{"report_id":"c18577d4-8f84-4cf1-85cc-56e0167eacd7","version":6,"status":"done","tags":[],"date":"2025-10-03T11:43:58Z","url":{"schema":"http","addr":"shippersthird.com/account/login.php","fqdn":"shippersthird.com","domain":"shippersthird.com","tld":"com"},"ip":{"addr":"63.250.38.89","port":0,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"final":{"url":{"schema":"https","addr":"shippersthird.com/account/user/login.php","fqdn":"shippersthird.com","domain":"shippersthird.com","tld":"com"},"title":"shippersthird.com/account/user/login.php"},"submit":{"url":{"schema":"http","addr":"shippersthird.com/account/login.php","fqdn":"shippersthird.com","domain":"shippersthird.com","tld":"com"},"ip":{"addr":"63.250.38.89","port":0,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2026-11-07T11:43:58Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-03","alert":"Sinkholed","trigger":"shippersthird.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null},"summary":[{"fqdn":"shippersthird.com","ip":{"addr":"63.250.38.89","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"domain_registered":"unknown","domain_rank":0,"first_seen":"No data","last_seen":"No data","alert_count":20,"request_count":20,"received_data":531000,"sent_data":10794,"comment":"","tags":null,"fingerprints":[{"name":"PHP:7.4.33","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"Moment.js","description":"Moment.js is a free and open-source JavaScript library that removes the need to use the native JavaScript Date object directly.","website":"https://momentjs.com","common_platform_enumeration":"cpe:2.3:a:momentjs:moment:*:*:*:*:*:*:*:*","icon":"Moment.js.svg","categories":["JavaScript libraries"]},{"name":"Bootstrap","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]},{"name":"Popper","description":"Popper is a positioning engine, its purpose is to calculate the position of an element to make it possible to position it near a given reference element.","website":"https://popper.js.org","common_platform_enumeration":"","icon":"Popper.svg","categories":["Miscellaneous"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.250.74.131","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2025-09-28T22:11:46.369912Z","alert_count":0,"request_count":2,"received_data":77180,"sent_data":1104,"comment":"","tags":null,"fingerprints":null},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.74.42","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2025-09-28T22:11:39.889585Z","alert_count":0,"request_count":1,"received_data":7954,"sent_data":462,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":[{"sensor_name":"suricata","description":"Suricata /w Emerging Threats Pro","alerts":null}],"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"shippersthird.com/account/user/smarty/modern/modules/tooltip.js","fqdn":"shippersthird.com","domain":"shippersthird.com","tld":"com"},"ip":{"addr":"63.250.38.89","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"351db056de78bf577a7523ff1c30c62e","sha1":"c3b2283c598f3d0755b527635434a982de8dff4c","sha256":"089c442eec7d639eb3fbc9a2e06efe0062cee4950560accea896d8cc76747e54","sha512":"34677f410897dba9cb6dd960a7d1c2ab08a4d11228d5ffa0d94a1b183b2c19fe695b1fd2e9ce529e18ce75268fa360b99905517bf7c12fcd62156322ac61c026","ssdeep":"96:kPdhyqcz5wDTjlE5qQmmRj1bnPoGpMl/2xuClALMoYJjvD6TxrGD:Ed8qcV4jlHERj1bPoGpMluxuwAooS4xc","tlshash":"adb1624ab6b27933418a7175527b220f717798aa79c88c7cf264e8dc2e3c804b556e78","size":5277,"data":"","first_seen":"2023-03-09T05:04:02Z","last_seen":"2026-04-04T16:45:59.429595Z","times_seen":53,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"shippersthird.com/account/user/smarty/modern/modules/popper.js","fqdn":"shippersthird.com","domain":"shippersthird.com","tld":"com"},"ip":{"addr":"63.250.38.89","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"124bf4d1a7db31dd60d4642dce268035","sha1":"d3745247363d9cb016aaef057bbf2a363796cc01","sha256":"5614d21225b2e012e3765c1b32fba0b8762bcecd8863c8705c1bcc0d03ec19de","sha512