{"report_id":"bba1895b-80c2-4854-ad5f-be4c5d513dec","version":0,"status":"done","tags":[],"date":"2026-09-21T10:16:17Z","url":{"schema":"http","addr":"wix-l.in/","fqdn":"wix-l.in","domain":"wix-l.in","tld":"in"},"ip":{"addr":"199.36.158.100","port":0,"asn":54113,"as":"Fastly, Inc.","country":"United States","country_code":"US"},"final":{"url":{"schema":"https","addr":"wix-l.in/","fqdn":"wix-l.in","domain":"wix-l.in","tld":"in"},"title":"React App","dom":{"size":1206,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (1202), with no line terminators","md5":"8a6be0ad8349932f296b8a7bcabbfef5","sha1":"7f8988e155873bd0d56f41e9a372b8fe1ac6f6d0","sha256":"c9f5c6b1789d0ff03d1eca266c69dae8d9dfe160580fd838f29bc95fcf616f6f","sha512":"2aa80afa90759b35dc4234f5f5235fd48c8a13aa7077b6c0eab3e4f29296e8c0bbd75d92298511aab3422073b24f9bf8ed413fe83ea5a8cfbfe5a532841aa89b","ssdeep":"","tlshash":"09214127cc42c16f162245eaf973f26dd482a50ecf328c94a4ea51d78ed0fe1c8229a5","dom_hash":"domhashf6de75828571de7df9b8ddc611a6a3a5","first_seen":"2026-09-21T10:16:22.411844Z","last_seen":"2026-09-21T10:16:22.411844Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"wix-l.in/","fqdn":"wix-l.in","domain":"wix-l.in","tld":"in"},"ip":{"addr":"199.36.158.100","port":0,"asn":54113,"as":"Fastly, Inc.","country":"United States","country_code":"US"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-10-26T10:16:17Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":5}},"detection":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"wix-l.in","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"wix-l.in","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"wix-l.in","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-21","alert":"Phishing Block","trigger":"wix-l.in","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"wix-l.in","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null},"summary":[{"fqdn":"wix-l.in","ip":{"addr":"199.36.158.100","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"domain_registered":"2023-07-26","domain_rank":0,"first_seen":"2023-07-26T22:46:36Z","last_seen":"2026-09-21T10:00:56.227877Z","alert_count":30,"request_count":6,"received_data":7598277,"sent_data":2837,"comment":"","tags":null,"fingerprints":[{"name":"Firebase","description":"Firebase is a Google-backed application development software that enables developers to develop iOS, Android and Web apps.","website":"https://firebase.google.com","common_platform_enumeration":"cpe:2.3:a:google:firebase_cloud_messaging:*:*:*:*:*:*:*:*","icon":"Firebase.svg","categories":["Databases","Development"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"React","description":"React is an open-source JavaScript library for building user interfaces or UI components.","website":"https://reactjs.org","common_platform_enumeration":"cpe:2.3:a:facebook:react:*:*:*:*:*:*:*:*","icon":"React.svg","categories":["JavaScript frameworks"]},{"name":"Wix","description":"Wix provides cloud-based web development services, allowing users to create HTML5 websites and mobile