{"report_id":"ba7d0a40-0d52-488c-9dd5-938a77507ccf","version":0,"status":"done","tags":[],"date":"2026-06-22T10:10:29Z","url":{"schema":"http","addr":"cookie-proposal.xyz","fqdn":"cookie-proposal.xyz","domain":"cookie-proposal.xyz","tld":"xyz"},"ip":{"addr":"37.58.52.38","port":0,"asn":28753,"as":"Leaseweb Deutschland GmbH","country":"Germany","country_code":"DE"},"final":{"url":{"schema":"https","addr":"cookie-proposal.xyz/","fqdn":"cookie-proposal.xyz","domain":"cookie-proposal.xyz","tld":"xyz"},"title":"کوکی پروپوزال","dom":{"size":92520,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (20341)","md5":"e86ad94e8ee0caf372b664e821dc3471","sha1":"e0488e87703e7691c3f66546c24657b68dfab72d","sha256":"6f880dc2f9a4b7734059224191b9b34fbabff082f7f5d9b5bf3d99cd5f17bee6","sha512":"648c50f70f232b0ca88a50aa19a81a3315ccd1adf6e8c4e6cf22a4476579babbcc808efc2f76abb8d0a13ee707437d1049b8ffa5d426611de149cab24f2c35ae","ssdeep":"1536:oGJMqypQCy8Vhnp8RJZpbwemlUVuXwtmorA1p:oGGjeBZpbwemlUVugtmmA1p","tlshash":"da93d761537848fa7d6f836a8448b328b20dee21ce4562e6b4f6d15464ccdb709b7b0f","dom_hash":"domhashccf09231c2edd037b6344cfc0fd8497c","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"cookie-proposal.xyz","fqdn":"cookie-proposal.xyz","domain":"cookie-proposal.xyz","tld":"xyz"},"ip":{"addr":"37.58.52.38","port":0,"asn":28753,"as":"Leaseweb Deutschland GmbH","country":"Germany","country_code":"DE"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-07-27T10:10:29Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":2}},"detection":{"ids":null,"analyzer":[{"sensor_name":"infosec_yara","sensor_type":"yara","title":"YARAhub by abuse.ch","description":"YARAhub by abuse.ch","scan_date":"2026-06-22","alert":"Detects SocGholish obfuscated variant first observed in July 2022","trigger":"cookie-proposal.xyz/wp-includes/js/dist/script-modules/interactivity/index.min.js?ver=efaa5193bbad9c60ffd1","verdict":"malware","severity":"medium","comment":"","link":"https://yaraify.abuse.ch/yarahub/","meta":{"author":"Ankit Anubhav -ankitanubhav.info","date":"2022-07-19","description":"Detects SocGholish obfuscated variant first observed in July 2022","malpedia_family":"js.fakeupdates","rule":"SocGholish_Variant_B","yarahub_author_email":"ankit.yara@inbox.ru","yarahub_author_twitter":"@ankit_anubhav","yarahub_license":"CC0 1.0","yarahub_reference_link":"https://twitter.com/ankit_anubhav/status/1549246034831781888","yarahub_reference_md5":"4fcc9569ca63cb2f5777954ac4c9290f","yarahub_rule_matching_tlp":"TLP:WHITE","yarahub_rule_sharing_tlp":"TLP:WHITE","yarahub_uuid":"df3d194a-c6bc-4440-bad9-461e0e7962fd"}},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-22","alert":"Sinkholed","trigger":"cookie-proposal.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"cookie-proposal.xyz","ip":{"addr":"37.58.52.38","port":443,"asn":28753,"as":"Leaseweb Deutschland GmbH","country":"Germany","country_code":"DE"},"domain_registered":"2026-06-20","domain_rank":0,"first_seen":"2026-06-22T10:09:22.462535Z","last_seen":"2026-06-22T10:09:22.462535Z","alert_count":13,"request_count":12,"received_data":1154265,"sent_data":6392,"comment":"","tags":null,"fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"WordPress Block Editor","description":"Sites using the WordPress Block Editor, also known as Gutenberg.","website":"https://wordpress.org/gutenberg/","common_platform_enumeration":"","icon":"WordPress.svg","categories":["Page builders"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"WordPress Site Editor","description":"Full Site Editing enables users to design and customize their entire WordPress website with a block-based editor.","website":"https://wordpress.org/documentation/article/site-editor/","common_platform_enumeration":"","icon":"WordPress.svg","categories":["Page builders"]},{"name":"WordPress:7.0","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]},{"name":"Elementor:4.1.3","description":"Elementor is a website builder platform for professionals on WordPress.","website":"https://elementor.com","common_platform_enumeration":"","icon":"Elementor.svg","categories":["Page builders","WordPress plugins"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"cookie-proposal.xyz/wp-includes/js/wp-emoji-loader.min.js","fqdn":"cookie-proposal.xyz","domain":"cookie-proposal.xyz","tld":"xyz"},"ip":{"addr":"37.58.52.38","port":443,"asn":28753,"as":"Leaseweb Deutschland GmbH","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":false,"md5":"70a24fe7bd115be5822d64dfddd767dd","sha1":"d7577e561a8054a8b1716c9ca3a5aa5259953e88","sha256":"5c61297f5bd93f3e52761f08f33f475347024aa4d77272022347b751faf61fc0","sha512":"f3d1a290cc4784b229350ff353c2102e359ddd359f3aabeb723126243aca64d7c53b86195821ad6ea27bd2ad672bfb8a0bd0f1301e41861252914f56eae8b136","ssdeep":"","tlshash":"b971759ae77a38dfb2f900f2697a0d47eb614435d6c8d438c9ada3241cb5893c274a46","size":3817,"data":"","first_seen":"2026-06-22T10:10:30.479575Z","last_seen":"2026-06-22T10:10:30.479575Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cookie-proposal.xyz/wp-includes/js/dist/script-modules/block-library/navigation/view.min.js?ver=96a846e1d7b789c39ab9","fqdn":"cookie-proposal.xyz","domain":"cookie-proposal.xyz","tld":"xyz"},"ip":{"addr":"37.58.52.38","port":443,"asn":28753,"as":"Leaseweb