":"2d9f8b89336c39da4aface69209c016e2edc4449f134129e3c6453240bb90e7b81e6386a4a0a430892eb131faa4b6f45882f3c5b9e53b89443c66b589d5158e2","ssdeep":"384:+CbuG4xGNoDic2UjKPafxwC5b/4xQviOJU7QzxzivDdE3pcGdjkd/9jt3B+Kb96G:zb4xGmiJfaf7gxQvVU7eziv+cSjknZ33","tlshash":"4882a3cc3291b06643a79167a06f960fb2339979614e9410f199f2d87c70ef9913fc7a","size":19187,"data":"","first_seen":"2023-03-07T01:20:21Z","last_seen":"2026-04-04T17:58:46.882044Z","times_seen":1505,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"shippersthird.com/account/user/smarty/modern/modules/bootstrap/js/bootstrap.min.js","fqdn":"shippersthird.com","domain":"shippersthird.com","tld":"com"},"ip":{"addr":"63.250.38.89","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"84e6e85d19e14564e7b84081d5a71b90","sha1":"e1b4a71bc94a5119e6d7914fe0b179090962bb4e","sha256":"24dcae4f742c60177278ac4a0709c624026200259ca30d938e136bb881453cc4","sha512":"ee525ea89dd3956564ea330bec49152ac45c9ab4d4a4da8662b67ac5104dfcfbfd24cce08fef5f1bfc96ad166133c423a44f9a91f92ca6a276c36af506c5b868","ssdeep":"768:WVVtS1Twrlo8LHVuBQcftKK9DnqxVmfSIZT2KV6d5P6riOi8l:WVVtBrlo8+nqx4Dgd5PiiOi8l","tlshash":"d223b84a7214b4a202dfa476913f450bb73b249aa60ac15cf95a94ed2e7cd4c3237f7c","size":48887,"data":"","first_seen":"2023-03-07T12:29:04Z","last_seen":"2026-04-04T16:45:59.437542Z","times_seen":236,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"shippersthird.com/account/user/smarty/modern/modules/nicescroll/jquery.nicescroll.min.js","fqdn":"shippersthird.com","domain":"shippersthird.com","tld":"com"},"ip":{"addr":"63.250.38.89","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"d247c9568e051b91d27ba6901447e8b0","sha1":"25fbb66bc92f7538edab6575cf57c4391d7adb17","sha256":"2c991660c701f37fb337c54edc49d2a0d607881a3dde688e178ed97ec3d23434","sha512":"ccc7eb30065802534294f2a337e24cbac94afc1eac3ccd3d046beb5a55be7329a63e6b144f5c491773f893123794e87dcf2a5a912816693a58eaf0c963fdc38a","ssdeep":"768:kJza49Lluo96Hj113vGPPjDhiz7o2D00SGwcZ:kJl673AjUz7oYUAZ","tlshash":"fc43c6ceb521706a01cf9236d0cb4746613ae55a670a84d8b138dcf82e75ab5b237f7c","size":60010,"data":"","first_seen":"2023-03-07T01:03:16Z","last_seen":"2026-04-05T05:03:11.526372Z","times_seen":1907,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"shippersthird.com/account/user/smarty/modern/js/scripts.js","fqdn":"shippersthird.com","domain":"shippersthird.com","tld":"com"},"ip":{"addr":"63.250.38.89","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"680c34ea7e1bf488eb245b7ae7aecdec","sha1":"ba44601a585a4c386eab0515597500a7f9fb9f20","sha256":"3d6abc8e1ae77776f7a92c3ea1b403591d207d726c3ba5f49f64aae06b5d155e","sha512":"0b90d74fa70b60e67988d6b978d027feff53965b4d94b4cc70b62ae61b3a8d404a44643190f38167b448f296ad4f70eb154567d6cc8023b4b3d2c41e9437d487","ssdeep":"192:9hGWXDlZ4QIWw5WL8cCPBXXiuYM7AaaAPDW5VwPBM:9gWTlA55WIrPBTYMmsqj","tlshash":"0fd1bd0ef5b3219250bb317c4fdfa14425382847844eef647c9c6be05f846baa1a27dd","size":6679,"data":"","first_seen":"2025-10-03T11:44:03.620344Z","last_seen":"2026-04-04T16:45:59.442638Z","times_seen":9,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"shippersthird.com/account/user/smarty/modern/js/custom.js","fqdn":"shippersthird.com","domain":"shippersthird.com","tld":"com"},"ip":{"addr":"63.250.38.89","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"dd63eddaeb5716413325a28e4549e028","sha1":"5611a0bc1631130c4c4821320a68f6459c2724c6","sha256":"1fc043fb86680e1987865bffa3b52efd1201ac148f674b2f5fdd4798eab623c1","sha512":"cce4dc4cb6b7fe872df7b0c3b8100fa91a80e664e78b7805a0a3f4cac0ba459fc4cdbb50ac2bc5a73b6c2fea8ebec36b9685b1c9f34857cf054514a502b6f2a7","ssdeep":"","tlshash":"cac02b1f240ee033280109f07008c8f2cd098b0e021736430826033c3a0418604cacd5","size":141,"data":"","first_seen":"2025-10-03T11:44:03.617278Z","last_seen":"2026-04-04T16:45:59.443462Z","times_seen":10,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"shippersthird.com/account/user/smarty/modern/js/sa-functions.js","fqdn":"shippersthird.com","domain":"shippersthird.com","tld":"com