{"report_id":"bc07276b-a3a0-4d01-b444-1e9675ca0f80","version":0,"status":"done","tags":[],"date":"2026-07-18T15:54:02Z","url":{"schema":"http","addr":"newlifers.org","fqdn":"newlifers.org","domain":"newlifers.org","tld":"org"},"ip":{"addr":"97.74.184.238","port":0,"asn":398101,"as":"GO-DADDY-COM-LLC","country":"United States","country_code":"US"},"final":{"url":{"schema":"https","addr":"www.newlifers.org/","fqdn":"www.newlifers.org","domain":"newlifers.org","tld":"org"},"title":"多伦多新人之家教会 – Toronto Chinese Newlifers Church","dom":{"size":49457,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (10235)","md5":"672a07ced5ab50aef70302697d77b1c0","sha1":"a4980da287cd3318d573d89b33c68d7a23aad0c7","sha256":"4bdfb307ebc87c0105a6a741aadbe2b52dd304d1505720d350a639731ce26e42","sha512":"5ae352c0a912cc3fbc82756e805f8dc908a7d1ee93f87236c68771c3d259a810dd6701fec280a44f0c2decbaf14608ab8a164b346b38b70fd051ec8ad2504ab6","ssdeep":"768:umZdyp6D+1ub41umcuGbZw3VHWLKIyuo0sCZ:bypk+84cmVG2VHWLKIye","tlshash":"7423a532d8b92c93352d42a86372737dad47b40bda065a6d70fdb1540b879ab047facc","dom_hash":"domhashd657d1dcbffa927df16335b567dea2b5","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"newlifers.org","fqdn":"newlifers.org","domain":"newlifers.org","tld":"org"},"ip":{"addr":"97.74.184.238","port":0,"asn":398101,"as":"GO-DADDY-COM-LLC","country":"United States","country_code":"US"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-08-22T15:54:02Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":4}},"detection":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"www.newlifers.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"www.newlifers.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"newlifers.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"newlifers.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null},"summary":[{"fqdn":"www.newlifers.org","ip":{"addr":"97.74.184.238","port":443,"asn":398101,"as":"GO-DADDY-COM-LLC","country":"United States","country_code":"US"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":36,"request_count":18,"received_data":962783,"sent_data":9106,"comment":"","tags":null,"fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"WordPress:7.0.2","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"Bootstrap","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]},{"name":"PHP:8.4.21","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"jQuery Migrate:3.4.1","description":"Query Migrate is a javascript library that allows you to preserve the compatibility of your jQuery code developed for versions of jQuery older than 1.9.","website":"https://github.com/jquery/jquery-migrate","common_platform_enumeration":"","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"WOW:7.0.2","description":"Reveal CSS animation as you scroll down a page.","website":"https://www.delac.io/WOW","common_platform_enumeration":"","icon":"","categories":["JavaScript frameworks","Web frameworks","JavaScript graphics"]}]},{"fqdn":"matomo.debug-cdn.com","ip":{"addr":"45.11.58.254","port":443,"asn":30860,"as":"Virtual Systems LLC","country":"Ukraine","country_code":"UA"},"domain_registered":"2026-03-15","domain_rank":0,"first_seen":"2026-03-17T07:24:29.52928Z","last_seen":"2026-07-05T17:43:47.049245Z","alert_count":0,"request_count":3,"received_data":69893,"sent_data":1901,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"newlifers.org","ip":{"addr":"97.74.184.238","port":443,"asn":398101,"as":"GO-DADDY-COM-LLC","country":"United States","country_code":"US"},"domain_registered":"2023-09-25","domain_rank":0,"first_seen":"2026-07-18T15:54:04.020003Z","last_seen":"2026-07-18T15:54:04.020003Z","alert_count":2,"request_count":1,"received_data":218,"sent_data":482,"comment":"","tags":null,"fingerprints":[{"name":"PHP:8.4.21","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"www.newlifers.org/wp-includes/js/jquery/jquery.min.js?ver=3.7.1","fqdn":"www.newlifers.org","domain":"newlifers.org","tld":"org"},"ip":{"addr":"97.74.184.238","port":443,"asn":398101,"as":"GO-DADDY-COM-LLC","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"3d90dc70b0ba9d3309821a108934b63a","sha1":"e54936d43c313002de548fd2665b60f5fc56a474","sha256":"75aeb38c801269eb8c5898e9c73309bb55dfb6337d845f40e3401ac9e837c01d","sha512":"ecac3853e75a3275c590852c99f80b58bdfc917942309727d412e97de2808669d1435b0e0f2a31fcefed4ec249745ae54909e0ddf7f697e79a6061f062e9c782","ssdeep":"1536:0RUX9uDgwxcy2KVBNwchN6SLaHEk2BSrBESp+a/IEk4aAocVi8SMBQ47GKN:sHNwcv9VBQpLl88SMBQ47GKN","tlshash":"2483f8df77ca702247ab30ba006f550bf276199d684d4400f159d8e9bc78a4a823bf7e","size":87892,"data":"","first_seen":"2026-07-18T15:54:08.740875Z","last_seen":"2026-07-18T15:58:13.144477Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.newlifers.org/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.4.1","fqdn":"www.newlifers.org","domain":"newlifers.org","tld":"org"},"ip":{"addr":"97.74.184.238","port":443,"asn":398101,"as":"GO-DADDY-COM-LLC","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"29c50998e7d7f4588dda9f6d8ba42b1c","sha1":"60e3b000896e7b15f0e26e0573a6c342ec655281","sha256":"c26f7b1fcdcd57e305fe266cce44b36b7619fb249b2b4ae93616a43c1b6cefbb","sha512":"69b9d5f85f1968c59aaff840a8a0e068777b3465caebb994ac35e3006275d40839f6e6f725867e2439972db2ff5edb02172d572ce22fa4ab51b92c8bf33ffe8e","ssdeep":"192:5rprDN+sag6ifKIUpQI99P1tLm9kdgyq1+J3aCJQ+h4MPLORv:5rprxaefKI0LP19m4q1WW+h4MjY","tlshash":"a852d86db56679714eb731b9f03b924f71b205de5a0d8940d19cc8f6282dcae812bf38","size":13915,"data":"","first_seen":"2026-07-18T15:54:08.75423Z","last_seen":"2026-07-18T15:58:13.1503Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.newlifers.org/wp-content/themes/vw-church/assets/js/bootstrap.js?ver=7.0.2","fqdn":"www.newlifers.org","domain":"newlifers.org","tld":"org"},"ip":{"addr":"97.74.184.238","port":443,"asn":398101,"as":"GO-DADDY-COM-LLC","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"79b0236a5c469be970cf864236848729","sha1":"0d908e852d5a7bdf57fa41dc5a02b8ec75ca82d3","sha256":"2e19ab4c5320fbf4262cd16a9fc8f8c4ca8ed19b6a6ad536b47220c53f5686b9","sha512":"8eb3df8305ab62d4df10ee3b3f6009599a88a72ddb2c7e9ecaaacf59b698be28145b58b43312c4b8cd7a24e9be212e9202115110a1df567e1c040e0d43436dc6","ssdeep":"1536:GMrkAOCmkPK/diYeI7GBNGNJMPPlGuakTXiw6fmzS+aWMh1ujzn/dp:WCf5lGATXi9S/MhoP/dp","tlshash":"dee343093efa2473416be47e5beb4156f221508b250ada587d5c0bcc1fe583492febb8","size":148253,"data":"","first_seen":"2023-03-07T13:18:25Z","last_seen":"2026-07-21T02:42:31.769487Z","times_seen":2887,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"matomo.debug-cdn.com/matomo/matomo.js","fqdn":"matomo.debug-cdn.com","domain":"debug-cdn.com","tld":"com"},"ip":{"addr":"45.11.58.254","port":443,"asn":30860,"as":"Virtual Systems