\"recaptcha-scs\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/recaptcha-scs\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 35518\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 21 Sep 2026 17:31:23 GMT\r\nexpires: Tue, 21 Sep 2027 17:31:23 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Mon, 21 Sep 2026 04:02:44 GMT\r\ncontent-type: text/css\r\nvary: Accept-Encoding\r\nage: 182243\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":75464,"size_decoded":36365,"mime_type":"text/css","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"8d238bbb2bc7a7869927ef2503d16191","sha1":"912fd0a764df016c6b465a1f764a58856dc8e41a","sha256":"32bd2171bd3e9dce2bcd973d4b6e0492a64f2ad5b58fc9941f12a1973fb3c0ba","sha512":"0f576e605660ab3774a8da75b359d28228d5e117be771f4bd0e66b8bc2b5868a7381af5de6721fa1fe3f14a982f286b35e9654bc436d12cf992f4dde7ba8eec9","ssdeep":"768:8FUwZKuv7Ht5prr2yNU4FJFC7vCTaYyR0v+UJYLbzRWpebyBHM54Pmx1ugKSGdXS:yv1jNDJT4R0v+U+LXkHZzhXwWx7W1bx7","tlshash":"74736e7338403b26f8279b5161d6aafdf21cc523e5514bfaa9557a31c3cb1a7822370b","first_seen":"2026-09-22T05:52:13.875819Z","last_seen":"2026-09-23T22:30:50.871611Z","times_seen":852,"resource_available":true,"data":null}},"time_used":31,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":16,"receive":15,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"salsasiempre.live/wp-includes/js/mediaelement/wp-mediaelement.min.css?ver=7.1.2","fqdn":"salsasiempre.live","domain":"salsasiempre.live","tld":"live"},"ip":{"addr":"104.21.16.74","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://salsasiempre.live/","date":"2026-09-23T20:08:45.108Z","timestamp":1790194125108,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"salsasiempre.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 27 Jul 2026 18:03:30 GMT","end":"Sun, 25 Oct 2026 19:02:05 GMT"},"fingerprint":{"sha1":"60:D3:B1:F9:B7:A7:CE:68:D7:19:24:D9:4B:8B:85:6D:0B:8D:99:D3","sha256":"22:3E:3E:6D:A5:95:E5:BE:22:F5:ED:E8:1B:A9:51:E8:91:69:F5:C0:67:41:84:4C:39:B5:5A:DA:B2:85:35:90"}}},"request":{"raw":"GET /wp-includes/js/mediaelement/wp-mediaelement.min.css?ver=7.1.2 HTTP/1.1\r\nHost: salsasiempre.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://salsasiempre.live/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=jJfIErLuiKyCoz9%2BI1czwEQGasM%2FV6z5Q4CPw%2FANwb1kRonTlmYtfTr83hkw9una2f86F%2FGNAKeYAKV7lGicd0u48Zt%2Bve40HLw9pqDGac36DMa%2BdAM7fZ97sbd5Wo51XmuYcQ%3D%3D\"}]}\r\ndate: Wed, 23 Sep 2026 20:08:45 GMT\r\ncontent-type: text/css; charset=UTF-8\r\npriority: u=2,i=?0\r\ncf-ray: a3fc2ee1e9a50b49-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 829\r\ncache-control: public, max-age=31536000\r\ncontent-encoding: br\r\nexpires: Thu, 23 Sep 2027 19:54:55 GMT\r\nlast-modified: Mon, 28 Apr 2025 22:00:00 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding,User-Agent,Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":4186,"size_decoded":1817,"mime_type":"text/css; charset=UTF-8","magic":"ASCII text, with very long lines (4186), with no line terminators","md5":"ea958276b7de454bd3c2873f0dc47e5f","sha1":"b143f6e8e8f79d8f104c26b0057ef5514d763219","sha256":"2e10d353ff038c2cad3492fc17801af3e6ef2669c9e9713bdb78b1dcb104c4fe","sha512":"2d40a1e713355eff88fa3bbf5471b4db5acc48fa2b978a555c034f2e5c7f131fcaf48e849d5d048df9d5dae068c4b6467a97b1dde99115e6b32f57e928569fc1","ssdeep":"48:wFfAeWkkqEsKO+TBxaBIIj+NqUFQW76d7JrOv2bN:wueWkkrLoI7U","tlshash":"d9810c1084149d2cf4eab33766cec75db43ad747fe75e7b86936e2b8c098a842073484","first_seen":"2023-04-05T04:06:46Z","last_seen":"2026-09-23T20:10:01.353739Z","times_seen":95802,"resource_available":true,"data":null}},"time_used":93,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":93,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"salsasiempre.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-23","alert":"Phishing Block","trigger":"salsasiempre.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"salsasiempre.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"salsasiempre.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"salsasiempre.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"salsasiempre.live/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.4.1","fqdn":"salsasiempre.live","domain":"salsasiempre.live","tld":"live"},"ip":{"addr":"104.21.16.74","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://salsasiempre.live/","date":"2026-09-23T20:08:45.116Z","timestamp":1790194125116,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"salsasiempre.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 27 Jul 2026 18:03:30 GMT","end":"Sun, 25 Oct 2026 19:02:05 GMT"},"fingerprint":{"sha1":"60:D3:B1:F9:B7:A7:CE:68:D7:19:24:D9:4B:8B:85:6D:0B:8D:99:D3","sha256":"22:3E:3E:6D:A5:95:E5:BE:22:F5:ED:E8:1B:A9:51:E8:91:69:F5:C0:67:41:84:4C:39:B5:5A:DA:B2:85:35:90"}}},"request":{"raw":"GET /wp-includes/js/jquery/jquery-migrate.min.js?ver=3.4.1 HTTP/1.1\r\nHost: salsasiempre.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://salsasiempre.live/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Wed, 23 Sep 2026 20:08:45 GMT\r\ncontent-encoding: zstd\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\ncache-control: public, max-age=86400\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=i9DeA00KOd8PFd6J2F1Kh5rCINEu6MdKUYIRxHHV5v18oXZu5Y%2F9rhf9SZ8XrLTBaxa3KHA%2FsZIMGYXPnkCP8FDqJFcfHaZ2eKWbatr4dE7cBHLGS6MgCjp390vjHFo7oL0FOg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\ncf-ray: a3fc2ee1f9ab0b49-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":13577,"size_decoded":5785,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (13479)","md5":"9ffeb32e2d9efbf8f70caabded242267","sha1":"3ad0c10e501ac2a9bfa18f9cd7e700219b378738","sha256":"5274f11e6fb32ae0cf2dfb9f8043272865c397a7c4223b4cfa7d50ea52fbde89","sha512":"8d6be545508a1c38278b8ad780c3758ae48a25e4e12eee443375aa56031d9b356f8c90f22d4f251140fa3f65603af40523165e33cae2e2d62fc78ec106e3d731","ssdeep":"192:5rprDN+sag6ifKIUpQI99P1tLm9kdgyq1+J3aCJQ+h4MPLORq:5rprxaefKI0LP19m4q1WW+h4Mjp","tlshash":"9952c8adb56679724eb721b8f03bd24f71b205de560d8940d19cc4f6282dc6e812bf78","first_seen":"2023-05-09T19:21:05Z","last_seen":"2026-09-23T21:50:30.24031Z","times_seen":975582,"resource_available":true,"data":null}},"time_used":72,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":72,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"salsasiempre.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-23","alert":"Phishing Block","trigger":"salsasiempre.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"salsasiempre.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"salsasiempre.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"salsasiempre.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"salsasiempre.live/wp-content/plugins/revslider/public/assets/js/rs6.min.js?ver=6.5.24","fqdn":"salsasiempre.live","domain":"salsasiempre.live","tld":"live"},"ip":{"addr":"104.21.16.74","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://salsasiempre.live/","date":"2026-09-23T20:08:45.121Z","timestamp":1790194125121,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"salsasiempre.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 27 Jul 2026 18:03:30 GMT","end":"Sun, 25 Oct 2026 19:02:05 GMT"},"fingerprint":{"sha1":"60:D3:B1:F9:B7:A7:CE:68:D7:19:24:D9:4B:8B:85:6D:0B:8D:99:D3","sha256":"22:3E:3E:6D:A5:95:E5:BE:22:F5:ED:E8:1B:A9:51:E8:91:69:F5:C0:67:41:84:4C:39:B5:5A:DA:B2:85:35:90"}}},"request":{"raw":"GET /wp-content/plugins/revslider/public/assets/js/rs6.min.js?ver=6.5.24 HTTP/1.1\r\nHost: salsasiempre.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://salsasiempre.live/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Wed, 23 Sep 2026 20:08:45 GMT\r\ncontent-encoding: zstd\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\ncache-control: public, max-age=86400\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=4QZHcpjJcY6xFYYjY8lzkLMrguXjnJLGVUPIL5%2Bj0WCLTarl2b19%2BrqbCACN0EzudVFOMpCJpd8Zk48r7Cma2tQ6oCvAlJvUr8FstPWObPCqcPiZPNdKDkFPgrzQ3w0TpJU%2FHQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: a3fc2ee209b00b49-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"YouTube","description":"YouTube is a video sharing service where users can create their own profile, upload videos, watch, like and comment on other videos.","website":"https://www.youtube.com","common_platform_enumeration":"","icon":"YouTube.png","categories":["Video players"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":390034,"size_decoded":106283,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (64288)","md5":"dbe49ccea4cb977e99af1fc13b5df0c2","sha1":"7cd5bc888582bf9c3b4c32190963aec3faf76eb4","sha256":"20260a2b327f69ddfd34a15f57c728f790778989af847470220c5a5f0b929e27","sha512":"7d896a08a760bc4cc6c5bc1f25d897adf3eb81343a05084d1171c72d15333b84f69bccba1fb92a7780de0ac8cf1bb4790ea48ec852919f36d4f644e82e5cce7c","ssdeep":"6144:Fca0nB0pLeH4NgCXH2Zz/jGWcLaTXQLPkBFuTCVBc4m3bUARnvg:OhBZH4NaGWwLPkBFuTuBB+UI4","tlshash":"30843ce4a530387900fb4397d06e45147275e96aa7078490b2bbe2695c5ca8e02ffffd","first_seen":"2023-03-07T01:33:09Z","last_seen":"2026-09-23T20:10:01.355609Z","times_seen":1571,"resource_available":true,"data":null}},"time_used":81,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":79,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"salsasiempre.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"salsasiempre.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"salsasiempre.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"salsasiempre.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-23","alert":"Phishing Block","trigger":"salsasiempre.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"salsasiempre.live/wp-content/uploads/2023/03/salsasiempre-logo.png","fqdn":"salsasiempre.live","domain":"salsasiempre.live","tld":"live"},"ip":{"addr":"104.21.16.74","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://salsasiempre.live/","date":"2026-09-23T20:08:45.660Z","timestamp":1790194125660,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"salsasiempre.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 27 Jul 2026 18:03:30 GMT","end":"Sun, 25 Oct 2026 19:02:05 GMT"},"fingerprint":{"sha1":"60:D3:B1:F9:B7:A7:CE:68:D7:19:24:D9:4B:8B:85:6D:0B:8D:99:D3","sha256":"22:3E:3E:6D:A5:95:E5:BE:22:F5:ED:E8:1B:A9:51:E8:91:69:F5:C0:67:41:84:4C:39:B5:5A:DA:B2:85:35:90"}}},"request":{"raw":"GET /wp-content/uploads/2023/03/salsasiempre-logo.png HTTP/1.1\r\nHost: salsasiempre.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://salsasiempre.live/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Wed, 23 Sep 2026 20:08:45 GMT\r\ncontent-type: image/webp\r\npriority: u=5,i\r\ncf-ray: a3fc2ee56a150b49-OSL\r\ncf-cache-status: BYPASS\r\naccept-ranges: bytes\r\ncache-control: private\r\nexpires: Thu, 23 Sep 2027 20:08:45 GMT\r\nlast-modified: Mon, 23 Oct 2023 22:00:00 GMT\r\nserver: cloudflare\r\nvary: User-Agent,Accept-Encoding,Accept\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-litespeed-cache-control: no-cache\r\nx-turbo-charged-by: LiteSpeed\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=VcZ4T%2BN0RfCgIABMhzJwVGk7qHKfZe%2Ff0pEwcgGmpg5ZetCMqCjPpzx7OrQIBLCcwiL9iNmkDVgzWtPZyy8pNWXv3mcviLQvjEUmATMt3C67AXj%2FEiV6AcXpWIhgW5qH75qDGw%3D%3D\"}]}\r\ncontent-length: 14512\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":14512,"size_decoded":15330,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"526e17ffbe33d4a9e52ae8fe896d8edc","sha1":"40293574e95a41a008a9c6cb1f56eec23f470c9c","sha256":"f9b88b5a6c4f6df7593be4169d564836c774678838afd40affa1f4c51aeadbf0","sha512":"4ee5f234f0ece2d6a81bea80e24cc5a58a90546f3b6511f43fa8ba50a52399273ebf1ed63d3595c9cccfafdedb69574729db0c422ca791e0912453a5bc20456a","ssdeep":"384:DexEdFnaZgd2d2ZmWHcgIZ+oklAZJzbRvSdZ0hEN:C8FYgYYZPzIIOBvSyW","tlshash":"3352cf0855c97563659087bea60ea0d079e133cf84993f02ed2899e2470d5abb4dacf5","first_seen":"2026-09-23T19:56:10.42764Z","last_seen":"2026-09-23T20:10:01.356336Z","times_seen":2,"resource_available":false,"data":null}},"time_used":270,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":270,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"salsasiempre.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"salsasiempre.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"salsasiempre.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-23","alert":"Phishing Block","trigger":"salsasiempre.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"salsasiempre.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"salsasiempre.live/wp-content/uploads/2026/07/Dominika-Szczesniak-Rosiak-99.png","fqdn":"salsasiempre.live","domain":"salsasiempre.live","tld":"live"},"ip":{"addr":"104.21.16.74","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://salsasiempre.live/","date":"2026-09-23T20:08:56.705Z","timestamp":1790194136705,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"salsasiempre.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 27 Jul 2026 18:03:30 GMT","end":"Sun, 25 Oct 2026 19:02:05 GMT"},"fingerprint":{"sha1":"60:D3:B1:F9:B7:A7:CE:68:D7:19:24:D9:4B:8B:85:6D:0B:8D:99:D3","sha256":"22:3E:3E:6D:A5:95:E5:BE:22:F5:ED:E8:1B:A9:51:E8:91:69:F5:C0:67:41:84:4C:39:B5:5A:DA:B2:85:35:90"}}},"request":{"raw":"GET /wp-content/uploads/2026/07/Dominika-Szczesniak-Rosiak-99.png HTTP/1.1\r\nHost: salsasiempre.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://salsasiempre.live/\r\nCookie: _ga_BT1HXCHHE7=GS2.1.s1790194126$o1$g0$t1790194126$j60$l0$h0; _ga=GA1.1.1712374491.1790194126\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Wed, 23 Sep 2026 20:08:56 GMT\r\ncontent-type: image/webp\r\npriority: u=5,i\r\ncf-ray: a3fc2f2a6f090b49-OSL\r\ncf-cache-status: BYPASS\r\naccept-ranges: bytes\r\ncache-control: private\r\nexpires: Thu, 23 Sep 2027 20:08:56 GMT\r\nlast-modified: Fri, 10 Jul 2026 09:07:23 GMT\r\nserver: cloudflare\r\nvary: User-Agent,Accept-Encoding,Accept\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-litespeed-cache-control: no-cache\r\nx-turbo-charged-by: LiteSpeed\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=CIVV4NVx6Ik9ftKFwFL8LzpJtaxs4R25GHtGsfb9UmFVWjKH1au20%2FXC4FLSVyZEG5194vx5cmdXZUQiOLo6eRtyS3QlIAgMU%2BofDaXVOfp0%2BUmaclzQv0glcKrV04hOgeAVIg%3D%3D\"}]}\r\ncontent-length: 119962\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":119962,"size_decoded":120781,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 1920x1080, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"0fa7a2cbbb4c82a881b12d8c436f81e1","sha1":"1ec640c7ce4f7169c0e32a057fe6df40340c0bd4","sha256":"be5e172023f4762f46f4e76c9f515bafc5ab6791311d6b45f0964c0cb792f3a9","sha512":"d8c926994b1b0cc5a7b50f5094f9bd60f424ebebac3b4da4021891f6aae6c8767bedeaec5f93da213d57fb10a883e549551c831ea39304b0300ba6d9fb4832d6","ssdeep":"3072:ElLh1k8Yg74ikOpvgupdLZxVBpI+E2LH/v93bKS8I:El11u4ffL93I+HLH1KXI","tlshash":"1bc323bee2c85b1adf565e3de92189ff248008a483029e876861ff630b745cd63147f9","first_seen":"2026-09-23T19:56:10.549085Z","last_seen":"2026-09-23T20:10:01.359315Z","times_seen":2,"resource_available":false,"data":null}},"time_used":293,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":219,"receive":73,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"salsasiempre.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"salsasiempre.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-23","alert":"Phishing Block","trigger":"salsasiempre.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"salsasiempre.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"salsasiempre.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"salsasiempre.live/wp-content/cache/min/1/wp-content/themes/vibez/assets/css/linear-icons/style.css?ver=1790191063","fqdn":"salsasiempre.live","domain":"salsasiempre.live","tld":"live"},"ip":{"addr":"104.21.16.74","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://salsasiempre.live/","date":"2026-09-23T20:08:45.106Z","timestamp":1790194125106,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"salsasiempre.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 27 Jul 2026 18:03:30 GMT","end":"Sun, 25 Oct 2026 19:02:05 GMT"},"fingerprint":{"sha1":"60:D3:B1:F9:B7:A7:CE:68:D7:19:24:D9:4B:8B:85:6D:0B:8D:99:D3","sha256":"22:3E:3E:6D:A5:95:E5:BE:22:F5:ED:E8:1B:A9:51:E8:91:69:F5:C0:67:41:84:4C:39:B5:5A:DA:B2:85:35:90"}}},"request":{"raw":"GET /wp-content/cache/min/1/wp-content/themes/vibez/assets/css/linear-icons/style.css?ver=1790191063 HTTP/1.1\r\nHost: salsasiempre.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://salsasiempre.live/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=Et9Hk%2B6FSQvf%2BLrkhpQ%2F8ok8ARw%2FLR53%2BTARAQ010tb7GJf1poOLG21txBRDqm07vI36dW0%2BMmEfX8SwmizQx%2FyggoYEfrcKbwngs8h%2BSa3pKBkwj5WwQmBuX4oAaxw3mpts9A%3D%3D\"}]}\r\ndate: Wed, 23 Sep 2026 20:08:45 GMT\r\ncontent-type: text/css; charset=UTF-8\r\npriority: u=2,i=?0\r\ncf-ray: a3fc2ee1e9a30b49-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 829\r\ncache-control: public, max-age=31536000\r\ncontent-encoding: br\r\nexpires: Thu, 23 Sep 2027 19:54:55 GMT\r\nlast-modified: Wed, 23 Sep 2026 19:17:43 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding,User-Agent,Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":7438,"size_decoded":2322,"mime_type":"text/css; charset=UTF-8","magic":"ASCII text, with very long lines (7438), with no line terminators","md5":"74e12e3706b0aad2915a2d871ee05ab3","sha1":"42652f8861a1a1552c99313c919273f6e7ed5cba","sha256":"3f02deadd0ceb63155ec69aa224a2ea032830aa966429f78e97b93286aafe0e0","sha512":"98f5ec39c9d969a7faa4c72d5fd64bb559f8240e13bcefbf13ab26cc71b9b2a092e889175406a21e0cbbcfefd3aca2a98dbac39ca5ce0cca36db245e036cccbb","ssdeep":"96:eoKQB/0/Q5pcK2kb2IYT4naMq4kIaVBX1j2qLQ:FPBhocqIYT4faVBX11k","tlshash":"5de1ffb6d46974ccf7b1c813b785ab8965dab930e6410e12f41eb52e2cf126b19c4f38","first_seen":"2026-09-23T19:56:10.486964Z","last_seen":"2026-09-23T20:10:01.362208Z","times_seen":2,"resource_available":true,"data":null}},"time_used":91,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":90,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"salsasiempre.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"salsasiempre.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"salsasiempre.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"salsasiempre.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-23","alert":"Phishing Block","trigger":"salsasiempre.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"salsasiempre.live/wp-content/themes/vibez/assets/css/modules-responsive.min.css?ver=7.1.2","fqdn":"salsasiempre.live","domain":"salsasiempre.live","tld":"live"},"ip":{"addr":"104.21.16.74","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://salsasiempre.live/","date":"2026-09-23T20:08:45.111Z","timestamp":1790194125111,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"salsasiempre.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 27 Jul 2026 18:03:30 GMT","end":"Sun, 25 Oct 2026 19:02:05 GMT"},"fingerprint":{"sha1":"60:D3:B1:F9:B7:A7:CE:68:D7:19:24:D9:4B:8B:85:6D:0B:8D:99:D3","sha256":"22:3E:3E:6D:A5:95:E5:BE:22:F5:ED:E8:1B:A9:51:E8:91:69:F5:C0:67:41:84:4C:39:B5:5A:DA:B2:85:35:90"}}},"request":{"raw":"GET /wp-content/themes/vibez/assets/css/modules-responsive.min.css?ver=7.1.2 HTTP/1.1\r\nHost: salsasiempre.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://salsasiempre.live/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=EGLNgRLaZZsmx0lNky4iJYiQ24YjllBYMzN1I%2FAR9CqEdDY9BHkMN7rFrjYNf0aX1VaaF3IEXnuB2OCj5F8LDRjSmZ3OSBUOih8y5Mbjm1N82gbt82Y85tKCEOeJvlHrQ5OpnQ%3D%3D\"}]}\r\ndate: Wed, 23 Sep 2026 20:08:45 GMT\r\ncontent-type: text/css; charset=UTF-8\r\npriority: u=2,i=?0\r\ncf-ray: a3fc2ee1f9a70b49-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 829\r\ncache-control: public, max-age=31536000\r\ncontent-encoding: br\r\nexpires: Thu, 23 Sep 2027 19:54:55 GMT\r\nlast-modified: Sun, 22 Oct 2023 22:00:00 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding,User-Agent,Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":49861,"size_decoded":4820,"mime_type":"text/css; charset=UTF-8","magic":"ASCII text, with very long lines (49861), with no line terminators","md5":"103b6219acb564929124436538c4ed7e","sha1":"594ff1beac44eecc280e18dd7c410efc4b73c4f9","sha256":"f64496ee594b34f8c6f5067fa0aead2231c6e6124bca6d28c2c07042767e66e2","sha512":"b2875b8128eb9555488f0aabb2ce008a360ffce3b15d5eda095f62a5f0740032d678b442b2ca9ebc9f3b937ff3b3e04e42580eec2774e880683472afc6051c94","ssdeep":"1536:zSyoMQwlwU4IvaiSiQVFzrHj3hJBokEqssW+GhFV4DrY:zSU","tlshash":"3323acd3b92f177e50aa756aa8c614ac03aca812fb91ddf87590d424f19cdc704f2d8e","first_seen":"2025-09-24T19:53:42.127266Z","last_seen":"2026-09-23T20:10:01.363453Z","times_seen":19,"resource_available":true,"data":null}},"time_used":76,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":76,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-23","alert":"Phishing Block","trigger":"salsasiempre.