"},"ip":{"addr":"63.250.38.89","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"7795496d1293c76119431d1ec612687b","sha1":"242a19807b5b511df3f9a06096645141cc99c602","sha256":"b60a13032a595ee77c5c7c27570f09f150abc74dd4e1c58d03ef588a5bf90b92","sha512":"18d714292dc785435836190e83e57e14782570ad32d8fe2279ec69b371a520907f363696f4aae5e0a75df695df5690a02b2ccd5d2f6c1e2e7ca52e6df9e71ba1","ssdeep":"","tlshash":"dc11a3a6ff7d1f27407b3e56006d6347033d8163d40e88114c2187d44d5cb5456c3d6d","size":862,"data":"","first_seen":"2025-10-03T11:44:03.64017Z","last_seen":"2026-04-04T16:45:59.43838Z","times_seen":10,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"shippersthird.com/account/user/login.php","fqdn":"shippersthird.com","domain":"shippersthird.com","tld":"com"},"ip":{"addr":"63.250.38.89","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"eda2af02a5161b68d2f11330867bf4c2","sha1":"39e596e1ebfb4f42bd31b03028f9bd18e8a3061a","sha256":"58ba707c098ef5824bdd0239bd7e72bae169db607ec31ce0b95e39ccd580ef84","sha512":"6b17e65dfc3759ce4dae6cd32ff6b0d2a45a11dcc08b7a3cd987c6e2a9b487143a9e68079b869199c996efdbcabe24e7b15385b0b0ffae0ee582caa0a82cfd81","ssdeep":"","tlshash":"fec0110a0b232008833b30c002a38aaa8032a223ba0ac22a320f0b000f88002c8a80c8","size":156,"data":"","first_seen":"2025-10-03T11:44:03.643622Z","last_seen":"2026-04-04T16:45:59.44795Z","times_seen":9,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"shippersthird.com/account/user/smarty/modern/modules/jquery.min.js","fqdn":"shippersthird.com","domain":"shippersthird.com","tld":"com"},"ip":{"addr":"63.250.38.89","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"24f2e59beae1680f19632d9c1b89d730","sha1":"b3a77b35c4809324ab79e64d40c4ee391234e008","sha256":"39646863a414e0a84920b3a8639c0f3e8c94535e8dc051b42b485a068dc2902f","sha512":"62a642394f3ff4facdfa0df228f7bb55c4db2207bc92e479f6729809c8bbb9b3e02297ba79f218d0b69526cdd8e0547739926045bb29669fbdcc277bfb032aa7","ssdeep":"1536:YNhEyjjTikEJO4edXXe9J578go6MWX2xkj8e4c4j2ll2AckaXEP6n15HZ+FhFcQr:uxc2yjx4j2uX/kcQDU8CuN","tlshash":"aa83e6d9b2c67062977730b950bf410bb17a98dab44c8c60f158d9d47eb8a8d907bf2c","size":86658,"data":"","first_seen":"2023-03-07T01:02:27Z","last_seen":"2026-04-04T17:38:09.775655Z","times_seen":2054,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"shippersthird.com/account/user/smarty/modern/modules/scroll-up-bar/dist/scroll-up-bar.min.js","fqdn":"shippersthird.com","domain":"shippersthird.com","tld":"com"},"ip":{"addr":"63.250.38.89","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"cd7e825d44154929e12a0ca9c30a3976","sha1":"772289be66b944f89a940fd3fa5fbb5f2b146e26","sha256":"4cbde568ddac14ad87ccaf086b550951715c83f28161053733c7d116ba3a4cd5","sha512":"a6003573c2ff78459a55a1baf44c1db9753980466b939706f4e0b0fd31be313631e4d5a2b546e480772f2b7475b11fae59837b13f74dad1b0998ea93e62a796c","ssdeep":"","tlshash":"4f319954b251a98645cfb07fc8eb03469169a10b76c681f6741c4fb50ca2e35a197bfc","size":1760,"data":"","first_seen":"2025-03-05T04:11:47.872892Z","last_seen":"2026-04-04T16:45:59.431799Z","times_seen":28,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":[{"md5":"312351bff07989769097660a56395065","sha1":"004be89dd9e070ecb080b9b759e5be29ec24881b","sha256":"b2b2f104d32c638903e151a9b20d6e27b41d8c0c84cf8458738f83ca2f1dd744","sha512":"454935a0b9fe288a70896e9e0548537ed09c564e47d771b91202f70ddc94946fa6b209e205034983ebe3160633bf5401df01cdfc54b7f98c4bfbd5845a89124f","ssdeep":"","tlshash":"1f3000000000000000cc00000000000000000000000000000000000000000000000c00","size":4,"data":"","first_seen":"2023-03-13T00:05:53Z","last_seen":"2026-03-29T02:34:11.23571Z","times_seen":32210,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}]},"http":[{"url":{"schema":"https","addr":"shippersthird.com/account/user/","fqdn":"shippersthird.com","domain":"shippersthird.com","tld":"com"},"ip":{"addr":"63.250.38.89","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-10-03T11:43:33.713Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"shippersthird.