LLC","country":"Ukraine","country_code":"UA"},"introduction_type":"scriptElement","is_inline":false,"md5":"b032bad4d0d4a7048ffb383d9ecca10c","sha1":"b79ca8828403f0094f8af46ddff72681d3ca7e1b","sha256":"643dc9512a4efa9959a6475a7e7fcdf906b492aedd5c423e83867f8f153dd13e","sha512":"3d80873cc8e92fac5db40bcaec79386d04bcf9135b48747bfdfc0961c054072a476b81f3e75e148f0063525cef414613997a26a13c76d23c6b9bb3a639c4a081","ssdeep":"1536:ATgnSINAJrRJqerEKlFXhuXEjmlMNfwS9h2BLy1z71B8I6fJIKIQaFLa:AT+Z2fucXYy1PGJ9d5","tlshash":"d063d8ce72c2753a4bcb6075a43f114ab27e9caa1448c4b4e62ac4f6383491d657bf7c","size":67976,"data":"","first_seen":"2026-02-09T02:52:16.040273Z","last_seen":"2026-07-22T00:12:37.032696Z","times_seen":9987,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.newlifers.org/wp-content/themes/vw-church/assets/js/jquery.superfish.js?ver=2.1.2","fqdn":"www.newlifers.org","domain":"newlifers.org","tld":"org"},"ip":{"addr":"97.74.184.238","port":443,"asn":398101,"as":"GO-DADDY-COM-LLC","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"529d3118b334b9e3c5b18164b732ce9d","sha1":"37482b4fd29d93164a55037d419d33312fc7942b","sha256":"996862df1686747b978037477df2c3ec70effb20a7c5fbd9b4db095772d78b2c","sha512":"ce86960df4394de0c64e929970020faae93195598084734170da9405f1ebbdd6ed7056a53573b2dacd615d35ba3e39bf033895f873e35094edcaf5600dfcef05","ssdeep":"192:ZyNE7G++ja1uTOh0Zl04UlNmjaEg9Qi6Tt:ZxDeTOhgQit","tlshash":"aee11dc9fb9e2593c2ba315a089f50cc623d9076dc46086ffcb4e96c6d9487d8265a3c","size":7423,"data":"","first_seen":"2023-03-07T01:24:21Z","last_seen":"2026-07-21T02:42:31.771429Z","times_seen":5017,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.newlifers.org/wp-content/themes/vw-church/assets/js/custom.js?ver=7.0.2","fqdn":"www.newlifers.org","domain":"newlifers.org","tld":"org"},"ip":{"addr":"97.74.184.238","port":443,"asn":398101,"as":"GO-DADDY-COM-LLC","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"3f2dd62a58184839f1b2e97f689962ab","sha1":"d2c67b594ff30b7450ec2a838f5ec073af771db8","sha256":"8c2d55ad38a5ea55d6b4c9e838fd030c6ad2a0c7e250344efac179157c95938c","sha512":"9bb5f48789dbd9cad952b60b5b6da35ef45ba0c00cebfa1ee76c1e186b9682182e8acd9d39707b167ebe18162d9a78a5ca9581b6306e81f1d5bcdc9a12c78d4a","ssdeep":"96:9HUTKQWlOvzgkRPbKs1eXt48IsWbGkL+nFWGbDWJ:5UWQg+ZPkt4PVGkHGuJ","tlshash":"afb12224f266586410fe227ffd3fa3e8362e11533d46444679adc77e3f60d6b9162888","size":5439,"data":"","first_seen":"2026-05-20T04:37:13.441849Z","last_seen":"2026-07-18T15:58:13.153139Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.newlifers.org/wp-content/themes/vw-church/assets/js/wow.js?ver=7.0.2","fqdn":"www.newlifers.org","domain":"newlifers.org","tld":"org"},"ip":{"addr":"97.74.184.238","port":443,"asn":398101,"as":"GO-DADDY-COM-LLC","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"c7b5b74c1f18166d24a649edec92d0e9","sha1":"fbff780ffb3e4ad55c0786ba2007b1d7fb5e7e25","sha256":"218033f510cf60d8ed9c84ef1f0f2b3c68fb9ca329514555a2b7071d60db9fdd","sha512":"aec1cc83cc0bd48065c7d2f5324edb413ab3caf6257c54e01ad767861c4b5d59b7b0d62347d86872bfc106ce52da2104453fe5741f1c5d56ffd3f61e8ac7c8e3","ssdeep":"192:9HctamoFfk612qOfHUhafkasjlfri6mTOvN8HzIqfe2omJ0yaMRaUQPyPCrGJ0Io:3RZmU+GeKrAq6aItnebXJ","tlshash":"7762cc883eeb20609717717e8f5f8104b638154b1159dd08beac4be45fa053897fafb8","size":15597,"data":"","first_seen":"2023-03-08T07:58:56Z","last_seen":"2026-07-21T20:44:56.115742Z","times_seen":1981,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.newlifers.org/wp-includes/js/wp-emoji-loader.min.js","fqdn":"www.newlifers.org","domain":"newlifers.org","tld":"org"},"ip":{"addr":"97.74.184.238","port":443,"asn":398101,"as":"GO-DADDY-COM-LLC","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"6c34aa44acb0290665749e3f9fb1042b","sha1":"eecf9192336c1b92e1d6e74576ebcfd91191b213","sha256":"ae3e21bf135979655d35182241711556fd5816e3b4b17faf22bb2a0186893284","sha512":"1aa25b2b13c430809741d14c895f027bc7168220d5b77b2a2f634903870b1e61ba877c3f9993adb8225a2abcec84713e2835f89aea575f677848d6b7ed64a3bb","ssdeep":"","tlshash":"b371775be67638dba2fa00f3697e4e4be6614435d6c8d038c9ada3181cb5893c274a46","size":3618,"data":"","first_seen":"2026-07-18T15:54:08.757005Z","last_seen":"2026-07-18T15:58:13.153704Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"matomo.debug-cdn.com/script.js","fqdn":"matomo.debug-cdn.com","domain":"debug-cdn.com","tld":"com"},"ip":{"addr":"45.11.58.254","port":443,"asn":30860,"as":"Virtual Systems LLC","country":"Ukraine","country_code":"UA"},"introduction_type":"scriptElement","is_inline":false,"md5":"8d89cc877b578d216fa779c03aa24ab5","sha1":"bd25fd20e8eaf7d45face91eabb6ed205507aa1a","sha256":"210ddc40269a5c249b80025d7d11ee916206775fcff2729cfe9509c0fff25bd8","sha512":"b06a6daa24ab41942f6b2678a766af6e5b15843b66ed420ed9a588f40d85ef71f92c7b1de1f10fe8a58381d31529771271ac3e32ca315ce63fde486b3ef3e04f","ssdeep":"","tlshash":"1721506948bf1a755b3a20ba7e3fd62cb3a7545b7018c01169c885147f71fae820aadc","size":1316,"data":"","first_seen":"2026-06-05T07:11:25.545539Z","last_seen":"2026-07-18T15:58:13.140001Z","times_seen":3,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.newlifers.org/wp-includes/js/wp-emoji-release.min.js?ver=7.0.2","fqdn":"www.newlifers.org","domain":"newlifers.org","tld":"org"},"ip":{"addr":"97.74.184.238","port":443,"asn":398101,"as":"GO-DADDY-COM-LLC","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"7dcb0bb1f67bc5cd9aa86bc0577108e3","sha1":"c90b1ed149a278c322a63f3a79443ccce5592382","sha256":"063840b4b3f5869e0f0d078bab8bd29cfb3a59ee85e8e3edbbec35a8fe846fd3","sha512":"d09c60fc702e1d3fb839685770b2626a64cbc6373ac4bf3a63c3536caef34f4f6caf76adfbd5c2d15bed6e1396ed4f3ca80f6673e3421b2ae2f9e7aa5ccf16f2","ssdeep":"384:WzevzApRZTbbUL3px/bEg1XgA5OOkpJTX:Wsk9bUL3px/YqXgAP+hX","tlshash":"79a2949ba33a4e8f343e3bd78d968f4dc9da555321c0e079dbefb6c169a00568274c90","size":22752,"data":"","first_seen":"2026-06-05T05:27:24.795617Z","last_seen":"2026-07-22T01:26:23.788944Z","times_seen":13633,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":[{"level":"log","text":"JQMIGRATE: Migrate is installed, version 3.4.1","filename":"https://www.newlifers.org/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.4.1","line_number":2,"column_number":981}]},"http":[{"url":{"schema":"https","addr":"www.newlifers.org/wp-includes/css/dashicons.min.css?ver=7.0.2","fqdn":"www.newlifers.org","domain":"newlifers.org","tld":"org"},"ip":{"addr":"97.74.184.238","port":443,"asn":398101,"as":"GO-DADDY-COM-LLC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.newlifers.org/","date":"2026-07-18T15:53:35.466Z","timestamp":1784390015466,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"newlifers.org","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 28 May 2026 20:24:58 GMT","end":"Wed, 26 Aug 2026 20:24:57 GMT"},"fingerprint":{"sha1":"02:3A:D5:79:02:39:7B:B1:4C:40:3F:B9:62:41:4B:B9:B1:8F:33:43","sha256":"09:EC:B4:4D:36:0F:EA:9B:DB:1C:B0:3B:AE:09:25:B6:BD:D7:1F:D2:46:80:F0:4B:45:7A:B8:32:30:6E:66:84"}}},"request":{"raw":"GET /wp-includes/css/dashicons.min.css?ver=7.0.2 HTTP/1.1\r\nHost: www.newlifers.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.newlifers.org/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nlast-modified: Thu, 19 Feb 2026 14:30:25 GMT\r\netag: \"4302787-e67c-64b2e2533e240-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncontent-type: text/css\r\ndate: Sat, 18 Jul 2026 15:53:35 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":59004,"size_decoded":35989,"mime_type":"text/css","magic":"ASCII text, with very long lines (58969)","md5":"6c05185027c3a169cea5b065ac28b6f9","sha1":"d075b19cf8656586e9a561d00ea64f19ff0218ee","sha256":"26a7e7b9d4bb9948771c126085b99fba6546af4399e6263e8a69a3e33f6271cb","sha512":"ecb2602801c8b16c7c079c8f76b09e7b42d71000ba3968fc8c173f8c88cfe99e3739f1cc0149ddea7e69e04755f9b077c48f622e7ab8275ec8b4fdf040ee81f5","ssdeep":"768:oey/Z24B3P3aXOhUzSv16CAyLquqSfurIdUMbs73KO08QSJ2BQH02CRqxMWs5IJq:ox/ZvB/qPWMiquqioMUXQSJYIMW+IJq","tlshash":"2c43c2b1a74a40d677b0c843af65b26a5582bd7df8409cdef40b821c1af3635069dfb8","first_seen":"2025-12-02T22:25:19.065399Z","last_seen":"2026-07-22T01:34:48.300582Z","times_seen":63061,"resource_available":true,"data":null}},"time_used":323,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":323,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"www.newlifers.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"www.newlifers.