Deutschland GmbH","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":false,"md5":"be31fdf0c1b991d4ae62d43750c29004","sha1":"2741b37b0171acf8ea67d90ab0927259adf9d66d","sha256":"caf7ad56bd767d2bb8c5b78dfd3c2c4e005e7d01abca7314fbaffed99c7df69d","sha512":"6bc44dd8afdcb3d01143df983b3a5c20300b0a1e9e5cf7d24d04544b2a186d8b1d0d684164489fb0eba865c4d0247001a0e37b1af65b432f03b6e3d02999f71d","ssdeep":"","tlshash":"bc517578336075b5caff4384f224d538b365dec1440b28017d2926df26aefa181e1f6a","size":3053,"data":"","first_seen":"2026-04-07T19:24:43.304892Z","last_seen":"2026-07-23T16:41:07.145051Z","times_seen":6604,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cookie-proposal.xyz/wp-includes/js/dist/script-modules/interactivity/index.min.js?ver=efaa5193bbad9c60ffd1","fqdn":"cookie-proposal.xyz","domain":"cookie-proposal.xyz","tld":"xyz"},"ip":{"addr":"37.58.52.38","port":443,"asn":28753,"as":"Leaseweb Deutschland GmbH","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":false,"md5":"f0866401d2e6bf0b38495c9f278cf96a","sha1":"78a648d27819f61c8b8678d64632d2c35ac6801f","sha256":"726ac59577c8aeeec94c61bfb7791a709e401b5d871d35c39a65cd948f6124e3","sha512":"7889b5b5b511b2d7af4752fb4d4ae4edcf96b18351224867e39c5dbff54fb6fadf3e18a40bfa35cd803d34426e95623768e64a132282f1813525a7d1844f101f","ssdeep":"768:oqEYJ8Mc56JH6u0HpQPu3iU7bwUCD2XZjVV300FKKh:YYJC0cHWujsIl39KKh","tlshash":"37031af8b2a8703183ef50b5503f040bf3366968588d8068ba65d4eb68f454a51f7fbd","size":40106,"data":"","first_seen":"2026-05-21T20:58:39.683163Z","last_seen":"2026-07-23T16:41:07.144561Z","times_seen":7221,"alerts":{"ids":null,"analyzer":[{"sensor_name":"infosec_yara","sensor_type":"yara","title":"YARAhub by abuse.ch","description":"YARAhub by abuse.ch","scan_date":"2026-06-22","alert":"Detects SocGholish obfuscated variant first observed in July 2022","trigger":"cookie-proposal.xyz/wp-includes/js/dist/script-modules/interactivity/index.min.js?ver=efaa5193bbad9c60ffd1","verdict":"malware","severity":"medium","comment":"","link":"https://yaraify.abuse.ch/yarahub/","meta":{"author":"Ankit Anubhav -ankitanubhav.info","date":"2022-07-19","description":"Detects SocGholish obfuscated variant first observed in July 2022","malpedia_family":"js.fakeupdates","rule":"SocGholish_Variant_B","yarahub_author_email":"ankit.yara@inbox.ru","yarahub_author_twitter":"@ankit_anubhav","yarahub_license":"CC0 1.0","yarahub_reference_link":"https://twitter.com/ankit_anubhav/status/1549246034831781888","yarahub_reference_md5":"4fcc9569ca63cb2f5777954ac4c9290f","yarahub_rule_matching_tlp":"TLP:WHITE","yarahub_rule_sharing_tlp":"TLP:WHITE","yarahub_uuid":"df3d194a-c6bc-4440-bad9-461e0e7962fd"}}],"urlquery":null}},{"url":{"schema":"https","addr":"cookie-proposal.xyz/wp-includes/js/wp-emoji-release.min.js?ver=7.0","fqdn":"cookie-proposal.xyz","domain":"cookie-proposal.xyz","tld":"xyz"},"ip":{"addr":"37.58.52.38","port":443,"asn":28753,"as":"Leaseweb Deutschland GmbH","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":false,"md5":"f0cc9ba5cf46af0cd73d521803e3b07e","sha1":"7d2a74f87dc70a39eccce3bae1d4cc404cb134f4","sha256":"fd59b0ebf6282ed71647bf2f6e0d1925bbfd1f270865a832079ebb60259aabca","sha512":"7ec44f08676c195547a623504c7105ef3d0acea5839675599598043f3e0b5a3386452e3db6fbea90722f7be9e6effdae1b89c49e2b05b22b8c415616e07d471d","ssdeep":"384:WzevzApRZTbXU/3o//bEPhXgA5POkpJTX:Wsk9XU/3o//YpXgAs+hX","tlshash":"7fa2959ba33a4e8f343e3bd78d968f4dc9da555321c0e079dbefb6c169a00568274c80","size":22762,"data":"","first_seen":"2025-11-10T19:52:32.864936Z","last_seen":"2026-07-23T16:41:37.533205Z","times_seen":308683,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cookie-proposal.xyz/","fqdn":"cookie-proposal.xyz","domain":"cookie-proposal.xyz","tld":"xyz"},"ip":{"addr":"37.58.52.38","port":443,"asn":28753,"as":"Leaseweb Deutschland GmbH","country":"Germany","country_code":"DE"},"introduction_type":"scriptElement","is_inline":true,"md5":"cb723d749493893fef00de4a102d5b14","sha1":"83e4d476c5ce53d9fd2a5f07a72db8395c5be20e","sha256":"5025f2112d7c4786e6cdd0d8becf512b1a989a81c5f37fa072c3ca944ca9211e","sha512":"bac6e6754071aa4499cda15909e69619377a5f862a69a99ad4b5577143b8bcadac6ddafbd243f0754f6602063c5bc3c629027c5f767c90d71861b7952764d479","ssdeep":"","tlshash":"c411ccf3b7dd907fba9e6d66593402cd5a1d90735c110a5bfeac3575cc8442534b1d40","size":913,"data":"","first_seen":"2024-04-17T16:07:41Z","last_seen":"2026-07-23T16:51:24.765202Z","times_seen":32129,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"cookie-proposal.xyz/wp-includes/js/dist/script-modules/block-library/navigation/view.min.js?ver=96a846e1d7b789c39ab9","fqdn":"cookie-proposal.xyz","domain":"cookie-proposal.xyz","tld":"xyz"},"ip":{"addr":"37.58.52.38","port":443,"asn":28753,"as":"Leaseweb