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Wed, 24 Sep 2025 00:00:00 GMT","end":"Thu, 24 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"DB:07:C1:40:C0:B8:F9:D9:B2:AA:C6:AE:7F:34:D7:49:EA:71:29:0F","sha256":"BC:B7:5B:0A:20:08:DC:47:9B:E2:C3:1D:41:27:2A:BB:8C:FF:84:B6:96:4C:8C:49:68:A6:06:A5:3F:EF:34:97"}}},"request":{"raw":"GET /account/user/ HTTP/1.1\r\nHost: shippersthird.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=8ed5318a64433c7dd08a98f06cde89fb\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\nx-powered-by: PHP/7.4.33\r\ncontent-type: text/html; charset=utf-8\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-cache, no-store, must-revalidate, max-age=0\r\npragma: no-cache\r\nlocation: login.php\r\ncontent-length: 0\r\ndate: Fri, 03 Oct 2025 11:43:33 GMT\r\nserver: LiteSpeed\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"PHP:7.4.33","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":3895,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-05T07:47:05.597876Z","times_seen":13365748,"resource_available":true,"data":null}},"time_used":184,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":184,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-03","alert":"Sinkholed","trigger":"shippersthird.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"shippersthird.com/account/user/smarty/modern/modules/fontawesome/web-fonts-with-css/css/fontawesome-all.min.css","fqdn":"shippersthird.com","domain":"shippersthird.com","tld":"com"},"ip":{"addr":"63.250.38.89","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://shippersthird.com/account/user/login.php","date":"2025-10-03T11:43:34.152Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"shippersthird.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Wed, 24 Sep 2025 00:00:00 GMT","end":"Thu, 24 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"DB:07:C1:40:C0:B8:F9:D9:B2:AA:C6:AE:7F:34:D7:49:EA:71:29:0F","sha256":"BC:B7:5B:0A:20:08:DC:47:9B:E2:C3:1D:41:27:2A:BB:8C:FF:84:B6:96:4C:8C:49:68:A6:06:A5:3F:EF:34:97"}}},"request":{"raw":"GET /account/user/smarty/modern/modules/fontawesome/web-fonts-with-css/css/fontawesome-all.min.css HTTP/1.1\r\nHost: shippersthird.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://shippersthird.com/account/user/login.php\r\nCookie: PHPSESSID=8ed5318a64433c7dd08a98f06cde89fb\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 10 Oct 2025 11:43:34 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 25 Nov 2024 11:56:24 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 7130\r\ndate: Fri, 03 Oct 2025 11:43:34 GMT\r\nserver: LiteSpeed\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":33892,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (33714)","md5":"bc230296e25b578ef593d18e06365424","sha1":"3a7989f2290379b5d98af1dcf16d0508aabf1baa","sha256":"093d9139a6cb4a8f6130f2573983b8ccc666753848a3482856e8fe84d32826b4","sha512":"2e791407a520468afe757a633210e200369663b446fdcb36dd2865efb2065bd35f53f19860815dafa86d826a4a75b754cf94b38d86473ade03eb44061d647fff","ssdeep":"384:KT+rB31zxcjzQ61CrLam31b+G9kQCQ/HUMNY3B1vcvQPnsQ/4A:L31zxcfQ6IyUF+6kdQ/0MO33zUQ/j","tlshash":"72e23eb8e50d41d6a731c44bff82b36862bafb3cd5850d94f00e6d1c29d16a911c9fba","first_seen":"2023-05-18T19:16:14Z","last_seen":"2026-04-04T16:45:59.447141Z","times_seen":140,"resource_available":false,"data":null}},"time_used":357,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":357,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-03","alert":"Sinkholed","trigger":"shippersthird.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"shippersthird.com/account/user/smarty/modern/modules/jquery.min.js","fqdn":"shippersthird.com","domain":"shippersthird.com","tld":"com"},"ip":{"addr":"63.250.38.89","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://shippersthird.com/account/user/login.php","date":"2025-10-03T11:43:34.154Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"shippersthird.