sites.","website":"https://www.wix.com","common_platform_enumeration":"","icon":"Wix.svg","categories":["CMS","Blogs"]}]},{"fqdn":"static.parastorage.com","ip":{"addr":"34.49.229.81","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"domain_registered":"2010-05-03","domain_rank":42718,"first_seen":"2012-08-03T17:30:14Z","last_seen":"2026-09-14T16:15:37.144235Z","alert_count":0,"request_count":1,"received_data":103891,"sent_data":498,"comment":"","tags":null,"fingerprints":[{"name":"Varnish:6.0","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"static.parastorage.com/services/js-sdk/1.537.0/js/wix.min.js","fqdn":"static.parastorage.com","domain":"parastorage.com","tld":"com"},"ip":{"addr":"34.49.229.81","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"7712dcae0e50b7d91fac1fd1dffe0568","sha1":"771e0da78eca596ae3a3cc158d7a5afcfef2e8f0","sha256":"365c579b5f25a1b0157ae3ec0a4849dc364d141a641c5e3aa3a8267286b8aae5","sha512":"f590ec82af218d8b7e38292a731e48d561b4d07fc6526a984bc8e78e6ca9c99f4896935b42b816bc330056b0638f3fe0519bd9210815ea90f123aaf7594cbda8","ssdeep":"1536:zZ1cUXksMXDi8gbL5G1Yrw8rAw20DwlZqdCjIaETLAAEhkhmGX8rFRSHYA2e6Vci:Dasrw8LDEX1y2J4K","tlshash":"82a3726536c0fda71692e2b97927700aa2374c6cf148749c97c6cec52b798df5223f28","size":102692,"data":"","first_seen":"2023-03-07T13:52:17Z","last_seen":"2026-09-21T10:16:22.414612Z","times_seen":3512,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wix-l.in/static/js/main.e79201da.js","fqdn":"wix-l.in","domain":"wix-l.in","tld":"in"},"ip":{"addr":"199.36.158.100","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"b3c0cc859e05564a3b440a253d53c530","sha1":"54aeaa4f6c5275229d33e46adc9bb2257a97e315","sha256":"c6eee49a906f72a34eb9029ea8e750ccbfa313e4ad4a7c1f17057eb562ff96fd","sha512":"794b79b39b43b7b8feb9113e265795ffdb582c6bc5a84b12333858ae2f6c83970ac83a8322d7295565f87d3be8e6ea340987d2fe943df6cb54497efc0383cffc","ssdeep":"49152:PAXLhktuaglPsjYJen7xlLCtWhzdGg+dmg9b9ZvGXHZlu1mruH5c:PA2EaMcdp4xAp","tlshash":"1b953ac47291f06287e751e6503f0106f3392919780d8468f279ecda7ca998ba27ff79","size":1877971,"data":"","first_seen":"2026-09-21T10:01:00.47468Z","last_seen":"2026-09-21T10:16:22.419513Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"wix-l.in/favicon.ico","fqdn":"wix-l.in","domain":"wix-l.in","tld":"in"},"ip":{"addr":"199.36.158.100","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://wix-l.in/","date":"2026-09-21T10:15:46.740Z","timestamp":1789985746740,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"worker-collective.ai","organization":""},"issuer":{"commonName":"WR3","organization":"Google Trust Services"},"validity":{"start":"Sat, 08 Aug 2026 23:55:12 GMT","end":"Sat, 07 Nov 2026 00:52:52 GMT"},"fingerprint":{"sha1":"05:71:2A:A0:52:6C:48:30:B6:F0:80:AB:E0:38:08:87:D9:43:C4:35","sha256":"F7:1A:AC:EF:82:0E:F5:D6:9D:B6:BE:EC:69:36:62:6B:A6:45:C2:A2:7C:7B:7E:ED:11:E4:E9:7A:DD:E8:00:9B"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: wix-l.in\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://wix-l.in/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-length: 3594\r\ncache-control: max-age=3600\r\ncontent-encoding: br\r\ncontent-type: image/x-icon\r\netag: \"fc26b72d1f6d47474d8993a667b2af803ede41c9996d0f69e62ed6e415d7fed0-br\"\r\nlast-modified: Thu, 07 May 2026 11:31:19 GMT\r\nstrict-transport-security: max-age=31556926\r\naccept-ranges: bytes\r\ndate: Mon, 21 Sep 2026 10:15:46 GMT\r\nx-served-by: cache-bma-essb1270030-BMA\r\nx-cache: HIT\r\nx-cache-hits: 0\r\nx-timer: S1789985747.762399,VS0,VE1\r\nvary: x-fh-requested-host, accept-encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Firebase","description":"Firebase is a Google-backed application development software that enables developers to develop iOS, Android and Web