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"salsasiempre.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"salsasiempre.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"salsasiempre.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"salsasiempre.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/oswald/v57/TK3iWkUHHAIjg752Fz8Ghe4.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://salsasiempre.live/","date":"2026-09-23T20:08:45.516Z","timestamp":1790194125516,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Thu, 10 Sep 2026 19:23:28 GMT","end":"Thu, 03 Dec 2026 19:23:27 GMT"},"fingerprint":{"sha1":"99:42:CC:AA:D1:36:35:7D:FF:39:32:44:00:41:07:B9:D3:00:EE:31","sha256":"48:CD:EE:73:11:77:6B:F0:EE:10:C6:1D:DF:58:7C:4B:88:0D:95:F3:9C:64:15:44:E2:93:5B:17:4F:6A:8E:6E"}}},"request":{"raw":"GET /s/oswald/v57/TK3iWkUHHAIjg752Fz8Ghe4.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://salsasiempre.live\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 23952\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 21 Sep 2026 16:03:33 GMT\r\nexpires: Tue, 21 Sep 2027 16:03:33 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Wed, 10 Sep 2025 16:49:06 GMT\r\ncontent-type: font/woff2\r\nage: 187512\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":23952,"size_decoded":24765,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 23952, version 1.0","md5":"192877db9c1654497c91e1143ae01aac","sha1":"7036927c267bd1a6553913593470211f51504592","sha256":"7989ccc7770f5aeffa67e088bcd3b294d42fae2f8b0eca3c3c51b953d1f735cc","sha512":"332dff4e49295eff8dddb3929813304f08c7ee88bd5ee2dd79f20304610eb629566bd749e18a1f1ea6bec5c2f7041d25f29fb2196fe04a9a3ac8c7683f819dcd","ssdeep":"384:fuXl7DxSQRVT9HW7jp4FAQqnZfyJFovo2HDf3vnDHrHmv7RjWA2OKOWkL4okHy8m:WDthiDZfycw2HDXn3Hs7AAAOWk0FY","tlshash":"20b2e1d7113a4b2fc5d7397214f6c3ee37d9216548ff022b182ee5d8a43219eaa13e61","first_seen":"2025-09-13T08:33:13.515993Z","last_seen":"2026-09-23T20:10:01.329315Z","times_seen":1404,"resource_available":false,"data":null}},"time_used":58,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":39,"receive":19,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/oswald/v57/TK3iWkUHHAIjg752Fz8Ghe4.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://salsasiempre.live/","date":"2026-09-23T20:08:45.518Z","timestamp":1790194125518,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Thu, 10 Sep 2026 19:23:28 GMT","end":"Thu, 03 Dec 2026 19:23:27 GMT"},"fingerprint":{"sha1":"99:42:CC:AA:D1:36:35:7D:FF:39:32:44:00:41:07:B9:D3:00:EE:31","sha256":"48:CD:EE:73:11:77:6B:F0:EE:10:C6:1D:DF:58:7C:4B:88:0D:95:F3:9C:64:15:44:E2:93:5B:17:4F:6A:8E:6E"}}},"request":{"raw":"GET /s/oswald/v57/TK3iWkUHHAIjg752Fz8Ghe4.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://salsasiempre.live\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 23952\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 21 Sep 2026 16:03:33 GMT\r\nexpires: Tue, 21 Sep 2027 16:03:33 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Wed, 10 Sep 2025 16:49:06 GMT\r\ncontent-type: font/woff2\r\nage: 187512\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":23952,"size_decoded":24765,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 23952, version 1.0","md5":"192877db9c1654497c91e1143ae01aac","sha1":"7036927c267bd1a6553913593470211f51504592","sha256":"7989ccc7770f5aeffa67e088bcd3b294d42fae2f8b0eca3c3c51b953d1f735cc","sha512":"332dff4e49295eff8dddb3929813304f08c7ee88bd5ee2dd79f20304610eb629566bd749e18a1f1ea6bec5c2f7041d25f29fb2196fe04a9a3ac8c7683f819dcd","ssdeep":"384:fuXl7DxSQRVT9HW7jp4FAQqnZfyJFovo2HDf3vnDHrHmv7RjWA2OKOWkL4okHy8m:WDthiDZfycw2HDXn3Hs7AAAOWk0FY","tlshash":"20b2e1d7113a4b2fc5d7397214f6c3ee37d9216548ff022b182ee5d8a43219eaa13e61","first_seen":"2025-09-13T08:33:13.515993Z","last_seen":"2026-09-23T20:10:01.329315Z","times_seen":1404,"resource_available":false,"data":null}},"time_used":57,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":45,"receive":12,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"salsasiempre.live/wp-content/cache/min/1/wp-content/plugins/timetable/style/style.css?ver=1790191063","fqdn":"salsasiempre.live","domain":"salsasiempre.live","tld":"live"},"ip":{"addr":"104.21.16.74","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://salsasiempre.live/","date":"2026-09-23T20:08:45.090Z","timestamp":1790194125090,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"salsasiempre.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 27 Jul 2026 18:03:30 GMT","end":"Sun, 25 Oct 2026 19:02:05 GMT"},"fingerprint":{"sha1":"60:D3:B1:F9:B7:A7:CE:68:D7:19:24:D9:4B:8B:85:6D:0B:8D:99:D3","sha256":"22:3E:3E:6D:A5:95:E5:BE:22:F5:ED:E8:1B:A9:51:E8:91:69:F5:C0:67:41:84:4C:39:B5:5A:DA:B2:85:35:90"}}},"request":{"raw":"GET /wp-content/cache/min/1/wp-content/plugins/timetable/style/style.css?ver=1790191063 HTTP/1.1\r\nHost: salsasiempre.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://salsasiempre.live/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=t%2F09VlPIC6pPZOaMDgqPyRM3Fjo8bFsz1paOt9SQwXRl0WFhbufG7uIpLznYVpIJnRMjJF89gQBFlFit8Tmuh1Wp7uskZrdb8HNCE4JK1hJsAQChkoAJwtL0IRyltjl3w6tTAg%3D%3D\"}]}\r\ndate: Wed, 23 Sep 2026 20:08:45 GMT\r\ncontent-type: text/css; charset=UTF-8\r\npriority: u=2,i=?0\r\ncf-ray: a3fc2ee1d9980b49-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 829\r\ncache-control: public, max-age=31536000\r\ncontent-encoding: br\r\nexpires: Thu, 23 Sep 2027 19:54:55 GMT\r\nlast-modified: Wed, 23 Sep 2026 19:17:43 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding,User-Agent,Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":24747,"size_decoded":5171,"mime_type":"text/css; charset=UTF-8","magic":"ASCII text, with very long lines (24747), with no line terminators","md5":"73ff43fd848ce4ddc87e114dd6eb14cf","sha1":"7796cda8607e1e84a5d5c8954f72d26d5d794565","sha256":"fb74c6a9ae40a326683e85daf429261b73267c56c821f6b9baa9b98f203aa6c5","sha512":"2cea2da1d7ba81d80deafb1aeb43bbf4fc3ab60c3ed40b0fd9dbed247d43b895531dc75886be963ddab33a5886c271610e2d88ff9e5136386feabd56d1e2e9eb","ssdeep":"192:m5hLvYj4DYKe8ldyIzaDpcmeWaFMCQe7R8+/UeZExdjcBSZzq3iBd0p6g/upa3eF:mPLvDYw52/ckiyTxyfTed5myRbj1uw","tlshash":"88b23513f6a0302d62e7d53ee691f3ed23354953da512b7df103ee398b4168512b3a49","first_seen":"2026-09-23T19:56:10.446823Z","last_seen":"2026-09-23T20:10:01.364497Z","times_seen":2,"resource_available":true,"data":null}},"time_used":97,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":97,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"salsasiempre.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"salsasiempre.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"salsasiempre.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"salsasiempre.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-23","alert":"Phishing Block","trigger":"salsasiempre.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"salsasiempre.live/wp-content/cache/min/1/wp-content/themes/vibez/assets/css/modules.min.css?ver=1790191063","fqdn":"salsasiempre.live","domain":"salsasiempre.live","tld":"live"},"ip":{"addr":"104.21.16.74","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://salsasiempre.live/","date":"2026-09-23T20:08:45.098Z","timestamp":1790194125098,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"salsasiempre.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 27 Jul 2026 18:03:30 GMT","end":"Sun, 25 Oct 2026 19:02:05 GMT"},"fingerprint":{"sha1":"60:D3:B1:F9:B7:A7:CE:68:D7:19:24:D9:4B:8B:85:6D:0B:8D:99:D3","sha256":"22:3E:3E:6D:A5:95:E5:BE:22:F5:ED:E8:1B:A9:51:E8:91:69:F5:C0:67:41:84:4C:39:B5:5A:DA:B2:85:35:90"}}},"request":{"raw":"GET /wp-content/cache/min/1/wp-content/themes/vibez/assets/css/modules.min.css?ver=1790191063 HTTP/1.1\r\nHost: salsasiempre.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://salsasiempre.live/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=YEMQHYoCbP%2B7ll93T8GyF9GKVrtDIv4YoI8piupiyLSkclo4hXPmFmzoxx4QfizTwSAmCWmTvdm3cJYaMdkWX2LXtlNppbB7Kv7jJQyHZubv2phyFrvCprqrp%2FD9wkOXakXsag%3D%3D\"}]}\r\ndate: Wed, 23 Sep 2026 20:08:45 GMT\r\ncontent-type: text/css; charset=UTF-8\r\npriority: u=2,i=?0\r\ncf-ray: a3fc2ee1d99e0b49-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 829\r\ncache-control: public, max-age=31536000\r\ncontent-encoding: br\r\nexpires: Thu, 23 Sep 2027 19:54:55 GMT\r\nlast-modified: Wed, 23 Sep 2026 19:17:43 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding,User-Agent,Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":509861,"size_decoded":47276,"mime_type":"text/css; charset=UTF-8","magic":"ASCII text, with very long lines (65536), with no line terminators","md5":"7ac99f04f1e1934c14807ec55b0902a1","sha1":"b4ad63c3132b737a60ec3eeb813ef42349bb67e3","sha256":"34333383093820e1408ff18f8ad647a93af9b95e9d6ca6e33d0db7366bd358d6","sha512":"0da686ec8de55c9ef60334da67842bdbfd95a366b1cccba5794726125c5530a745adb606a5fae0555d0e27fc806c98a1efd152ea372903aeb0fe36390c64d85e","ssdeep":"12288:OUZfwm1KA9kGDj3Cyg5lrceb0qTewatnUr:3Zfwm1KA9kGDj3Cyg5lrceb0qThatnUr","tlshash":"9eb4ca6674531394e0378b2553c91e68077c8662f212cdfdb7935d0bf3869ce12aba8b","first_seen":"2026-09-23T19:56:10.452621Z","last_seen":"2026-09-23T20:10:01.365715Z","times_seen":2,"resource_available":true,"data":null}},"time_used":90,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":88,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"salsasiempre.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-23","alert":"Phishing Block","trigger":"salsasiempre.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"salsasiempre.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"salsasiempre.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"salsasiempre.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/lato/v25/S6uyw4BMUTPHjxAwXjeu.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://salsasiempre.live/","date":"2026-09-23T20:08:45.413Z","timestamp":1790194125413,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Thu, 10 Sep 2026 19:23:28 GMT","end":"Thu, 03 Dec 2026 19:23:27 GMT"},"fingerprint":{"sha1":"99:42:CC:AA:D1:36:35:7D:FF:39:32:44:00:41:07:B9:D3:00:EE:31","sha256":"48:CD:EE:73:11:77:6B:F0:EE:10:C6:1D:DF:58:7C:4B:88:0D:95:F3:9C:64:15:44:E2:93:5B:17:4F:6A:8E:6E"}}},"request":{"raw":"GET /s/lato/v25/S6uyw4BMUTPHjxAwXjeu.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://salsasiempre.live\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 5612\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 21 Sep 2026 16:01:34 GMT\r\nexpires: Tue, 21 Sep 2027 16:01:34 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Mon, 15 Sep 2025 17:09:42 GMT\r\ncontent-type: font/woff2\r\nage: 187631\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":5612,"size_decoded":6424,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 5612, version 1.0","md5":"633f8feda2188d767d2396652da17377","sha1":"d35cc70037f82ab61d86f2c4d80685a474821d45","sha256":"8b9fc9737043f88c1a9a7195c27a239bd329cc33d928ffb67736c61ae7a1dbbd","sha512":"edadc35473adc7d3d2b6c0bc04789dc78c7f38c0eccac6f08625738d5c8cfa9203c1d9ef2ee6ce721fabc5a4eba41cd19f47e56dc85ff3bc1f7f0ede2ec5ba0b","ssdeep":"96:iD0G8mpQLE+J8uftoCUdUZ/OGjfSg7uov39XTr9a8dBmhPk7jJ5lpqaAjiv/8qBA:7xXLZ8uVoCUdUFOGjJ7Pv39Pw0MiZ5cB","tlshash":"23c1af36b54e1d4bf74201b8137b823e41c70c621637356dbb16aa9418dcf4161371e7","first_seen":"2025-09-17T03:45:02.002945Z","last_seen":"2026-09-23T20:10:01.367414Z","times_seen":5644,"resource_available":false,"data":null}},"time_used":93,"timings":{"blocked":34,"dns":0,"connect":0,"send":0,"wait":56,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"salsasiempre.live/wp-content/uploads/2023/04/grafik-zajec.jpg","fqdn":"salsasiempre.live","domain":"salsasiempre.live","tld":"live"},"ip":{"addr":"104.21.16.74","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://salsasiempre.live/","date":"2026-09-23T20:08:45.663Z","timestamp":1790194125663,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"salsasiempre.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 27 Jul 2026 18:03:30 GMT","end":"Sun, 25 Oct 2026 19:02:05 GMT"},"fingerprint":{"sha1":"60:D3:B1:F9:B7:A7:CE:68:D7:19:24:D9:4B:8B:85:6D:0B:8D:99:D3","sha256":"22:3E:3E:6D:A5:95:E5:BE:22:F5:ED:E8:1B:A9:51:E8:91:69:F5:C0:67:41:84:4C:39:B5:5A:DA:B2:85:35:90"}}},"request":{"raw":"GET /wp-content/uploads/2023/04/grafik-zajec.jpg HTTP/1.1\r\nHost: salsasiempre.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://salsasiempre.live/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Wed, 23 Sep 2026 20:08:45 GMT\r\ncontent-type: image/webp\r\npriority: u=5,i\r\ncf-ray: a3fc2ee56a170b49-OSL\r\ncf-cache-status: BYPASS\r\naccept-ranges: bytes\r\ncache-control: private\r\nexpires: Thu, 23 Sep 2027 20:08:45 GMT\r\nlast-modified: Mon, 23 Oct 2023 22:00:00 GMT\r\nserver: cloudflare\r\nvary: User-Agent,Accept-Encoding,Accept\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-litespeed-cache-control: no-cache\r\nx-turbo-charged-by: LiteSpeed\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=7cSIDXLw3aUjTStyAidZyul7Sc1k%2F908tLF5h6P52hvDTtuznJ42Ec%2BVeFTu%2Fq3aYHECW9702%2BOyD4RgpvatxFG5R5U1d2MpFHVcWx1ZpM8B%2FLtznRLfT2a%2B1%2FZhktqlpw7EaQ%3D%3D\"}]}\r\ncontent-length: 50660\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":50660,"size_decoded":51486,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 800x550, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"29589484483ba7e1c79dbf9bd1154582","sha1":"9c6020c3796c67ea1ef37db273a0edeba355c344","sha256":"d729af0142a51324e9eb024588f245338a7868f2ac3b8cc3cfdfe4770fca284f","sha512":"bb4829d11055219c2177f37ef4e0c5eb4a47bee5d29975eb87dba82706891989c0028398d01cb9a57bbf43026a7049ac96da98b4b4dba934c1fcc3f27e7706ff","ssdeep":"1536:hIGyeRaE5mJ4S1wfwSqxFG71rYP6LKu58wBn:OGBa6t3SFGRr662uXBn","tlshash":"0233020e802005f9a1245c6d5dff7d5904b4e2128a9339bc33eaca5576bb8fb05ac0e7","first_seen":"2026-09-23T19:56:10.500507Z","last_seen":"2026-09-23T20:10:01.368191Z","times_seen":2,"resource_available":false,"data":null}},"time_used":269,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":234,"receive":35,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"salsasiempre.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"salsasiempre.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"salsasiempre.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"salsasiempre.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-23","alert":"Phishing Block","trigger":"salsasiempre.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/recaptcha/api2/clr?k=6LfhUZMtAAAAAOCWVhW340havzfC_SwnC4yozkYJ","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.251.154.119","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://salsasiempre.live/","date":"2026-09-23T20:08:46.383Z","timestamp":1790194126383,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Fri, 04 Sep 2026 08:04:41 GMT","end":"Fri, 27 Nov 2026 08:04:40 GMT"},"fingerprint":{"sha1":"95:51:3A:74:B2:D6:48:05:37:67:B4:98:88:41:81:F2:F0:9E:EC:4E","sha256":"27:A0:25:F5:B2:3F:C8:25:B7:BF:72:41:6C:48:6A:75:BC:C8:0D:C3:44:11:27:96:CE:FB:61:3D:59:34:73:06"}}},"request":{"raw":"POST /recaptcha/api2/clr?k=6LfhUZMtAAAAAOCWVhW340havzfC_SwnC4yozkYJ HTTP/1.1\r\nHost: www.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://salsasiempre.live/\r\nContent-Length: 147\r\nOrigin: https://salsasiempre.live\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"POST","post_data":{"size":160,"data":"\n(6LfhUZMtAAAAAOCWVhW340havzfC_SwnC4yozkYJ\u0012\u0000\u001a\u0018kemdRjWFxNjgsGdhRslyEPwU\"K\u0018\u0001*=\n\u000e\b\u0005\u0010í\f\u0018£\u0003 \u0001*\u0002\b\u0006\n\b\b\u0003\u0010ò\f\u0018¼\u0003\n\b\b\u0014\u0010ˆ\u0006\u0018\u0001\n\b\b\u0012\u0010ñ\b\u0018ã\u0001\n\u0007\b\u0013\u0010ï\f\u0018!\u0012\u0004\b\u0001\u0010\u00018\u0002@ œ\u0001H°ê\u0001"}},"response":{"raw":"HTTP/3 200 \r\ncontent-type: application/binary\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"coop_38fac9d5b82543fc4729580d18ff2d3d\"\r\ncross-origin-resource-policy: cross-origin\r\nreport-to: {\"group\":\"coop_38fac9d5b82543fc4729580d18ff2d3d\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/38fac9d5b82543fc4729580d18ff2d3d\"}]}\r\ndate: Wed, 23 Sep 2026 20:08:46 GMT\r\nserver: ESF\r\ncontent-length: 0\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":0,"size_decoded":1278,"mime_type":"application/binary","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-23T21:48:31.497771Z","times_seen":18624345,"resource_available":true,"data":null}},"time_used":22,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":22,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css?family=Lato%3A400%2C700%7COswald%3A300%2C400%2C700%7CLato%3A300%2C400%2C700%7CMontserrat%3A300%2C400%2C600%7CRoboto%3A300%2C400%2C700%7CPlayfair%20Display%3A400%2C400i%2C700%7CRoboto%3A400\u0026subset=latin-ext\u0026display=swap","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.42","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://salsasiempre.live/","date":"2026-09-23T20:08:45.084Z","timestamp":1790194125084,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Thu, 10 Sep 2026 19:23:29 GMT","end":"Thu, 03 Dec 2026 19:23:28 GMT"},"fingerprint":{"sha1":"6C:5B:26:B8:8E:09:56:23:73:54:AC:B4:B3:91:75:07:31:24:4F:2D","sha256":"83:FB:4A:3F:88:06:C6:06:CC:A5:92:12:C8:C2:89:BD:56:6A:F9:0D:8F:49:3D:A0:83:3B:7E:53:A1:2C:69:05"}}},"request":{"raw":"GET /css?family=Lato%3A400%2C700%7COswald%3A300%2C400%2C700%7CLato%3A300%2C400%2C700%7CMontserrat%3A300%2C400%2C600%7CRoboto%3A300%2C400%2C700%7CPlayfair%20Display%3A400%2C400i%2C700%7CRoboto%3A400\u0026subset=latin-ext\u0026display=swap HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://salsasiempre.live/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=0\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Wed, 23 Sep 2026 20:08:45 GMT\r\ndate: Wed, 23 Sep 2026 20:08:45 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncross-origin-resource-policy: cross-origin\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":35466,"size_decoded":2998,"mime_type":"text/css; charset=utf-8","magic":"ASCII text, with very long lines (1572)","md5":"5915667d31eff58940b2ec63fe6e88c7","sha1":"c6ffaa784286216a63903aa6030023af06541907","sha256":"63283d43e05362cd08516dce45f32d2c85ccb47989aa8cc7702399990248631b","sha512":"4bf3fbbd173ce8cae5d26b4b37a5e4405a381f7a0e002296612debfff1d2602509f70e3345a5b71b0e6690a205faca084dbbe95891ae7a12cb0be9a4ac7a8fc4","ssdeep":"768:vaAawacapaOw/0vAahwI04rDS99YURRuWDyjooYhREHPWP2ZZYQRVKy8:yrbH5yj3","tlshash":"74f22da1042b9400eb834cc223cfbf36ee5e62517051c179affd1aa9acdbc26536975d","first_seen":"2026-09-23T19:56:10.445029Z","last_seen":"2026-09-23T20:10:01.371017Z","times_seen":2,"resource_available":true,"data":null}},"time_used":126,"timings":{"blocked":-1,"dns":2,"connect":27,"send":0,"wait":50,"receive":0,"ssl":46},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"salsasiempre.live/wp-content/cache/min/1/wp-content/themes/vibez/assets/js/modules/plugins/jquery.waitforimages.js?ver=1790191063","fqdn":"salsasiempre.live","domain":"salsasiempre.live","tld":"live"},"ip":{"addr":"104.21.16.74","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://salsasiempre.live/","date":"2026-09-23T20:08:45.138Z","timestamp":1790194125138,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"salsasiempre.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 27 Jul 2026 18:03:30 GMT","end":"Sun, 25 Oct 2026 19:02:05 GMT"},"fingerprint":{"sha1":"60:D3:B1:F9:B7:A7:CE:68:D7:19:24:D9:4B:8B:85:6D:0B:8D:99:D3","sha256":"22:3E:3E:6D:A5:95:E5:BE:22:F5:ED:E8:1B:A9:51:E8:91:69:F5:C0:67:41:84:4C:39:B5:5A:DA:B2:85:35:90"}}},"request":{"raw":"GET /wp-content/cache/min/1/wp-content/themes/vibez/assets/js/modules/plugins/jquery.waitforimages.js?ver=1790191063 HTTP/1.1\r\nHost: salsasiempre.