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Wed, 24 Sep 2025 00:00:00 GMT","end":"Thu, 24 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"DB:07:C1:40:C0:B8:F9:D9:B2:AA:C6:AE:7F:34:D7:49:EA:71:29:0F","sha256":"BC:B7:5B:0A:20:08:DC:47:9B:E2:C3:1D:41:27:2A:BB:8C:FF:84:B6:96:4C:8C:49:68:A6:06:A5:3F:EF:34:97"}}},"request":{"raw":"GET /account/user/smarty/modern/modules/jquery.min.js HTTP/1.1\r\nHost: shippersthird.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://shippersthird.com/account/user/login.php\r\nCookie: PHPSESSID=8ed5318a64433c7dd08a98f06cde89fb\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Mon, 25 Nov 2024 11:56:25 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 29484\r\ndate: Fri, 03 Oct 2025 11:43:34 GMT\r\nserver: LiteSpeed\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":86658,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (32058)","md5":"24f2e59beae1680f19632d9c1b89d730","sha1":"b3a77b35c4809324ab79e64d40c4ee391234e008","sha256":"39646863a414e0a84920b3a8639c0f3e8c94535e8dc051b42b485a068dc2902f","sha512":"62a642394f3ff4facdfa0df228f7bb55c4db2207bc92e479f6729809c8bbb9b3e02297ba79f218d0b69526cdd8e0547739926045bb29669fbdcc277bfb032aa7","ssdeep":"1536:YNhEyjjTikEJO4edXXe9J578go6MWX2xkj8e4c4j2ll2AckaXEP6n15HZ+FhFcQr:uxc2yjx4j2uX/kcQDU8CuN","tlshash":"aa83e6d9b2c67062977730b950bf410bb17a98dab44c8c60f158d9d47eb8a8d907bf2c","first_seen":"2023-03-07T01:02:27Z","last_seen":"2026-04-04T17:38:09.775655Z","times_seen":2054,"resource_available":true,"data":null}},"time_used":535,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":535,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-03","alert":"Sinkholed","trigger":"shippersthird.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"shippersthird.com/account/user/smarty/modern/modules/nicescroll/jquery.nicescroll.min.js","fqdn":"shippersthird.com","domain":"shippersthird.com","tld":"com"},"ip":{"addr":"63.250.38.89","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://shippersthird.com/account/user/login.php","date":"2025-10-03T11:43:34.156Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"shippersthird.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Wed, 24 Sep 2025 00:00:00 GMT","end":"Thu, 24 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"DB:07:C1:40:C0:B8:F9:D9:B2:AA:C6:AE:7F:34:D7:49:EA:71:29:0F","sha256":"BC:B7:5B:0A:20:08:DC:47:9B:E2:C3:1D:41:27:2A:BB:8C:FF:84:B6:96:4C:8C:49:68:A6:06:A5:3F:EF:34:97"}}},"request":{"raw":"GET /account/user/smarty/modern/modules/nicescroll/jquery.nicescroll.min.js HTTP/1.1\r\nHost: shippersthird.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://shippersthird.com/account/user/login.php\r\nCookie: PHPSESSID=8ed5318a64433c7dd08a98f06cde89fb\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Mon, 25 Nov 2024 11:56:25 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 16117\r\ndate: Fri, 03 Oct 2025 11:43:34 GMT\r\nserver: LiteSpeed\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":60010,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (59928)","md5":"d247c9568e051b91d27ba6901447e8b0","sha1":"25fbb66bc92f7538edab6575cf57c4391d7adb17","sha256":"2c991660c701f37fb337c54edc49d2a0d607881a3dde688e178ed97ec3d23434","sha512":"ccc7eb30065802534294f2a337e24cbac94afc1eac3ccd3d046beb5a55be7329a63e6b144f5c491773f893123794e87dcf2a5a912816693a58eaf0c963fdc38a","ssdeep":"768:kJza49Lluo96Hj113vGPPjDhiz7o2D00SGwcZ:kJl673AjUz7oYUAZ","tlshash":"fc43c6ceb521706a01cf9236d0cb4746613ae55a670a84d8b138dcf82e75ab5b237f7c","first_seen":"2023-03-07T01:03:16Z","last_seen":"2026-04-05T05:03:11.526372Z","times_seen":1907,"resource_available":true,"data":null}},"time_used":713,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":713,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-03","alert":"Sinkholed","trigger":"shippersthird.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"shippersthird.com/account/user/smarty/modern/modules/scroll-up-bar/dist/scroll-up-bar.min.js","fqdn":"shippersthird.com","domain":"shippersthird.com","tld":"com"},"ip":{"addr":"63.250.38.89","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://shippersthird.com/account/user/login.php","date":"2025-10-03T11:43:34.156Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"shippersthird.