Deutschland GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cookie-proposal.xyz/","date":"2026-06-22T10:10:04.776Z","timestamp":1782123004776,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cookie-proposal.xyz","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 20 Jun 2026 08:39:23 GMT","end":"Fri, 18 Sep 2026 08:39:22 GMT"},"fingerprint":{"sha1":"B2:67:21:87:DF:60:9D:DA:6F:5B:B8:9E:18:9F:B6:DB:F0:72:E5:77","sha256":"3B:76:8E:37:B9:E5:1E:8A:31:35:34:13:63:31:A9:33:4F:FC:18:41:53:4F:DE:0B:14:94:04:CA:B9:EC:BA:E3"}}},"request":{"raw":"GET /wp-includes/js/dist/script-modules/block-library/navigation/view.min.js?ver=96a846e1d7b789c39ab9 HTTP/1.1\r\nHost: cookie-proposal.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cookie-proposal.xyz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=604800\r\nexpires: Mon, 29 Jun 2026 10:10:04 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Sat, 20 Jun 2026 09:31:36 GMT\r\netag: \"bed-6a365df8-6374149973897487;br\"\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding,User-Agent\r\ncontent-length: 999\r\ndate: Mon, 22 Jun 2026 10:10:04 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":3053,"size_decoded":1394,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (3052)","md5":"be31fdf0c1b991d4ae62d43750c29004","sha1":"2741b37b0171acf8ea67d90ab0927259adf9d66d","sha256":"caf7ad56bd767d2bb8c5b78dfd3c2c4e005e7d01abca7314fbaffed99c7df69d","sha512":"6bc44dd8afdcb3d01143df983b3a5c20300b0a1e9e5cf7d24d04544b2a186d8b1d0d684164489fb0eba865c4d0247001a0e37b1af65b432f03b6e3d02999f71d","ssdeep":"","tlshash":"bc517578336075b5caff4384f224d538b365dec1440b28017d2926df26aefa181e1f6a","first_seen":"2026-04-07T19:24:43.304892Z","last_seen":"2026-07-23T16:41:07.145051Z","times_seen":6604,"resource_available":true,"data":null}},"time_used":47,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":47,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-22","alert":"Sinkholed","trigger":"cookie-proposal.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cookie-proposal.xyz/wp-content/themes/twentytwentyfour/assets/images/building-exterior.webp","fqdn":"cookie-proposal.xyz","domain":"cookie-proposal.xyz","tld":"xyz"},"ip":{"addr":"37.58.52.38","port":443,"asn":28753,"as":"Leaseweb Deutschland GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cookie-proposal.xyz/","date":"2026-06-22T10:10:04.785Z","timestamp":1782123004785,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cookie-proposal.xyz","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 20 Jun 2026 08:39:23 GMT","end":"Fri, 18 Sep 2026 08:39:22 GMT"},"fingerprint":{"sha1":"B2:67:21:87:DF:60:9D:DA:6F:5B:B8:9E:18:9F:B6:DB:F0:72:E5:77","sha256":"3B:76:8E:37:B9:E5:1E:8A:31:35:34:13:63:31:A9:33:4F:FC:18:41:53:4F:DE:0B:14:94:04:CA:B9:EC:BA:E3"}}},"request":{"raw":"GET /wp-content/themes/twentytwentyfour/assets/images/building-exterior.webp HTTP/1.1\r\nHost: cookie-proposal.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cookie-proposal.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=604800\r\nexpires: Mon, 29 Jun 2026 10:10:04 GMT\r\ncontent-type: image/webp\r\nlast-modified: Tue, 21 Nov 2023 19:56:10 GMT\r\netag: \"30c2c-655d0b5a-835187920a66094f;;;\"\r\naccept-ranges: bytes\r\ncontent-length: 199724\r\ndate: Mon, 22 Jun 2026 10:10:04 GMT\r\nserver: LiteSpeed\r\nvary: User-Agent\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":199724,"size_decoded":200074,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"2af7c6205191cb22f5184bfb4c8e47a3","sha1":"6804bf960deaa7ce32a32d8908cff9df0b157772","sha256":"7ab1e25df9f0e9825e577187a3c73ebda9c0a068d9b35d2a235b8e924b9c58e5","sha512":"d840754c2657e09975c1d041d2285c67b97b9bacfe77d01d78ecbb5bf4e29eae691a6853cf933e829cf7c201085301f8b4cad7f1f3cd5b4d7e16e675c6f2caa4","ssdeep":"6144:ZETkYnSyNylu2wvIbCS+liXoCW+neFY75YnN:okYSluxaCRl4eqVw","tlshash":"041423038edb316bd4f078b0cb400a8007b489af9764a9768ef2da756617278b3f5d1d","first_seen":"2023-11-08T18:58:35Z","last_seen":"2026-07-23T02:43:48.709242Z","times_seen":1363,"resource_available":false,"data":null}},"time_used":162,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":40,"receive":122,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-22","alert":"Sinkholed","trigger":"cookie-proposal.