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://salsasiempre.live/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Wed, 23 Sep 2026 20:08:45 GMT\r\ncontent-encoding: zstd\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\ncache-control: public, max-age=86400\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=XNJh%2FDQQVEaGErF3F8t5m5mjxn8p1dorcH%2F747KTzF%2BtYWs0wFJxQN6MjfiyPs7ZYuClCpBWCPzmEIWKcPGNVRkZOafOErTs2%2FPf%2BqyH7kKuWUO9O%2FbKw1BWu2FMyc5NWi1UTg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: a3fc2ee219bd0b49-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1890,"size_decoded":1551,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (1844)","md5":"3defedef15d476c11353cf6e81f12767","sha1":"33849780516c7d910adfcb6dfe45e0d5c70ff230","sha256":"1589926acdc3d1f8cae135eb54fcf34d9e1c4952a5deeb279e422ccbf32f0fe9","sha512":"f1df61b59ba14364549f28ade868183dfd4a346ed042b236a19146cd4cc113da35d8bcbfaf80339273523b0fa328a539383cd487e992b1f1a8f9ee8cf8117df0","ssdeep":"","tlshash":"ef41a498b9b4b1c316737c52b03b570ba07898387418ca34a33bf5e428b8f6b2051f89","first_seen":"2023-03-08T16:17:35Z","last_seen":"2026-09-23T20:10:01.372377Z","times_seen":28,"resource_available":true,"data":null}},"time_used":49,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":49,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"salsasiempre.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-23","alert":"Phishing Block","trigger":"salsasiempre.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"salsasiempre.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"salsasiempre.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"salsasiempre.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.google.com/recaptcha/api.js?render=6LfhUZMtAAAAAOCWVhW340havzfC_SwnC4yozkYJ\u0026ver=3.0","fqdn":"www.google.com","domain":"google.com","tld":"com"},"ip":{"addr":"142.251.154.119","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://salsasiempre.live/","date":"2026-09-23T20:08:45.143Z","timestamp":1790194125143,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Fri, 04 Sep 2026 08:04:41 GMT","end":"Fri, 27 Nov 2026 08:04:40 GMT"},"fingerprint":{"sha1":"95:51:3A:74:B2:D6:48:05:37:67:B4:98:88:41:81:F2:F0:9E:EC:4E","sha256":"27:A0:25:F5:B2:3F:C8:25:B7:BF:72:41:6C:48:6A:75:BC:C8:0D:C3:44:11:27:96:CE:FB:61:3D:59:34:73:06"}}},"request":{"raw":"GET /recaptcha/api.js?render=6LfhUZMtAAAAAOCWVhW340havzfC_SwnC4yozkYJ\u0026ver=3.0 HTTP/1.1\r\nHost: www.google.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://salsasiempre.live/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: text/javascript; charset=utf-8\r\nexpires: Wed, 23 Sep 2026 20:08:45 GMT\r\ndate: Wed, 23 Sep 2026 20:08:45 GMT\r\ncache-control: private, max-age=300\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy-report-only: same-origin; report-to=\"coop_38fac9d5b82543fc4729580d18ff2d3d\"\r\nreport-to: {\"group\":\"coop_38fac9d5b82543fc4729580d18ff2d3d\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/38fac9d5b82543fc4729580d18ff2d3d\"}]}\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":1010,"size_decoded":1315,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (1010), with no line terminators","md5":"54c1bb0b7af8856d67ed0cc1ca975177","sha1":"1dd7b467771da1599470a4771610f2c593567b4d","sha256":"44f729019969bd7cec0b715f831dc94b3a0b93d4f567c2490bc9e2a158646717","sha512":"87b5a171b4481c9f3061609b05d0ac66e8a506ea6ad145da1851c74bc541cc2d81558bc5971f4d573dd4018d775c2c4c6b340b658d5c65eb8fc2dfa4ba519861","ssdeep":"","tlshash":"cc1102b31914a0350b7209e5e1ffcb75e552701cf15845e8d925dad41eaaccbce05545","first_seen":"2026-09-23T19:56:10.482084Z","last_seen":"2026-09-23T20:10:01.37619Z","times_seen":2,"resource_available":true,"data":null}},"time_used":50,"timings":{"blocked":-1,"dns":3,"connect":25,"send":0,"wait":21,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtm.js?id=GTM-KJRN5VPN","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.178.104","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://salsasiempre.live/","date":"2026-09-23T20:08:45.355Z","timestamp":1790194125355,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Thu, 10 Sep 2026 19:22:00 GMT","end":"Thu, 03 Dec 2026 19:21:59 GMT"},"fingerprint":{"sha1":"B5:A9:73:B1:2A:AF:94:D5:A0:C0:EA:89:DD:CE:A1:FA:42:73:60:6A","sha256":"E1:A3:36:34:1F:D9:00:D3:1E:44:B3:36:C7:25:67:04:1A:16:2E:AA:54:82:D9:66:4C:D3:1A:BA:FD:0F:9A:C2"}}},"request":{"raw":"GET /gtm.js?id=GTM-KJRN5VPN HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://salsasiempre.live/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: zstd\r\nvary: Accept-Encoding\r\ndate: Wed, 23 Sep 2026 20:08:45 GMT\r\nexpires: Wed, 23 Sep 2026 20:08:45 GMT\r\ncache-control: private, max-age=900\r\nlast-modified: Wed, 23 Sep 2026 19:52:05 GMT\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\nserver: Google Tag Manager\r\ncontent-length: 123307\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":352551,"size_decoded":123957,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (5041)","md5":"783927c1d9b8d8f907ee981f6ae0c306","sha1":"68f293c9af39a59e64fdfcbecbabb552807c70af","sha256":"92d78ee1758301366c4e068079ad2beae087ad1754158860db5d5d7caba526b7","sha512":"371bb9e69566c4b6d57b8c688a0f780eaa6662571b3fc10e100d6172ca10bce30087dac9b90e537cb0750bdf9c0c838b71d06bb8227964da26ccf59c56119113","ssdeep":"6144:z71HUwElw7RHndAcUabxE+B3advLh14UB5m:hYwSLhO","tlshash":"d07408ccb7d6742283a3b574503f018bb27a79a2b84cc898f286e9d42d7465a4177f7c","first_seen":"2026-09-23T20:10:01.377259Z","last_seen":"2026-09-23T20:10:01.377259Z","times_seen":1,"resource_available":true,"data":null}},"time_used":134,"timings":{"blocked":0,"dns":2,"connect":15,"send":0,"wait":42,"receive":43,"ssl":32},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"salsasiempre.live/wp-content/uploads/2023/04/cropped-fav-salsasiempre3-32x32.png","fqdn":"salsasiempre.live","domain":"salsasiempre.live","tld":"live"},"ip":{"addr":"104.21.16.74","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://salsasiempre.live/","date":"2026-09-23T20:08:46.089Z","timestamp":1790194126089,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"salsasiempre.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 27 Jul 2026 18:03:30 GMT","end":"Sun, 25 Oct 2026 19:02:05 GMT"},"fingerprint":{"sha1":"60:D3:B1:F9:B7:A7:CE:68:D7:19:24:D9:4B:8B:85:6D:0B:8D:99:D3","sha256":"22:3E:3E:6D:A5:95:E5:BE:22:F5:ED:E8:1B:A9:51:E8:91:69:F5:C0:67:41:84:4C:39:B5:5A:DA:B2:85:35:90"}}},"request":{"raw":"GET /wp-content/uploads/2023/04/cropped-fav-salsasiempre3-32x32.png HTTP/1.1\r\nHost: salsasiempre.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://salsasiempre.live/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Wed, 23 Sep 2026 20:08:46 GMT\r\ncontent-type: image/webp\r\npriority: u=6,i=?0\r\ncf-ray: a3fc2ee80a5f0b49-OSL\r\ncf-cache-status: BYPASS\r\naccept-ranges: bytes\r\ncache-control: private\r\nexpires: Thu, 23 Sep 2027 20:08:46 GMT\r\nlast-modified: Mon, 23 Oct 2023 22:00:00 GMT\r\nserver: cloudflare\r\nvary: User-Agent,Accept-Encoding,Accept\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-litespeed-cache-control: no-cache\r\nx-turbo-charged-by: LiteSpeed\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=TI%2BVvfyOxzBjI5V%2BKiYoYfNi0hyKfGijnKw9Ysl%2BlMmIP%2Bjt21w23o%2B%2F5jVwRr2o1YfcYSHbZLd9cn9Sq05HHWpdPIQxOWVH%2BRGLpY16vBI%2FFTAoKIYMYomUH59SxjoOK6Y%2BrA%3D%3D\"}]}\r\ncontent-length: 844\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":844,"size_decoded":1675,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"8ae5bc9728c94da2f619a2fd7890d51d","sha1":"40f2c55635fda92378f9b109d2662098537461a2","sha256":"20027aaadb8c2df351c10e2466286030b5d3e5d97beda49d86d83f1e941c51d7","sha512":"b1f636b155a932667d1ff4b98d29d73d5f026795fd84a557d64bc5291bb813f370c82cc9a52a753a55b6d44e800ad97d674b4a844fc185fc2cdc64d3685d50cd","ssdeep":"","tlshash":"71018651a7cfdab4841bf9128dd0d1384f1ca5a91ae2993312dd4c60c2496c9a8bdad3","first_seen":"2026-09-23T19:56:10.526381Z","last_seen":"2026-09-23T20:10:01.378617Z","times_seen":2,"resource_available":false,"data":null}},"time_used":179,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":179,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"salsasiempre.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"salsasiempre.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"salsasiempre.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"salsasiempre.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-23","alert":"Phishing Block","trigger":"salsasiempre.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"salsasiempre.live/wp-content/cache/min/1/wp-content/plugins/timetable/style/responsive.css?ver=1790191063","fqdn":"salsasiempre.live","domain":"salsasiempre.live","tld":"live"},"ip":{"addr":"104.21.16.74","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://salsasiempre.live/","date":"2026-09-23T20:08:45.093Z","timestamp":1790194125093,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"salsasiempre.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 27 Jul 2026 18:03:30 GMT","end":"Sun, 25 Oct 2026 19:02:05 GMT"},"fingerprint":{"sha1":"60:D3:B1:F9:B7:A7:CE:68:D7:19:24:D9:4B:8B:85:6D:0B:8D:99:D3","sha256":"22:3E:3E:6D:A5:95:E5:BE:22:F5:ED:E8:1B:A9:51:E8:91:69:F5:C0:67:41:84:4C:39:B5:5A:DA:B2:85:35:90"}}},"request":{"raw":"GET /wp-content/cache/min/1/wp-content/plugins/timetable/style/responsive.css?ver=1790191063 HTTP/1.1\r\nHost: salsasiempre.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://salsasiempre.live/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=USSOr3kTB1Kn9rxsTerFsJ%2BvtZkmgN3XKzYrcOKJulemo7mpEgF38%2F97YD17eRSY0eRk2w3dG%2FSkqeIidXcinSJ8lqvrqyxYB8qNMLsBYwbRE31gZXI9ZhoMkzPnZ2WkcA75yw%3D%3D\"}]}\r\ndate: Wed, 23 Sep 2026 20:08:45 GMT\r\ncontent-type: text/css; charset=UTF-8\r\npriority: u=2,i=?0\r\ncf-ray: a3fc2ee1d99a0b49-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 829\r\ncache-control: public, max-age=31536000\r\ncontent-encoding: br\r\nexpires: Thu, 23 Sep 2027 19:54:55 GMT\r\nlast-modified: Wed, 23 Sep 2026 19:17:43 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding,User-Agent,Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":6183,"size_decoded":1946,"mime_type":"text/css; charset=UTF-8","magic":"ASCII text, with very long lines (6183), with no line terminators","md5":"a80ed9c747e00c886fee98fc5edf4237","sha1":"199d7ee13aabff76c7487ee1a3a8d85fec3df4b5","sha256":"2035fba11d725f1179c270585b7891f81871b28df2ec0ad83e4b1e6ee8b9f8d3","sha512":"67e1492c603413d1a2bc05f9e1591690dc75003b84b3537ea1bd39c0fc7749195849fc695dc8751523285c11fec82d61fc861d0b329d870c5f7177d9ce4ba7f4","ssdeep":"192:Fhobb9hfX1K1/1vx1OVBCc17G767sa7a3TmFRQsr1UDpWGTZ1E:Fibb9q3ESc","tlshash":"dad1bd83f970727f625f193efbc291aeb3392b86235576a6a503ddb8c3447810177604","first_seen":"2025-07-03T03:02:39.074201Z","last_seen":"2026-09-23T20:10:01.380312Z","times_seen":38,"resource_available":true,"data":null}},"time_used":95,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":95,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"salsasiempre.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"salsasiempre.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"salsasiempre.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"salsasiempre.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-23","alert":"Phishing Block","trigger":"salsasiempre.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"salsasiempre.live/wp-content/cache/min/1/wp-content/themes/vibez/assets/css/ion-icons/css/ionicons.min.css?ver=1790191063","fqdn":"salsasiempre.live","domain":"salsasiempre.live","tld":"live"},"ip":{"addr":"104.21.16.74","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://salsasiempre.live/","date":"2026-09-23T20:08:45.104Z","timestamp":1790194125104,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"salsasiempre.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 27 Jul 2026 18:03:30 GMT","end":"Sun, 25 Oct 2026 19:02:05 GMT"},"fingerprint":{"sha1":"60:D3:B1:F9:B7:A7:CE:68:D7:19:24:D9:4B:8B:85:6D:0B:8D:99:D3","sha256":"22:3E:3E:6D:A5:95:E5:BE:22:F5:ED:E8:1B:A9:51:E8:91:69:F5:C0:67:41:84:4C:39:B5:5A:DA:B2:85:35:90"}}},"request":{"raw":"GET /wp-content/cache/min/1/wp-content/themes/vibez/assets/css/ion-icons/css/ionicons.min.css?ver=1790191063 HTTP/1.1\r\nHost: salsasiempre.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://salsasiempre.live/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=HJmyjiFeOQpEDk4FmZc9m8nZfMD7S9vzUFwQWohuqsB64Rq5nJ2NqFC%2FbOSzKEay3I%2Bs6fXqdJIYiMEYyCWUzRQuFVZtj9n2EhM2HJ3gisOyChldKMZADF0FSQiIIpFBEnfq%2BA%3D%3D\"}]}\r\ndate: Wed, 23 Sep 2026 20:08:45 GMT\r\ncontent-type: text/css; charset=UTF-8\r\npriority: u=2,i=?0\r\ncf-ray: a3fc2ee1e9a20b49-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 829\r\ncache-control: public, max-age=31536000\r\ncontent-encoding: br\r\nexpires: Thu, 23 Sep 2027 19:54:55 GMT\r\nlast-modified: Wed, 23 Sep 2026 19:17:43 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding,User-Agent,Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":51594,"size_decoded":8415,"mime_type":"text/css; charset=UTF-8","magic":"Unicode text, UTF-8 text, with very long lines (51113)","md5":"a60b31a335064cda75b19430006b70d9","sha1":"d0d792bfa3198a73700e5ca74a409767f422c0cc","sha256":"113e8c64d9eab712b1b5ce84604a8bca10a9e416ae8a97499f7c0987c08299d0","sha512":"dea2f547108b2bd3fdba891b5191e8b6da357be953bd337811b92a308ebaf741588d4b7963008c44f9d6566c40d8ecb745ac336a569cf3dad5f803e8584ca0b0","ssdeep":"384:048B+hhJhjRqFdtYRIJIjsjaHnNfc2C4741mf5HRzb:04rhhjQFduRIJ7uHFcu7Smf5xzb","tlshash":"0033fbe4d20c0dd0ab35c407ab49674858b5f7fbe5584ca8e42fd4ac39cb224a3e5b6d","first_seen":"2026-09-23T19:56:10.516772Z","last_seen":"2026-09-23T20:10:01.383855Z","times_seen":2,"resource_available":true,"data":null}},"time_used":59,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":59,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"salsasiempre.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-23","alert":"Phishing Block","trigger":"salsasiempre.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"salsasiempre.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"salsasiempre.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"salsasiempre.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"salsasiempre.live/wp-content/themes/vibez/assets/css/font-awesome/fonts/fontawesome-webfont.woff2?v=4.7.0","fqdn":"salsasiempre.live","domain":"salsasiempre.live","tld":"live"},"ip":{"addr":"104.21.16.74","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://salsasiempre.live/","date":"2026-09-23T20:08:45.415Z","timestamp":1790194125415,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"salsasiempre.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 27 Jul 2026 18:03:30 GMT","end":"Sun, 25 Oct 2026 19:02:05 GMT"},"fingerprint":{"sha1":"60:D3:B1:F9:B7:A7:CE:68:D7:19:24:D9:4B:8B:85:6D:0B:8D:99:D3","sha256":"22:3E:3E:6D:A5:95:E5:BE:22:F5:ED:E8:1B:A9:51:E8:91:69:F5:C0:67:41:84:4C:39:B5:5A:DA:B2:85:35:90"}}},"request":{"raw":"GET /wp-content/themes/vibez/assets/css/font-awesome/fonts/fontawesome-webfont.woff2?v=4.7.0 HTTP/1.1\r\nHost: salsasiempre.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://salsasiempre.live/wp-content/cache/min/1/wp-content/themes/vibez/assets/css/font-awesome/css/font-awesome.min.css?ver=1790191063\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Wed, 23 Sep 2026 20:08:45 GMT\r\ncontent-type: font/woff2\r\npriority: u=3,i=?0\r\ncf-ray: a3fc2ee3d9e80b49-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 826\r\ncache-control: public, max-age=10368000\r\nexpires: Thu, 21 Jan 2027 19:54:58 GMT\r\nlast-modified: Sun, 22 Oct 2023 22:00:00 GMT\r\nserver: cloudflare\r\nvary: User-Agent,Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=SkPHkv4MWe8d5sETpxIZadfRaFZ7duGW39kIs%2B4MdRsWRgR3oG5HsM8nj2zv7xyuplvwsGDOmOnh3GLxTkODoio2q1iaQKUUh3aQM%2B8fGUw6HaZ1iFyxtMyoSituKrHwSkK3lA%3D%3D\"}]}\r\ncontent-length: 77160\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":77160,"size_decoded":77959,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 77160, version 4.459","md5":"af7ae505a9eed503f8b8e6982036873e","sha1":"d6f48cba7d076fb6f2fd6ba993a75b9dc1ecbf0c","sha256":"2adefcbc041e7d18fcf2d417879dc5a09997aa64d675b7a3c4b6ce33da13f3fe","sha512":"838fefdbc14901f41edf995a78fdac55764cd4912ccb734b8bea4909194582904d8f2afdf2b6c428667912ce4d65681a1044d045d1bc6de2b14113f0315fc892","ssdeep":"1536:/MkbAPfd1vyBKwHz4kco36ZvIaBfRPlajyXUA2jVTc:L0nXnHdfRVEAS2","tlshash":"7d7302e63b6c4943e03d6460708abe9f104b3ab42fe057e5c876db7f2722992b71552c","first_seen":"2023-04-05T03:30:47Z","last_seen":"2026-09-23T21:34:22.750172Z","times_seen":543828,"resource_available":false,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":19,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"salsasiempre.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"salsasiempre.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"salsasiempre.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"salsasiempre.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-23","alert":"Phishing Block","trigger":"salsasiempre.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/oswald/v57/TK3iWkUHHAIjg752GT8G.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://salsasiempre.live/","date":"2026-09-23T20:08:45.515Z","timestamp":1790194125515,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Thu, 10 Sep 2026 19:23:28 GMT","end":"Thu, 03 Dec 2026 19:23:27 GMT"},"fingerprint":{"sha1":"99:42:CC:AA:D1:36:35:7D:FF:39:32:44:00:41:07:B9:D3:00:EE:31","sha256":"48:CD:EE:73:11:77:6B:F0:EE:10:C6:1D:DF:58:7C:4B:88:0D:95:F3:9C:64:15:44:E2:93:5B:17:4F:6A:8E:6E"}}},"request":{"raw":"GET /s/oswald/v57/TK3iWkUHHAIjg752GT8G.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://salsasiempre.live\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 28488\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 21 Sep 2026 15:52:42 GMT\r\nexpires: Tue, 21 Sep 2027 15:52:42 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Wed, 10 Sep 2025 16:46:11 GMT\r\ncontent-type: font/woff2\r\nage: 188163\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":28488,"size_decoded":29301,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 28488, version 1.0","md5":"22c3b00d2e65fb2c876a292423108958","sha1":"3c61d84659817fef687045bbfa0e1da9568e164b","sha256":"bd73278ee0c50041b91b4c03d1229e35b501637f46b6409e7da2d3a758446ea5","sha512":"33954d8a7ed3c87b3af8577bbae9439b9efba2a64445463d893681dad085bb8630d31c995ce010510a9c732926017dba9d5fd5002d0000ec1488b61889d6ddfe","ssdeep":"384:jlzdJfoB5YJ2kG1CdQegm8m00xr19KB668/BOTqE85gyqvPA34uEomcGvpMwvg84:jlzdyBzhIb0u1QB6vBOv8uvPAovJCs4","tlshash":"cfd2e0195e9673efe4552d3ea830affe91e32aad30507162c5db6c1155c438bc8e4ec4","first_seen":"2025-09-11T19:05:43.498829Z","last_seen":"2026-09-23T22:15:34.279276Z","times_seen":35584,"resource_available":false,"data":null}},"time_used":58,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":36,"receive":22,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"salsasiempre.live/wp-content/uploads/2026/07/Dominika-Szczesniak-Rosiak-96.png","fqdn":"salsasiempre.live","domain":"salsasiempre.live","tld":"live"},"ip":{"addr":"104.21.16.74","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://salsasiempre.live/","date":"2026-09-23T20:08:45.841Z","timestamp":1790194125841,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"salsasiempre.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 27 Jul 2026 18:03:30 GMT","end":"Sun, 25 Oct 2026 19:02:05 GMT"},"fingerprint":{"sha1":"60:D3:B1:F9:B7:A7:CE:68:D7:19:24:D9:4B:8B:85:6D:0B:8D:99:D3","sha256":"22:3E:3E:6D:A5:95:E5:BE:22:F5:ED:E8:1B:A9:51:E8:91:69:F5:C0:67:41:84:4C:39:B5:5A:DA:B2:85:35:90"}}},"request":{"raw":"GET /wp-content/uploads/2026/07/Dominika-Szczesniak-Rosiak-96.png HTTP/1.1\r\nHost: salsasiempre.