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Wed, 24 Sep 2025 00:00:00 GMT","end":"Thu, 24 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"DB:07:C1:40:C0:B8:F9:D9:B2:AA:C6:AE:7F:34:D7:49:EA:71:29:0F","sha256":"BC:B7:5B:0A:20:08:DC:47:9B:E2:C3:1D:41:27:2A:BB:8C:FF:84:B6:96:4C:8C:49:68:A6:06:A5:3F:EF:34:97"}}},"request":{"raw":"GET /account/user/smarty/modern/modules/scroll-up-bar/dist/scroll-up-bar.min.js HTTP/1.1\r\nHost: shippersthird.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://shippersthird.com/account/user/login.php\r\nCookie: PHPSESSID=8ed5318a64433c7dd08a98f06cde89fb\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Mon, 25 Nov 2024 11:56:25 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 591\r\ndate: Fri, 03 Oct 2025 11:43:34 GMT\r\nserver: LiteSpeed\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":1760,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (1687)","md5":"cd7e825d44154929e12a0ca9c30a3976","sha1":"772289be66b944f89a940fd3fa5fbb5f2b146e26","sha256":"4cbde568ddac14ad87ccaf086b550951715c83f28161053733c7d116ba3a4cd5","sha512":"a6003573c2ff78459a55a1baf44c1db9753980466b939706f4e0b0fd31be313631e4d5a2b546e480772f2b7475b11fae59837b13f74dad1b0998ea93e62a796c","ssdeep":"","tlshash":"4f319954b251a98645cfb07fc8eb03469169a10b76c681f6741c4fb50ca2e35a197bfc","first_seen":"2025-03-05T04:11:47.872892Z","last_seen":"2026-04-04T16:45:59.431799Z","times_seen":28,"resource_available":true,"data":null}},"time_used":713,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":713,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-03","alert":"Sinkholed","trigger":"shippersthird.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/montserrat/v31/JTUSjIg1_i6t8kCHKm459WlhyyTn89ddpQ.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.131","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://shippersthird.com/account/user/login.php","date":"2025-10-03T11:43:34.786Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Sep 2025 08:36:13 GMT","end":"Mon, 08 Dec 2025 08:36:12 GMT"},"fingerprint":{"sha1":"F3:C7:68:20:2E:52:7F:61:4B:43:46:72:CB:A9:29:91:40:A0:5A:96","sha256":"1A:0B:E2:45:70:7A:DB:88:E8:4C:4E:DF:ED:F5:08:2F:2B:2A:CA:33:09:72:DC:80:8B:D2:7B:C6:48:3D:CA:D1"}}},"request":{"raw":"GET /s/montserrat/v31/JTUSjIg1_i6t8kCHKm459WlhyyTn89ddpQ.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://shippersthird.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 37756\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 02 Oct 2025 13:02:46 GMT\r\nexpires: Fri, 02 Oct 2026 13:02:46 GMT\r\ncache-control: public, max-age=31536000\r\nage: 81648\r\nlast-modified: Thu, 04 Sep 2025 17:09:21 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":37756,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 37756, version 1.0","md5":"8a6a885dd57e60ddd85f3190737fa209","sha1":"dbca56b7fe8ee5e4bfb648d639fc6a3bfc5c6e85","sha256":"b9b102f608e8252e3c1e7287309832b16af7dcc6e788651fa503a3faacd7fb2f","sha512":"2bd785869777dc57dbb5934d4c6915b66f89746dd79897820eb4bbd0d262b2612bafdfb07c1e092658ad819f582a97e6a196531f74187d8a0b0bbd07fcbba56a","ssdeep":"768:sqRKhgpCf9U72WeD4A/5IqtBr0ikGvEaQh38/LBu3Emdc043RpgZKMqjkEfO1m:jKgp+9U7Ve8A/7Ai9Et3EBKEUE3RqMMu","tlshash":"3e030130df5884edcc0ba371fdeea81fc7a332a594c0b3368297af1b80111499d99e49","first_seen":"2025-09-05T00:25:10.258656Z","last_seen":"2026-04-05T07:49:43.073201Z","times_seen":307900,"resource_available":false,"data":null}},"time_used":112,"timings":{"blocked":47,"dns":0,"connect":8,"send":0,"wait":9,"receive":9,"ssl":38},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"shippersthird.com/account/user/smarty/modern/modules/ionicons/css/ionicons.min.css","fqdn":"shippersthird.com","domain":"shippersthird.com","tld":"com"},"ip":{"addr":"63.250.38.89","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://shippersthird.com/account/user/login.php","date":"2025-10-03T11:43:34.152Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"shippersthird.