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.newlifers.org/wp-includes/js/jquery/jquery.min.js?ver=3.7.1","fqdn":"www.newlifers.org","domain":"newlifers.org","tld":"org"},"ip":{"addr":"97.74.184.238","port":443,"asn":398101,"as":"GO-DADDY-COM-LLC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.newlifers.org/","date":"2026-07-18T15:53:35.468Z","timestamp":1784390015468,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"newlifers.org","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 28 May 2026 20:24:58 GMT","end":"Wed, 26 Aug 2026 20:24:57 GMT"},"fingerprint":{"sha1":"02:3A:D5:79:02:39:7B:B1:4C:40:3F:B9:62:41:4B:B9:B1:8F:33:43","sha256":"09:EC:B4:4D:36:0F:EA:9B:DB:1C:B0:3B:AE:09:25:B6:BD:D7:1F:D2:46:80:F0:4B:45:7A:B8:32:30:6E:66:84"}}},"request":{"raw":"GET /wp-includes/js/jquery/jquery.min.js?ver=3.7.1 HTTP/1.1\r\nHost: www.newlifers.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.newlifers.org/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nlast-modified: Mon, 16 Mar 2026 22:42:53 GMT\r\netag: \"43023b4-15754-64d2bf06ef540-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncontent-length: 30542\r\ncontent-type: application/javascript\r\ndate: Sat, 18 Jul 2026 15:53:35 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":87892,"size_decoded":30848,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (65447)","md5":"3d90dc70b0ba9d3309821a108934b63a","sha1":"e54936d43c313002de548fd2665b60f5fc56a474","sha256":"75aeb38c801269eb8c5898e9c73309bb55dfb6337d845f40e3401ac9e837c01d","sha512":"ecac3853e75a3275c590852c99f80b58bdfc917942309727d412e97de2808669d1435b0e0f2a31fcefed4ec249745ae54909e0ddf7f697e79a6061f062e9c782","ssdeep":"1536:0RUX9uDgwxcy2KVBNwchN6SLaHEk2BSrBESp+a/IEk4aAocVi8SMBQ47GKN:sHNwcv9VBQpLl88SMBQ47GKN","tlshash":"2483f8df77ca702247ab30ba006f550bf276199d684d4400f159d8e9bc78a4a823bf7e","first_seen":"2026-07-18T15:54:08.740875Z","last_seen":"2026-07-18T15:58:13.144477Z","times_seen":2,"resource_available":true,"data":null}},"time_used":323,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":322,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"www.newlifers.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"www.newlifers.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.newlifers.org/wp-content/themes/vw-church/assets/js/custom.js?ver=7.0.2","fqdn":"www.newlifers.org","domain":"newlifers.org","tld":"org"},"ip":{"addr":"97.74.184.238","port":443,"asn":398101,"as":"GO-DADDY-COM-LLC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.newlifers.org/","date":"2026-07-18T15:53:35.473Z","timestamp":1784390015473,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"newlifers.org","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 28 May 2026 20:24:58 GMT","end":"Wed, 26 Aug 2026 20:24:57 GMT"},"fingerprint":{"sha1":"02:3A:D5:79:02:39:7B:B1:4C:40:3F:B9:62:41:4B:B9:B1:8F:33:43","sha256":"09:EC:B4:4D:36:0F:EA:9B:DB:1C:B0:3B:AE:09:25:B6:BD:D7:1F:D2:46:80:F0:4B:45:7A:B8:32:30:6E:66:84"}}},"request":{"raw":"GET /wp-content/themes/vw-church/assets/js/custom.js?ver=7.0.2 HTTP/1.1\r\nHost: www.newlifers.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.newlifers.org/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nlast-modified: Fri, 10 Jul 2026 18:44:03 GMT\r\netag: \"4300873-153f-656461febd2d8-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncontent-length: 1685\r\ncontent-type: application/javascript\r\ndate: Sat, 18 Jul 2026 15:53:35 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":5439,"size_decoded":1989,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text","md5":"3f2dd62a58184839f1b2e97f689962ab","sha1":"d2c67b594ff30b7450ec2a838f5ec073af771db8","sha256":"8c2d55ad38a5ea55d6b4c9e838fd030c6ad2a0c7e250344efac179157c95938c","sha512":"9bb5f48789dbd9cad952b60b5b6da35ef45ba0c00cebfa1ee76c1e186b9682182e8acd9d39707b167ebe18162d9a78a5ca9581b6306e81f1d5bcdc9a12c78d4a","ssdeep":"96:9HUTKQWlOvzgkRPbKs1eXt48IsWbGkL+nFWGbDWJ:5UWQg+ZPkt4PVGkHGuJ","tlshash":"afb12224f266586410fe227ffd3fa3e8362e11533d46444679adc77e3f60d6b9162888","first_seen":"2026-05-20T04:37:13.441849Z","last_seen":"2026-07-18T15:58:13.153139Z","times_seen":3,"resource_available":true,"data":null}},"time_used":317,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":317,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"www.newlifers.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"www.newlifers.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.newlifers.org/wp-content/themes/vw-church/assets/js/wow.js?ver=7.0.2","fqdn":"www.newlifers.org","domain":"newlifers.org","tld":"org"},"ip":{"addr":"97.74.184.238","port":443,"asn":398101,"as":"GO-DADDY-COM-LLC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.newlifers.org/","date":"2026-07-18T15:53:35.474Z","timestamp":1784390015474,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"newlifers.org","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 28 May 2026 20:24:58 GMT","end":"Wed, 26 Aug 2026 20:24:57 GMT"},"fingerprint":{"sha1":"02:3A:D5:79:02:39:7B:B1:4C:40:3F:B9:62:41:4B:B9:B1:8F:33:43","sha256":"09:EC:B4:4D:36:0F:EA:9B:DB:1C:B0:3B:AE:09:25:B6:BD:D7:1F:D2:46:80:F0:4B:45:7A:B8:32:30:6E:66:84"}}},"request":{"raw":"GET /wp-content/themes/vw-church/assets/js/wow.js?ver=7.0.2 HTTP/1.1\r\nHost: www.newlifers.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.newlifers.org/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nlast-modified: Fri, 10 Jul 2026 18:44:03 GMT\r\netag: \"4300877-3ced-656461febd6c0-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncontent-length: 3563\r\ncontent-type: application/javascript\r\ndate: Sat, 18 Jul 2026 15:53:35 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":15597,"size_decoded":3867,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text","md5":"c7b5b74c1f18166d24a649edec92d0e9","sha1":"fbff780ffb3e4ad55c0786ba2007b1d7fb5e7e25","sha256":"218033f510cf60d8ed9c84ef1f0f2b3c68fb9ca329514555a2b7071d60db9fdd","sha512":"aec1cc83cc0bd48065c7d2f5324edb413ab3caf6257c54e01ad767861c4b5d59b7b0d62347d86872bfc106ce52da2104453fe5741f1c5d56ffd3f61e8ac7c8e3","ssdeep":"192:9HctamoFfk612qOfHUhafkasjlfri6mTOvN8HzIqfe2omJ0yaMRaUQPyPCrGJ0Io:3RZmU+GeKrAq6aItnebXJ","tlshash":"7762cc883eeb20609717717e8f5f8104b638154b1159dd08beac4be45fa053897fafb8","first_seen":"2023-03-08T07:58:56Z","last_seen":"2026-07-21T20:44:56.115742Z","times_seen":1981,"resource_available":true,"data":null}},"time_used":318,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":317,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"www.newlifers.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"www.newlifers.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"matomo.debug-cdn.com/script.js","fqdn":"matomo.debug-cdn.com","domain":"debug-cdn.com","tld":"com"},"ip":{"addr":"45.11.58.254","port":443,"asn":30860,"as":"Virtual Systems LLC","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.newlifers.org/","date":"2026-07-18T15:53:35.834Z","timestamp":1784390015834,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.debug-cdn.