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://salsasiempre.live/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Wed, 23 Sep 2026 20:08:46 GMT\r\ncontent-type: image/webp\r\npriority: u=5,i\r\ncf-ray: a3fc2ee68a2e0b49-OSL\r\ncf-cache-status: BYPASS\r\naccept-ranges: bytes\r\ncache-control: private\r\nexpires: Thu, 23 Sep 2027 20:08:45 GMT\r\nlast-modified: Fri, 10 Jul 2026 08:22:13 GMT\r\nserver: cloudflare\r\nvary: User-Agent,Accept-Encoding,Accept\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-litespeed-cache-control: no-cache\r\nx-turbo-charged-by: LiteSpeed\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=WrdF7TLLLNII%2FWKQr9MEA%2BZD97a1S9xscZQCs1lyP6pk0qZH5YQ3mex2tXQN8V0tVaQ3qnjjJFM5mjBBXCnnbOcdFAimS1htw8N9U%2FOqUyLyHn9qK0LEMDiJ5dNPFqkwqELGCQ%3D%3D\"}]}\r\ncontent-length: 112636\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":112636,"size_decoded":113455,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 1920x1080, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"4329d7b7c94b8d0a1420af73c11f97ee","sha1":"9417994bc784be637550ed170cd61cd479adf87c","sha256":"c391c5a063a62973767894bc8b9b6975c23991b3ccb2b771bbaff00e565db02a","sha512":"d640824280cc5db34ebc0d04066b8755923f00e88910ecf6be506567a08581c14e6a91134b1bc0683031da1d95e86484285da51a8371ca237f174ce51a60c939","ssdeep":"3072:IDcxWZso3OqwywivWgBsvGF2VMNdmZ3JxDObm3N:IDcxq33OmvWgX2VB3zDOmd","tlshash":"dbb3124db1453f52faf809a983c9bcfc107f1aaa8596085962174123e5ff426c0f31a7","first_seen":"2026-09-23T19:56:10.429772Z","last_seen":"2026-09-23T20:10:01.392919Z","times_seen":2,"resource_available":false,"data":null}},"time_used":307,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":228,"receive":79,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"salsasiempre.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"salsasiempre.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"salsasiempre.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"salsasiempre.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-23","alert":"Phishing Block","trigger":"salsasiempre.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"salsasiempre.live/wp-content/themes/vibez/style.css?ver=7.1.2","fqdn":"salsasiempre.live","domain":"salsasiempre.live","tld":"live"},"ip":{"addr":"104.21.16.74","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://salsasiempre.live/","date":"2026-09-23T20:08:45.095Z","timestamp":1790194125095,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"salsasiempre.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 27 Jul 2026 18:03:30 GMT","end":"Sun, 25 Oct 2026 19:02:05 GMT"},"fingerprint":{"sha1":"60:D3:B1:F9:B7:A7:CE:68:D7:19:24:D9:4B:8B:85:6D:0B:8D:99:D3","sha256":"22:3E:3E:6D:A5:95:E5:BE:22:F5:ED:E8:1B:A9:51:E8:91:69:F5:C0:67:41:84:4C:39:B5:5A:DA:B2:85:35:90"}}},"request":{"raw":"GET /wp-content/themes/vibez/style.css?ver=7.1.2 HTTP/1.1\r\nHost: salsasiempre.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://salsasiempre.live/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=5Ir9GKQmq%2FY9gftk%2F%2BF9oL7tyRwZN5cFoT6wDM0orkTG20fh1LwbRE0Tjxvup8%2FydhdERuQSYPb5eA3jZ6dcktM29KhFDDoEorxyCihTK8msYUgrBNW1OD83xtiUMINw3EjWyg%3D%3D\"}]}\r\ndate: Wed, 23 Sep 2026 20:08:45 GMT\r\ncontent-type: text/css; charset=UTF-8\r\npriority: u=2,i=?0\r\ncf-ray: a3fc2ee1d99b0b49-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 829\r\ncache-control: public, max-age=31536000\r\ncontent-encoding: br\r\nexpires: Thu, 23 Sep 2027 19:54:55 GMT\r\nlast-modified: Sun, 22 Oct 2023 22:00:00 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding,User-Agent,Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":681,"size_decoded":1201,"mime_type":"text/css; charset=UTF-8","magic":"ASCII text","md5":"208ab9782031100295659bedbda447b6","sha1":"ae68b67d3ed867eb4822a5a30334e728cb0e1a66","sha256":"7963c85b9fd0b505561713189aca3beaa3db5ba9593fc6b9ef7232e8ef13bd08","sha512":"a8255ebe90d83f7e7cd20727f5864d32d5dc53d72382389bc3d9fdb3d5183050ce61c21d6d5e645624bc670b20bc21a8cb7da192353f1af25e2c4b4ae5d9f80a","ssdeep":"","tlshash":"5101fe0e3e7e65a512b54282bbf55646e74fd3c0a2d804f0f68f880606d2f1725f8a48","first_seen":"2025-10-31T21:55:31.251484Z","last_seen":"2026-09-23T20:10:01.39401Z","times_seen":6,"resource_available":true,"data":null}},"time_used":47,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":47,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"salsasiempre.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"salsasiempre.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"salsasiempre.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"salsasiempre.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-23","alert":"Phishing Block","trigger":"salsasiempre.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"salsasiempre.live/wp-content/cache/min/1/wp-content/plugins/revslider/public/assets/css/rs6.css?ver=1790191063","fqdn":"salsasiempre.live","domain":"salsasiempre.live","tld":"live"},"ip":{"addr":"104.21.16.74","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://salsasiempre.live/","date":"2026-09-23T20:08:45.118Z","timestamp":1790194125118,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"salsasiempre.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 27 Jul 2026 18:03:30 GMT","end":"Sun, 25 Oct 2026 19:02:05 GMT"},"fingerprint":{"sha1":"60:D3:B1:F9:B7:A7:CE:68:D7:19:24:D9:4B:8B:85:6D:0B:8D:99:D3","sha256":"22:3E:3E:6D:A5:95:E5:BE:22:F5:ED:E8:1B:A9:51:E8:91:69:F5:C0:67:41:84:4C:39:B5:5A:DA:B2:85:35:90"}}},"request":{"raw":"GET /wp-content/cache/min/1/wp-content/plugins/revslider/public/assets/css/rs6.css?ver=1790191063 HTTP/1.1\r\nHost: salsasiempre.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://salsasiempre.live/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=8V9brCg4t84yPuEDpQSSq3e1Z%2FybGYcFfgdlXOQO77cLXQknTAHEkPNBr1GVxMnYnaeLe1Uq1Os3kYvjXvvbhCVa74vpWJJrMSbBWv7b04WSgfX8HfVDhhmUY29rU0CJzLvziA%3D%3D\"}]}\r\ndate: Wed, 23 Sep 2026 20:08:45 GMT\r\ncontent-type: text/css; charset=UTF-8\r\npriority: u=2,i=?0\r\ncf-ray: a3fc2ee1f9ac0b49-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 829\r\ncache-control: public, max-age=31536000\r\ncontent-encoding: br\r\nexpires: Thu, 23 Sep 2027 19:54:55 GMT\r\nlast-modified: Wed, 23 Sep 2026 19:17:43 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding,User-Agent,Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":50332,"size_decoded":9965,"mime_type":"text/css; charset=UTF-8","magic":"ASCII text, with very long lines (50332), with no line terminators","md5":"94a11768fb12a7d1b1ffbbbc4bb04e4c","sha1":"2fd04182c459d0f12a487bd45090f54dc22b70a7","sha256":"c0e822f1013c5554a73d186c1c2b2eb2942fdc85e037c794ac03860ca2e922b2","sha512":"932aeb1b16222bb29ff44c6383274c0179eea54d218d6cfce2e7e3559776d104b0853fd6c8f8ee4c25f558652a382f7ad2074c0e6c311c955823072454a143cb","ssdeep":"1536:oi9s+kBC+QpRBy970mUhEMghSk5h5rEUUrIUkx0+8rkUIpLM+IrAI9dHvQrT:o8kBC+QY4E","tlshash":"8033c871a8a421bd632bc541e3cc0b595529cd23fb530d9ef61b322e839b5ca257e34e","first_seen":"2023-04-18T19:41:38Z","last_seen":"2026-09-23T20:10:01.395206Z","times_seen":36,"resource_available":true,"data":null}},"time_used":55,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":55,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"salsasiempre.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"salsasiempre.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"salsasiempre.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-23","alert":"Phishing Block","trigger":"salsasiempre.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"salsasiempre.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"salsasiempre.live/wp-content/plugins/revslider/public/assets/js/rbtools.min.js?ver=6.5.18","fqdn":"salsasiempre.live","domain":"salsasiempre.live","tld":"live"},"ip":{"addr":"104.21.16.74","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://salsasiempre.live/","date":"2026-09-23T20:08:45.120Z","timestamp":1790194125120,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"salsasiempre.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 27 Jul 2026 18:03:30 GMT","end":"Sun, 25 Oct 2026 19:02:05 GMT"},"fingerprint":{"sha1":"60:D3:B1:F9:B7:A7:CE:68:D7:19:24:D9:4B:8B:85:6D:0B:8D:99:D3","sha256":"22:3E:3E:6D:A5:95:E5:BE:22:F5:ED:E8:1B:A9:51:E8:91:69:F5:C0:67:41:84:4C:39:B5:5A:DA:B2:85:35:90"}}},"request":{"raw":"GET /wp-content/plugins/revslider/public/assets/js/rbtools.min.js?ver=6.5.18 HTTP/1.1\r\nHost: salsasiempre.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://salsasiempre.live/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Wed, 23 Sep 2026 20:08:45 GMT\r\ncontent-encoding: zstd\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\ncache-control: public, max-age=86400\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=U3wnc6XbiJKmtpuxx7n8YogGk%2BcQDSLcYfrdyRGmv7VoDXGSA8SKRGuEynYfZqneSJX0iZjuUV16xSYkrp2uYfXGBPStp5%2F1kE8YAdFeODA7bgy6MTnixJpYKj5%2Bky20RjnW6Q%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: a3fc2ee209af0b49-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":128668,"size_decoded":51817,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (45108)","md5":"fb0dc63ed31433d3e16526f9e415d57e","sha1":"3d4029b9f66e3f3c086eba04a02c140660a94acb","sha256":"559f367b8631134334b4870bed568b019af144c801b574a252e337d4e837a05a","sha512":"4ac5f5ad6fffb12bb24061529af19507896ac0ab9ed93fd69a6b674e64ef6fdf4a63f4d5fbb625c5d1eebef88c419f3d71b0faedbbafb7058a624baaca71f04e","ssdeep":"1536:xrex7yX+Iz6ZKQpn8qwuQTBfvk6RtmSkgHJpZ7t0Zif/8m/xwYE/uVEmgX6wvBpL:lz6twBfvk4t55CifEm/Y+E1XXBNJqu","tlshash":"cbc34cdd7251b432129626a5452f0a0ff23b9d19740b452cf368e4c87d389a990fffba","first_seen":"2023-03-07T01:07:22Z","last_seen":"2026-09-23T20:10:01.395925Z","times_seen":4006,"resource_available":true,"data":null}},"time_used":41,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":39,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"salsasiempre.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"salsasiempre.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"salsasiempre.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"salsasiempre.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-23","alert":"Phishing Block","trigger":"salsasiempre.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"salsasiempre.live/wp-content/cache/min/1/wp-content/plugins/contact-form-7/modules/recaptcha/index.js?ver=1790191063","fqdn":"salsasiempre.live","domain":"salsasiempre.live","tld":"live"},"ip":{"addr":"104.21.16.74","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://salsasiempre.live/","date":"2026-09-23T20:08:45.144Z","timestamp":1790194125144,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"salsasiempre.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 27 Jul 2026 18:03:30 GMT","end":"Sun, 25 Oct 2026 19:02:05 GMT"},"fingerprint":{"sha1":"60:D3:B1:F9:B7:A7:CE:68:D7:19:24:D9:4B:8B:85:6D:0B:8D:99:D3","sha256":"22:3E:3E:6D:A5:95:E5:BE:22:F5:ED:E8:1B:A9:51:E8:91:69:F5:C0:67:41:84:4C:39:B5:5A:DA:B2:85:35:90"}}},"request":{"raw":"GET /wp-content/cache/min/1/wp-content/plugins/contact-form-7/modules/recaptcha/index.js?ver=1790191063 HTTP/1.1\r\nHost: salsasiempre.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://salsasiempre.live/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Wed, 23 Sep 2026 20:08:45 GMT\r\ncontent-encoding: zstd\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\ncache-control: public, max-age=86400\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=jyD0EmhBMwP2YCot6soB6ZvmVMmP%2FrDLXic%2FYjOgwjrbHamdo9Ul3Qb%2BSGOxUNwJyDiFX0lLqy36RkJp8E733kxI8ZgjRy%2Bz4Gw6voVGYJP8o5UeKi3QwHc5JaR4yQGzQHtMYw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: a3fc2ee229c40b49-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":934,"size_decoded":1106,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (934), with no line terminators","md5":"ec0187677793456f98473f49d9e9b95f","sha1":"8c55e0f4a29865e871f3d54be8d480a0665891d9","sha256":"df0ec8330290d184b1084527076cb87d41b33ba706ff5ab579d761f0cb6a744b","sha512":"84b468de22634404405e52cda2844d626b4d47054739971d677f0e63fd683dcca100550419b945391236846df54b65fb43ee4d6e7f7692eb0d414584e2594108","ssdeep":"","tlshash":"9811e1305a3031740967ca6182eb53e1be31e461f0a3898159fc4e141f7ced598b3d86","first_seen":"2023-03-07T12:57:48Z","last_seen":"2026-09-23T21:49:04.261019Z","times_seen":114942,"resource_available":true,"data":null}},"time_used":54,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":54,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"salsasiempre.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"salsasiempre.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"salsasiempre.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"salsasiempre.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-23","alert":"Phishing Block","trigger":"salsasiempre.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/oswald/v57/TK3iWkUHHAIjg752GT8G.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://salsasiempre.live/","date":"2026-09-23T20:08:45.411Z","timestamp":1790194125411,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Thu, 10 Sep 2026 19:23:28 GMT","end":"Thu, 03 Dec 2026 19:23:27 GMT"},"fingerprint":{"sha1":"99:42:CC:AA:D1:36:35:7D:FF:39:32:44:00:41:07:B9:D3:00:EE:31","sha256":"48:CD:EE:73:11:77:6B:F0:EE:10:C6:1D:DF:58:7C:4B:88:0D:95:F3:9C:64:15:44:E2:93:5B:17:4F:6A:8E:6E"}}},"request":{"raw":"GET /s/oswald/v57/TK3iWkUHHAIjg752GT8G.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://salsasiempre.live\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 28488\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 21 Sep 2026 15:52:42 GMT\r\nexpires: Tue, 21 Sep 2027 15:52:42 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Wed, 10 Sep 2025 16:46:11 GMT\r\ncontent-type: font/woff2\r\nage: 188163\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":28488,"size_decoded":29301,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 28488, version 1.0","md5":"22c3b00d2e65fb2c876a292423108958","sha1":"3c61d84659817fef687045bbfa0e1da9568e164b","sha256":"bd73278ee0c50041b91b4c03d1229e35b501637f46b6409e7da2d3a758446ea5","sha512":"33954d8a7ed3c87b3af8577bbae9439b9efba2a64445463d893681dad085bb8630d31c995ce010510a9c732926017dba9d5fd5002d0000ec1488b61889d6ddfe","ssdeep":"384:jlzdJfoB5YJ2kG1CdQegm8m00xr19KB668/BOTqE85gyqvPA34uEomcGvpMwvg84:jlzdyBzhIb0u1QB6vBOv8uvPAovJCs4","tlshash":"cfd2e0195e9673efe4552d3ea830affe91e32aad30507162c5db6c1155c438bc8e4ec4","first_seen":"2025-09-11T19:05:43.498829Z","last_seen":"2026-09-23T22:15:34.279276Z","times_seen":35584,"resource_available":false,"data":null}},"time_used":125,"timings":{"blocked":34,"dns":0,"connect":0,"send":0,"wait":70,"receive":21,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"salsasiempre.live/wp-content/uploads/2026/09/Dominika-Szczesniak-Rosiak-2026-09-22T093045.921.png","fqdn":"salsasiempre.live","domain":"salsasiempre.live","tld":"live"},"ip":{"addr":"104.21.16.74","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://salsasiempre.live/","date":"2026-09-23T20:08:46.168Z","timestamp":1790194126168,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"salsasiempre.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 27 Jul 2026 18:03:30 GMT","end":"Sun, 25 Oct 2026 19:02:05 GMT"},"fingerprint":{"sha1":"60:D3:B1:F9:B7:A7:CE:68:D7:19:24:D9:4B:8B:85:6D:0B:8D:99:D3","sha256":"22:3E:3E:6D:A5:95:E5:BE:22:F5:ED:E8:1B:A9:51:E8:91:69:F5:C0:67:41:84:4C:39:B5:5A:DA:B2:85:35:90"}}},"request":{"raw":"GET /wp-content/uploads/2026/09/Dominika-Szczesniak-Rosiak-2026-09-22T093045.921.png HTTP/1.1\r\nHost: salsasiempre.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://salsasiempre.live/\r\nCookie: _ga_BT1HXCHHE7=GS2.1.s1790194126$o1$g0$t1790194126$j60$l0$h0; _ga=GA1.1.1712374491.1790194126\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Wed, 23 Sep 2026 20:08:46 GMT\r\ncontent-type: image/webp\r\npriority: u=5,i\r\ncf-ray: a3fc2ee89a660b49-OSL\r\ncf-cache-status: BYPASS\r\naccept-ranges: bytes\r\ncache-control: private\r\nexpires: Thu, 23 Sep 2027 20:08:46 GMT\r\nlast-modified: Tue, 22 Sep 2026 07:35:04 GMT\r\nserver: cloudflare\r\nvary: User-Agent,Accept-Encoding,Accept\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-litespeed-cache-control: no-cache\r\nx-turbo-charged-by: LiteSpeed\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2RAWpA73VBHHIuLBb8plzH62YiSmxVA76d4C%2FIaSlTg7VPEdueEdisZRxWaeUiDL6lCbx8kJn%2BZboPVYAN0c02Ks%2FJ5o45KdeFW37j4K1Ze%2FcsNDHMWUb8djx%2F9IOnoAl61kaA%3D%3D\"}]}\r\ncontent-length: 163278\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":163278,"size_decoded":164101,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 1920x1080, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"90dc6ca5098e821d984f525f9cac0361","sha1":"b6e5ff7662ab20c4b45069beb2ed3be0a27a1e31","sha256":"b654073bea72d83c63018abe6f42e30cfee7f7622c23f3c000f1f1965f9b0113","sha512":"1784d1a8a675fb1492a3e757c08c28b380307ed6cbf620651dd4a1b6b284225a7253031bcb9ec04d42f36f2e5d098e990b98c0278edd73893fd9f6ceda119206","ssdeep":"3072:YrMsUB0oBthk+O5pwhbgEHnkAoqTIUpps3NFLaAeD0TSqbJq6DEWeW3e:McHBthxO5pwthUFG1QSq9DEWeW3e","tlshash":"7bf313bf55ed66e1c6e5fe641400958a23ad0bfe8b209748e90d7d04f0b093b5e6a44f","first_seen":"2026-09-23T19:56:10.48012Z","last_seen":"2026-09-23T20:10:01.397346Z","times_seen":2,"resource_available":false,"data":null}},"time_used":338,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":253,"receive":85,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"salsasiempre.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"salsasiempre.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"salsasiempre.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"salsasiempre.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-23","alert":"Phishing Block","trigger":"salsasiempre.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"salsasiempre.live/","fqdn":"salsasiempre.live","domain":"salsasiempre.live","tld":"live"},"ip":{"addr":"104.21.16.74","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-09-23T20:08:44.313Z","timestamp":1790194124313,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"salsasiempre.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 27 Jul 2026 18:03:30 GMT","end":"Sun, 25 Oct 2026 19:02:05 GMT"},"fingerprint":{"sha1":"60:D3:B1:F9:B7:A7:CE:68:D7:19:24:D9:4B:8B:85:6D:0B:8D:99:D3","sha256":"22:3E:3E:6D:A5:95:E5:BE:22:F5:ED:E8:1B:A9:51:E8:91:69:F5:C0:67:41:84:4C:39:B5:5A:DA:B2:85:35:90"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: salsasiempre.