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Wed, 24 Sep 2025 00:00:00 GMT","end":"Thu, 24 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"DB:07:C1:40:C0:B8:F9:D9:B2:AA:C6:AE:7F:34:D7:49:EA:71:29:0F","sha256":"BC:B7:5B:0A:20:08:DC:47:9B:E2:C3:1D:41:27:2A:BB:8C:FF:84:B6:96:4C:8C:49:68:A6:06:A5:3F:EF:34:97"}}},"request":{"raw":"GET /account/user/smarty/modern/modules/ionicons/css/ionicons.min.css HTTP/1.1\r\nHost: shippersthird.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://shippersthird.com/account/user/login.php\r\nCookie: PHPSESSID=8ed5318a64433c7dd08a98f06cde89fb\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 10 Oct 2025 11:43:34 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 25 Nov 2024 11:56:24 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 7533\r\ndate: Fri, 03 Oct 2025 11:43:34 GMT\r\nserver: LiteSpeed\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":51284,"size_decoded":0,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (50802)","md5":"6798564e1f2e3291ed7e11eb291d282b","sha1":"cc8043b90c2a0962ecae08e62298d3ebb894eabb","sha256":"8c01c3cb08ae66fdf817221b3a79245fcdb94ea59a3fce2093894d6f4bb6ccf8","sha512":"bec80201e8e3317b1bd57782dbb715f3d4265dec398e53f321cd333c55887a31ef52e4a0537b900a39870e75abeda684282bbdc7a7b1b99df28c13bfaa00d459","ssdeep":"384:048lBhhJhjRqFdtYRjJIjsjaHnNfc2C4741mf5HRzL:048hhjQFduRjJ7uHFcu7Smf5xzL","tlshash":"cb33f8e4d20c0dd0ab35c447ab49674858b5f7fbe4584ca8e42fd4ac39cb224a3e5b6d","first_seen":"2025-04-07T04:59:13.012522Z","last_seen":"2026-04-05T07:23:46.486532Z","times_seen":22650,"resource_available":false,"data":null}},"time_used":358,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":358,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-03","alert":"Sinkholed","trigger":"shippersthird.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"shippersthird.com/account/user/smarty/modern/css/style.css","fqdn":"shippersthird.com","domain":"shippersthird.com","tld":"com"},"ip":{"addr":"63.250.38.89","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://shippersthird.com/account/user/login.php","date":"2025-10-03T11:43:34.154Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"shippersthird.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Wed, 24 Sep 2025 00:00:00 GMT","end":"Thu, 24 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"DB:07:C1:40:C0:B8:F9:D9:B2:AA:C6:AE:7F:34:D7:49:EA:71:29:0F","sha256":"BC:B7:5B:0A:20:08:DC:47:9B:E2:C3:1D:41:27:2A:BB:8C:FF:84:B6:96:4C:8C:49:68:A6:06:A5:3F:EF:34:97"}}},"request":{"raw":"GET /account/user/smarty/modern/css/style.css HTTP/1.1\r\nHost: shippersthird.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://shippersthird.com/account/user/login.php\r\nCookie: PHPSESSID=8ed5318a64433c7dd08a98f06cde89fb\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 10 Oct 2025 11:43:34 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 25 Nov 2024 11:56:24 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 8517\r\ndate: Fri, 03 Oct 2025 11:43:34 GMT\r\nserver: LiteSpeed\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":50300,"size_decoded":0,"mime_type":"text/css","magic":"assembler source, ASCII text","md5":"8d29390546ecc612a9258c1123ae33ba","sha1":"ff1a3a9f2e583b7f4453e134afd8601992a5b58b","sha256":"7597be171cdc501d0afc3e7ff25f196d76c1d6672fb29524a2b3ac4a157e2e83","sha512":"fcca92af08f5ad159f8dc0c534ab6f3fffb48caf13902572cc6f0d5c6900618df18ce9af8c74348b82b2508d437c60b3528f2b2a2300e8a5f04d6a1e8ebc5698","ssdeep":"1536:o8nqNhKbUocwqnIoMjBaw9aJvRc9iPBfQh:lnaKbQwqIJUuaZRcgB4h","tlshash":"1333846396a31808749b946c5feefba6331d1093504ecd7a7e9a724ccf892c5c562f8c","first_seen":"2025-10-03T11:44:03.611105Z","last_seen":"2026-04-04T16:45:59.428008Z","times_seen":10,"resource_available":false,"data":null}},"time_used":535,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":535,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-03","alert":"Sinkholed","trigger":"shippersthird.