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cookie-proposal.xyz/wp-content/themes/twentytwentyfour/assets/images/tourist-and-building.webp","fqdn":"cookie-proposal.xyz","domain":"cookie-proposal.xyz","tld":"xyz"},"ip":{"addr":"37.58.52.38","port":443,"asn":28753,"as":"Leaseweb Deutschland GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cookie-proposal.xyz/","date":"2026-06-22T10:10:04.787Z","timestamp":1782123004787,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cookie-proposal.xyz","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 20 Jun 2026 08:39:23 GMT","end":"Fri, 18 Sep 2026 08:39:22 GMT"},"fingerprint":{"sha1":"B2:67:21:87:DF:60:9D:DA:6F:5B:B8:9E:18:9F:B6:DB:F0:72:E5:77","sha256":"3B:76:8E:37:B9:E5:1E:8A:31:35:34:13:63:31:A9:33:4F:FC:18:41:53:4F:DE:0B:14:94:04:CA:B9:EC:BA:E3"}}},"request":{"raw":"GET /wp-content/themes/twentytwentyfour/assets/images/tourist-and-building.webp HTTP/1.1\r\nHost: cookie-proposal.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cookie-proposal.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=604800\r\nexpires: Mon, 29 Jun 2026 10:10:04 GMT\r\ncontent-type: image/webp\r\nlast-modified: Tue, 21 Nov 2023 19:56:10 GMT\r\netag: \"103b2-655d0b5a-28f8b659e8210b10;;;\"\r\naccept-ranges: bytes\r\ncontent-length: 66482\r\ndate: Mon, 22 Jun 2026 10:10:04 GMT\r\nserver: LiteSpeed\r\nvary: User-Agent\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":66482,"size_decoded":66831,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"7d03dae46404d16f0ee5b13cb3794a29","sha1":"5d2c6cd3d8d2c412281237628073e451257716e4","sha256":"0fc42e518e17733d6c766ceec3a2154896e332571f130fae27e4f20480e0980c","sha512":"9e33b9c236183e7d3c9e7cf27fe8c7d47c7769a008b025c716b5c5cfcdcb0331cca6181fcdeaa19dea48d8f2ebbcc1d4fd76f81e540ec08898a62acf56262aff","ssdeep":"1536:gmuYP0ZH4syavVBIvDbkA0ch0a7ZzTIdHq:gm/0ZH4Ar4Ph0E1SHq","tlshash":"d25302b3da071c5ed7eebf70c91a601208ca7d8ad9f30393c612cb66565624827d68f7","first_seen":"2023-11-08T18:58:35Z","last_seen":"2026-07-23T02:43:48.710129Z","times_seen":1368,"resource_available":false,"data":null}},"time_used":147,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":87,"receive":60,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-22","alert":"Sinkholed","trigger":"cookie-proposal.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cookie-proposal.xyz/wp-content/themes/twentytwentyfour/assets/images/windows.webp","fqdn":"cookie-proposal.xyz","domain":"cookie-proposal.xyz","tld":"xyz"},"ip":{"addr":"37.58.52.38","port":443,"asn":28753,"as":"Leaseweb Deutschland GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cookie-proposal.xyz/","date":"2026-06-22T10:10:04.790Z","timestamp":1782123004790,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cookie-proposal.xyz","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 20 Jun 2026 08:39:23 GMT","end":"Fri, 18 Sep 2026 08:39:22 GMT"},"fingerprint":{"sha1":"B2:67:21:87:DF:60:9D:DA:6F:5B:B8:9E:18:9F:B6:DB:F0:72:E5:77","sha256":"3B:76:8E:37:B9:E5:1E:8A:31:35:34:13:63:31:A9:33:4F:FC:18:41:53:4F:DE:0B:14:94:04:CA:B9:EC:BA:E3"}}},"request":{"raw":"GET /wp-content/themes/twentytwentyfour/assets/images/windows.webp HTTP/1.1\r\nHost: cookie-proposal.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cookie-proposal.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=604800\r\nexpires: Mon, 29 Jun 2026 10:10:04 GMT\r\ncontent-type: image/webp\r\nlast-modified: Tue, 21 Nov 2023 19:56:10 GMT\r\netag: \"1ed24-655d0b5a-e9b3c3ac6c027ff1;;;\"\r\naccept-ranges: bytes\r\ncontent-length: 126244\r\ndate: Mon, 22 Jun 2026 10:10:04 GMT\r\nserver: LiteSpeed\r\nvary: User-Agent\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":126244,"size_decoded":126594,"mime_type":"image/webp","magic":"RIFF (little-endian) data, Web/P image","md5":"9c8ab14e61504d8290608dd62812840d","sha1":"18a3284f7b5ec684211dc355fe2ae56b30639a9e","sha256":"a8b72c3a34a4ac883406005c0fab343d64894c978b3dda1b6bb00eed01e9409e","sha512":"a004a16cc557e9e9cec3f36af8fda796966f7f4d16f11bca1761b350a81cd122048cd2742ccb2beffc4501dcb2746f64cd33f3356575b9cd74de590c56127d69","ssdeep":"3072:sdZsaKCAD83OCerX+GoIKSQgGfMB/WhLQPR2lMvjBy4piYbXxxzY:sdZsxDqKrXSvgS8PcGvmYdxc","tlshash":"ecc312fe0a6c538eca4f077ae3a1ee494151b71673e09053e9ac41d79820437f65abd4","first_seen":"2023-11-08T18:58:35Z","last_seen":"2026-07-23T02:43:48.712337Z","times_seen":1356,"resource_available":false,"data":null}},"time_used":157,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":87,"receive":70,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-22","alert":"Sinkholed","trigger":"cookie-proposal.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cookie-proposal.xyz/wp-content/themes/twentytwentyfour/assets/fonts/cardo/cardo_normal_400.woff2","fqdn":"cookie-proposal.xyz","domain":"cookie-proposal.xyz","tld":"xyz"},"ip":{"addr":"37.58.52.38","port":443,"asn":28753,"as":"Leaseweb Deutschland GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://cookie-proposal.xyz/","date":"2026-06-22T10:10:04.842Z","timestamp":1782123004842,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cookie-proposal.xyz","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 20 Jun 2026 08:39:23 GMT","end":"Fri, 18 Sep 2026 08:39:22 GMT"},"fingerprint":{"sha1":"B2:67:21:87:DF:60:9D:DA:6F:5B:B8:9E:18:9F:B6:DB:F0:72:E5:77","sha256":"3B:76:8E:37:B9:E5:1E:8A:31:35:34:13:63:31:A9:33:4F:FC:18:41:53:4F:DE:0B:14:94:04:CA:B9:EC:BA:E3"}}},"request":{"raw":"GET /wp-content/themes/twentytwentyfour/assets/fonts/cardo/cardo_normal_400.woff2 HTTP/1.1\r\nHost: cookie-proposal.