apps.","website":"https://firebase.google.com","common_platform_enumeration":"cpe:2.3:a:google:firebase_cloud_messaging:*:*:*:*:*:*:*:*","icon":"Firebase.svg","categories":["Databases","Development"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":3870,"size_decoded":4162,"mime_type":"image/x-icon","magic":"MS Windows icon resource - 4 icons, 16x16 with PNG image data, 16 x 16, 8-bit colormap, non-interlaced, 32 bits/pixel, 24x24 with \n- PNG image data, 24 x 24, 8-bit colormap, non-interlaced, 32 bits/pixel","md5":"c92b85a5b907c70211f4ec25e29a8c4a","sha1":"1120538c77ad1f28a89243b4b53fe2ac16cc3bc6","sha256":"3d10f7da6c603178340081668c4ac5b3ae9743ca9a262ab0fcd312fbb9f48bdd","sha512":"d792613e3c31d3aea08ae9ce51a26498afed8b48c93290640c64d0a23edc85e524bc1d090b5ba3fa161b3f2f7d31f9d1da5db77b14189fc3f8ed81ff830fa70c","ssdeep":"","tlshash":"26815cb31b994539e5cb0317fa069036d8f1d11e09b5493e1a938c05ad2fe99c26a36e","first_seen":"2023-04-12T20:45:07Z","last_seen":"2026-09-21T11:56:23.661795Z","times_seen":12148,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"wix-l.in","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"wix-l.in","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"wix-l.in","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-21","alert":"Phishing Block","trigger":"wix-l.in","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"wix-l.in","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wix-l.in/","fqdn":"wix-l.in","domain":"wix-l.in","tld":"in"},"ip":{"addr":"199.36.158.100","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-09-21T10:15:45.788Z","timestamp":1789985745788,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"worker-collective.ai","organization":""},"issuer":{"commonName":"WR3","organization":"Google Trust Services"},"validity":{"start":"Sat, 08 Aug 2026 23:55:12 GMT","end":"Sat, 07 Nov 2026 00:52:52 GMT"},"fingerprint":{"sha1":"05:71:2A:A0:52:6C:48:30:B6:F0:80:AB:E0:38:08:87:D9:43:C4:35","sha256":"F7:1A:AC:EF:82:0E:F5:D6:9D:B6:BE:EC:69:36:62:6B:A6:45:C2:A2:7C:7B:7E:ED:11:E4:E9:7A:DD:E8:00:9B"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: wix-l.in\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: max-age=3600\r\ncontent-encoding: br\r\ncontent-type: text/html; charset=utf-8\r\netag: \"e962ffac1b34dab8f6516fc2665e8eb756d1fa151878bfffcaef70827996a5f7-br\"\r\nlast-modified: Thu, 07 May 2026 11:31:19 GMT\r\nstrict-transport-security: max-age=31556926\r\naccept-ranges: bytes\r\ndate: Mon, 21 Sep 2026 10:15:45 GMT\r\nx-served-by: cache-bma-essb1270069-BMA\r\nx-cache: HIT\r\nx-cache-hits: 0\r\nx-timer: S1789985746.868372,VS0,VE1\r\nvary: x-fh-requested-host, accept-encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\ncontent-length: 275\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Firebase","description":"Firebase is a Google-backed application development software that enables developers to develop iOS, Android and Web apps.","website":"https://firebase.google.com","common_platform_enumeration":"cpe:2.3:a:google:firebase_cloud_messaging:*:*:*:*:*:*:*:*","icon":"Firebase.svg","categories":["Databases","Development"]},{"name":"React","description":"React is an open-source JavaScript library for building user interfaces or UI components.","website":"https://reactjs.org","common_platform_enumeration":"cpe:2.3:a:facebook:react:*:*:*:*:*:*:*:*","icon":"React.svg","categories":["JavaScript frameworks"]},{"name":"Wix","description":"Wix