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ka8epKSOKFQqCM8wycFK5lkYjRbtwKqnYNZ%2FDu%2BzW47p%2BwMZeF3v4Xx1mOZZftiJ2V8yjTeNxWOCIW%2Bb%2FwcJhqTW4lbujozSKZ3ZIC4GJhsmKP1oRvtq54gRBDJVDKyP7BP%2F9w%3D%3D\"}]}\r\ndate: Wed, 23 Sep 2026 20:08:44 GMT\r\ncontent-type: text/html; charset=UTF-8\r\ncontent-encoding: zstd\r\ncf-ray: a3fc2edd895d0b49-OSL\r\ncf-cache-status: DYNAMIC\r\ncache-control: public, max-age=0\r\npriority: u=0,i\r\nexpires: Wed, 23 Sep 2026 20:08:44 GMT\r\nlast-modified: Wed, 23 Sep 2026 19:19:26 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding,User-Agent,Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-powered-by: PHP/7.4.33\r\nx-turbo-charged-by: LiteSpeed\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]},{"name":"reCAPTCHA","description":"reCAPTCHA is a free service from Google that helps protect websites from spam and abuse.","website":"https://www.google.com/recaptcha/","common_platform_enumeration":"","icon":"reCAPTCHA.svg","categories":["Security"]},{"name":"jQuery Migrate:3.4.1","description":"Query Migrate is a javascript library that allows you to preserve the compatibility of your jQuery code developed for versions of jQuery older than 1.9.","website":"https://github.com/jquery/jquery-migrate","common_platform_enumeration":"","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"waitForImages","description":"waitForImages is a lightweight, high-performance JavaScript library that simplifies the handling of image preloading events.","website":"https://github.com/alexanderdickson/waitForImages","common_platform_enumeration":"","icon":"","categories":["JavaScript libraries"]},{"name":"Contact Form 7","description":"Contact Form 7 is an WordPress plugin which can manage multiple contact forms. The form supports Ajax-powered submitting, CAPTCHA, Akismet spam filtering.","website":"https://contactform7.com","common_platform_enumeration":"","icon":"Contact Form 7.png","categories":["WordPress plugins","Form builders"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"WordPress:7.1.2","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"WP Rocket","description":"WP Rocket is a caching and performance optimisation plugin to improve the loading speed of WordPress websites.","website":"https://wp-rocket.me","common_platform_enumeration":"","icon":"WP Rocket.png","categories":["Caching","WordPress plugins"]},{"name":"Slider Revolution:6.5.24","description":"Slider Revolution is a flexible and highly customisable slider.","website":"https://www.sliderrevolution.com","common_platform_enumeration":"","icon":"Slider Revolution.svg","categories":["Widgets","Photo galleries"]},{"name":"PHP:7.4.33","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"wpBakery","description":"WPBakery is a drag and drop visual page builder plugin for WordPress.","website":"https://wpbakery.com","common_platform_enumeration":"","icon":"wpBakery.svg","categories":["Page builders","WordPress plugins"]},{"name":"prettyPhoto","description":"","website":"https://no-margin-for-errors.com/projects/prettyphoto-jquery-lightbox-clone/","common_platform_enumeration":"","icon":"prettyPhoto.png","categories":["JavaScript libraries"]}],"data":{"size":196330,"size_decoded":37172,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (10490), with CRLF, LF line terminators","md5":"db25bd18551aeed5081687777a2dd669","sha1":"7f14761efeec1643715034d68b2fc2c7b93dbaf3","sha256":"c269917c5d34dfa0d1c22360380882bb598f4c1d81594971dd6229261fa4bbcc","sha512":"d30fd6c862decfd2576713de5fa6cf633f2f381f961aa8b63c9a3c973160a0f0801f378795f366619bf9b8ccd7ace3b603923a9a2ad7fe69431af4061609f37b","ssdeep":"3072:vFQHhfxDYHz/8fNzsZQFhWAs4dN420uyiAd3+rj74iAPvsbKMxJNPV3y83wpbvbY:vFQHJxCqK6hWAs4dO+b","tlshash":"4c14d8b279790a36053353c070697b1ca7ef945bef4186e0b3bc4a98b7c5da12612bdc","first_seen":"2026-09-23T19:56:10.435731Z","last_seen":"2026-09-23T20:10:01.398691Z","times_seen":2,"resource_available":true,"data":null}},"time_used":535,"timings":{"blocked":-1,"dns":34,"connect":52,"send":0,"wait":443,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-23","alert":"Phishing Block","trigger":"salsasiempre.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"salsasiempre.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"salsasiempre.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"salsasiempre.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"salsasiempre.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"salsasiempre.live/wp-content/cache/min/1/wp-content/themes/vibez/assets/css/style_dynamic_responsive.css?ver=1790191063","fqdn":"salsasiempre.live","domain":"salsasiempre.live","tld":"live"},"ip":{"addr":"104.21.16.74","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://salsasiempre.live/","date":"2026-09-23T20:08:45.112Z","timestamp":1790194125112,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"salsasiempre.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 27 Jul 2026 18:03:30 GMT","end":"Sun, 25 Oct 2026 19:02:05 GMT"},"fingerprint":{"sha1":"60:D3:B1:F9:B7:A7:CE:68:D7:19:24:D9:4B:8B:85:6D:0B:8D:99:D3","sha256":"22:3E:3E:6D:A5:95:E5:BE:22:F5:ED:E8:1B:A9:51:E8:91:69:F5:C0:67:41:84:4C:39:B5:5A:DA:B2:85:35:90"}}},"request":{"raw":"GET /wp-content/cache/min/1/wp-content/themes/vibez/assets/css/style_dynamic_responsive.css?ver=1790191063 HTTP/1.1\r\nHost: salsasiempre.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://salsasiempre.live/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=P8zN4Tzi2KoiPDkAeBAA0xDuPzWWyaMNoxqECoHXh4SxL5PthwXTZgG51odxIfHzBg1SasL%2Fc0H8bf5WO5DEthRa3DFWb%2BMrTjMg7vhuuQMXMzLdNtnRZm4Qb6IXUkCirK9Qbg%3D%3D\"}]}\r\ndate: Wed, 23 Sep 2026 20:08:45 GMT\r\ncontent-type: text/css; charset=UTF-8\r\npriority: u=2,i=?0\r\ncf-ray: a3fc2ee1f9a80b49-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 829\r\ncache-control: public, max-age=31536000\r\ncontent-encoding: br\r\nexpires: Thu, 23 Sep 2027 19:54:55 GMT\r\nlast-modified: Wed, 23 Sep 2026 19:17:43 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding,User-Agent,Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1025,"size_decoded":1024,"mime_type":"text/css; charset=UTF-8","magic":"ASCII text, with very long lines (1025), with no line terminators","md5":"4c566d8424f0634f73b3f915bd6863cd","sha1":"96875ee27bbb9bb2b8876862b7030c174233c2a4","sha256":"702c1ac6eb3bb993a89931a76cb468baf2ef5fdeb9a6aec2e4b0b156193c72dc","sha512":"310f5077f802362315883852cd61e138a7fadb40b6886853779d30c391c5acc4599c58df234643b4342079b7a52a9632870a6ed8f76e6549cd9553ed2d1a3993","ssdeep":"","tlshash":"aa11bc73f726617cb879482735403aa93358985f762654f5d9d0eaace2d02733a1278c","first_seen":"2026-09-23T19:56:10.505221Z","last_seen":"2026-09-23T20:10:01.40215Z","times_seen":2,"resource_available":true,"data":null}},"time_used":82,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":82,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"salsasiempre.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"salsasiempre.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"salsasiempre.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-23","alert":"Phishing Block","trigger":"salsasiempre.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"salsasiempre.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"salsasiempre.live/wp-content/plugins/wp-rocket/assets/js/lazyload/17.8.3/lazyload.min.js","fqdn":"salsasiempre.live","domain":"salsasiempre.live","tld":"live"},"ip":{"addr":"104.21.16.74","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://salsasiempre.live/","date":"2026-09-23T20:08:45.148Z","timestamp":1790194125148,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"salsasiempre.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 27 Jul 2026 18:03:30 GMT","end":"Sun, 25 Oct 2026 19:02:05 GMT"},"fingerprint":{"sha1":"60:D3:B1:F9:B7:A7:CE:68:D7:19:24:D9:4B:8B:85:6D:0B:8D:99:D3","sha256":"22:3E:3E:6D:A5:95:E5:BE:22:F5:ED:E8:1B:A9:51:E8:91:69:F5:C0:67:41:84:4C:39:B5:5A:DA:B2:85:35:90"}}},"request":{"raw":"GET /wp-content/plugins/wp-rocket/assets/js/lazyload/17.8.3/lazyload.min.js HTTP/1.1\r\nHost: salsasiempre.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://salsasiempre.live/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Wed, 23 Sep 2026 20:08:45 GMT\r\ncontent-encoding: zstd\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\ncache-control: public, max-age=86400\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=dp7f8k3qFIQAaeV3i07J2xhG%2FYslMyBaFrwy6X1NTuZGUY0OHK8cns00Qxe4eny3RVDDJpDz0mIovfZ8Xm5G5ewvU2R%2BCGQ0PmOl81tct9Y%2FAXtR7y%2BnW%2FYwSBB2RXtLprkHSQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: a3fc2ee229c60b49-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":8892,"size_decoded":3862,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (8892), with no line terminators","md5":"fb15a10a641a318f91e7e912e4f9c184","sha1":"bd41f67233facb96976ed7b8e7207d52c03d340e","sha256":"f40767552e5e94b2d5f9a65d7f640cfa7d225298023dbd682095e040809a3d1a","sha512":"49570d36e5b1ae3c3a4965f7d054258ff676326bee0d9399aa990926e9a762f699de1d09078debadc43b363ae51d740ba33f2e8c64bb223a73d3c62872ebb3d2","ssdeep":"192:pDvu5/2Pbq1Ztbat1oeeC9X8UnZ/HuuwJgbClRL/YeFG/uW1evaO3Ve:pTw/4QOx+R8puVY","tlshash":"b60233487946746b3973f0f6218f02ca353a24426ced6854a6e1f8e82d7858d1463f7d","first_seen":"2023-03-07T01:19:39Z","last_seen":"2026-09-23T22:03:40.897052Z","times_seen":76783,"resource_available":true,"data":null}},"time_used":47,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":47,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"salsasiempre.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"salsasiempre.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-23","alert":"Phishing Block","trigger":"salsasiempre.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"salsasiempre.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"salsasiempre.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"salsasiempre.live/wp-content/uploads/2023/04/kursy-main.jpg","fqdn":"salsasiempre.live","domain":"salsasiempre.live","tld":"live"},"ip":{"addr":"104.21.16.74","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://salsasiempre.live/","date":"2026-09-23T20:08:45.661Z","timestamp":1790194125661,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"salsasiempre.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 27 Jul 2026 18:03:30 GMT","end":"Sun, 25 Oct 2026 19:02:05 GMT"},"fingerprint":{"sha1":"60:D3:B1:F9:B7:A7:CE:68:D7:19:24:D9:4B:8B:85:6D:0B:8D:99:D3","sha256":"22:3E:3E:6D:A5:95:E5:BE:22:F5:ED:E8:1B:A9:51:E8:91:69:F5:C0:67:41:84:4C:39:B5:5A:DA:B2:85:35:90"}}},"request":{"raw":"GET /wp-content/uploads/2023/04/kursy-main.jpg HTTP/1.1\r\nHost: salsasiempre.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://salsasiempre.live/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Wed, 23 Sep 2026 20:08:45 GMT\r\ncontent-type: image/webp\r\npriority: u=5,i\r\ncf-ray: a3fc2ee56a160b49-OSL\r\ncf-cache-status: BYPASS\r\naccept-ranges: bytes\r\ncache-control: private\r\nexpires: Thu, 23 Sep 2027 20:08:45 GMT\r\nlast-modified: Mon, 23 Oct 2023 22:00:00 GMT\r\nserver: cloudflare\r\nvary: User-Agent,Accept-Encoding,Accept\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-litespeed-cache-control: no-cache\r\nx-turbo-charged-by: LiteSpeed\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=RjoOZPNqECCbaRt7c4X3WSsZoA6zEpkaBHe3%2BN2VbDLAcSuG7BNgNKLEkf%2BoHnJG2PZCjKbLO0Ma6i17BRMpeREG8Y41G%2Be5%2FQxu6Od%2Blzf8IZSCJscHZBCIQle4oT3zxcc2yg%3D%3D\"}]}\r\ncontent-length: 56250\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":56250,"size_decoded":57072,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 800x550, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"26cc63467748f429cfc856012cdc138d","sha1":"4ed667a4ea35af050f530b6c9d4fdd9aeba8f7ba","sha256":"abf36fff6e20b700693963c2ac333998ff940f725de13a721a8e86f529becbb4","sha512":"d32917dc1cacde74c0b9d07a34e00b2613abca5952b4483fd46629030a7ceb5cd70fd09153df53d74834beb9dd3b7803161eee86cb0af3aec7b1aac76514b4df","ssdeep":"1536:1Pr7fFbGWscT+EhNuQRzyD/kLVjSEZkrs:9FbGNA+QA1o+EZkrs","tlshash":"a443029272bdfb11f0eb1a6815aacdca0979a0e4700f5db412b8d7543d3da207347f06","first_seen":"2026-09-23T19:56:10.441849Z","last_seen":"2026-09-23T20:10:01.404553Z","times_seen":2,"resource_available":false,"data":null}},"time_used":290,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":255,"receive":35,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"salsasiempre.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-23","alert":"Phishing Block","trigger":"salsasiempre.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"salsasiempre.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"salsasiempre.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"salsasiempre.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.googletagmanager.com/gtag/js?id=G-BT1HXCHHE7\u0026cx=c\u0026gtm=4e69m0","fqdn":"www.googletagmanager.com","domain":"googletagmanager.com","tld":"com"},"ip":{"addr":"142.250.178.104","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://salsasiempre.live/","date":"2026-09-23T20:08:45.861Z","timestamp":1790194125861,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.google-analytics.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Thu, 10 Sep 2026 19:22:00 GMT","end":"Thu, 03 Dec 2026 19:21:59 GMT"},"fingerprint":{"sha1":"B5:A9:73:B1:2A:AF:94:D5:A0:C0:EA:89:DD:CE:A1:FA:42:73:60:6A","sha256":"E1:A3:36:34:1F:D9:00:D3:1E:44:B3:36:C7:25:67:04:1A:16:2E:AA:54:82:D9:66:4C:D3:1A:BA:FD:0F:9A:C2"}}},"request":{"raw":"GET /gtag/js?id=G-BT1HXCHHE7\u0026cx=c\u0026gtm=4e69m0 HTTP/1.1\r\nHost: www.googletagmanager.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://salsasiempre.live/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-type: application/javascript; charset=UTF-8\r\naccess-control-allow-origin: *\r\naccess-control-allow-credentials: true\r\naccess-control-allow-headers: Cache-Control\r\ncontent-encoding: zstd\r\nvary: Accept-Encoding\r\ndate: Wed, 23 Sep 2026 20:08:45 GMT\r\nexpires: Wed, 23 Sep 2026 20:08:45 GMT\r\ncache-control: private, max-age=900\r\nstrict-transport-security: max-age=31536000; includeSubDomains\r\ncross-origin-resource-policy: cross-origin\r\nserver: Google Tag Manager\r\ncontent-length: 175811\r\nx-xss-protection: 0\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":524375,"size_decoded":176395,"mime_type":"application/javascript; charset=UTF-8","magic":"JavaScript source, ASCII text, with very long lines (6698)","md5":"ab961e2c1b0f9337e62bf73f603d74b1","sha1":"9a6b400df5810c1654f0f9802302be83c6592213","sha256":"f8ba2901cb9c310aeec20c3943285f1bc1c0eb9c01b26f27e262d3706fa850d8","sha512":"c14cf2c82deec1670b519ba8129006719403ee44aa74d49899e901aa988438b45d967a3bb5af0b36ac685adb81073964d0ab5c58214445a72007c0293914cc3c","ssdeep":"6144:Ey717Fo0swMYwVgjrtYdAcUabxE+B3adXjrL9yHv89mfrWtQm:PFoCFweLjVyPeEO","tlshash":"e1b4f8ce73c674229396f178903f01cba57b29a2b45cc89af289dce42d3465a5163f7c","first_seen":"2026-09-23T20:10:01.405347Z","last_seen":"2026-09-23T20:10:01.405347Z","times_seen":1,"resource_available":true,"data":null}},"time_used":86,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":38,"receive":48,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/recaptcha/api2/logo_48.png","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.67","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.google.com/recaptcha/api2/anchor?ar=1\u0026k=6LfhUZMtAAAAAOCWVhW340havzfC_SwnC4yozkYJ\u0026co=aHR0cHM6Ly9zYWxzYXNpZW1wcmUubGl2ZTo0NDM.\u0026hl=en\u0026v=kemdRjWFxNjgsGdhRslyEPwU\u0026size=invisible\u0026anchor-ms=20000\u0026execute-ms=30000\u0026cb=tc16s4wvlgr6","date":"2026-09-23T20:08:46.284Z","timestamp":1790194126284,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Thu, 10 Sep 2026 19:23:28 GMT","end":"Thu, 03 Dec 2026 19:23:27 GMT"},"fingerprint":{"sha1":"99:42:CC:AA:D1:36:35:7D:FF:39:32:44:00:41:07:B9:D3:00:EE:31","sha256":"48:CD:EE:73:11:77:6B:F0:EE:10:C6:1D:DF:58:7C:4B:88:0D:95:F3:9C:64:15:44:E2:93:5B:17:4F:6A:8E:6E"}}},"request":{"raw":"GET /recaptcha/api2/logo_48.png HTTP/1.1\r\nHost: www.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.gstatic.com/recaptcha/releases/kemdRjWFxNjgsGdhRslyEPwU/styles__ltr.css\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha-scs\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups; report-to=\"recaptcha-scs\"\r\nreport-to: {\"group\":\"recaptcha-scs\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/recaptcha-scs\"}]}\r\ncontent-length: 2228\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 17 Sep 2026 15:10:22 GMT\r\nexpires: Thu, 24 Sep 2026 15:10:22 GMT\r\ncache-control: public, max-age=604800\r\nage: 536304\r\nlast-modified: Tue, 03 Mar 2020 20:15:00 GMT\r\ncontent-type: image/png\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":2228,"size_decoded":3002,"mime_type":"image/png","magic":"PNG image data, 48 x 48, 8-bit/color RGBA, non-interlaced","md5":"ef9941290c50cd3866e2ba6b793f010d","sha1":"4736508c795667dcea21f8d864233031223b7832","sha256":"1b9efb22c938500971aac2b2130a475fa23684dd69e43103894968df83145b8a","sha512":"a0c69c70117c5713caf8b12f3b6e8bbb9cdaf72768e5db9db5831a3c37541b87613c6b020dd2f9b8760064a8c7337f175e7234bfe776eee5e3588dc5662419d9","ssdeep":"","tlshash":"c34149bb68287f1be14b501d319001e4b5bb891327c8f24180bf974e4662eaad10f118","first_seen":"2023-04-05T07:17:57Z","last_seen":"2026-09-23T21:51:28.256702Z","times_seen":729950,"resource_available":false,"data":null}},"time_used":17,"timings":{"blocked":1,"dns":0,"connect":0,"send":0,"wait":16,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"salsasiempre.live/wp-includes/js/mediaelement/mediaelementplayer-legacy.min.css?ver=4.2.17","fqdn":"salsasiempre.live","domain":"salsasiempre.live","tld":"live"},"ip":{"addr":"104.21.16.74","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://salsasiempre.live/","date":"2026-09-23T20:08:45.107Z","timestamp":1790194125107,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"salsasiempre.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 27 Jul 2026 18:03:30 GMT","end":"Sun, 25 Oct 2026 19:02:05 GMT"},"fingerprint":{"sha1":"60:D3:B1:F9:B7:A7:CE:68:D7:19:24:D9:4B:8B:85:6D:0B:8D:99:D3","sha256":"22:3E:3E:6D:A5:95:E5:BE:22:F5:ED:E8:1B:A9:51:E8:91:69:F5:C0:67:41:84:4C:39:B5:5A:DA:B2:85:35:90"}}},"request":{"raw":"GET /wp-includes/js/mediaelement/mediaelementplayer-legacy.min.css?ver=4.2.17 HTTP/1.1\r\nHost: salsasiempre.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://salsasiempre.live/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=eh7hDdtHZgtze57f9l3Ut7qQ7K%2BdWsCdIi81sJupBYludFHG3IwjZsqYGrZHm4wSBNQgZ8q6LMtD4H6uym%2FHnAU149sLcZKvxpZVY9Hb5vIosiCpW4q4QrYyydpoP8yb7kfOTQ%3D%3D\"}]}\r\ndate: Wed, 23 Sep 2026 20:08:45 GMT\r\ncontent-type: text/css; charset=UTF-8\r\npriority: u=2,i=?0\r\ncf-ray: a3fc2ee1e9a40b49-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 829\r\ncache-control: public, max-age=31536000\r\ncontent-encoding: br\r\nexpires: Thu, 23 Sep 2027 19:54:55 GMT\r\nlast-modified: Mon, 28 Apr 2025 22:00:00 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding,User-Agent,Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":11256,"size_decoded":3224,"mime_type":"text/css; charset=UTF-8","magic":"ASCII text, with very long lines (11256), with no line terminators","md5":"2b0dd7eecea03b4bdedb94ba622fdb03","sha1":"703becba85161118dd6fc66af465428ef43f561c","sha256":"b7908a015a567ec2363011df2475368dbff34360e9da3fdff50604d6395fb646","sha512":"fe64cff950921bdf83ec09fe79ca5ce52de40f5b8788697eb1d7b28055f2817778347d5d3c81a324801c7ec7151b3ee0eee99b2882c3c3b10bd760342d3bf3e7","ssdeep":"192:xthsVmeDXDanvgZenjAJKdXSMpNO96hDIzL79V1QVSD1CNxn6fR31r:czDanvuenjAkNBhDInSwh31r","tlshash":"713223929c88212cf43795645ac107ec923fc303fd62ededb73c7679caca58a516a943","first_seen":"2023-04-05T04:06:46Z","last_seen":"2026-09-23T20:10:01.407217Z","times_seen":94676,"resource_available":true,"data":null}},"time_used":53,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":53,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"salsasiempre.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"salsasiempre.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"salsasiempre.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"salsasiempre.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-23","alert":"Phishing Block","trigger":"salsasiempre.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"salsasiempre.live/wp-content/cache/min/1/wp-content/themes/vibez/assets/css/style_dynamic.css?ver=1790191063","fqdn":"salsasiempre.live","domain":"salsasiempre.live","tld":"live"},"ip":{"addr":"104.21.16.74","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://salsasiempre.live/","date":"2026-09-23T20:08:45.109Z","timestamp":1790194125109,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"salsasiempre.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 27 Jul 2026 18:03:30 GMT","end":"Sun, 25 Oct 2026 19:02:05 GMT"},"fingerprint":{"sha1":"60:D3:B1:F9:B7:A7:CE:68:D7:19:24:D9:4B:8B:85:6D:0B:8D:99:D3","sha256":"22:3E:3E:6D:A5:95:E5:BE:22:F5:ED:E8:1B:A9:51:E8:91:69:F5:C0:67:41:84:4C:39:B5:5A:DA:B2:85:35:90"}}},"request":{"raw":"GET /wp-content/cache/min/1/wp-content/themes/vibez/assets/css/style_dynamic.css?ver=1790191063 HTTP/1.1\r\nHost: salsasiempre.