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cookie-proposal.xyz/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=604800\r\nexpires: Mon, 29 Jun 2026 10:10:04 GMT\r\ncontent-type: font/woff2\r\nlast-modified: Tue, 21 Nov 2023 19:56:10 GMT\r\netag: \"23a8c-655d0b5a-c06ea5ad115a6097;;;\"\r\naccept-ranges: bytes\r\ncontent-length: 146060\r\ndate: Mon, 22 Jun 2026 10:10:04 GMT\r\nserver: LiteSpeed\r\nvary: User-Agent\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":146060,"size_decoded":146410,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 146060, version 1.0","md5":"b782b01afc9646c7259701b07e2a71d0","sha1":"b86a6f0bf3fb4777160165dfe37ca4e99b90216e","sha256":"aa8042a77500cfe4a4893e2b7edbd54dded92768e40418fa0665bec8aae9ae18","sha512":"5f727d90952c324dfb9447c4ef702166844e456c614934bc266be072ed8ca681f8246cbc98b653fa45c6579bdad24dfaad04ebe8300f34774ed137254d208fe3","ssdeep":"3072:86eYDlgQh72091K9MIMjeIHT8edPDfeLSyxJjQ:84ZNh720IMIA8eoj8","tlshash":"e6e31376e110fc9723a55a5c1033a4b82a4ea8e7c188f0d4d1ef4a86effd46646c702f","first_seen":"2023-11-07T21:49:08Z","last_seen":"2026-07-23T15:49:40.603929Z","times_seen":10995,"resource_available":false,"data":null}},"time_used":89,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":62,"receive":27,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-22","alert":"Sinkholed","trigger":"cookie-proposal.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cookie-proposal.xyz/wp-content/themes/twentytwentyfour/assets/fonts/inter/Inter-VariableFont_slnt,wght.woff2","fqdn":"cookie-proposal.xyz","domain":"cookie-proposal.xyz","tld":"xyz"},"ip":{"addr":"37.58.52.38","port":443,"asn":28753,"as":"Leaseweb Deutschland GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://cookie-proposal.xyz/","date":"2026-06-22T10:10:04.818Z","timestamp":1782123004818,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cookie-proposal.xyz","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 20 Jun 2026 08:39:23 GMT","end":"Fri, 18 Sep 2026 08:39:22 GMT"},"fingerprint":{"sha1":"B2:67:21:87:DF:60:9D:DA:6F:5B:B8:9E:18:9F:B6:DB:F0:72:E5:77","sha256":"3B:76:8E:37:B9:E5:1E:8A:31:35:34:13:63:31:A9:33:4F:FC:18:41:53:4F:DE:0B:14:94:04:CA:B9:EC:BA:E3"}}},"request":{"raw":"GET /wp-content/themes/twentytwentyfour/assets/fonts/inter/Inter-VariableFont_slnt,wght.woff2 HTTP/1.1\r\nHost: cookie-proposal.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cookie-proposal.xyz/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=604800\r\nexpires: Mon, 29 Jun 2026 10:10:04 GMT\r\ncontent-type: font/woff2\r\nlast-modified: Tue, 21 Nov 2023 19:56:10 GMT\r\netag: \"4fbe4-655d0b5a-77898beda939019a;;;\"\r\naccept-ranges: bytes\r\ncontent-length: 326628\r\ndate: Mon, 22 Jun 2026 10:10:04 GMT\r\nserver: LiteSpeed\r\nvary: User-Agent\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":326628,"size_decoded":326978,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 326628, version 1.0","md5":"9c9cff93a0d5a209225c1bae18d80a9d","sha1":"40546dbfd5c467c3257d8f3a4ad8af0d9995aeb6","sha256":"e931823ffd0b6cfd1624e3a7c1c49861ed3420297862e727f07e04c8be1cc89b","sha512":"6d60eba8b9ae8b8b85ac93d4da1f3ecac3d8472e9821f9a580ede27ed778b5aa590a5083ccb960602cc2b9d345fa17ed67355cac4a1d07427b1b4330a63abff1","ssdeep":"6144:xfpkCcEWnNlAharQ/P8TVcEbGEDyfVxBe3n/uhWxWFrzW/K/M/4GP:xf2CcnNlAwrqP8TVcEbgV63nqWV/6M4U","tlshash":"7b6423d7562e01f6ee6e19a700855e73f8ee2a326f7cf65c7c43a8f938a1c1464421e1","first_seen":"2023-05-10T07:09:06Z","last_seen":"2026-07-23T17:00:27.819778Z","times_seen":15501,"resource_available":false,"data":null}},"time_used":115,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":82,"receive":33,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-22","alert":"Sinkholed","trigger":"cookie-proposal.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cookie-proposal.xyz/wp-content/themes/twentytwentyfour/assets/fonts/cardo/cardo_italic_400.woff2","fqdn":"cookie-proposal.xyz","domain":"cookie-proposal.xyz","tld":"xyz"},"ip":{"addr":"37.58.52.38","port":443,"asn":28753,"as":"Leaseweb Deutschland GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://cookie-proposal.xyz/","date":"2026-06-22T10:10:04.844Z","timestamp":1782123004844,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cookie-proposal.xyz","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 20 Jun 2026 08:39:23 GMT","end":"Fri, 18 Sep 2026 08:39:22 GMT"},"fingerprint":{"sha1":"B2:67:21:87:DF:60:9D:DA:6F:5B:B8:9E:18:9F:B6:DB:F0:72:E5:77","sha256":"3B:76:8E:37:B9:E5:1E:8A:31:35:34:13:63:31:A9:33:4F:FC:18:41:53:4F:DE:0B:14:94:04:CA:B9:EC:BA:E3"}}},"request":{"raw":"GET /wp-content/themes/twentytwentyfour/assets/fonts/cardo/cardo_italic_400.woff2 HTTP/1.1\r\nHost: cookie-proposal.