provides cloud-based web development services, allowing users to create HTML5 websites and mobile sites.","website":"https://www.wix.com","common_platform_enumeration":"","icon":"Wix.svg","categories":["CMS","Blogs"]}],"data":{"size":753,"size_decoded":874,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text, with very long lines (753), with no line terminators","md5":"67b4d5798c68e7c949e1ce3a97e43274","sha1":"1c906ba07a5b50b8331fbb86390ee6442df851e9","sha256":"b1db0e6ea1d49be852d88b909764a2fe5a45dbb44743c355d4edef77802ea399","sha512":"339499808a0ac3ee828829b70c28930fe0eebf3db40627e967f4bfd73ddd9cd76d6cdea8aaf3525bf8e33e73d787a8b3390ed8eeccb7a7a5e725755eb1d3c159","ssdeep":"","tlshash":"2501c543cc01c48d563092bbfd73f03dc545b51cd661eca4b4da14aa8dd4bd64c66952","first_seen":"2026-09-21T10:01:00.468473Z","last_seen":"2026-09-21T10:16:22.413853Z","times_seen":2,"resource_available":true,"data":null}},"time_used":66,"timings":{"blocked":0,"dns":29,"connect":9,"send":0,"wait":10,"receive":0,"ssl":17},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"wix-l.in","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"wix-l.in","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"wix-l.in","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-21","alert":"Phishing Block","trigger":"wix-l.in","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"wix-l.in","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"static.parastorage.com/services/js-sdk/1.537.0/js/wix.min.js","fqdn":"static.parastorage.com","domain":"parastorage.com","tld":"com"},"ip":{"addr":"34.49.229.81","port":443,"asn":396982,"as":"GOOGLE-CLOUD-PLATFORM","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://wix-l.in/","date":"2026-09-21T10:15:46.259Z","timestamp":1789985746259,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.parastorage.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Mon, 03 Aug 2026 11:18:09 GMT","end":"Sun, 01 Nov 2026 11:18:08 GMT"},"fingerprint":{"sha1":"65:97:6A:3F:FC:DE:B5:EB:AA:DA:A5:F7:16:C6:93:31:01:25:BE:1C","sha256":"D9:3F:66:03:3D:74:0F:66:0C:C2:AA:D9:E7:5C:11:51:AA:78:95:61:2B:4C:61:73:E0:34:EC:91:F6:DF:A4:E1"}}},"request":{"raw":"GET /services/js-sdk/1.537.0/js/wix.min.js HTTP/1.1\r\nHost: static.parastorage.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://wix-l.in/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nx-amz-replication-status: REPLICA\r\nx-amz-server-side-encryption: AES256\r\nx-amz-version-id: Z0XxJCqXQNgG7prBKPNR_SEtK6PnpAKX\r\nserver: Pepyaka/1.31.0\r\nedge-cache-tag: legacy\r\ncache-tag: legacy\r\naccess-control-allow-methods: GET, OPTIONS, POST\r\naccess-control-allow-headers: DNT,X-CustomHeader,Keep-Alive,User-Agent,X-Requested-With,If-Modified-Since,Cache-Control,Content-*\r\ntiming-allow-origin: *\r\naccess-control-allow-origin: *\r\ncontent-encoding: gzip\r\nx-varnish: 989868313\r\nvia: 1.1 varnish (Varnish/6.0),1.1 varnish (Varnish/6.0), 1.1 google\r\ncontent-length: 24831\r\nx-cluster-self-is-next: false\r\nx-cache-status: HIT\r\nx-seen-by: dxbdCPXsxO7sj5IVL4bjgUHedPEZx/nJ38OY/2QNOsKdQdiNmB7oyruFXO73QtgiMiL1w8AIEJzGkv4BGSDhoQ==\r\nx-cluster-node-role: proxy\r\naccept-ranges: bytes\r\ndate: Mon, 14 Sep 2026 15:49:20 GMT\r\ncache-control: public, max-age=7776000\r\nage: 584786\r\nlast-modified: Tue, 16 Dec 2025 07:55:22 GMT\r\netag: W/\"7712dcae0e50b7d91fac1fd1dffe0568\"\r\ncontent-type: application/javascript\r\nvary: Accept-Encoding\r\nx-cache: hit\r\nglb-x-seen-by: qhk2IXhXaFW+ScoHjRxEUvX1Zxk6j9wOS6tQMkUbOP0=\r\nx-gcp-cdn-pop: ARN\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Varnish:6.0","description":"Varnish is a reverse caching proxy.","website":"https://www.varnish-cache.org","common_platform_enumeration":"cpe:2.3:a:varnish-software:varnish_cache:*:*:*:*:*:*:*:*","icon":"Varnish.svg","categories":["Caching"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":102692,"size_decoded":26030,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65536), with no line terminators","md5":"7712dcae0e50b7d91fac1fd1dffe0568","sha1":"771e0da78eca596ae3a3cc158d7a5afcfef2e8f0","sha256":"365c579b5f25a1b0157ae3ec0a4849dc364d141a641c5e3aa3a8267286b8aae5","sha512":"f590ec82af218d8b7e38292a731e48d561b4d07fc6526a984bc8e78e6ca9c99f4896935b42b816bc330056b0638f3fe0519bd9210815ea90f123aaf7594cbda8","ssdeep":"1536:zZ1cUXksMXDi8gbL5G1Yrw8rAw20DwlZqdCjIaETLAAEhkhmGX8rFRSHYA2e6Vci:Dasrw8LDEX1y2J4K","tlshash":"82a3726536c0fda71692e2b97927700aa2374c6cf148749c97c6cec52b798df5223f28","first_seen":"2023-03-07T13:52:17Z","last_seen":"2026-09-21T10:16:22.414612Z","times_seen":3512,"resource_available":true,"data":null}},"time_used":79,"timings":{"blocked":-1,"dns":2,"connect":13,"send":0,"wait":15,"receive":14,"ssl":35},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"wix-l.in/static/js/main.e79201da.js","fqdn":"wix-l.in","domain":"wix-l.in","tld":"in"},"ip":{"addr":"199.36.158.100","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://wix-l.in/","date":"2026-09-21T10:15:46.261Z","timestamp":1789985746261,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"worker-collective.ai","organization":""},"issuer":{"commonName":"WR3","organization":"Google Trust Services"},"validity":{"start":"Sat, 08 Aug 2026 23:55:12 GMT","end":"Sat, 07 Nov 2026 00:52:52 GMT"},"fingerprint":{"sha1":"05:71:2A:A0:52:6C:48:30:B6:F0:80:AB:E0:38:08:87:D9:43:C4:35","sha256":"F7:1A:AC:EF:82:0E:F5:D6:9D:B6:BE:EC:69:36:62:6B:A6:45:C2:A2:7C:7B:7E:ED:11:E4:E9:7A:DD:E8:00:9B"}}},"request":{"raw":"GET /static/js/main.e79201da.js HTTP/1.1\r\nHost: wix-l.in\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://wix-l.in/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-length: 435886\r\ncache-control: max-age=3600\r\ncontent-encoding: br\r\ncontent-type: text/javascript; charset=utf-8\r\netag: \"e1bbfb6dc0ddaf5a0273025f578df100d8fea0e7710b4b81ebce260535cb23ea-br\"\r\nlast-modified: Thu, 07 May 2026 11:31:19 GMT\r\nstrict-transport-security: max-age=31556926\r\naccept-ranges: bytes\r\ndate: Mon, 21 Sep 2026 10:15:46 GMT\r\nx-served-by: cache-bma-essb1270030-BMA\r\nx-cache: HIT\r\nx-cache-hits: 0\r\nx-timer: S1789985746.284082,VS0,VE1\r\nvary: x-fh-requested-host, accept-encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Firebase","description":"Firebase is a Google-backed application development software that enables developers to develop iOS, Android and Web