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://salsasiempre.live/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=2s1oLXzyycRAr6gvGh%2BQSOgq9ASc8qWlzThA0mGReZM%2FwQ0C3ov2tbhNG9Z%2BczgtXIRSWDPKqCHm6hifnJQJLg5i%2FjHZE5f4hvqpuX%2BDQLtU0sZGpkHCVJzv1fg8ZYEa8pHRNA%3D%3D\"}]}\r\ndate: Wed, 23 Sep 2026 20:08:45 GMT\r\ncontent-type: text/css; charset=UTF-8\r\npriority: u=2,i=?0\r\ncf-ray: a3fc2ee1f9a60b49-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 829\r\ncache-control: public, max-age=31536000\r\ncontent-encoding: br\r\nexpires: Thu, 23 Sep 2027 19:54:55 GMT\r\nlast-modified: Wed, 23 Sep 2026 19:17:43 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding,User-Agent,Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":7695,"size_decoded":1843,"mime_type":"text/css; charset=UTF-8","magic":"ASCII text, with very long lines (7695), with no line terminators","md5":"f1449f32b0755330b2f49b9775e055fd","sha1":"8ad2291074ff4c2c6d280d9e197970467d19b0f1","sha256":"03decd5eb15e0abe1cf261c6a80ba3e9e5f2e531d83adea581d664c164da976b","sha512":"a05641507243c233c83166f723fa926c516d9e33ad23c5b1a5552be47f9ca144c498e38cdbd0851964980aaf8f944bc86d6efecfc77d1247e2287ee44897da36","ssdeep":"192:nO+qAdGdLtPt3EClt34dqkC3sVXK++vVPNoQoGrcdVoFpBcieu8Gy:XcH3AqvsVXK3PNoDGYieu8Gy","tlshash":"abf16881e423537520f389ad37ecd604231ac194d7cb8bb9baba64b41ef4deb5153e02","first_seen":"2026-09-23T19:56:10.518943Z","last_seen":"2026-09-23T20:10:01.407813Z","times_seen":2,"resource_available":true,"data":null}},"time_used":54,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":54,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"salsasiempre.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-23","alert":"Phishing Block","trigger":"salsasiempre.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"salsasiempre.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"salsasiempre.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"salsasiempre.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"salsasiempre.live/wp-content/cache/min/1/wp-content/plugins/js_composer/assets/css/js_composer.min.css?ver=1790191063","fqdn":"salsasiempre.live","domain":"salsasiempre.live","tld":"live"},"ip":{"addr":"104.21.16.74","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://salsasiempre.live/","date":"2026-09-23T20:08:45.114Z","timestamp":1790194125114,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"salsasiempre.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 27 Jul 2026 18:03:30 GMT","end":"Sun, 25 Oct 2026 19:02:05 GMT"},"fingerprint":{"sha1":"60:D3:B1:F9:B7:A7:CE:68:D7:19:24:D9:4B:8B:85:6D:0B:8D:99:D3","sha256":"22:3E:3E:6D:A5:95:E5:BE:22:F5:ED:E8:1B:A9:51:E8:91:69:F5:C0:67:41:84:4C:39:B5:5A:DA:B2:85:35:90"}}},"request":{"raw":"GET /wp-content/cache/min/1/wp-content/plugins/js_composer/assets/css/js_composer.min.css?ver=1790191063 HTTP/1.1\r\nHost: salsasiempre.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://salsasiempre.live/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=NT35BNDThLE9ZqSyeCRZoXthu2EWnuBzKAgN3M3qtzF8DiQkTsZm2U7MBFGYjuDkj0RVgZNWi2nOfzr28JQoM%2FMf8Ei8ooQkM2STD%2B0RVJvOzG5en5RB3Op0cLdKmttuhgwcKw%3D%3D\"}]}\r\ndate: Wed, 23 Sep 2026 20:08:45 GMT\r\ncontent-type: text/css; charset=UTF-8\r\npriority: u=2,i=?0\r\ncf-ray: a3fc2ee1f9a90b49-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 829\r\ncache-control: public, max-age=31536000\r\ncontent-encoding: br\r\nexpires: Thu, 23 Sep 2027 19:54:55 GMT\r\nlast-modified: Wed, 23 Sep 2026 19:17:43 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding,User-Agent,Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":489637,"size_decoded":41789,"mime_type":"text/css; charset=UTF-8","magic":"ASCII text, with very long lines (65359)","md5":"cf93e314860706150b4cdb86c5fe295e","sha1":"fe4b8d1525af25f84e0227d42094a04ff53bfc0e","sha256":"c45276e6629b6054f2a3b17bca00cfed7060872041904437839d524dc8954be4","sha512":"76efb084d7e1199baca83e861d8fb1925ee9d42f6b0b96aff383a5cded3661984e26af90299cd5a1686392015b42708f862c05d88d5c01363769e261cb89f0ff","ssdeep":"3072:JsMcvmKEBVJhADJMcokaCeLYtz+RJwKZ1kkUSbxhJwdO8BEo2HwSMxnp5ANdl0gS:JsMLACc9","tlshash":"05a431b2f854241f23674cbd30e0b92abe1701f2e5c21fae7568e6645e0686f353a735","first_seen":"2023-05-12T09:18:22Z","last_seen":"2026-09-23T20:10:01.408628Z","times_seen":59,"resource_available":true,"data":null}},"time_used":110,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":107,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"salsasiempre.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"salsasiempre.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"salsasiempre.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"salsasiempre.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-23","alert":"Phishing Block","trigger":"salsasiempre.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"salsasiempre.live/wp-content/cache/min/1/wp-content/themes/vibez/assets/js/modules/plugins/jquery.appear.js?ver=1790191063","fqdn":"salsasiempre.live","domain":"salsasiempre.live","tld":"live"},"ip":{"addr":"104.21.16.74","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://salsasiempre.live/","date":"2026-09-23T20:08:45.126Z","timestamp":1790194125126,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"salsasiempre.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 27 Jul 2026 18:03:30 GMT","end":"Sun, 25 Oct 2026 19:02:05 GMT"},"fingerprint":{"sha1":"60:D3:B1:F9:B7:A7:CE:68:D7:19:24:D9:4B:8B:85:6D:0B:8D:99:D3","sha256":"22:3E:3E:6D:A5:95:E5:BE:22:F5:ED:E8:1B:A9:51:E8:91:69:F5:C0:67:41:84:4C:39:B5:5A:DA:B2:85:35:90"}}},"request":{"raw":"GET /wp-content/cache/min/1/wp-content/themes/vibez/assets/js/modules/plugins/jquery.appear.js?ver=1790191063 HTTP/1.1\r\nHost: salsasiempre.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://salsasiempre.live/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Wed, 23 Sep 2026 20:08:45 GMT\r\ncontent-encoding: zstd\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\ncache-control: public, max-age=86400\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=lZyyeH0XKIyh8pZM4d2n1Cg5k8aqMiPgZZ7pJ3FlIZFZAObq5Qcy7%2BB7gm9CTdHyeHQqlN7q%2BCcTj0VtzK588yOMUwNBIP2pHfa6sqL8dHN3XcGYZtaa93QQz2bPGNeG4uUnXg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: a3fc2ee209b60b49-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1524,"size_decoded":1313,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (1524), with no line terminators","md5":"93eb6558373ef7d629786ef0d98789ca","sha1":"c2ead7e6aa6e39beb15049ae785afcff77267b19","sha256":"193bd1cccf14d6b9bda8ae584fb75c571f6bc43f1581425f71687e7a6a260254","sha512":"a26d3e12cf4a84fe45fbec513ff9c0a0823d79751322f8cf4158d2a89f2d198ed1f6556de1a3a5cf37f05f5d394a90115a2575240be668d5c4117b5ee8d8bacc","ssdeep":"","tlshash":"6931ef6b35db3e9446fb303f762f72155221c53b4251e4629afadd7c38b2d817813a44","first_seen":"2023-03-08T16:17:35Z","last_seen":"2026-09-23T20:10:01.409252Z","times_seen":233,"resource_available":true,"data":null}},"time_used":38,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":38,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"salsasiempre.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"salsasiempre.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"salsasiempre.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"salsasiempre.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-23","alert":"Phishing Block","trigger":"salsasiempre.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"salsasiempre.live/wp-content/themes/vibez/assets/js/modules/plugins/jquery.countdown.min.js?ver=7.1.2","fqdn":"salsasiempre.live","domain":"salsasiempre.live","tld":"live"},"ip":{"addr":"104.21.16.74","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://salsasiempre.live/","date":"2026-09-23T20:08:45.130Z","timestamp":1790194125130,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"salsasiempre.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 27 Jul 2026 18:03:30 GMT","end":"Sun, 25 Oct 2026 19:02:05 GMT"},"fingerprint":{"sha1":"60:D3:B1:F9:B7:A7:CE:68:D7:19:24:D9:4B:8B:85:6D:0B:8D:99:D3","sha256":"22:3E:3E:6D:A5:95:E5:BE:22:F5:ED:E8:1B:A9:51:E8:91:69:F5:C0:67:41:84:4C:39:B5:5A:DA:B2:85:35:90"}}},"request":{"raw":"GET /wp-content/themes/vibez/assets/js/modules/plugins/jquery.countdown.min.js?ver=7.1.2 HTTP/1.1\r\nHost: salsasiempre.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://salsasiempre.live/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Wed, 23 Sep 2026 20:08:45 GMT\r\ncontent-encoding: zstd\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\ncache-control: public, max-age=86400\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=94GmenOsQ%2Bog%2BX1rW94NsyIqlUH1jGiQ2iH5AtPCG9RTmH%2BwHBTGkzP82hoi0nSVQCSgpiQbacjGrNTNFxeX%2BlOgyXbd%2FCcpLOBtvtL0ZUELpZK8AWCnUIiLzdn%2Bf8R3Mvu1sA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: a3fc2ee219b80b49-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":13605,"size_decoded":5326,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (13345)","md5":"21fd34fca546436fb42189648b8ec6ea","sha1":"709477c553e398cc6238b7cca1d18ca8f32704d4","sha256":"88ca875d14c480e1478cacb3edbd3962433fd21a4775666b387988738038a63a","sha512":"efb374e6f2ca8a77b019d9a3f388eaaccb145a740f12a8ec7f933677e6dd22a6fd199a2c3f10d48eab70caec63f8e3b7577f35ceb37f867975f921c9bd732e91","ssdeep":"192:FDuI0btowaZYMFCXg0EQBig9DFYuk6Kvdi9iyHkKSegQHzadYZlqF9No0C4hLkOw:ZcBfZQaBJ9D8m1HKpQTlZlq1SrU8ZecJ","tlshash":"0652984551705742aea310bb413b620b347d8727a944a93c7b2f86cf6f385db933faa4","first_seen":"2023-03-07T12:04:10Z","last_seen":"2026-09-23T20:10:01.409951Z","times_seen":1826,"resource_available":true,"data":null}},"time_used":65,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":65,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"salsasiempre.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"salsasiempre.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-23","alert":"Phishing Block","trigger":"salsasiempre.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"salsasiempre.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"salsasiempre.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/lato/v25/S6uyw4BMUTPHjx4wXg.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://salsasiempre.live/","date":"2026-09-23T20:08:45.405Z","timestamp":1790194125405,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Thu, 10 Sep 2026 19:23:28 GMT","end":"Thu, 03 Dec 2026 19:23:27 GMT"},"fingerprint":{"sha1":"99:42:CC:AA:D1:36:35:7D:FF:39:32:44:00:41:07:B9:D3:00:EE:31","sha256":"48:CD:EE:73:11:77:6B:F0:EE:10:C6:1D:DF:58:7C:4B:88:0D:95:F3:9C:64:15:44:E2:93:5B:17:4F:6A:8E:6E"}}},"request":{"raw":"GET /s/lato/v25/S6uyw4BMUTPHjx4wXg.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://salsasiempre.live\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 23580\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 21 Sep 2026 15:52:30 GMT\r\nexpires: Tue, 21 Sep 2027 15:52:30 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Mon, 15 Sep 2025 17:09:41 GMT\r\ncontent-type: font/woff2\r\nage: 188175\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":23580,"size_decoded":24393,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 23580, version 1.0","md5":"e1b3b5908c9cf23dfb2b9c52b9a023ab","sha1":"fcd4136085f2a03481d9958cc6793a5ed98e714c","sha256":"918b7dc3e2e2d015c16ce08b57bcb64d2253bafc1707658f361e72865498e537","sha512":"b2da7ef768385707afed62ca1f178efc6aa14519762e3f270129b3afee4d3782cb991e6fa66b3b08a2f81ff7caba0b4c34c726d952198b2ac4a784b36eb2a828","ssdeep":"384:dRkIAJ8pVwWTW5VVjdVn8+2yvAMdriCEOY0kfW9GkAPqpPHi2vUuUSzB8:dKIAJ8pVHTZ+riY9oCpPHiodUeK","tlshash":"91b2e1ce5d546e3a8028213785c17b488273572e9edf42c6dd83a6263a7092cfd3d96e","first_seen":"2023-04-05T13:28:45Z","last_seen":"2026-09-23T21:58:05.233826Z","times_seen":269741,"resource_available":false,"data":null}},"time_used":135,"timings":{"blocked":-1,"dns":0,"connect":44,"send":0,"wait":31,"receive":59,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"salsasiempre.live/wp-content/themes/vibez/assets/css/elegant-icons/fonts/ElegantIcons.woff","fqdn":"salsasiempre.live","domain":"salsasiempre.live","tld":"live"},"ip":{"addr":"104.21.16.74","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://salsasiempre.live/","date":"2026-09-23T20:08:45.406Z","timestamp":1790194125406,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"salsasiempre.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 27 Jul 2026 18:03:30 GMT","end":"Sun, 25 Oct 2026 19:02:05 GMT"},"fingerprint":{"sha1":"60:D3:B1:F9:B7:A7:CE:68:D7:19:24:D9:4B:8B:85:6D:0B:8D:99:D3","sha256":"22:3E:3E:6D:A5:95:E5:BE:22:F5:ED:E8:1B:A9:51:E8:91:69:F5:C0:67:41:84:4C:39:B5:5A:DA:B2:85:35:90"}}},"request":{"raw":"GET /wp-content/themes/vibez/assets/css/elegant-icons/fonts/ElegantIcons.woff HTTP/1.1\r\nHost: salsasiempre.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://salsasiempre.live/wp-content/cache/min/1/wp-content/themes/vibez/assets/css/elegant-icons/style.min.css?ver=1790191063\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Wed, 23 Sep 2026 20:08:45 GMT\r\ncontent-type: application/x-font-woff\r\npriority: u=3,i=?0\r\ncf-ray: a3fc2ee3c9e70b49-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 826\r\ncache-control: public, max-age=2592000\r\nexpires: Fri, 23 Oct 2026 19:54:58 GMT\r\nlast-modified: Sun, 22 Oct 2023 22:00:00 GMT\r\nserver: cloudflare\r\nvary: User-Agent,Accept-Encoding\r\nx-turbo-charged-by: LiteSpeed\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=z2zXVsYz1zakgI3pgzio1lqwk%2BwgVxZ0rJS%2FqW%2Fl5GX1j29uaVoVnEYrYJ%2BIP3FPEspsvmSmukGbQ9FX5FpVia4NixyTyE7T%2Blfo6NlFuPZFuYB5Zjxug8UljeUpPfs2r93mEw%3D%3D\"}]}\r\nalt-svc: h3=\":443\"; ma=86400\r\ncontent-length: 63664\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":63664,"size_decoded":64481,"mime_type":"application/x-font-woff","magic":"Web Open Font Format, CFF, length 63664, version 1.0","md5":"fdd9e757bf61675343dcf55100422b84","sha1":"f9be87fa2d1d4a95e8305afb51778db4bc759fbc","sha256":"be1825e52a0dc7df04df9322f62abe2a2f2a25d98aac186de0140dfc7f6bdcae","sha512":"062e634abe06d1dbe774b4367167f3f0f295d6c237993611b6adc418cd4edb21131f403d8c9bd986cac64e6545a379b597e18cd9774c7e3259fde0d307b654d0","ssdeep":"1536:VUPTUKU6CNlY7pqzs7TBg8aTs2HsoT8kjUmZT7Kls35T6vtb3JtQ:TKvCNKEzATOTfHsoTDDsuFaJo","tlshash":"8a5302ce017d03514ad067b81ab3bde3e0226f40e8f52ec988893e61b9ac5364f97774","first_seen":"2023-04-05T07:17:57Z","last_seen":"2026-09-23T20:10:01.411139Z","times_seen":19095,"resource_available":false,"data":null}},"time_used":16,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":14,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"salsasiempre.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"salsasiempre.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"salsasiempre.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"salsasiempre.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-23","alert":"Phishing Block","trigger":"salsasiempre.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"salsasiempre.live/wp-content/cache/min/1/wp-content/plugins/timetable/style/jquery.qtip.css?ver=1790191063","fqdn":"salsasiempre.live","domain":"salsasiempre.live","tld":"live"},"ip":{"addr":"104.21.16.74","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://salsasiempre.live/","date":"2026-09-23T20:08:45.089Z","timestamp":1790194125089,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"salsasiempre.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 27 Jul 2026 18:03:30 GMT","end":"Sun, 25 Oct 2026 19:02:05 GMT"},"fingerprint":{"sha1":"60:D3:B1:F9:B7:A7:CE:68:D7:19:24:D9:4B:8B:85:6D:0B:8D:99:D3","sha256":"22:3E:3E:6D:A5:95:E5:BE:22:F5:ED:E8:1B:A9:51:E8:91:69:F5:C0:67:41:84:4C:39:B5:5A:DA:B2:85:35:90"}}},"request":{"raw":"GET /wp-content/cache/min/1/wp-content/plugins/timetable/style/jquery.qtip.css?ver=1790191063 HTTP/1.1\r\nHost: salsasiempre.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://salsasiempre.live/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=VwLGz7yh0f4X0YJFNu03SQHb%2BiYAdJ0hLc%2F0RkWNh2XGirFPdAu2E6cclCmTVOcyvwMwuuHlX%2BqGdpXqO75SYH7ALUz8liRg9SrTxZEUHZJv2ts8Ffx9NdS5rZMJpI8LJKIj%2Fg%3D%3D\"}]}\r\ndate: Wed, 23 Sep 2026 20:08:45 GMT\r\ncontent-type: text/css; charset=UTF-8\r\npriority: u=2,i=?0\r\ncf-ray: a3fc2ee1d9970b49-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 829\r\ncache-control: public, max-age=31536000\r\ncontent-encoding: br\r\nexpires: Thu, 23 Sep 2027 19:54:55 GMT\r\nlast-modified: Wed, 23 Sep 2026 19:17:43 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding,User-Agent,Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":9242,"size_decoded":2849,"mime_type":"text/css; charset=UTF-8","magic":"ASCII text, with very long lines (6717)","md5":"74ed25d5fcf2dfe94f16f7defefc68ab","sha1":"6f376babffe7b17d52ac67990ae1d42d262756dd","sha256":"5c9053e0f851df54b2c24f6232e05e6477fe9f14662deaf609df2d5c0a92e172","sha512":"3ad0383f277385f7f334e84deb96e5535bc21a89ce99d5ef105670fc1fe821c1f55a11b9a67cdef1060f47db07b3c3f91b5f095d8bb53e404020a51a5921b552","ssdeep":"192:ZroPl8jyxGC/9YDf85g41zJ/Y7zry30jM5wfw/D3:Z0Y41tKrkz","tlshash":"c9122f73f6c1100af52fc9ed70d1e9d9227aad43f5810b78b89af6acd9521e054b3329","first_seen":"2023-04-14T00:49:09Z","last_seen":"2026-09-23T20:10:01.412213Z","times_seen":33,"resource_available":true,"data":null}},"time_used":118,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":118,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"salsasiempre.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"salsasiempre.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-23","alert":"Phishing Block","trigger":"salsasiempre.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"salsasiempre.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"salsasiempre.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"salsasiempre.live/wp-content/cache/min/1/wp-content/themes/vibez/assets/js/modules/plugins/jquery.prettyPhoto.js?ver=1790191063","fqdn":"salsasiempre.live","domain":"salsasiempre.live","tld":"live"},"ip":{"addr":"104.21.16.74","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://salsasiempre.live/","date":"2026-09-23T20:08:45.135Z","timestamp":1790194125135,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"salsasiempre.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 27 Jul 2026 18:03:30 GMT","end":"Sun, 25 Oct 2026 19:02:05 GMT"},"fingerprint":{"sha1":"60:D3:B1:F9:B7:A7:CE:68:D7:19:24:D9:4B:8B:85:6D:0B:8D:99:D3","sha256":"22:3E:3E:6D:A5:95:E5:BE:22:F5:ED:E8:1B:A9:51:E8:91:69:F5:C0:67:41:84:4C:39:B5:5A:DA:B2:85:35:90"}}},"request":{"raw":"GET /wp-content/cache/min/1/wp-content/themes/vibez/assets/js/modules/plugins/jquery.prettyPhoto.js?ver=1790191063 HTTP/1.1\r\nHost: salsasiempre.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://salsasiempre.live/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Wed, 23 Sep 2026 20:08:45 GMT\r\ncontent-encoding: zstd\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\ncache-control: public, max-age=86400\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=LRyunVeUhuAhg3b3%2BuJiAxQOKOU%2FC5JCKUDbiBMmKYwjsB4DqpCdCnarvxcmjqEs%2BkHRWDEKs2ekNeqXsa6tRcB1HBYWqs1LDL5D%2FijERuPBxZfii2xak9r%2F%2FSRc2%2BvhMyd%2BgQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: a3fc2ee219ba0b49-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Twitter","description":"Twitter is a 'microblogging' system that allows you to send and receive short posts called tweets.","website":"https://twitter.com","common_platform_enumeration":"","icon":"Twitter.svg","categories":["Widgets"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":21224,"size_decoded":6874,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (21224), with no line terminators","md5":"220903542ac6b40087b7acfdbb2a2fcc","sha1":"123756190fa293fa8a96c7a05c72b2388d8579a6","sha256":"3fc2950d69c7f8e894260a55e502d70252679c446ae1bbb3835e4a7de2a997ba","sha512":"2909dcdcd54dfee567c399ef5ce820822d1ed4e975e5be6de5687fb8f569d7d0692c9130085852e97bc9839405979a2a9f55e57795cfa5427008583bef1929db","ssdeep":"384:Nq8MTFam8FfdR+zubzguhP3l+CBb3+8rBEpiijfIj7lU+glBgLJbp40a19ATrhrG:q8Fgull+Cp3+gxq+2qyr1CfhrO2ouXc","tlshash":"3d92b628552068efc393a362f407572d51328e37da16d870b278ec752af4ac66536fcd","first_seen":"2023-03-26T00:12:37Z","last_seen":"2026-09-23T20:10:01.412877Z","times_seen":176,"resource_available":true,"data":null}},"time_used":73,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":73,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"salsasiempre.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-23","alert":"Phishing Block","trigger":"salsasiempre.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"salsasiempre.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"salsasiempre.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"salsasiempre.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.gstatic.com/recaptcha/releases/kemdRjWFxNjgsGdhRslyEPwU/recaptcha__en.js","fqdn":"www.