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 16 Jul 2026 00:08:18 GMT","end":"Wed, 14 Oct 2026 00:08:17 GMT"},"fingerprint":{"sha1":"CD:93:63:58:E0:4B:BF:74:28:59:05:94:FF:E4:53:AC:8F:96:67:85","sha256":"64:2C:C1:ED:1D:A2:18:CD:CA:7E:B7:17:39:DC:03:63:8D:56:30:CC:53:DC:4E:72:BA:03:0E:1C:7E:E9:AB:FF"}}},"request":{"raw":"GET /script.js HTTP/1.1\r\nHost: matomo.debug-cdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.newlifers.org/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sat, 18 Jul 2026 15:53:36 GMT\r\ncontent-type: text/javascript\r\nvary: Accept-Encoding\r\nlast-modified: Sun, 29 Mar 2026 13:59:16 GMT\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1316,"size_decoded":749,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text","md5":"8d89cc877b578d216fa779c03aa24ab5","sha1":"bd25fd20e8eaf7d45face91eabb6ed205507aa1a","sha256":"210ddc40269a5c249b80025d7d11ee916206775fcff2729cfe9509c0fff25bd8","sha512":"b06a6daa24ab41942f6b2678a766af6e5b15843b66ed420ed9a588f40d85ef71f92c7b1de1f10fe8a58381d31529771271ac3e32ca315ce63fde486b3ef3e04f","ssdeep":"","tlshash":"1721506948bf1a755b3a20ba7e3fd62cb3a7545b7018c01169c885147f71fae820aadc","first_seen":"2026-06-05T07:11:25.545539Z","last_seen":"2026-07-18T15:58:13.140001Z","times_seen":3,"resource_available":true,"data":null}},"time_used":399,"timings":{"blocked":0,"dns":213,"connect":45,"send":0,"wait":48,"receive":0,"ssl":93},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.newlifers.org/wp-content/themes/vw-church/assets/webfonts/fa-brands-400.woff2","fqdn":"www.newlifers.org","domain":"newlifers.org","tld":"org"},"ip":{"addr":"97.74.184.238","port":443,"asn":398101,"as":"GO-DADDY-COM-LLC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://www.newlifers.org/","date":"2026-07-18T15:53:35.939Z","timestamp":1784390015939,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"newlifers.org","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 28 May 2026 20:24:58 GMT","end":"Wed, 26 Aug 2026 20:24:57 GMT"},"fingerprint":{"sha1":"02:3A:D5:79:02:39:7B:B1:4C:40:3F:B9:62:41:4B:B9:B1:8F:33:43","sha256":"09:EC:B4:4D:36:0F:EA:9B:DB:1C:B0:3B:AE:09:25:B6:BD:D7:1F:D2:46:80:F0:4B:45:7A:B8:32:30:6E:66:84"}}},"request":{"raw":"GET /wp-content/themes/vw-church/assets/webfonts/fa-brands-400.woff2 HTTP/1.1\r\nHost: www.newlifers.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.newlifers.org/wp-content/themes/vw-church/assets/css/fontawesome-all.css?ver=7.0.2\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nlast-modified: Fri, 10 Jul 2026 18:44:03 GMT\r\netag: \"4300878-18ae0-656461febd6c0\"\r\naccept-ranges: bytes\r\ncontent-length: 101088\r\ncontent-type: font/woff2\r\ndate: Sat, 18 Jul 2026 15:53:36 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":101088,"size_decoded":101331,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), CFF, length 101088, version 896.256","md5":"ed1903192eade544e6c2205902b678e4","sha1":"a225a588336ef6110e541a64cefcb16cd4118a97","sha256":"a288b58f2364e3b318277c20f4aa96889b875bf2595776ba3a0c1adc800c2d3c","sha512":"dec95e648960ae8e8108b5a605c022f307cfb3d006bcd6e8651b2bdc1afc9fcf13b670201c125d2e148a2116ed3500eefbca0ca967cdd3b4174fdb9e135d2ff3","ssdeep":"1536:OqmYmByrpkJ72NfJbIFo+ExGG5uFrIZplaRfGjI18sKzeirkRzVRrPpRVC:lpkN2cfETZplaZuC8dDryVRY","tlshash":"daa312f248760156ebf1f3bc11072628ab971f745561a3db6e4927ea3a3280c6c725cf","first_seen":"2025-08-01T08:46:10.916889Z","last_seen":"2026-07-22T01:38:01.752483Z","times_seen":1138,"resource_available":false,"data":null}},"time_used":174,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":171,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"www.newlifers.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"www.newlifers.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.newlifers.org/favicon.ico","fqdn":"www.newlifers.org","domain":"newlifers.org","tld":"org"},"ip":{"addr":"97.74.184.238","port":443,"asn":398101,"as":"GO-DADDY-COM-LLC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.newlifers.org/","date":"2026-07-18T15:53:36.349Z","timestamp":1784390016349,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"newlifers.org","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 28 May 2026 20:24:58 GMT","end":"Wed, 26 Aug 2026 20:24:57 GMT"},"fingerprint":{"sha1":"02:3A:D5:79:02:39:7B:B1:4C:40:3F:B9:62:41:4B:B9:B1:8F:33:43","sha256":"09:EC:B4:4D:36:0F:EA:9B:DB:1C:B0:3B:AE:09:25:B6:BD:D7:1F:D2:46:80:F0:4B:45:7A:B8:32:30:6E:66:84"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: www.newlifers.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.newlifers.org/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 \r\ncontent-length: 355\r\ncontent-type: text/html; charset=iso-8859-1\r\ndate: Sat, 18 Jul 2026 15:53:36 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":355,"size_decoded":509,"mime_type":"text/html; charset=iso-8859-1","magic":"HTML document, ASCII text","md5":"4525b2d648f7c457a689fd96421783a5","sha1":"11bfe30ce44585a15a38e86bc094224ddfe2c08e","sha256":"cc0b4e42510d49c6decd464123ecf3b14ae9b47f9b4ed2ee64893e2d6520a264","sha512":"94e3e8246cf38ff7740e51aa115c8c455b14f78e672c2686b782c0ce30b6fa2dbd91a78b29b3964d9c0414aabd4b9391fd5db326665e25b4b8e73dae60ffe979","ssdeep":"","tlshash":"71e0c04f4057b3474011a2907dc01291e505236b38a152f93ac09467500897dc4aa2dd","first_seen":"2025-12-09T03:51:58.5943Z","last_seen":"2026-07-22T00:19:21.639807Z","times_seen":46611,"resource_available":true,"data":null}},"time_used":161,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":161,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"www.newlifers.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"www.newlifers.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.newlifers.org/wp-content/themes/vw-church/assets/js/jquery.superfish.js?ver=2.1.2","fqdn":"www.newlifers.org","domain":"newlifers.org","tld":"org"},"ip":{"addr":"97.74.184.238","port":443,"asn":398101,"as":"GO-DADDY-COM-LLC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.newlifers.org/","date":"2026-07-18T15:53:35.470Z","timestamp":1784390015470,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"newlifers.org","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 28 May 2026 20:24:58 GMT","end":"Wed, 26 Aug 2026 20:24:57 GMT"},"fingerprint":{"sha1":"02:3A:D5:79:02:39:7B:B1:4C:40:3F:B9:62:41:4B:B9:B1:8F:33:43","sha256":"09:EC:B4:4D:36:0F:EA:9B:DB:1C:B0:3B:AE:09:25:B6:BD:D7:1F:D2:46:80:F0:4B:45:7A:B8:32:30:6E:66:84"}}},"request":{"raw":"GET /wp-content/themes/vw-church/assets/js/jquery.superfish.js?ver=2.1.2 HTTP/1.1\r\nHost: www.newlifers.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.newlifers.org/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nlast-modified: Fri, 10 Jul 2026 18:44:03 GMT\r\netag: \"4300876-1cff-656461febd2d8-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncontent-length: 2374\r\ncontent-type: application/javascript\r\ndate: Sat, 18 Jul 2026 15:53:35 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":7423,"size_decoded":2678,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text","md5":"529d3118b334b9e3c5b18164b732ce9d","sha1":"37482b4fd29d93164a55037d419d33312fc7942b","sha256":"996862df1686747b978037477df2c3ec70effb20a7c5fbd9b4db095772d78b2c","sha512":"ce86960df4394de0c64e929970020faae93195598084734170da9405f1ebbdd6ed7056a53573b2dacd615d35ba3e39bf033895f873e35094edcaf5600dfcef05","ssdeep":"192:ZyNE7G++ja1uTOh0Zl04UlNmjaEg9Qi6Tt:ZxDeTOhgQit","tlshash":"aee11dc9fb9e2593c2ba315a089f50cc623d9076dc46086ffcb4e96c6d9487d8265a3c","first_seen":"2023-03-07T01:24:21Z","last_seen":"2026-07-21T02:42:31.771429Z","times_seen":5017,"resource_available":true,"data":null}},"time_used":318,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":165,"receive":153,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"www.newlifers.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"www.newlifers.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.newlifers.org/","fqdn":"www.newlifers.org","domain":"newlifers.org","tld":"org"},"ip":{"addr":"97.74.184.238","port":443,"asn":398101,"as":"GO-DADDY-COM-LLC","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-07-18T15:53:34.531Z","timestamp":1784390014531,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"newlifers.org","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 28 May 2026 20:24:58 GMT","end":"Wed, 26 Aug 2026 20:24:57 GMT"},"fingerprint":{"sha1":"02:3A:D5:79:02:39:7B:B1:4C:40:3F:B9:62:41:4B:B9:B1:8F:33:43","sha256":"09:EC:B4:4D:36:0F:EA:9B:DB:1C:B0:3B:AE:09:25:B6:BD:D7:1F:D2:46:80:F0:4B:45:7A:B8:32:30:6E:66:84"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: www.newlifers.