apps.","website":"https://firebase.google.com","common_platform_enumeration":"cpe:2.3:a:google:firebase_cloud_messaging:*:*:*:*:*:*:*:*","icon":"Firebase.svg","categories":["Databases","Development"]}],"data":{"size":1877971,"size_decoded":436474,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (65465)","md5":"5900c235c50898f52784e4bb1cf64d84","sha1":"f3896fc2ce0ce590c291e62ec473e18fac97867d","sha256":"b6c25b28cff37d923232bf113ff67daebf083f80f2997d5aab27ae96847fd831","sha512":"35abc04837b244867c9c1bf2bdeb57e9eec5227cb7f938637196a8793b1ea5ff10ccf1087017c77753df9aa342007d1b408567bff8da5aa23ea1eda399061dac","ssdeep":"24576:PAXL2AktuaglPsjYJen7xlLCtWhzdGg+dmg9b+:PAXLhktuaglPsjYJen7xlLCtWhzdGg+0","tlshash":"2a252ac43292f06247f651e6503f4106f33a2919780d8468f669ecea7ca598ab17ff7c","first_seen":"2026-09-21T10:01:00.470057Z","last_seen":"2026-09-21T10:16:22.415291Z","times_seen":2,"resource_available":true,"data":null}},"time_used":34,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":23,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"wix-l.in","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"wix-l.in","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"wix-l.in","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-21","alert":"Phishing Block","trigger":"wix-l.in","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"wix-l.in","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wix-l.in/static/css/main.0a0f5f07.css","fqdn":"wix-l.in","domain":"wix-l.in","tld":"in"},"ip":{"addr":"199.36.158.100","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://wix-l.in/","date":"2026-09-21T10:15:46.262Z","timestamp":1789985746262,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"worker-collective.ai","organization":""},"issuer":{"commonName":"WR3","organization":"Google Trust Services"},"validity":{"start":"Sat, 08 Aug 2026 23:55:12 GMT","end":"Sat, 07 Nov 2026 00:52:52 GMT"},"fingerprint":{"sha1":"05:71:2A:A0:52:6C:48:30:B6:F0:80:AB:E0:38:08:87:D9:43:C4:35","sha256":"F7:1A:AC:EF:82:0E:F5:D6:9D:B6:BE:EC:69:36:62:6B:A6:45:C2:A2:7C:7B:7E:ED:11:E4:E9:7A:DD:E8:00:9B"}}},"request":{"raw":"GET /static/css/main.0a0f5f07.css HTTP/1.1\r\nHost: wix-l.in\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://wix-l.in/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-length: 97811\r\ncache-control: max-age=3600\r\ncontent-encoding: br\r\ncontent-type: text/css; charset=utf-8\r\netag: \"08bcbcc890280152e59f852f3dd8ef64ce129ba30552ceab06e0f347708ecdd4-br\"\r\nlast-modified: Thu, 07 May 2026 11:31:19 GMT\r\nstrict-transport-security: max-age=31556926\r\naccept-ranges: bytes\r\ndate: Mon, 21 Sep 2026 10:15:46 GMT\r\nx-served-by: cache-bma-essb1270030-BMA\r\nx-cache: HIT\r\nx-cache-hits: 0\r\nx-timer: S1789985746.285120,VS0,VE1\r\nvary: x-fh-requested-host, accept-encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Firebase","description":"Firebase is a Google-backed application development software that enables developers to develop iOS, Android and Web apps.","website":"https://firebase.google.com","common_platform_enumeration":"cpe:2.3:a:google:firebase_cloud_messaging:*:*:*:*:*:*:*:*","icon":"Firebase.svg","categories":["Databases","Development"]}],"data":{"size":1204969,"size_decoded":98391,"mime_type":"text/css; charset=utf-8","magic":"Unicode text, UTF-8 text, with very long lines (65074)","md5":"40e428599dc741c74d59a3834f6ea63a","sha1":"30a7bb08e5ca92f1169afc579cf1ee31aaaa7449","sha256":"d95b5cfeae4da5c45aa2bb52ed2ad4add0b870ede5a998bbb88ec75a37c1acf5","sha512":"705a4ada0a4fc01f4f39fd3b08e19cc656e1371d8ac26b7716144eb2259623d247b1b764bf970dc2738a1125b98f6a53895a40dd1deb64ccbfc936efd7cfa127","ssdeep":"6144:Sto9QfZ098NKQpje60I4D9P8P3/O9QBYbDiyXAL589DJnoUfYAsAPJH9U1TbdS:Z98NKr9P8PvO9QT6l","tlshash":"31257658f5601879f5239c3d97fcaa79f17c6841c800bfacf44fa2db46c1ae92252a5c","first_seen":"2025-12-01T22:37:56.471767Z","last_seen":"2026-09-21T10:16:22.416424Z","times_seen":4,"resource_available":true,"data":null}},"time_used":20,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":11,"receive":9,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"wix-l.in","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"wix-l.in","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"wix-l.in","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-21","alert":"Phishing