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.67","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://salsasiempre.live/","date":"2026-09-23T20:08:45.420Z","timestamp":1790194125420,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Thu, 10 Sep 2026 19:23:28 GMT","end":"Thu, 03 Dec 2026 19:23:27 GMT"},"fingerprint":{"sha1":"99:42:CC:AA:D1:36:35:7D:FF:39:32:44:00:41:07:B9:D3:00:EE:31","sha256":"48:CD:EE:73:11:77:6B:F0:EE:10:C6:1D:DF:58:7C:4B:88:0D:95:F3:9C:64:15:44:E2:93:5B:17:4F:6A:8E:6E"}}},"request":{"raw":"GET /recaptcha/releases/kemdRjWFxNjgsGdhRslyEPwU/recaptcha__en.js HTTP/1.1\r\nHost: www.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://salsasiempre.live\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://salsasiempre.live/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\naccept-ranges: bytes\r\ncontent-encoding: gzip\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha-scs\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups; report-to=\"recaptcha-scs\"\r\nreport-to: {\"group\":\"recaptcha-scs\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/recaptcha-scs\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 354446\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 21 Sep 2026 18:50:36 GMT\r\nexpires: Tue, 21 Sep 2027 18:50:36 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Mon, 21 Sep 2026 04:02:44 GMT\r\ncontent-type: text/javascript\r\nvary: Accept-Encoding\r\nage: 177489\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":848285,"size_decoded":355353,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (656)","md5":"3b3d07079c8c1c29eacc08f7459be74d","sha1":"e59d089e1dfa3c8f804efcf9e1511ae9b03fe526","sha256":"33247e39ab5e5e2b83c5dd99e9642c461c0d8c38d8aeb90917ce6c0514f5195b","sha512":"fc8cdd2e87ef744444f70ae3587299eb89e5bd076ebb8aff18d44cb69344feddf4d44b32110e96d8167d451085ad13cb70a75ace6d06961fefad3986c6faf071","ssdeep":"6144:EmXAYWWlqL5uNbmCLq0ACoxqV/puv+dMQ/C8oJbsqeJcr+i6MDzBb/5RmSGs6RKh:3XRBqrXQlbFotsqeJcr6WbPDvEAJJ6u","tlshash":"97052ad8741271a55332b9f2607b218923be9532c4cd1a6e71e4d8f02ef484a72b5fb7","first_seen":"2026-09-22T05:52:13.920048Z","last_seen":"2026-09-23T22:30:50.907273Z","times_seen":1002,"resource_available":true,"data":null}},"time_used":219,"timings":{"blocked":-1,"dns":3,"connect":29,"send":0,"wait":29,"receive":117,"ssl":41},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/lato/v25/S6u9w4BMUTPHh6UVSwaPGR_p.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://salsasiempre.live/","date":"2026-09-23T20:08:45.519Z","timestamp":1790194125519,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Thu, 10 Sep 2026 19:23:28 GMT","end":"Thu, 03 Dec 2026 19:23:27 GMT"},"fingerprint":{"sha1":"99:42:CC:AA:D1:36:35:7D:FF:39:32:44:00:41:07:B9:D3:00:EE:31","sha256":"48:CD:EE:73:11:77:6B:F0:EE:10:C6:1D:DF:58:7C:4B:88:0D:95:F3:9C:64:15:44:E2:93:5B:17:4F:6A:8E:6E"}}},"request":{"raw":"GET /s/lato/v25/S6u9w4BMUTPHh6UVSwaPGR_p.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://salsasiempre.live\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 5552\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 21 Sep 2026 15:54:11 GMT\r\nexpires: Tue, 21 Sep 2027 15:54:11 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Mon, 15 Sep 2025 17:11:37 GMT\r\ncontent-type: font/woff2\r\nage: 188074\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":5552,"size_decoded":6364,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 5552, version 1.0","md5":"33c906549bd61edf700e9a28132f25f8","sha1":"30128ef02a089c98139c978a2a0cedaadd634dbe","sha256":"3a5797f440bc67b59830cad81e59a71011e35cb45ed7f747b61a69b0a9b0d6ae","sha512":"dc4a63153cec46714504239de7184f87585c5805498300c8d1ba066053135ca04895f1484e739ee3fc492baba6920b5686e40a05ade1b962e5113a9635013503","ssdeep":"96:tg4V29KoaW+ekf+c3aIw2Lp/HwoGccbVjNRFRf7g/v/88V6PnW4+Kydey7kh:tnKKovjHULVHwMcbtFR+v082njyPg","tlshash":"c6b1ae0c7d929cebf5ac14792c508c34199b5eac8f5ee94c8c860c2a02e25dd1e0e7be","first_seen":"2025-09-17T01:22:23.26484Z","last_seen":"2026-09-23T20:10:01.413996Z","times_seen":4007,"resource_available":false,"data":null}},"time_used":51,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":50,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/oswald/v57/TK3iWkUHHAIjg752GT8G.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://salsasiempre.live/","date":"2026-09-23T20:08:45.408Z","timestamp":1790194125408,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Thu, 10 Sep 2026 19:23:28 GMT","end":"Thu, 03 Dec 2026 19:23:27 GMT"},"fingerprint":{"sha1":"99:42:CC:AA:D1:36:35:7D:FF:39:32:44:00:41:07:B9:D3:00:EE:31","sha256":"48:CD:EE:73:11:77:6B:F0:EE:10:C6:1D:DF:58:7C:4B:88:0D:95:F3:9C:64:15:44:E2:93:5B:17:4F:6A:8E:6E"}}},"request":{"raw":"GET /s/oswald/v57/TK3iWkUHHAIjg752GT8G.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://salsasiempre.live\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 28488\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 21 Sep 2026 15:52:42 GMT\r\nexpires: Tue, 21 Sep 2027 15:52:42 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Wed, 10 Sep 2025 16:46:11 GMT\r\ncontent-type: font/woff2\r\nage: 188163\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":28488,"size_decoded":29301,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 28488, version 1.0","md5":"22c3b00d2e65fb2c876a292423108958","sha1":"3c61d84659817fef687045bbfa0e1da9568e164b","sha256":"bd73278ee0c50041b91b4c03d1229e35b501637f46b6409e7da2d3a758446ea5","sha512":"33954d8a7ed3c87b3af8577bbae9439b9efba2a64445463d893681dad085bb8630d31c995ce010510a9c732926017dba9d5fd5002d0000ec1488b61889d6ddfe","ssdeep":"384:jlzdJfoB5YJ2kG1CdQegm8m00xr19KB668/BOTqE85gyqvPA34uEomcGvpMwvg84:jlzdyBzhIb0u1QB6vBOv8uvPAovJCs4","tlshash":"cfd2e0195e9673efe4552d3ea830affe91e32aad30507162c5db6c1155c438bc8e4ec4","first_seen":"2025-09-11T19:05:43.498829Z","last_seen":"2026-09-23T22:15:34.279276Z","times_seen":35584,"resource_available":false,"data":null}},"time_used":129,"timings":{"blocked":35,"dns":0,"connect":0,"send":0,"wait":81,"receive":13,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"salsasiempre.live/wp-content/uploads/2023/04/agencja-main-1.jpg","fqdn":"salsasiempre.live","domain":"salsasiempre.live","tld":"live"},"ip":{"addr":"104.21.16.74","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://salsasiempre.live/","date":"2026-09-23T20:08:45.664Z","timestamp":1790194125664,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"salsasiempre.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 27 Jul 2026 18:03:30 GMT","end":"Sun, 25 Oct 2026 19:02:05 GMT"},"fingerprint":{"sha1":"60:D3:B1:F9:B7:A7:CE:68:D7:19:24:D9:4B:8B:85:6D:0B:8D:99:D3","sha256":"22:3E:3E:6D:A5:95:E5:BE:22:F5:ED:E8:1B:A9:51:E8:91:69:F5:C0:67:41:84:4C:39:B5:5A:DA:B2:85:35:90"}}},"request":{"raw":"GET /wp-content/uploads/2023/04/agencja-main-1.jpg HTTP/1.1\r\nHost: salsasiempre.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://salsasiempre.live/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Wed, 23 Sep 2026 20:08:45 GMT\r\ncontent-type: image/webp\r\npriority: u=4,i\r\ncf-ray: a3fc2ee56a180b49-OSL\r\ncf-cache-status: BYPASS\r\naccept-ranges: bytes\r\ncache-control: private\r\nexpires: Thu, 23 Sep 2027 20:08:45 GMT\r\nlast-modified: Mon, 23 Oct 2023 22:00:00 GMT\r\nserver: cloudflare\r\nvary: User-Agent,Accept-Encoding,Accept\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-litespeed-cache-control: no-cache\r\nx-turbo-charged-by: LiteSpeed\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=NCzC7kkH9bw3nYmqcsK7gkrkm7Y%2BXlgr5uvRQ2V5U%2Fhm4%2FcWpR2FBnW911H5c1VeBOLFOwSHLicQodoClcQjTRgm%2F4og0FTKa7eueXU4evWWqNXqF0ZZsGUCbAQYGIcxwVLOpQ%3D%3D\"}]}\r\ncontent-length: 35006\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":35006,"size_decoded":35826,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 1920x360, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"faa537eb99549165faee9cfe5ec48864","sha1":"ee726c3a5e992aed6de30eb8d2d90ce135c80ae6","sha256":"4f251981416c30e3eba367083d5449bea2f936e0d1a6ea5ee6f2146aded71700","sha512":"5cf5136ec4584b45cdc883f478a0c20545db1f0294630141621d6cc630fad168c22e83693a62246796e67685ccb38a956f97e268ad0da02260f1bd7039016f39","ssdeep":"768:h8k+gujF85lRU05tjCE0m2HyLZmCu1gS17rVP8Jpt98yt/+Lv:vfpFZttVRSBVE/hh+L","tlshash":"e9f2f1e97fa27bddcb5b3297b14ca0d17cb2a9400449bac0d2d65e5727520ce37e8922","first_seen":"2026-09-23T19:56:10.54029Z","last_seen":"2026-09-23T20:10:01.41864Z","times_seen":2,"resource_available":false,"data":null}},"time_used":258,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":257,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"salsasiempre.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"salsasiempre.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"salsasiempre.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-23","alert":"Phishing Block","trigger":"salsasiempre.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"salsasiempre.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"salsasiempre.live/wp-content/uploads/2026/07/Dominika-Szczesniak-Rosiak-97.png","fqdn":"salsasiempre.live","domain":"salsasiempre.live","tld":"live"},"ip":{"addr":"104.21.16.74","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://salsasiempre.live/","date":"2026-09-23T20:08:46.170Z","timestamp":1790194126170,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"salsasiempre.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 27 Jul 2026 18:03:30 GMT","end":"Sun, 25 Oct 2026 19:02:05 GMT"},"fingerprint":{"sha1":"60:D3:B1:F9:B7:A7:CE:68:D7:19:24:D9:4B:8B:85:6D:0B:8D:99:D3","sha256":"22:3E:3E:6D:A5:95:E5:BE:22:F5:ED:E8:1B:A9:51:E8:91:69:F5:C0:67:41:84:4C:39:B5:5A:DA:B2:85:35:90"}}},"request":{"raw":"GET /wp-content/uploads/2026/07/Dominika-Szczesniak-Rosiak-97.png HTTP/1.1\r\nHost: salsasiempre.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://salsasiempre.live/\r\nCookie: _ga_BT1HXCHHE7=GS2.1.s1790194126$o1$g0$t1790194126$j60$l0$h0; _ga=GA1.1.1712374491.1790194126\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Wed, 23 Sep 2026 20:08:46 GMT\r\ncontent-type: image/webp\r\npriority: u=5,i\r\ncf-ray: a3fc2ee89a670b49-OSL\r\ncf-cache-status: BYPASS\r\naccept-ranges: bytes\r\ncache-control: private\r\nexpires: Thu, 23 Sep 2027 20:08:46 GMT\r\nlast-modified: Fri, 10 Jul 2026 08:33:40 GMT\r\nserver: cloudflare\r\nvary: User-Agent,Accept-Encoding,Accept\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-litespeed-cache-control: no-cache\r\nx-turbo-charged-by: LiteSpeed\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=teV9bPP%2BkGOZG3x6VC0ZHhvO7pQ8UC2hFcqMJOAR0dDwxpb5KJNkxUU4dr34kr%2Fbs1Z29%2BRCo%2BGw3IY%2FVmoOAV2T%2FsgkMDFeU6bcX3Ra4XMttKmQJzXu2YYJWvnms6LkCZApLg%3D%3D\"}]}\r\ncontent-length: 149702\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":149702,"size_decoded":150527,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image, VP8 encoding, 1920x1080, Scaling: [none]x[none], YUV color, decoders should clamp","md5":"5f23e3e2328ea8d453b38146ca9b27ed","sha1":"548d15278ce6d056b0a32fe285a9a74fd1f3fed7","sha256":"43d5f6651d664195478085fc5a2c12bd0bf21d5aa957a30154aaab4c204b1c25","sha512":"096fd3bf57895e5b7aa6777546e5248d933d2976a379c48b8e79bf877d9f624d77ac6508120a119bc458afcebf063c21dcfff057cff902d825da79e280393862","ssdeep":"3072:0EzgpBpjTaZDdsfnQSZSui3wAZa4my+/a+aTA9G/+lUVE1tWPmxd1L7:0p/jTarNSf0b6aNTA9x6VgtImtn","tlshash":"85e312c2d9e1f5a7485c7cb8ba3b3d88443ddd312f2a39037cc5ad464a95763a897c24","first_seen":"2026-09-23T19:56:10.502217Z","last_seen":"2026-09-23T20:10:01.419494Z","times_seen":2,"resource_available":false,"data":null}},"time_used":346,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":255,"receive":91,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-23","alert":"Phishing Block","trigger":"salsasiempre.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"salsasiempre.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"salsasiempre.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"salsasiempre.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"salsasiempre.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"salsasiempre.live/wp-content/uploads/2026/08/Dominika-Szczesniak-Rosiak-2026-08-07T212400.822.png","fqdn":"salsasiempre.live","domain":"salsasiempre.live","tld":"live"},"ip":{"addr":"","port":0,"asn":0,"as":"","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://salsasiempre.live/","date":"2026-09-23T20:09:17.786Z","timestamp":1790194157786,"http_version":"","security_state":"","security_info":null,"request":{"raw":"GET /wp-content/uploads/2026/08/Dominika-Szczesniak-Rosiak-2026-08-07T212400.822.png HTTP/1.1\r\nHost: salsasiempre.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://salsasiempre.live/\r\nCookie: _ga_BT1HXCHHE7=GS2.1.s1790194126$o1$g0$t1790194126$j60$l0$h0; _ga=GA1.1.1712374491.1790194126\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"","headers":null,"cookies":null,"status_code":"","status_text":"","fingerprints":null,"data":{"size":0,"size_decoded":0,"mime_type":"","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-09-23T21:48:31.497771Z","times_seen":18624345,"resource_available":true,"data":null}},"time_used":0,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":0,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"salsasiempre.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"salsasiempre.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"salsasiempre.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-23","alert":"Phishing Block","trigger":"salsasiempre.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"salsasiempre.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"salsasiempre.live/wp-content/cache/min/1/wp-content/themes/vibez-child/style.css?ver=1790191063","fqdn":"salsasiempre.live","domain":"salsasiempre.live","tld":"live"},"ip":{"addr":"104.21.16.74","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://salsasiempre.live/","date":"2026-09-23T20:08:45.096Z","timestamp":1790194125096,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"salsasiempre.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 27 Jul 2026 18:03:30 GMT","end":"Sun, 25 Oct 2026 19:02:05 GMT"},"fingerprint":{"sha1":"60:D3:B1:F9:B7:A7:CE:68:D7:19:24:D9:4B:8B:85:6D:0B:8D:99:D3","sha256":"22:3E:3E:6D:A5:95:E5:BE:22:F5:ED:E8:1B:A9:51:E8:91:69:F5:C0:67:41:84:4C:39:B5:5A:DA:B2:85:35:90"}}},"request":{"raw":"GET /wp-content/cache/min/1/wp-content/themes/vibez-child/style.css?ver=1790191063 HTTP/1.1\r\nHost: salsasiempre.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://salsasiempre.live/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=6TV58iUYMaopIjbvxcKQd6M8LmlbyFSNkX4oFoQ8QXtN4js0cedxE9HzRt2jFuP2JNGRO9eJc2bEjjWpJNaRnlvtSraiv7RR1n1Nspa%2BC4wIcZ8C%2F9ude3PgJ8RUWzlPgU1ErA%3D%3D\"}]}\r\ndate: Wed, 23 Sep 2026 20:08:45 GMT\r\ncontent-type: text/css; charset=UTF-8\r\npriority: u=2,i=?0\r\ncf-ray: a3fc2ee1d99c0b49-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 829\r\ncache-control: public, max-age=31536000\r\ncontent-encoding: br\r\nexpires: Thu, 23 Sep 2027 19:54:55 GMT\r\nlast-modified: Wed, 23 Sep 2026 19:17:43 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding,User-Agent,Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":1385,"size_decoded":1250,"mime_type":"text/css; charset=UTF-8","magic":"ASCII text, with very long lines (1385), with no line terminators","md5":"6bd6225fe8328f7b161a518c0ba75447","sha1":"e76378ba61b74632a6258784f0aac0e2b47986e4","sha256":"d2f02a208a45d07498b5e78a09e0a168706fcd56238f70c6d5c9fd78c4fe7d1a","sha512":"994a2b42ba913e537738784ff7ea105333236db79f7bc6f3a74334a1a546b16972b324a25c6b9308c7167e01f5fa7ef041b671f54a8a7535b819f2515102f557","ssdeep":"","tlshash":"d921df11b6a333f0f57a732b71c05c74179f8012c653ceb8e5801b1af7d119a8171b29","first_seen":"2026-09-23T19:56:10.461904Z","last_seen":"2026-09-23T20:10:01.420478Z","times_seen":2,"resource_available":true,"data":null}},"time_used":87,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":87,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"salsasiempre.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-23","alert":"Phishing Block","trigger":"salsasiempre.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"salsasiempre.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"salsasiempre.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"salsasiempre.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/roboto/v48/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.99","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://www.google.com/recaptcha/api2/anchor?ar=1\u0026k=6LfhUZMtAAAAAOCWVhW340havzfC_SwnC4yozkYJ\u0026co=aHR0cHM6Ly9zYWxzYXNpZW1wcmUubGl2ZTo0NDM.\u0026hl=en\u0026v=kemdRjWFxNjgsGdhRslyEPwU\u0026size=invisible\u0026anchor-ms=20000\u0026execute-ms=30000\u0026cb=tc16s4wvlgr6","date":"2026-09-23T20:08:46.302Z","timestamp":1790194126302,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Thu, 10 Sep 2026 19:23:28 GMT","end":"Thu, 03 Dec 2026 19:23:27 GMT"},"fingerprint":{"sha1":"99:42:CC:AA:D1:36:35:7D:FF:39:32:44:00:41:07:B9:D3:00:EE:31","sha256":"48:CD:EE:73:11:77:6B:F0:EE:10:C6:1D:DF:58:7C:4B:88:0D:95:F3:9C:64:15:44:E2:93:5B:17:4F:6A:8E:6E"}}},"request":{"raw":"GET /s/roboto/v48/KFO7CnqEu92Fr1ME7kSn66aGLdTylUAMa3yUBA.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://www.google.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.google.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 40128\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Mon, 21 Sep 2026 15:52:25 GMT\r\nexpires: Tue, 21 Sep 2027 15:52:25 GMT\r\ncache-control: public, max-age=31536000\r\nlast-modified: Thu, 29 May 2025 23:30:55 GMT\r\ncontent-type: font/woff2\r\nage: 188181\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":40128,"size_decoded":40941,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 40128, version 1.0","md5":"9a01b69183a9604ab3a439e388b30501","sha1":"8ed1d59003d0dbe6360481017b44665153665fbe","sha256":"20b535fa80c8189e3b87d1803038389960203a886d502bc2ef1857affc2f38d2","sha512":"0e6795255b6eea00b5403fd7e3b904d52776d49ac63a31c2778361262883697943aedcb29feee85694ba6f19eaa34dddb9a5bfe7118f4a25b4757e92c331feca","ssdeep":"768:Vce3jkow68wmT4IBX0tXdlSirS61gSjcz0GPwHbP+w2jec56O:VcI/iEEEtXdFJj+0GPwHbP+w5rO","tlshash":"3703023a5e3ccf1a84157a703950f6d9a8481e548e9d143b4f1ac7bf085dde2209b6d4","first_seen":"2025-01-08T22:59:02.845106Z","last_seen":"2026-09-23T21:49:35.254991Z","times_seen":997574,"resource_available":false,"data":null}},"time_used":31,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":29,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"salsasiempre.live/wp-content/themes/vibez/assets/js/modules/plugins/jquery.nicescroll.min.js?ver=7.1.2","fqdn":"salsasiempre.live","domain":"salsasiempre.live","tld":"live"},"ip":{"addr":"104.21.16.74","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://salsasiempre.live/","date":"2026-09-23T20:08:45.137Z","timestamp":1790194125137,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"salsasiempre.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 27 Jul 2026 18:03:30 GMT","end":"Sun, 25 Oct 2026 19:02:05 GMT"},"fingerprint":{"sha1":"60:D3:B1:F9:B7:A7:CE:68:D7:19:24:D9:4B:8B:85:6D:0B:8D:99:D3","sha256":"22:3E:3E:6D:A5:95:E5:BE:22:F5:ED:E8:1B:A9:51:E8:91:69:F5:C0:67:41:84:4C:39:B5:5A:DA:B2:85:35:90"}}},"request":{"raw":"GET /wp-content/themes/vibez/assets/js/modules/plugins/jquery.nicescroll.min.js?ver=7.1.2 HTTP/1.1\r\nHost: salsasiempre.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://salsasiempre.live/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Wed, 23 Sep 2026 20:08:45 GMT\r\ncontent-encoding: zstd\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\ncache-control: public, max-age=86400\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=b9GBy7785MP5tG%2BterfIcT6C3Gx21osp93cdFHRep6FVbasJkzaUvFeI4ShzSOtG8znPi3zVWIP4SLAQY5ZRUba8CVRWjhslmqXB2HkmA26K%2Bj2i89xdFrn3SxO67CLunlvQTg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: a3fc2ee219bb0b49-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":63834,"size_decoded":19146,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (1032)","md5":"748e1e3e433b75ea475c47004204b7cd","sha1":"79c7d774e945bd93f5e0fe10a082c48aaf0cb75b","sha256":"e8e1490eed412063977fc0476fb398bf600a37a8d7e1f12f2a6ed6c77760fca8","sha512":"e808041021173170e1474d29b572679208fa7495a67e620a4871024acc3d7e57efe4e0e308bdb9ccaf44ff002d8587f7f25647cdd4d2959757ab03badef14bbe","ssdeep":"768:AlGj4MQ0pkUR1XMmQA/P/NHNOlZSBgTM38ifLCid+HA8FGOM:w/oTMm9/pNOlZSBh8ifAA8JM","tlshash":"8c5394ddba10305a44de53b8d28b464a602ae892774784f8702dccf47f25a75b2f6b7c","first_seen":"2023-03-08T11:48:44Z","last_seen":"2026-09-23T20:10:01.425499Z","times_seen":554,"resource_available":true,"data":null}},"time_used":52,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":52,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"salsasiempre.