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nx-powered-by: PHP/8.4.21\r\nlink: \u003chttps://www.newlifers.org/index.php?rest_route=/\u003e; rel=\"https://api.w.org/\", \u003chttps://www.newlifers.org/index.php?rest_route=/wp/v2/pages/87\u003e; rel=\"alternate\"; title=\"JSON\"; type=\"application/json\", \u003chttps://www.newlifers.org/\u003e; rel=shortlink\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncontent-length: 12268\r\ncontent-type: text/html; charset=UTF-8\r\ndate: Sat, 18 Jul 2026 15:53:34 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"WordPress:7.0.2","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"Bootstrap","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]},{"name":"PHP:8.4.21","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"jQuery Migrate:3.4.1","description":"Query Migrate is a javascript library that allows you to preserve the compatibility of your jQuery code developed for versions of jQuery older than 1.9.","website":"https://github.com/jquery/jquery-migrate","common_platform_enumeration":"","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]},{"name":"WOW:7.0.2","description":"Reveal CSS animation as you scroll down a page.","website":"https://www.delac.io/WOW","common_platform_enumeration":"","icon":"","categories":["JavaScript frameworks","Web frameworks","JavaScript graphics"]}],"data":{"size":49253,"size_decoded":12743,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (10238)","md5":"7345140b8f19b121acaaee86880c909a","sha1":"1f608373d49a34529f3e6bb34e69653210e2f976","sha256":"ea33b374ae7d423aa649b26bd06dc5b6a0b25a947449193407f94f0cc8cc9eef","sha512":"07fe4b901345f886a76a563ce3f55b5ab468ad0bdf9c26146a68288ca70908c90cfaf8e91d36c67900d417b70828cfe034cf683d6097dbc25c34d24edbc5fd02","ssdeep":"768:DWmZdyp6C+1ub48wcZGbZw3V26LKIyuo0sCX:DTypd+848w4G2V26LKIyc","tlshash":"1e23a532d8b92c93352d42a86372737dad47b40bda061a6d70fdb1540b879ab047facd","first_seen":"2026-07-18T15:54:08.746513Z","last_seen":"2026-07-18T15:58:13.151501Z","times_seen":2,"resource_available":true,"data":null}},"time_used":447,"timings":{"blocked":-1,"dns":110,"connect":153,"send":0,"wait":337,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"www.newlifers.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"www.newlifers.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.newlifers.org/wp-content/themes/vw-church/assets/css/blocks.css?ver=7.0.2","fqdn":"www.newlifers.org","domain":"newlifers.org","tld":"org"},"ip":{"addr":"97.74.184.238","port":443,"asn":398101,"as":"GO-DADDY-COM-LLC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.newlifers.org/","date":"2026-07-18T15:53:35.458Z","timestamp":1784390015458,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"newlifers.org","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 28 May 2026 20:24:58 GMT","end":"Wed, 26 Aug 2026 20:24:57 GMT"},"fingerprint":{"sha1":"02:3A:D5:79:02:39:7B:B1:4C:40:3F:B9:62:41:4B:B9:B1:8F:33:43","sha256":"09:EC:B4:4D:36:0F:EA:9B:DB:1C:B0:3B:AE:09:25:B6:BD:D7:1F:D2:46:80:F0:4B:45:7A:B8:32:30:6E:66:84"}}},"request":{"raw":"GET /wp-content/themes/vw-church/assets/css/blocks.css?ver=7.0.2 HTTP/1.1\r\nHost: www.newlifers.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.newlifers.org/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nlast-modified: Fri, 10 Jul 2026 18:44:03 GMT\r\netag: \"4300856-259e-656461feb4250-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncontent-length: 2248\r\ncontent-type: text/css\r\ndate: Sat, 18 Jul 2026 15:53:35 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":9630,"size_decoded":2538,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"3ccee8bfbb642c5cc0736a732e0e233d","sha1":"65a5a991faec3cee581e2c06dac511a5d05b45f1","sha256":"25e54c8b1bd14836faae124c6a1c21c43cbd82b991214d141a9e905c65003627","sha512":"8b22560c18a65025c4f118a1903f681719dca9cc84f501ed3bc913e2f93f05e1328b57476d171a2f8b5f012ca429eb0d123b419aa5fa47a39246a63e582615fc","ssdeep":"192:BFG2mpWz198g8feszwzkYkLqVeeYRK6wwVatG:BF3mpOkRqVeBRK6L","tlshash":"eb12f1889fa3b9d7327fcb24ab418a10fac401918e0557f9bde5d084728c9b51d9cf8e","first_seen":"2025-12-05T02:56:56.988885Z","last_seen":"2026-07-18T15:58:13.152111Z","times_seen":4,"resource_available":false,"data":null}},"time_used":163,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":163,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"www.newlifers.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"www.newlifers.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.newlifers.org/wp-content/themes/vw-church/inc/block-patterns/css/block-frontend.css?ver=7.0.2","fqdn":"www.newlifers.org","domain":"newlifers.org","tld":"org"},"ip":{"addr":"97.74.184.238","port":443,"asn":398101,"as":"GO-DADDY-COM-LLC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.newlifers.org/","date":"2026-07-18T15:53:35.459Z","timestamp":1784390015459,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"newlifers.org","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 28 May 2026 20:24:58 GMT","end":"Wed, 26 Aug 2026 20:24:57 GMT"},"fingerprint":{"sha1":"02:3A:D5:79:02:39:7B:B1:4C:40:3F:B9:62:41:4B:B9:B1:8F:33:43","sha256":"09:EC:B4:4D:36:0F:EA:9B:DB:1C:B0:3B:AE:09:25:B6:BD:D7:1F:D2:46:80:F0:4B:45:7A:B8:32:30:6E:66:84"}}},"request":{"raw":"GET /wp-content/themes/vw-church/inc/block-patterns/css/block-frontend.css?ver=7.0.2 HTTP/1.1\r\nHost: www.newlifers.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.newlifers.org/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nlast-modified: Fri, 10 Jul 2026 18:44:03 GMT\r\netag: \"430087e-e61-656461febea48-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncontent-length: 837\r\ncontent-type: text/css\r\ndate: Sat, 18 Jul 2026 15:53:35 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":3681,"size_decoded":1125,"mime_type":"text/css","magic":"ASCII text","md5":"97d33d43ca51625af987a5a84b4f938f","sha1":"ffbeffd5d999c7c52208be742d47e058b5b4a9bd","sha256":"463ef4e0c59d31a3be8087331c8e2e798e1bc5fe2ed41b459fcc7085ff881057","sha512":"6e4f6c54ec49299795781b527d610ee61aabfd28ecde848fa30608e2d307375752ed971870c53fc878581286ff164bdd820228bc38253e52650e36994e964f5d","ssdeep":"","tlshash":"a8718c52ade32470709b067a6f77329563382083a31ac9787676e70c5f883664463fcf","first_seen":"2025-12-05T02:56:57.026436Z","last_seen":"2026-07-18T15:58:13.149105Z","times_seen":4,"resource_available":false,"data":null}},"time_used":163,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":163,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"www.newlifers.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"www.newlifers.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.newlifers.org/wp-content/themes/vw-church/style.css?ver=7.0.2","fqdn":"www.newlifers.org","domain":"newlifers.org","tld":"org"},"ip":{"addr":"97.74.184.238","port":443,"asn":398101,"as":"GO-DADDY-COM-LLC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.newlifers.org/","date":"2026-07-18T15:53:35.462Z","timestamp":1784390015462,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"newlifers.org","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 28 May 2026 20:24:58 GMT","end":"Wed, 26 Aug 2026 20:24:57 GMT"},"fingerprint":{"sha1":"02:3A:D5:79:02:39:7B:B1:4C:40:3F:B9:62:41:4B:B9:B1:8F:33:43","sha256":"09:EC:B4:4D:36:0F:EA:9B:DB:1C:B0:3B:AE:09:25:B6:BD:D7:1F:D2:46:80:F0:4B:45:7A:B8:32:30:6E:66:84"}}},"request":{"raw":"GET /wp-content/themes/vw-church/style.css?ver=7.0.2 HTTP/1.1\r\nHost: www.newlifers.