Block","trigger":"wix-l.in","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"wix-l.in","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wix-l.in/sky.jpg","fqdn":"wix-l.in","domain":"wix-l.in","tld":"in"},"ip":{"addr":"199.36.158.100","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://wix-l.in/","date":"2026-09-21T10:15:46.631Z","timestamp":1789985746631,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"worker-collective.ai","organization":""},"issuer":{"commonName":"WR3","organization":"Google Trust Services"},"validity":{"start":"Sat, 08 Aug 2026 23:55:12 GMT","end":"Sat, 07 Nov 2026 00:52:52 GMT"},"fingerprint":{"sha1":"05:71:2A:A0:52:6C:48:30:B6:F0:80:AB:E0:38:08:87:D9:43:C4:35","sha256":"F7:1A:AC:EF:82:0E:F5:D6:9D:B6:BE:EC:69:36:62:6B:A6:45:C2:A2:7C:7B:7E:ED:11:E4:E9:7A:DD:E8:00:9B"}}},"request":{"raw":"GET /sky.jpg HTTP/1.1\r\nHost: wix-l.in\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://wix-l.in/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-length: 4480086\r\ncache-control: max-age=3600\r\ncontent-encoding: gzip\r\ncontent-type: image/jpeg\r\netag: \"b91128d06f762fa113a80fdc3911a1687b40f4899bf0339577f902933560db8f\"\r\nlast-modified: Thu, 07 May 2026 11:31:19 GMT\r\nstrict-transport-security: max-age=31556926\r\naccept-ranges: bytes\r\ndate: Mon, 21 Sep 2026 10:15:46 GMT\r\nx-served-by: cache-bma-essb1270030-BMA\r\nx-cache: HIT\r\nx-cache-hits: 0\r\nx-timer: S1789985747.653673,VS0,VE1\r\nvary: x-fh-requested-host, accept-encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Firebase","description":"Firebase is a Google-backed application development software that enables developers to develop iOS, Android and Web apps.","website":"https://firebase.google.com","common_platform_enumeration":"cpe:2.3:a:google:firebase_cloud_messaging:*:*:*:*:*:*:*:*","icon":"Firebase.svg","categories":["Databases","Development"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":4501899,"size_decoded":4480654,"mime_type":"image/jpeg","magic":"JPEG image data, JFIF standard 1.01, resolution (DPI), density 72x72, segment length 16, progressive, precision 8, 6000x4000, components 3","md5":"19d4871e27ac2c4906a11c1df48943ae","sha1":"15c976168552aba1d1db4c5266fef47f92d78974","sha256":"53b43facd22bed15c4320ddd4cdbf252654b37121c719a0af4d9c22b0326a754","sha512":"302e51061851677d48fa7fa741fbf351584a170b5ee6a343261fab5ea61f54667f9a4719123c030e56177b40c71300dece9f20f08bf2a67dc001acbc03534452","ssdeep":"24576:EiIzxEc62ynb/79WXbA2+81UNfc2MNp5i1vy3cP3k:EiIzxEca9WXbzgMDs1akU","tlshash":"ee2533c012dfd0d8fa5e11f011d7dc2acc4ba9e8e763c6dd026859d1d89cba42eb9897","first_seen":"2025-08-29T08:27:33.244339Z","last_seen":"2026-09-21T10:16:22.417113Z","times_seen":4,"resource_available":false,"data":null}},"time_used":90,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":10,"receive":80,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"wix-l.in","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"wix-l.in","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"wix-l.in","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"wix-l.in","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-21","alert":"Phishing