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"salsasiempre.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"salsasiempre.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-23","alert":"Phishing Block","trigger":"salsasiempre.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"salsasiempre.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"salsasiempre.live/wp-content/uploads/2023/04/cropped-fav-salsasiempre3-192x192.png","fqdn":"salsasiempre.live","domain":"salsasiempre.live","tld":"live"},"ip":{"addr":"104.21.16.74","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://salsasiempre.live/","date":"2026-09-23T20:08:46.087Z","timestamp":1790194126087,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"salsasiempre.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 27 Jul 2026 18:03:30 GMT","end":"Sun, 25 Oct 2026 19:02:05 GMT"},"fingerprint":{"sha1":"60:D3:B1:F9:B7:A7:CE:68:D7:19:24:D9:4B:8B:85:6D:0B:8D:99:D3","sha256":"22:3E:3E:6D:A5:95:E5:BE:22:F5:ED:E8:1B:A9:51:E8:91:69:F5:C0:67:41:84:4C:39:B5:5A:DA:B2:85:35:90"}}},"request":{"raw":"GET /wp-content/uploads/2023/04/cropped-fav-salsasiempre3-192x192.png HTTP/1.1\r\nHost: salsasiempre.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://salsasiempre.live/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nserver-timing: cfExtPri\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ndate: Wed, 23 Sep 2026 20:08:46 GMT\r\ncontent-type: image/webp\r\npriority: u=6,i=?0\r\ncf-ray: a3fc2ee80a5e0b49-OSL\r\ncf-cache-status: BYPASS\r\naccept-ranges: bytes\r\ncache-control: private\r\nexpires: Thu, 23 Sep 2027 20:08:46 GMT\r\nlast-modified: Mon, 23 Oct 2023 22:00:00 GMT\r\nserver: cloudflare\r\nvary: User-Agent,Accept-Encoding,Accept\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-litespeed-cache-control: no-cache\r\nx-turbo-charged-by: LiteSpeed\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=QrGquV5STfjpfWnENM43cCHBb0tSfAYrEllvN3H7QbDrFuJEX4vCpSAL0MQX6pLL7R3DXTGRzBUXARs9jkZql%2Fp6ezv7qXBttTz43eS0%2BRD7N0503HIWc8oUtNf%2BLpHhnecefg%3D%3D\"}]}\r\ncontent-length: 6640\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":6640,"size_decoded":7460,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"15b11f0c320110b62074bc772812483f","sha1":"bb3cd0d13021ff1371545dc455b1506ff5758910","sha256":"0a352f2ee31540986cabcb32bc4cae9f6a8b57b50542296e8f1f93f55153255c","sha512":"9fb96b96759a554f6a2500e123383a7db3faa9245950c5244e7e14e39b4c13aa722f13f975cb8203a9838cd5ca9f5520dd78473cb478c81d4f5bd0244bdc8c5a","ssdeep":"192:tRN1ca23ZZRZ74RFKSC00JY3GcJ7Dyzcp/DqiwFN:t31cb4R5NeYBRDypFN","tlshash":"80d18c0c1586dc48db0e551646e0be7de9d7c2a88199bbe1a0126ad323bffd6b0518d4","first_seen":"2026-09-23T19:56:10.524988Z","last_seen":"2026-09-23T20:10:01.427525Z","times_seen":2,"resource_available":false,"data":null}},"time_used":197,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":197,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"salsasiempre.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-23","alert":"Phishing Block","trigger":"salsasiempre.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"salsasiempre.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"salsasiempre.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"salsasiempre.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"salsasiempre.live/wp-content/cache/min/1/wp-content/plugins/contact-form-7/includes/css/styles.css?ver=1790191063","fqdn":"salsasiempre.live","domain":"salsasiempre.live","tld":"live"},"ip":{"addr":"104.21.16.74","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://salsasiempre.live/","date":"2026-09-23T20:08:45.085Z","timestamp":1790194125085,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"salsasiempre.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 27 Jul 2026 18:03:30 GMT","end":"Sun, 25 Oct 2026 19:02:05 GMT"},"fingerprint":{"sha1":"60:D3:B1:F9:B7:A7:CE:68:D7:19:24:D9:4B:8B:85:6D:0B:8D:99:D3","sha256":"22:3E:3E:6D:A5:95:E5:BE:22:F5:ED:E8:1B:A9:51:E8:91:69:F5:C0:67:41:84:4C:39:B5:5A:DA:B2:85:35:90"}}},"request":{"raw":"GET /wp-content/cache/min/1/wp-content/plugins/contact-form-7/includes/css/styles.css?ver=1790191063 HTTP/1.1\r\nHost: salsasiempre.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://salsasiempre.live/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ObiWCG0zZaqOOc3U%2FIb6g7iIx8BzgxU4EuPV1ANcHKrd3q6sUQ%2Br55%2BV66ddGvV6lQ8lL0j4Ps82mb6fmiYv210K0pTX%2FkzmzneL7JrEbnHbWIHGsozFp0bQE5DriYPyfQigtA%3D%3D\"}]}\r\ndate: Wed, 23 Sep 2026 20:08:45 GMT\r\ncontent-type: text/css; charset=UTF-8\r\npriority: u=2,i=?0\r\ncf-ray: a3fc2ee1c9950b49-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 829\r\ncache-control: public, max-age=31536000\r\ncontent-encoding: br\r\nexpires: Thu, 23 Sep 2027 19:54:55 GMT\r\nlast-modified: Wed, 23 Sep 2026 19:17:43 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding,User-Agent,Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":2441,"size_decoded":1615,"mime_type":"text/css; charset=UTF-8","magic":"ASCII text, with very long lines (2441), with no line terminators","md5":"fed3c63fd37872c8d46c6fab84b7705d","sha1":"03d043774bc6e52f43bd6321575aba08ad13c771","sha256":"ac2c52d676ae4977013c6367f11cb1826535974fbf43e435ce6928c056371634","sha512":"e595cfa9e675f77d67a08e6344237442ba781392fbc02edacb7334dddeec0378536153caacca333a1e3a3241e62159cad5bcf73a41d4377d85608c1f2c4b5095","ssdeep":"","tlshash":"80513061868810244bf382f3aae2bf4e73345892c427e76ab0da17b84d3c7451223f0f","first_seen":"2026-05-15T12:26:39.216797Z","last_seen":"2026-09-23T21:12:29.615283Z","times_seen":2028,"resource_available":true,"data":null}},"time_used":117,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":117,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"salsasiempre.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-23","alert":"Phishing Block","trigger":"salsasiempre.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"salsasiempre.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"salsasiempre.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"salsasiempre.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"salsasiempre.live/wp-content/cache/min/1/wp-content/plugins/timetable/style/event_template.css?ver=1790191063","fqdn":"salsasiempre.live","domain":"salsasiempre.live","tld":"live"},"ip":{"addr":"104.21.16.74","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://salsasiempre.live/","date":"2026-09-23T20:08:45.091Z","timestamp":1790194125091,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"salsasiempre.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 27 Jul 2026 18:03:30 GMT","end":"Sun, 25 Oct 2026 19:02:05 GMT"},"fingerprint":{"sha1":"60:D3:B1:F9:B7:A7:CE:68:D7:19:24:D9:4B:8B:85:6D:0B:8D:99:D3","sha256":"22:3E:3E:6D:A5:95:E5:BE:22:F5:ED:E8:1B:A9:51:E8:91:69:F5:C0:67:41:84:4C:39:B5:5A:DA:B2:85:35:90"}}},"request":{"raw":"GET /wp-content/cache/min/1/wp-content/plugins/timetable/style/event_template.css?ver=1790191063 HTTP/1.1\r\nHost: salsasiempre.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://salsasiempre.live/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=hQiZ0Kp8nLyIz4ejJJvWCr8gKANfc9cvKlEelfG4t4yDnVPuc9cEMHStFOlMzmaasNLBFa5Dsp5rcI%2FeVZuQNQidj7FkLy%2BjNGJptd5BJPLprGN%2F1m590UtfgKWSsIbOE69yEg%3D%3D\"}]}\r\ndate: Wed, 23 Sep 2026 20:08:45 GMT\r\ncontent-type: text/css; charset=UTF-8\r\npriority: u=2,i=?0\r\ncf-ray: a3fc2ee1d9990b49-OSL\r\ncf-cache-status: HIT\r\naccept-ranges: bytes\r\nage: 829\r\ncache-control: public, max-age=31536000\r\ncontent-encoding: br\r\nexpires: Thu, 23 Sep 2027 19:54:55 GMT\r\nlast-modified: Wed, 23 Sep 2026 19:17:43 GMT\r\nserver: cloudflare\r\nvary: Accept-Encoding,User-Agent,Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":7397,"size_decoded":2209,"mime_type":"text/css; charset=UTF-8","magic":"ASCII text, with very long lines (7397), with no line terminators","md5":"59debaccff07577949b137c5e65cab40","sha1":"1f6259ed84e129b7c00793a2e36548d48d9861c7","sha256":"71d8d24810eed1e2d868830593b7c463fc7dff25cb62b078e210c8069b496c62","sha512":"021e30333f54b2a326a245655ee6c97b2b47a5cf468e6da5e155e67d4efb858b1b661e1733edb2058d729f636d11c1b95de74169e807fb697485f4d659310e35","ssdeep":"96:D2z1XwTuqB/DIpJCVlN5DVW7u5zmCTBVciR12cMfz0XBxm/QPlPiKal2wleneOlK:qdTmI7EBVciS51KNneNxcNOa4hJ","tlshash":"9fe102e1a2b5731a721fbc3ee7d1db5ff3346691b2824e3af948adf5c2413222491584","first_seen":"2025-11-19T03:18:19.681022Z","last_seen":"2026-09-23T20:10:01.43205Z","times_seen":22,"resource_available":true,"data":null}},"time_used":60,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":60,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"salsasiempre.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-23","alert":"Phishing Block","trigger":"salsasiempre.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"salsasiempre.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"salsasiempre.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"salsasiempre.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"salsasiempre.live/wp-content/cache/min/1/wp-content/themes/vibez/assets/js/modules/plugins/jquery.plugin.js?ver=1790191063","fqdn":"salsasiempre.live","domain":"salsasiempre.live","tld":"live"},"ip":{"addr":"104.21.16.74","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://salsasiempre.live/","date":"2026-09-23T20:08:45.129Z","timestamp":1790194125129,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"salsasiempre.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 27 Jul 2026 18:03:30 GMT","end":"Sun, 25 Oct 2026 19:02:05 GMT"},"fingerprint":{"sha1":"60:D3:B1:F9:B7:A7:CE:68:D7:19:24:D9:4B:8B:85:6D:0B:8D:99:D3","sha256":"22:3E:3E:6D:A5:95:E5:BE:22:F5:ED:E8:1B:A9:51:E8:91:69:F5:C0:67:41:84:4C:39:B5:5A:DA:B2:85:35:90"}}},"request":{"raw":"GET /wp-content/cache/min/1/wp-content/themes/vibez/assets/js/modules/plugins/jquery.plugin.js?ver=1790191063 HTTP/1.1\r\nHost: salsasiempre.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://salsasiempre.live/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Wed, 23 Sep 2026 20:08:45 GMT\r\ncontent-encoding: zstd\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\ncache-control: public, max-age=86400\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=zwRp9MdaN%2FN7DpPd5QzxlQ%2F1jBjBcAM1cKmbvyTmfKkz7Ruh64tabUSGx2sWctHYLHTnWh2oLdYvl%2FON7ofz3BQotjWNi3ziI6CBFVdfr7FIQVS27L2NxOKiFb3HoSlRouIJiA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: a3fc2ee219b70b49-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3796,"size_decoded":2044,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (3796), with no line terminators","md5":"f559e7685160a2324f58d06dbba05c4f","sha1":"20d31e9e32037db891244cfb2c76538c1725f3e5","sha256":"5a81d447a263ba284351d0a6d3d75604f30b1595e087de6f352e11e6aa5692d4","sha512":"58f558f652bab04f9243bfeaa3734fe2d3023304d3861e21cd93daacbe4c5f1660d4770b0b468e0e81d0c31f9ea944db81089d7884e9f2d1847a6f321dd41910","ssdeep":"","tlshash":"d47145893687228d85d318e204bf3a09653de745c1944099bdb847f93b7a929f023f3c","first_seen":"2023-03-08T16:17:35Z","last_seen":"2026-09-23T20:10:01.433976Z","times_seen":57,"resource_available":true,"data":null}},"time_used":36,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":36,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"salsasiempre.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"salsasiempre.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"salsasiempre.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"salsasiempre.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-23","alert":"Phishing Block","trigger":"salsasiempre.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"salsasiempre.live/wp-content/cache/min/1/wp-content/themes/vibez/assets/js/modules/plugins/jquery.easing.1.3.js?ver=1790191063","fqdn":"salsasiempre.live","domain":"salsasiempre.live","tld":"live"},"ip":{"addr":"104.21.16.74","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://salsasiempre.live/","date":"2026-09-23T20:08:45.139Z","timestamp":1790194125139,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"salsasiempre.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 27 Jul 2026 18:03:30 GMT","end":"Sun, 25 Oct 2026 19:02:05 GMT"},"fingerprint":{"sha1":"60:D3:B1:F9:B7:A7:CE:68:D7:19:24:D9:4B:8B:85:6D:0B:8D:99:D3","sha256":"22:3E:3E:6D:A5:95:E5:BE:22:F5:ED:E8:1B:A9:51:E8:91:69:F5:C0:67:41:84:4C:39:B5:5A:DA:B2:85:35:90"}}},"request":{"raw":"GET /wp-content/cache/min/1/wp-content/themes/vibez/assets/js/modules/plugins/jquery.easing.1.3.js?ver=1790191063 HTTP/1.1\r\nHost: salsasiempre.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://salsasiempre.live/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Wed, 23 Sep 2026 20:08:45 GMT\r\ncontent-encoding: zstd\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\ncache-control: public, max-age=86400\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=V%2B1mrdktHAMwcsOaGINbtFIqCYTis7jh7yBmOuaOBjZIGh4R2x0N1GjArYQkyCgP7NGm08UeLdk1CqfBqRwWE6l41WudDpT64jOKz4cJ9kfkZ8%2BMdjujHcoVSREn1gOhVq6u1w%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: a3fc2ee229be0b49-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3590,"size_decoded":1526,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (3590), with no line terminators","md5":"3289d6f94a4bd1acdde31735ce7b54de","sha1":"71ce9692ef245c7e6ab529c146c95d2ef290b3fe","sha256":"da922096c724f17ea05b00a1b23c92b1881f28315f362b9db91b97f57a520de5","sha512":"2d0eda6a3eee10566a3a4d0ede6f9532eff0d960fc52a6596a6474550daf9841a334659878391d616e04ca9f5a889a1f3ba9459440c9d75e706a183c53409f22","ssdeep":"","tlshash":"af71668974f6b51d638133f010b6201b72adace5164d6804e4b49dda787f2bc8bbb87d","first_seen":"2023-03-08T16:17:35Z","last_seen":"2026-09-23T20:10:01.43517Z","times_seen":133,"resource_available":true,"data":null}},"time_used":55,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":55,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"salsasiempre.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"salsasiempre.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-23","alert":"Phishing Block","trigger":"salsasiempre.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"salsasiempre.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"salsasiempre.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"salsasiempre.live/wp-content/themes/vibez/assets/js/modules/plugins/jquery.multiscroll.min.js?ver=7.1.2","fqdn":"salsasiempre.live","domain":"salsasiempre.live","tld":"live"},"ip":{"addr":"104.21.16.74","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://salsasiempre.live/","date":"2026-09-23T20:08:45.140Z","timestamp":1790194125140,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"salsasiempre.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 27 Jul 2026 18:03:30 GMT","end":"Sun, 25 Oct 2026 19:02:05 GMT"},"fingerprint":{"sha1":"60:D3:B1:F9:B7:A7:CE:68:D7:19:24:D9:4B:8B:85:6D:0B:8D:99:D3","sha256":"22:3E:3E:6D:A5:95:E5:BE:22:F5:ED:E8:1B:A9:51:E8:91:69:F5:C0:67:41:84:4C:39:B5:5A:DA:B2:85:35:90"}}},"request":{"raw":"GET /wp-content/themes/vibez/assets/js/modules/plugins/jquery.multiscroll.min.js?ver=7.1.2 HTTP/1.1\r\nHost: salsasiempre.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://salsasiempre.live/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Wed, 23 Sep 2026 20:08:45 GMT\r\ncontent-encoding: zstd\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\ncache-control: public, max-age=86400\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=E8ioxKUn063Dvwg6oM%2FxWh2DzBbtOl9DrIklY5qyJ%2BSj0FolesOmKtVL0mQJOD4WvR%2FLUbHN7cGaD%2BTvlx%2BOZy%2BjrIrjkmQg0kwFn8mPNLNyDSc1OFQcjzYNAbFoXZ%2BeKQj7fg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: a3fc2ee229c00b49-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":13427,"size_decoded":4511,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (13204)","md5":"106b8fdf9f3eb206fbcbf290742d8186","sha1":"6b7a3a22f1b1d05493c80f59c9d2e526eaa25a43","sha256":"a0e4f1ca992ca8e63367bfdd41d985a7b20511d71b67945e69adbdc99191d164","sha512":"06bcae387ceb1eb85ec4772782c13ec21db39352bcbc200854216f0440746ad71073a68070f86e0add2492433d1f8333ab0bedd9998f30e1604c047f0f08310a","ssdeep":"192:IxreT5l1aHG+XTyVs35feelDJyzk1D/ja0T/aqm3Png0iEhLhaQJYnntgqBcHXj:IxrolpGdty0D+0TrgecHXj","tlshash":"4852b80eb400322541ef32f3f5ab17415635e5234aa1a0d4f4b6aee21fb897b9347a4f","first_seen":"2023-03-07T01:40:51Z","last_seen":"2026-09-23T20:10:01.435982Z","times_seen":3421,"resource_available":true,"data":null}},"time_used":62,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":62,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"salsasiempre.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-23","alert":"Phishing Block","trigger":"salsasiempre.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"salsasiempre.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"salsasiempre.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"salsasiempre.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"salsasiempre.live/wp-content/plugins/js_composer/assets/js/dist/js_composer_front.min.js?ver=6.9.0","fqdn":"salsasiempre.live","domain":"salsasiempre.live","tld":"live"},"ip":{"addr":"104.21.16.74","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://salsasiempre.live/","date":"2026-09-23T20:08:45.145Z","timestamp":1790194125145,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"salsasiempre.live","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Mon, 27 Jul 2026 18:03:30 GMT","end":"Sun, 25 Oct 2026 19:02:05 GMT"},"fingerprint":{"sha1":"60:D3:B1:F9:B7:A7:CE:68:D7:19:24:D9:4B:8B:85:6D:0B:8D:99:D3","sha256":"22:3E:3E:6D:A5:95:E5:BE:22:F5:ED:E8:1B:A9:51:E8:91:69:F5:C0:67:41:84:4C:39:B5:5A:DA:B2:85:35:90"}}},"request":{"raw":"GET /wp-content/plugins/js_composer/assets/js/dist/js_composer_front.min.js?ver=6.9.0 HTTP/1.1\r\nHost: salsasiempre.live\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://salsasiempre.live/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Wed, 23 Sep 2026 20:08:45 GMT\r\ncontent-encoding: zstd\r\ncontent-type: application/javascript\r\nserver: cloudflare\r\ncache-control: public, max-age=86400\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=dPEAh%2BqI0u4r%2BwmS0hTlGsv7%2BQHJYQ%2BnkS9GO38aDaUhVxiSBcijHaPSNDEx7UWJJAZ91z7tYZ5H%2FuMlCFJ5wYLBaAluG44nIVi2OBng5DzKW%2FAk%2Fg%2Bi8x615zVTrkVOL%2BRGPQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: a3fc2ee229c50b49-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":20315,"size_decoded":6795,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (20096)","md5":"6ce179ee275d3bd58d0407b79d6366cd","sha1":"fb1393daafde2f3e85f31777543c3194a4ab11d0","sha256":"1bd0097cd9d76a31566f4236a1aaa31cdd43c5857a9502679805fddbc7599a54","sha512":"d4d07e2c7bbac595616905acd6d65c14d8099459243f05a33f630a91d9421d27fe4347a306eb01a652428de1b291d691c9a96a7dbc6492ca1068a6f14fbae303","ssdeep":"384:heUIpaRa7/Jom2xdeuxOqlHxehYzRUfPFzDlMagLSav47Ebq:heUIp/7/Jom2xdeudHkhY1UfPFzDlMa5","tlshash":"de92c858b91070f956b7333bf13b3b197133383a948651206415d8787abed4f222afae","first_seen":"2023-03-07T01:07:46Z","last_seen":"2026-09-23T20:10:01.436961Z","times_seen":4030,"resource_available":true,"data":null}},"time_used":45,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":45,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"salsasiempre.live","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"salsasiempre.live","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"salsasiempre.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-23","alert":"Phishing Block","trigger":"salsasiempre.live","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-23","alert":"Sinkholed","trigger":"salsasiempre.live","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}}]}