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cookie-proposal.xyz/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=604800\r\nexpires: Mon, 29 Jun 2026 10:10:04 GMT\r\ncontent-type: font/woff2\r\nlast-modified: Tue, 21 Nov 2023 19:56:10 GMT\r\netag: \"19ae0-655d0b5a-5f6ce75446685883;;;\"\r\naccept-ranges: bytes\r\ncontent-length: 105184\r\ndate: Mon, 22 Jun 2026 10:10:04 GMT\r\nserver: LiteSpeed\r\nvary: User-Agent\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":105184,"size_decoded":105534,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 105184, version 1.0","md5":"f92d2db85594215e2a4d135561897188","sha1":"0fdff68c4027cf421d605798a1de46a061d160a3","sha256":"c3b2ff62e3ac4219811de0c709bd0d81d962a88dc87a598ac19b20f58f960136","sha512":"b532fda93bed9ff05432462a5f4c13ea4b859648032aaafbe339b864dc2a36cfe71a46dede923019a07c7d40b8828aa47127eac3ca1a5dadf8eeef490e5a6ae7","ssdeep":"3072:3nnudHFZEJd5hdHjvd4IbIsmhHTw37DuFs2:3niFZED5hdDLIsmFTwQp","tlshash":"97a312e55ca5b3c58fe0344e663fbe95a181ae514accc7118aca142b4bcd21dfae074f","first_seen":"2023-11-08T18:58:35Z","last_seen":"2026-07-23T02:43:48.702848Z","times_seen":1671,"resource_available":false,"data":null}},"time_used":89,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":83,"receive":6,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-22","alert":"Sinkholed","trigger":"cookie-proposal.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cookie-proposal.xyz/favicon.ico","fqdn":"cookie-proposal.xyz","domain":"cookie-proposal.xyz","tld":"xyz"},"ip":{"addr":"37.58.52.38","port":443,"asn":28753,"as":"Leaseweb Deutschland GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://cookie-proposal.xyz/","date":"2026-06-22T10:10:04.955Z","timestamp":1782123004955,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cookie-proposal.xyz","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 20 Jun 2026 08:39:23 GMT","end":"Fri, 18 Sep 2026 08:39:22 GMT"},"fingerprint":{"sha1":"B2:67:21:87:DF:60:9D:DA:6F:5B:B8:9E:18:9F:B6:DB:F0:72:E5:77","sha256":"3B:76:8E:37:B9:E5:1E:8A:31:35:34:13:63:31:A9:33:4F:FC:18:41:53:4F:DE:0B:14:94:04:CA:B9:EC:BA:E3"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: cookie-proposal.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cookie-proposal.xyz/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 \r\ncontent-type: text/html\r\ncontent-length: 244\r\ncontent-encoding: gzip\r\nvary: Accept-Encoding,User-Agent\r\ndate: Mon, 22 Jun 2026 10:10:04 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":486,"size_decoded":439,"mime_type":"text/html","magic":"HTML document, ASCII text","md5":"e28788dc0342d24e385a7d3c18492cab","sha1":"8af92741d69d407589d7690438e8079a2c718c93","sha256":"3c78104784496533097ddeaebbd5273c429401db999e939d6a476aaa0eec6ee9","sha512":"4f10542e8b98370da619b3d2e0d65e7a3efb227eb61a04c3f3d8f86f1d418e85f708d7bc0e2eb914b67fb6e4b3b2f09da33a5b1de81482424ab69ba02aade0c6","ssdeep":"","tlshash":"62f0976df86b09ce000330b0798a08b6861807a6d62786ea2c01e8700f0003c43802cf","first_seen":"2026-06-22T10:10:30.474937Z","last_seen":"2026-06-22T10:10:30.474937Z","times_seen":1,"resource_available":false,"data":null}},"time_used":26,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":26,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-22","alert":"Sinkholed","trigger":"cookie-proposal.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cookie-proposal.xyz/wp-includes/js/wp-emoji-release.min.js?ver=7.0","fqdn":"cookie-proposal.xyz","domain":"cookie-proposal.xyz","tld":"xyz"},"ip":{"addr":"37.58.52.38","port":443,"asn":28753,"as":"Leaseweb Deutschland GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cookie-proposal.xyz/","date":"2026-06-22T10:10:05.093Z","timestamp":1782123005093,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cookie-proposal.xyz","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 20 Jun 2026 08:39:23 GMT","end":"Fri, 18 Sep 2026 08:39:22 GMT"},"fingerprint":{"sha1":"B2:67:21:87:DF:60:9D:DA:6F:5B:B8:9E:18:9F:B6:DB:F0:72:E5:77","sha256":"3B:76:8E:37:B9:E5:1E:8A:31:35:34:13:63:31:A9:33:4F:FC:18:41:53:4F:DE:0B:14:94:04:CA:B9:EC:BA:E3"}}},"request":{"raw":"GET /wp-includes/js/wp-emoji-release.min.js?ver=7.0 HTTP/1.1\r\nHost: cookie-proposal.