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.newlifers.org/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nlast-modified: Fri, 10 Jul 2026 18:44:03 GMT\r\netag: \"42e27fe-d1c3-656461fec8a71-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncontent-length: 11648\r\ncontent-type: text/css\r\ndate: Sat, 18 Jul 2026 15:53:35 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":53699,"size_decoded":11939,"mime_type":"text/css","magic":"ASCII text, with very long lines (998)","md5":"0f158279fce311f03fad3a922ca6b285","sha1":"8bcbc252575fa29abde89a7721fda1ae54790cea","sha256":"f6b4a3f53adf1e890f6b66aa32b7c3735a67bdd918ff63c07063a846db2a7616","sha512":"fe2e3f2b40e682be56f6ce8b85e708dd0b6667ab96a7a2e31501004bbb4765e8d1804b6e8211f4c6c063cbbe860b0c3ff041b8db5061c16d9bde8ec330aebab3","ssdeep":"1536:K2Mj+AyRTzbNe+wWS7IfCwT9RNeC7D7Uru2+7Gwv0RyBVsHKSjG5d9+TyfkIyCSl:Kv+NRTzbNxhKER3D7ogawv0RyuTjwd90","tlshash":"4b3384c7bfb509007047c4b9799667e4bb3c4003a10ecab8bee5612c9fc86d6566b78d","first_seen":"2026-07-18T15:54:08.749503Z","last_seen":"2026-07-18T15:58:13.14302Z","times_seen":2,"resource_available":false,"data":null}},"time_used":172,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":172,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"www.newlifers.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"www.newlifers.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.newlifers.org/wp-content/themes/vw-church/assets/css/fontawesome-all.css?ver=7.0.2","fqdn":"www.newlifers.org","domain":"newlifers.org","tld":"org"},"ip":{"addr":"97.74.184.238","port":443,"asn":398101,"as":"GO-DADDY-COM-LLC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.newlifers.org/","date":"2026-07-18T15:53:35.464Z","timestamp":1784390015464,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"newlifers.org","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 28 May 2026 20:24:58 GMT","end":"Wed, 26 Aug 2026 20:24:57 GMT"},"fingerprint":{"sha1":"02:3A:D5:79:02:39:7B:B1:4C:40:3F:B9:62:41:4B:B9:B1:8F:33:43","sha256":"09:EC:B4:4D:36:0F:EA:9B:DB:1C:B0:3B:AE:09:25:B6:BD:D7:1F:D2:46:80:F0:4B:45:7A:B8:32:30:6E:66:84"}}},"request":{"raw":"GET /wp-content/themes/vw-church/assets/css/fontawesome-all.css?ver=7.0.2 HTTP/1.1\r\nHost: www.newlifers.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.newlifers.org/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nlast-modified: Fri, 10 Jul 2026 18:44:03 GMT\r\netag: \"430085b-1ad73-656461feb4e08-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncontent-length: 22616\r\ncontent-type: text/css\r\ndate: Sat, 18 Jul 2026 15:53:35 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":109939,"size_decoded":22908,"mime_type":"text/css","magic":"troff or preprocessor input, ASCII text","md5":"a16d39148745400b745a02ac7b0d6f81","sha1":"94f11d3d07d63008ee7c619f3c19861f2bc94f33","sha256":"b279449790025f60300af726f299b6550442f2fbc046e84cbd1f1a275e9f1023","sha512":"ea771722a554f37277a33af9fd69074e60b9158962df6459936a7ec3e3b6e5c979b3e75e1bca0c822a2ed4792d591a72e472db0e5779e4c36b98cf65bcb068af","ssdeep":"1536:PWmumXmHmzrmgm8maI6We0HxGrURcLSQIY1+sGrSjmNnK7i7Sx3NHt3CJ0shUNyO:LNI6W/+fI4RRF6UNIJ5PaJa3tzyf","tlshash":"45b34b3862f31d66900d62b32546ed06bb3e3bd83e5b4ca82dc0ac597e56b5c1217f62","first_seen":"2026-06-17T21:57:12.738839Z","last_seen":"2026-07-18T15:58:13.143801Z","times_seen":11,"resource_available":false,"data":null}},"time_used":173,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":172,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"www.newlifers.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"www.newlifers.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.newlifers.org/wp-content/themes/vw-church/assets/css/animate.css?ver=7.0.2","fqdn":"www.newlifers.org","domain":"newlifers.org","tld":"org"},"ip":{"addr":"97.74.184.238","port":443,"asn":398101,"as":"GO-DADDY-COM-LLC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.newlifers.org/","date":"2026-07-18T15:53:35.465Z","timestamp":1784390015465,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"newlifers.org","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 28 May 2026 20:24:58 GMT","end":"Wed, 26 Aug 2026 20:24:57 GMT"},"fingerprint":{"sha1":"02:3A:D5:79:02:39:7B:B1:4C:40:3F:B9:62:41:4B:B9:B1:8F:33:43","sha256":"09:EC:B4:4D:36:0F:EA:9B:DB:1C:B0:3B:AE:09:25:B6:BD:D7:1F:D2:46:80:F0:4B:45:7A:B8:32:30:6E:66:84"}}},"request":{"raw":"GET /wp-content/themes/vw-church/assets/css/animate.css?ver=7.0.2 HTTP/1.1\r\nHost: www.newlifers.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.newlifers.org/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nlast-modified: Fri, 10 Jul 2026 18:44:03 GMT\r\netag: \"4300855-11405-656461feb3e68-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncontent-length: 4183\r\ncontent-type: text/css\r\ndate: Sat, 18 Jul 2026 15:53:35 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":70661,"size_decoded":4474,"mime_type":"text/css","magic":"ASCII text","md5":"03187c7b2145479ba427faeda756ccfe","sha1":"5e6df48635edfbf68daf728b26200ae2dedcecb8","sha256":"3acd337e1c5ff0b596e1767a2414b3d0daef8cb8912b13f8e4371a65ab245e5b","sha512":"e37a42f23d3265d890546d95eac3272019cf0efe5eba36c89a27f693a4aaabd4eab3a704707c985e7dc23f4afb8cb9c6fefcdad7108ce2d128717b44d2ebcae8","ssdeep":"384:DQutulH2fqftulucfwf7l3laGPGF+1fHf7SpS/fjfHqDxbe3NxdV2PVrib:DQutuQfqftulucfwfk+1fHf7SpS/fjfp","tlshash":"80631f6d2991118457238a5d83df9e68273ce573182a9cef73c2488bdf86fac67c5107","first_seen":"2026-06-17T21:57:12.763133Z","last_seen":"2026-07-19T01:30:41.005149Z","times_seen":20,"resource_available":false,"data":null}},"time_used":324,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":171,"receive":153,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"www.newlifers.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"www.newlifers.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"newlifers.org/","fqdn":"newlifers.org","domain":"newlifers.org","tld":"org"},"ip":{"addr":"97.74.184.238","port":443,"asn":398101,"as":"GO-DADDY-COM-LLC","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-07-18T15:53:33.525Z","timestamp":1784390013525,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"newlifers.org","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 28 May 2026 20:24:58 GMT","end":"Wed, 26 Aug 2026 20:24:57 GMT"},"fingerprint":{"sha1":"02:3A:D5:79:02:39:7B:B1:4C:40:3F:B9:62:41:4B:B9:B1:8F:33:43","sha256":"09:EC:B4:4D:36:0F:EA:9B:DB:1C:B0:3B:AE:09:25:B6:BD:D7:1F:D2:46:80:F0:4B:45:7A:B8:32:30:6E:66:84"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: newlifers.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 301 \r\nx-powered-by: PHP/8.4.21\r\nx-redirect-by: WordPress\r\nlocation: https://www.newlifers.org/\r\ncontent-type: text/html; charset=UTF-8\r\ndate: Sat, 18 Jul 2026 15:53:34 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"301","status_text":"","fingerprints":[{"name":"PHP:8.4.21","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-22T01:24:25.529128Z","times_seen":17436789,"resource_available":true,"data":null}},"time_used":998,"timings":{"blocked":-1,"dns":71,"connect":154,"send":0,"wait":310,"receive":0,"ssl":463},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"newlifers.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"newlifers.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"matomo.debug-cdn.com/matomo/matomo.js","fqdn":"matomo.debug-cdn.com","domain":"debug-cdn.com","tld":"com"},"ip":{"addr":"45.11.58.254","port":443,"asn":30860,"as":"Virtual Systems LLC","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.newlifers.org/","date":"2026-07-18T15:53:36.248Z","timestamp":1784390016248,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.debug-cdn.