Block","trigger":"wix-l.in","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"wix-l.in/logo192.png","fqdn":"wix-l.in","domain":"wix-l.in","tld":"in"},"ip":{"addr":"199.36.158.100","port":443,"asn":54113,"as":"FASTLY","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://wix-l.in/","date":"2026-09-21T10:15:46.739Z","timestamp":1789985746739,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"worker-collective.ai","organization":""},"issuer":{"commonName":"WR3","organization":"Google Trust Services"},"validity":{"start":"Sat, 08 Aug 2026 23:55:12 GMT","end":"Sat, 07 Nov 2026 00:52:52 GMT"},"fingerprint":{"sha1":"05:71:2A:A0:52:6C:48:30:B6:F0:80:AB:E0:38:08:87:D9:43:C4:35","sha256":"F7:1A:AC:EF:82:0E:F5:D6:9D:B6:BE:EC:69:36:62:6B:A6:45:C2:A2:7C:7B:7E:ED:11:E4:E9:7A:DD:E8:00:9B"}}},"request":{"raw":"GET /logo192.png HTTP/1.1\r\nHost: wix-l.in\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://wix-l.in/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ncontent-length: 5291\r\ncache-control: max-age=3600\r\ncontent-encoding: br\r\ncontent-type: image/png\r\netag: \"50bd60c6fefdd7de57fb652cf717e33c712106ffe0a32da5f75a12bf22cecbc0-br\"\r\nlast-modified: Thu, 07 May 2026 11:31:19 GMT\r\nstrict-transport-security: max-age=31556926\r\naccept-ranges: bytes\r\ndate: Mon, 21 Sep 2026 10:15:46 GMT\r\nx-served-by: cache-bma-essb1270030-BMA\r\nx-cache: HIT\r\nx-cache-hits: 0\r\nx-timer: S1789985747.761299,VS0,VE1\r\nvary: x-fh-requested-host, accept-encoding\r\nalt-svc: h3=\":443\";ma=86400,h3-29=\":443\";ma=86400,h3-27=\":443\";ma=86400\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Firebase","description":"Firebase is a Google-backed application development software that enables developers to develop iOS, Android and Web apps.","website":"https://firebase.google.com","common_platform_enumeration":"cpe:2.3:a:google:firebase_cloud_messaging:*:*:*:*:*:*:*:*","icon":"Firebase.svg","categories":["Databases","Development"]}],"data":{"size":5347,"size_decoded":5856,"mime_type":"image/png","magic":"PNG image data, 192 x 192, 8-bit colormap, non-interlaced","md5":"33dbdd0177549353eeeb785d02c294af","sha1":"7f4f2d68782a7fafceda84554ecab9b489877500","sha256":"c386396ec70db3608075b5fbfaac4ab1ccaa86ba05a68ab393ec551eb66c3e00","sha512":"e34572cf754ff7e1d0acb12d8275252230ad1dd9adc5858e807fef0fb61aea82cb1f9ca3ebab3eeb449460373140105f8d773e7bddbf6745f9e81cc1546621f4","ssdeep":"96:gMgJkzj81lSl2dxYAYKsHHVIqApHGoKf4slNb6LQbTehYx5AtKAdmTRwy/Ik2k3:gMct0nKsUwXTbnkeAMA+Twkv","tlshash":"deb18e4e37e13c238137de00aa8ee5ddff52c6ff81226144e24933e9243839d9591916","first_seen":"2023-04-21T11:39:01Z","last_seen":"2026-09-21T13:07:39.138385Z","times_seen":15104,"resource_available":false,"data":null}},"time_used":10,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":10,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"wix-l.in","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"wix-l.in","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"wix-l.in","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-09-21","alert":"Phishing Block","trigger":"wix-l.in","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-09-21","alert":"Sinkholed","trigger":"wix-l.in","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}