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cookie-proposal.xyz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=604800\r\nexpires: Mon, 29 Jun 2026 10:10:05 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Sat, 20 Jun 2026 09:31:35 GMT\r\netag: \"58ea-6a365df7-67d49d80bc997015;br\"\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding,User-Agent\r\ncontent-length: 4949\r\ndate: Mon, 22 Jun 2026 10:10:05 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":22762,"size_decoded":5346,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (19823)","md5":"f0cc9ba5cf46af0cd73d521803e3b07e","sha1":"7d2a74f87dc70a39eccce3bae1d4cc404cb134f4","sha256":"fd59b0ebf6282ed71647bf2f6e0d1925bbfd1f270865a832079ebb60259aabca","sha512":"7ec44f08676c195547a623504c7105ef3d0acea5839675599598043f3e0b5a3386452e3db6fbea90722f7be9e6effdae1b89c49e2b05b22b8c415616e07d471d","ssdeep":"384:WzevzApRZTbXU/3o//bEPhXgA5POkpJTX:Wsk9XU/3o//YpXgAs+hX","tlshash":"7fa2959ba33a4e8f343e3bd78d968f4dc9da555321c0e079dbefb6c169a00568274c80","first_seen":"2025-11-10T19:52:32.864936Z","last_seen":"2026-07-23T16:41:37.533205Z","times_seen":308683,"resource_available":true,"data":null}},"time_used":26,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":26,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-22","alert":"Sinkholed","trigger":"cookie-proposal.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cookie-proposal.xyz/","fqdn":"cookie-proposal.xyz","domain":"cookie-proposal.xyz","tld":"xyz"},"ip":{"addr":"37.58.52.38","port":443,"asn":28753,"as":"Leaseweb Deutschland GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-06-22T10:10:04.036Z","timestamp":1782123004036,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cookie-proposal.xyz","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 20 Jun 2026 08:39:23 GMT","end":"Fri, 18 Sep 2026 08:39:22 GMT"},"fingerprint":{"sha1":"B2:67:21:87:DF:60:9D:DA:6F:5B:B8:9E:18:9F:B6:DB:F0:72:E5:77","sha256":"3B:76:8E:37:B9:E5:1E:8A:31:35:34:13:63:31:A9:33:4F:FC:18:41:53:4F:DE:0B:14:94:04:CA:B9:EC:BA:E3"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: cookie-proposal.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/html; charset=UTF-8\r\nlink: \u003chttps://cookie-proposal.xyz/wp-json/\u003e; rel=\"https://api.w.org/\"\r\ncontent-encoding: br\r\nvary: Accept-Encoding,User-Agent\r\ndate: Mon, 22 Jun 2026 10:10:04 GMT\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000, h3-Q050=\":443\"; ma=2592000, h3-Q046=\":443\"; ma=2592000, h3-Q043=\":443\"; ma=2592000, quic=\":443\"; ma=2592000; v=\"43,46\"\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"WordPress Block Editor","description":"Sites using the WordPress Block Editor, also known as Gutenberg.","website":"https://wordpress.org/gutenberg/","common_platform_enumeration":"","icon":"WordPress.svg","categories":["Page builders"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"WordPress Site Editor","description":"Full Site Editing enables users to design and customize their entire WordPress website with a block-based editor.","website":"https://wordpress.org/documentation/article/site-editor/","common_platform_enumeration":"","icon":"WordPress.svg","categories":["Page builders"]},{"name":"WordPress:7.0","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]},{"name":"Elementor:4.1.3","description":"Elementor is a website builder platform for professionals on WordPress.","website":"https://elementor.com","common_platform_enumeration":"","icon":"Elementor.svg","categories":["Page builders","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":92517,"size_decoded":17613,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (20341)","md5":"91d9ce199d487fe8d9e16338ea742425","sha1":"184253b98dd57235e9965a690ad51a5ac4cae7af","sha256":"c18b17379a6dc609bbdbff38fb3ee57eec9858b84efdc237cb486da722ef6214","sha512":"2e7c58b1135934fe4c6244dff11789d798bb14163151325be07b3ab77ed4a502e46bcf2651ca788a4ee73a1987cf76c1f9416acd30925a1c785da00965283a4b","ssdeep":"1536:ri2MqypQCy8Vhnp8RZZhpX4wvSAIXuIVzrA1t:riPjeBZhpX4wvSAIeIV3A1t","tlshash":"5893d761537848fa7d6f876a84487328b20cee21ce4562e6f4f6d15464ccda70ab7b0f","first_seen":"2026-06-22T10:10:30.476815Z","last_seen":"2026-06-22T10:10:30.476815Z","times_seen":1,"resource_available":true,"data":null}},"time_used":453,"timings":{"blocked":-1,"dns":4,"connect":26,"send":0,"wait":356,"receive":0,"ssl":67},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-22","alert":"Sinkholed","trigger":"cookie-proposal.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cookie-proposal.xyz/wp-includes/blocks/navigation/style-rtl.min.css?ver=7.0","fqdn":"cookie-proposal.xyz","domain":"cookie-proposal.xyz","tld":"xyz"},"ip":{"addr":"37.58.52.38","port":443,"asn":28753,"as":"Leaseweb Deutschland GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://cookie-proposal.xyz/","date":"2026-06-22T10:10:04.772Z","timestamp":1782123004772,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cookie-proposal.xyz","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 20 Jun 2026 08:39:23 GMT","end":"Fri, 18 Sep 2026 08:39:22 GMT"},"fingerprint":{"sha1":"B2:67:21:87:DF:60:9D:DA:6F:5B:B8:9E:18:9F:B6:DB:F0:72:E5:77","sha256":"3B:76:8E:37:B9:E5:1E:8A:31:35:34:13:63:31:A9:33:4F:FC:18:41:53:4F:DE:0B:14:94:04:CA:B9:EC:BA:E3"}}},"request":{"raw":"GET /wp-includes/blocks/navigation/style-rtl.min.css?ver=7.0 HTTP/1.1\r\nHost: cookie-proposal.