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 16 Jul 2026 00:08:18 GMT","end":"Wed, 14 Oct 2026 00:08:17 GMT"},"fingerprint":{"sha1":"CD:93:63:58:E0:4B:BF:74:28:59:05:94:FF:E4:53:AC:8F:96:67:85","sha256":"64:2C:C1:ED:1D:A2:18:CD:CA:7E:B7:17:39:DC:03:63:8D:56:30:CC:53:DC:4E:72:BA:03:0E:1C:7E:E9:AB:FF"}}},"request":{"raw":"GET /matomo/matomo.js HTTP/1.1\r\nHost: matomo.debug-cdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.newlifers.org/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sat, 18 Jul 2026 15:53:36 GMT\r\ncontent-type: text/javascript\r\nvary: Accept-Encoding\r\nlast-modified: Tue, 17 Mar 2026 03:54:52 GMT\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":67976,"size_decoded":21424,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (2923)","md5":"b032bad4d0d4a7048ffb383d9ecca10c","sha1":"b79ca8828403f0094f8af46ddff72681d3ca7e1b","sha256":"643dc9512a4efa9959a6475a7e7fcdf906b492aedd5c423e83867f8f153dd13e","sha512":"3d80873cc8e92fac5db40bcaec79386d04bcf9135b48747bfdfc0961c054072a476b81f3e75e148f0063525cef414613997a26a13c76d23c6b9bb3a639c4a081","ssdeep":"1536:ATgnSINAJrRJqerEKlFXhuXEjmlMNfwS9h2BLy1z71B8I6fJIKIQaFLa:AT+Z2fucXYy1PGJ9d5","tlshash":"d063d8ce72c2753a4bcb6075a43f114ab27e9caa1448c4b4e62ac4f6383491d657bf7c","first_seen":"2026-02-09T02:52:16.040273Z","last_seen":"2026-07-22T00:12:37.032696Z","times_seen":9987,"resource_available":true,"data":null}},"time_used":96,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":96,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"matomo.debug-cdn.com/matomo/matomo.php?action_name=%E5%A4%9A%E4%BC%A6%E5%A4%9A%E6%96%B0%E4%BA%BA%E4%B9%8B%E5%AE%B6%E6%95%99%E4%BC%9A%20%E2%80%93%20Toronto%20Chinese%20Newlifers%20Church\u0026idsite=1\u0026rec=1\u0026r=436974\u0026h=15\u0026m=53\u0026s=36\u0026url=https%3A%2F%2Fwww.newlifers.org%2F\u0026_id=0a3cb21eb88a68f6\u0026_idn=1\u0026send_image=0\u0026_refts=0\u0026pv_id=wlyERj\u0026pf_net=112\u0026pf_srv=337\u0026pf_tfr=0\u0026pf_dm1=754\u0026uadata=%7B%7D\u0026pdf=1\u0026qt=0\u0026realp=0\u0026wma=0\u0026fla=0\u0026java=0\u0026ag=0\u0026cookie=1\u0026res=1280x1024","fqdn":"matomo.debug-cdn.com","domain":"debug-cdn.com","tld":"com"},"ip":{"addr":"45.11.58.254","port":443,"asn":30860,"as":"Virtual Systems LLC","country":"Ukraine","country_code":"UA"},"is_navigation_request":false,"resource_type":"beacon","requested_by":"https://www.newlifers.org/","date":"2026-07-18T15:53:36.402Z","timestamp":1784390016402,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.debug-cdn.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 16 Jul 2026 00:08:18 GMT","end":"Wed, 14 Oct 2026 00:08:17 GMT"},"fingerprint":{"sha1":"CD:93:63:58:E0:4B:BF:74:28:59:05:94:FF:E4:53:AC:8F:96:67:85","sha256":"64:2C:C1:ED:1D:A2:18:CD:CA:7E:B7:17:39:DC:03:63:8D:56:30:CC:53:DC:4E:72:BA:03:0E:1C:7E:E9:AB:FF"}}},"request":{"raw":"POST /matomo/matomo.php?action_name=%E5%A4%9A%E4%BC%A6%E5%A4%9A%E6%96%B0%E4%BA%BA%E4%B9%8B%E5%AE%B6%E6%95%99%E4%BC%9A%20%E2%80%93%20Toronto%20Chinese%20Newlifers%20Church\u0026idsite=1\u0026rec=1\u0026r=436974\u0026h=15\u0026m=53\u0026s=36\u0026url=https%3A%2F%2Fwww.newlifers.org%2F\u0026_id=0a3cb21eb88a68f6\u0026_idn=1\u0026send_image=0\u0026_refts=0\u0026pv_id=wlyERj\u0026pf_net=112\u0026pf_srv=337\u0026pf_tfr=0\u0026pf_dm1=754\u0026uadata=%7B%7D\u0026pdf=1\u0026qt=0\u0026realp=0\u0026wma=0\u0026fla=0\u0026java=0\u0026ag=0\u0026cookie=1\u0026res=1280x1024 HTTP/1.1\r\nHost: matomo.debug-cdn.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nContent-Type: application/x-www-form-urlencoded; charset=utf-8\r\nContent-Length: 0\r\nSec-Fetch-Storage-Access: none\r\nOrigin: https://www.newlifers.org\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.newlifers.org/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=6\r\n\r\n","headers":null,"cookies":null,"method":"POST"},"response":{"raw":"HTTP/2 204 \r\nserver: nginx\r\ndate: Sat, 18 Jul 2026 15:53:36 GMT\r\naccess-control-allow-origin: https://www.newlifers.org\r\naccess-control-allow-credentials: true\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"204","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":0,"size_decoded":183,"mime_type":"text/plain","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-07-22T01:24:25.529128Z","times_seen":17436789,"resource_available":true,"data":null}},"time_used":88,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":88,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"www.newlifers.org/wp-content/themes/vw-church/assets/js/bootstrap.js?ver=7.0.2","fqdn":"www.newlifers.org","domain":"newlifers.org","tld":"org"},"ip":{"addr":"97.74.184.238","port":443,"asn":398101,"as":"GO-DADDY-COM-LLC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.newlifers.org/","date":"2026-07-18T15:53:35.472Z","timestamp":1784390015472,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"newlifers.org","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 28 May 2026 20:24:58 GMT","end":"Wed, 26 Aug 2026 20:24:57 GMT"},"fingerprint":{"sha1":"02:3A:D5:79:02:39:7B:B1:4C:40:3F:B9:62:41:4B:B9:B1:8F:33:43","sha256":"09:EC:B4:4D:36:0F:EA:9B:DB:1C:B0:3B:AE:09:25:B6:BD:D7:1F:D2:46:80:F0:4B:45:7A:B8:32:30:6E:66:84"}}},"request":{"raw":"GET /wp-content/themes/vw-church/assets/js/bootstrap.js?ver=7.0.2 HTTP/1.1\r\nHost: www.newlifers.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.newlifers.org/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nlast-modified: Fri, 10 Jul 2026 18:44:03 GMT\r\netag: \"4300872-2431d-656461febcef0-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncontent-length: 28103\r\ncontent-type: application/javascript\r\ndate: Sat, 18 Jul 2026 15:53:35 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":148253,"size_decoded":28409,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (620)","md5":"79b0236a5c469be970cf864236848729","sha1":"0d908e852d5a7bdf57fa41dc5a02b8ec75ca82d3","sha256":"2e19ab4c5320fbf4262cd16a9fc8f8c4ca8ed19b6a6ad536b47220c53f5686b9","sha512":"8eb3df8305ab62d4df10ee3b3f6009599a88a72ddb2c7e9ecaaacf59b698be28145b58b43312c4b8cd7a24e9be212e9202115110a1df567e1c040e0d43436dc6","ssdeep":"1536:GMrkAOCmkPK/diYeI7GBNGNJMPPlGuakTXiw6fmzS+aWMh1ujzn/dp:WCf5lGATXi9S/MhoP/dp","tlshash":"dee343093efa2473416be47e5beb4156f221508b250ada587d5c0bcc1fe583492febb8","first_seen":"2023-03-07T13:18:25Z","last_seen":"2026-07-21T02:42:31.769487Z","times_seen":2887,"resource_available":true,"data":null}},"time_used":319,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":319,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"www.newlifers.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"www.newlifers.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.newlifers.org/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.4.1","fqdn":"www.newlifers.org","domain":"newlifers.org","tld":"org"},"ip":{"addr":"97.74.184.238","port":443,"asn":398101,"as":"GO-DADDY-COM-LLC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.newlifers.org/","date":"2026-07-18T15:53:35.469Z","timestamp":1784390015469,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"newlifers.org","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 28 May 2026 20:24:58 GMT","end":"Wed, 26 Aug 2026 20:24:57 GMT"},"fingerprint":{"sha1":"02:3A:D5:79:02:39:7B:B1:4C:40:3F:B9:62:41:4B:B9:B1:8F:33:43","sha256":"09:EC:B4:4D:36:0F:EA:9B:DB:1C:B0:3B:AE:09:25:B6:BD:D7:1F:D2:46:80:F0:4B:45:7A:B8:32:30:6E:66:84"}}},"request":{"raw":"GET /wp-includes/js/jquery/jquery-migrate.min.js?ver=3.4.1 HTTP/1.1\r\nHost: www.newlifers.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.newlifers.org/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nlast-modified: Mon, 16 Mar 2026 22:44:53 GMT\r\netag: \"4302408-365b-64d2bf7960340-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncontent-length: 5053\r\ncontent-type: application/javascript\r\ndate: Sat, 18 Jul 2026 15:53:35 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":13915,"size_decoded":5357,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (13479)","md5":"29c50998e7d7f4588dda9f6d8ba42b1c","sha1":"60e3b000896e7b15f0e26e0573a6c342ec655281","sha256":"c26f7b1fcdcd57e305fe266cce44b36b7619fb249b2b4ae93616a43c1b6cefbb","sha512":"69b9d5f85f1968c59aaff840a8a0e068777b3465caebb994ac35e3006275d40839f6e6f725867e2439972db2ff5edb02172d572ce22fa4ab51b92c8bf33ffe8e","ssdeep":"192:5rprDN+sag6ifKIUpQI99P1tLm9kdgyq1+J3aCJQ+h4MPLORv:5rprxaefKI0LP19m4q1WW+h4MjY","tlshash":"a852d86db56679714eb731b9f03b924f71b205de5a0d8940d19cc8f6282dcae812bf38","first_seen":"2026-07-18T15:54:08.75423Z","last_seen":"2026-07-18T15:58:13.1503Z","times_seen":2,"resource_available":true,"data":null}},"time_used":319,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":319,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"www.newlifers.