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cookie-proposal.xyz/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=604800\r\nexpires: Mon, 29 Jun 2026 10:10:04 GMT\r\ncontent-type: text/css\r\nlast-modified: Sat, 20 Jun 2026 09:31:39 GMT\r\netag: \"50ec-6a365dfb-3230263a608e5f4;br\"\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding,User-Agent\r\ncontent-length: 2338\r\ndate: Mon, 22 Jun 2026 10:10:04 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":20716,"size_decoded":2720,"mime_type":"text/css","magic":"ASCII text, with very long lines (20716), with no line terminators","md5":"a515a04ebd1cae56750990f6df7ac005","sha1":"a6da04cc7ae4511f21af1b0509d8c8c67188c604","sha256":"43a7c90c5aba15bf4a9795a6c1cc278e99f24d71535b1a145d46ee3024c3218a","sha512":"1c2a387d94e9b5c66c35614898648473b22af34b5d457e8e80c194545c818a14b897dd01bc8acbf402a5abcfceee6dd8388f129ea38362ee7910cedc03d45d17","ssdeep":"384:isFyoYlc9g7jiisBYzpSFW9X3MiUMFMTMqMfM3MqMSMWMCM9MVMY/UYvHHx6XN6G:isFyoYlc9g7jiisBYzpSFW9HMiUMFMTY","tlshash":"9e92e3c05fb0acf4a9bb933b6e4490144623e903c5097ad5a0f3e694b68db545bd3f0b","first_seen":"2026-05-23T17:30:33.383544Z","last_seen":"2026-07-22T18:14:47.385129Z","times_seen":20,"resource_available":false,"data":null}},"time_used":26,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":26,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-22","alert":"Sinkholed","trigger":"cookie-proposal.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cookie-proposal.xyz/wp-includes/js/dist/script-modules/interactivity/index.min.js?ver=efaa5193bbad9c60ffd1","fqdn":"cookie-proposal.xyz","domain":"cookie-proposal.xyz","tld":"xyz"},"ip":{"addr":"37.58.52.38","port":443,"asn":28753,"as":"Leaseweb Deutschland GmbH","country":"Germany","country_code":"DE"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://cookie-proposal.xyz/","date":"2026-06-22T10:10:04.774Z","timestamp":1782123004774,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P384-SHA384","protocol":"TLSv1.3","cert":{"subject":{"commonName":"cookie-proposal.xyz","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 20 Jun 2026 08:39:23 GMT","end":"Fri, 18 Sep 2026 08:39:22 GMT"},"fingerprint":{"sha1":"B2:67:21:87:DF:60:9D:DA:6F:5B:B8:9E:18:9F:B6:DB:F0:72:E5:77","sha256":"3B:76:8E:37:B9:E5:1E:8A:31:35:34:13:63:31:A9:33:4F:FC:18:41:53:4F:DE:0B:14:94:04:CA:B9:EC:BA:E3"}}},"request":{"raw":"GET /wp-includes/js/dist/script-modules/interactivity/index.min.js?ver=efaa5193bbad9c60ffd1 HTTP/1.1\r\nHost: cookie-proposal.xyz\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://cookie-proposal.xyz/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=604800\r\nexpires: Mon, 29 Jun 2026 10:10:04 GMT\r\ncontent-type: application/javascript\r\nlast-modified: Sat, 20 Jun 2026 09:31:36 GMT\r\netag: \"9caa-6a365df8-921cb0876f6ad64e;br\"\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding,User-Agent\r\ncontent-length: 14887\r\ndate: Mon, 22 Jun 2026 10:10:04 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":40106,"size_decoded":15285,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (40105)","md5":"f0866401d2e6bf0b38495c9f278cf96a","sha1":"78a648d27819f61c8b8678d64632d2c35ac6801f","sha256":"726ac59577c8aeeec94c61bfb7791a709e401b5d871d35c39a65cd948f6124e3","sha512":"7889b5b5b511b2d7af4752fb4d4ae4edcf96b18351224867e39c5dbff54fb6fadf3e18a40bfa35cd803d34426e95623768e64a132282f1813525a7d1844f101f","ssdeep":"768:oqEYJ8Mc56JH6u0HpQPu3iU7bwUCD2XZjVV300FKKh:YYJC0cHWujsIl39KKh","tlshash":"37031af8b2a8703183ef50b5503f040bf3366968588d8068ba65d4eb68f454a51f7fbd","first_seen":"2026-05-21T20:58:39.683163Z","last_seen":"2026-07-23T16:41:07.144561Z","times_seen":7221,"resource_available":true,"data":null}},"time_used":49,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":49,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"infosec_yara","sensor_type":"yara","title":"YARAhub by abuse.ch","description":"YARAhub by abuse.ch","scan_date":"2026-06-22","alert":"Detects SocGholish obfuscated variant first observed in July 2022","trigger":"cookie-proposal.xyz/wp-includes/js/dist/script-modules/interactivity/index.min.js?ver=efaa5193bbad9c60ffd1","verdict":"malware","severity":"medium","comment":"","link":"https://yaraify.abuse.ch/yarahub/","meta":{"author":"Ankit Anubhav -ankitanubhav.info","date":"2022-07-19","description":"Detects SocGholish obfuscated variant first observed in July 2022","malpedia_family":"js.fakeupdates","rule":"SocGholish_Variant_B","yarahub_author_email":"ankit.yara@inbox.ru","yarahub_author_twitter":"@ankit_anubhav","yarahub_license":"CC0 1.0","yarahub_reference_link":"https://twitter.com/ankit_anubhav/status/1549246034831781888","yarahub_reference_md5":"4fcc9569ca63cb2f5777954ac4c9290f","yarahub_rule_matching_tlp":"TLP:WHITE","yarahub_rule_sharing_tlp":"TLP:WHITE","yarahub_uuid":"df3d194a-c6bc-4440-bad9-461e0e7962fd"}},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-22","alert":"Sinkholed","trigger":"cookie-proposal.xyz","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}