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"www.newlifers.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.newlifers.org/wp-content/themes/vw-church/assets/images/search.png","fqdn":"www.newlifers.org","domain":"newlifers.org","tld":"org"},"ip":{"addr":"97.74.184.238","port":443,"asn":398101,"as":"GO-DADDY-COM-LLC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://www.newlifers.org/","date":"2026-07-18T15:53:35.869Z","timestamp":1784390015869,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"newlifers.org","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 28 May 2026 20:24:58 GMT","end":"Wed, 26 Aug 2026 20:24:57 GMT"},"fingerprint":{"sha1":"02:3A:D5:79:02:39:7B:B1:4C:40:3F:B9:62:41:4B:B9:B1:8F:33:43","sha256":"09:EC:B4:4D:36:0F:EA:9B:DB:1C:B0:3B:AE:09:25:B6:BD:D7:1F:D2:46:80:F0:4B:45:7A:B8:32:30:6E:66:84"}}},"request":{"raw":"GET /wp-content/themes/vw-church/assets/images/search.png HTTP/1.1\r\nHost: www.newlifers.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.newlifers.org/wp-content/themes/vw-church/style.css?ver=7.0.2\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nlast-modified: Fri, 10 Jul 2026 18:44:03 GMT\r\netag: \"430086d-c28-656461febc720\"\r\naccept-ranges: bytes\r\ncontent-length: 3112\r\ncontent-type: image/png\r\ndate: Sat, 18 Jul 2026 15:53:35 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":3112,"size_decoded":3350,"mime_type":"image/png","magic":"PNG image data, 20 x 20, 8-bit/color RGBA, non-interlaced","md5":"d0daa2eb7edfda7c4150a1c529bb96f2","sha1":"4f4725c93b7aebb7f97761ba64459b6767a889bd","sha256":"fc2db6d6e7f3a0499f1d6632cd5569f9cce003f225c37be85d1e82d661955852","sha512":"5f10acd96b6d9d349037251aae7ebfe9521810de0e0134d04023475c3b0659c6a43c9452a0f38785c46ab94cf91dfb23b8e0e44b5fa7f64242e04d7629f40815","ssdeep":"","tlshash":"6e514caa8ab0609f7ade75510dce0102eb6d233c9a47366c60c1a5ee1455d475765074","first_seen":"2023-05-25T18:31:12Z","last_seen":"2026-07-18T15:58:13.147883Z","times_seen":71,"resource_available":false,"data":null}},"time_used":162,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":162,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"www.newlifers.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"www.newlifers.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.newlifers.org/wp-includes/js/wp-emoji-release.min.js?ver=7.0.2","fqdn":"www.newlifers.org","domain":"newlifers.org","tld":"org"},"ip":{"addr":"97.74.184.238","port":443,"asn":398101,"as":"GO-DADDY-COM-LLC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://www.newlifers.org/","date":"2026-07-18T15:53:36.086Z","timestamp":1784390016086,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"newlifers.org","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 28 May 2026 20:24:58 GMT","end":"Wed, 26 Aug 2026 20:24:57 GMT"},"fingerprint":{"sha1":"02:3A:D5:79:02:39:7B:B1:4C:40:3F:B9:62:41:4B:B9:B1:8F:33:43","sha256":"09:EC:B4:4D:36:0F:EA:9B:DB:1C:B0:3B:AE:09:25:B6:BD:D7:1F:D2:46:80:F0:4B:45:7A:B8:32:30:6E:66:84"}}},"request":{"raw":"GET /wp-includes/js/wp-emoji-release.min.js?ver=7.0.2 HTTP/1.1\r\nHost: www.newlifers.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.newlifers.org/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nlast-modified: Fri, 05 Jun 2026 08:15:42 GMT\r\netag: \"42c2b92-58e0-6537d444a4780-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncontent-length: 5386\r\ncontent-type: application/javascript\r\ndate: Sat, 18 Jul 2026 15:53:36 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":22752,"size_decoded":5690,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (19813)","md5":"7dcb0bb1f67bc5cd9aa86bc0577108e3","sha1":"c90b1ed149a278c322a63f3a79443ccce5592382","sha256":"063840b4b3f5869e0f0d078bab8bd29cfb3a59ee85e8e3edbbec35a8fe846fd3","sha512":"d09c60fc702e1d3fb839685770b2626a64cbc6373ac4bf3a63c3536caef34f4f6caf76adfbd5c2d15bed6e1396ed4f3ca80f6673e3421b2ae2f9e7aa5ccf16f2","ssdeep":"384:WzevzApRZTbbUL3px/bEg1XgA5OOkpJTX:Wsk9bUL3px/YqXgAP+hX","tlshash":"79a2949ba33a4e8f343e3bd78d968f4dc9da555321c0e079dbefb6c169a00568274c90","first_seen":"2026-06-05T05:27:24.795617Z","last_seen":"2026-07-22T01:26:23.788944Z","times_seen":13633,"resource_available":true,"data":null}},"time_used":165,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":165,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"www.newlifers.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"www.newlifers.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"www.newlifers.org/wp-content/themes/vw-church/assets/css/bootstrap.css?ver=7.0.2","fqdn":"www.newlifers.org","domain":"newlifers.org","tld":"org"},"ip":{"addr":"97.74.184.238","port":443,"asn":398101,"as":"GO-DADDY-COM-LLC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://www.newlifers.org/","date":"2026-07-18T15:53:35.461Z","timestamp":1784390015461,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_ECDHE_RSA_WITH_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.2","cert":{"subject":{"commonName":"newlifers.org","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Thu, 28 May 2026 20:24:58 GMT","end":"Wed, 26 Aug 2026 20:24:57 GMT"},"fingerprint":{"sha1":"02:3A:D5:79:02:39:7B:B1:4C:40:3F:B9:62:41:4B:B9:B1:8F:33:43","sha256":"09:EC:B4:4D:36:0F:EA:9B:DB:1C:B0:3B:AE:09:25:B6:BD:D7:1F:D2:46:80:F0:4B:45:7A:B8:32:30:6E:66:84"}}},"request":{"raw":"GET /wp-content/themes/vw-church/assets/css/bootstrap.css?ver=7.0.2 HTTP/1.1\r\nHost: www.newlifers.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://www.newlifers.org/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nlast-modified: Fri, 10 Jul 2026 18:44:03 GMT\r\netag: \"4300857-2fcfc-656461feb4638-gzip\"\r\naccept-ranges: bytes\r\nvary: Accept-Encoding\r\ncontent-encoding: gzip\r\ncontent-length: 25276\r\ncontent-type: text/css\r\ndate: Sat, 18 Jul 2026 15:53:35 GMT\r\nserver: Apache\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Apache HTTP Server","description":"Apache is a free and open-source cross-platform web server software.","website":"https://httpd.apache.org/","common_platform_enumeration":"cpe:2.3:a:apache:http_server:*:*:*:*:*:*:*:*","icon":"Apache.svg","categories":["Web servers"]}],"data":{"size":195836,"size_decoded":25568,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (560)","md5":"f6e962ab807e8058302d1272f059fe45","sha1":"2ad339e5167d5541bc909802909864bedc9dc7c0","sha256":"04d7687506d61e95371d3f311a1904bac4f8721e07123bf0cdc6c3715b8747e1","sha512":"bf185c4913038ed2e98132fff2e44a12384287c6320c4475e1215bf5cb9c79199e7ee7dc641c1e389b9027bd09611662abe421a5a4ccdf30f0f5848e3dbaad15","ssdeep":"1536:IMwVfq/zcw5lI8RhiHIGBS+97AC2LdQVUaMyWrdbUKCl96pV8d/ALfLNL0:I8cw78d/ALfLNL0","tlshash":"eb14109dfdf118083057956864dbbbf57b7e4086d60ece7ab5e23264cf493c14ca2a88","first_seen":"2023-04-08T21:26:18Z","last_seen":"2026-07-21T02:42:31.761258Z","times_seen":2731,"resource_available":false,"data":null}},"time_used":174,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":174,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"www.newlifers.org","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-07-18","alert":"Sinkholed","trigger":"www.newlifers.org","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}}]}