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"shippersthird.com/account/user/smarty/modern/modules/bootstrap/js/bootstrap.min.js","fqdn":"shippersthird.com","domain":"shippersthird.com","tld":"com"},"ip":{"addr":"63.250.38.89","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://shippersthird.com/account/user/login.php","date":"2025-10-03T11:43:34.155Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"shippersthird.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Wed, 24 Sep 2025 00:00:00 GMT","end":"Thu, 24 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"DB:07:C1:40:C0:B8:F9:D9:B2:AA:C6:AE:7F:34:D7:49:EA:71:29:0F","sha256":"BC:B7:5B:0A:20:08:DC:47:9B:E2:C3:1D:41:27:2A:BB:8C:FF:84:B6:96:4C:8C:49:68:A6:06:A5:3F:EF:34:97"}}},"request":{"raw":"GET /account/user/smarty/modern/modules/bootstrap/js/bootstrap.min.js HTTP/1.1\r\nHost: shippersthird.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://shippersthird.com/account/user/login.php\r\nCookie: PHPSESSID=8ed5318a64433c7dd08a98f06cde89fb\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Mon, 25 Nov 2024 11:56:24 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 12352\r\ndate: Fri, 03 Oct 2025 11:43:34 GMT\r\nserver: LiteSpeed\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":48887,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (48600)","md5":"84e6e85d19e14564e7b84081d5a71b90","sha1":"e1b4a71bc94a5119e6d7914fe0b179090962bb4e","sha256":"24dcae4f742c60177278ac4a0709c624026200259ca30d938e136bb881453cc4","sha512":"ee525ea89dd3956564ea330bec49152ac45c9ab4d4a4da8662b67ac5104dfcfbfd24cce08fef5f1bfc96ad166133c423a44f9a91f92ca6a276c36af506c5b868","ssdeep":"768:WVVtS1Twrlo8LHVuBQcftKK9DnqxVmfSIZT2KV6d5P6riOi8l:WVVtBrlo8+nqx4Dgd5PiiOi8l","tlshash":"d223b84a7214b4a202dfa476913f450bb73b249aa60ac15cf95a94ed2e7cd4c3237f7c","first_seen":"2023-03-07T12:29:04Z","last_seen":"2026-04-04T16:45:59.437542Z","times_seen":236,"resource_available":true,"data":null}},"time_used":535,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":535,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-03","alert":"Sinkholed","trigger":"shippersthird.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"shippersthird.com/account/user/smarty/modern/js/custom.js","fqdn":"shippersthird.com","domain":"shippersthird.com","tld":"com"},"ip":{"addr":"63.250.38.89","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://shippersthird.com/account/user/login.php","date":"2025-10-03T11:43:34.157Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"shippersthird.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Wed, 24 Sep 2025 00:00:00 GMT","end":"Thu, 24 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"DB:07:C1:40:C0:B8:F9:D9:B2:AA:C6:AE:7F:34:D7:49:EA:71:29:0F","sha256":"BC:B7:5B:0A:20:08:DC:47:9B:E2:C3:1D:41:27:2A:BB:8C:FF:84:B6:96:4C:8C:49:68:A6:06:A5:3F:EF:34:97"}}},"request":{"raw":"GET /account/user/smarty/modern/js/custom.js HTTP/1.1\r\nHost: shippersthird.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://shippersthird.com/account/user/login.php\r\nCookie: PHPSESSID=8ed5318a64433c7dd08a98f06cde89fb\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Mon, 25 Nov 2024 11:56:24 GMT\r\naccept-ranges: bytes\r\ncontent-length: 141\r\ndate: Fri, 03 Oct 2025 11:43:34 GMT\r\nserver: LiteSpeed\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":141,"size_decoded":0,"mime_type":"text/javascript","magic":"ASCII text","md5":"dd63eddaeb5716413325a28e4549e028","sha1":"5611a0bc1631130c4c4821320a68f6459c2724c6","sha256":"1fc043fb86680e1987865bffa3b52efd1201ac148f674b2f5fdd4798eab623c1","sha512":"cce4dc4cb6b7fe872df7b0c3b8100fa91a80e664e78b7805a0a3f4cac0ba459fc4cdbb50ac2bc5a73b6c2fea8ebec36b9685b1c9f34857cf054514a502b6f2a7","ssdeep":"","tlshash":"cac02b1f240ee033280109f07008c8f2cd098b0e021736430826033c3a0418604cacd5","first_seen":"2025-10-03T11:44:03.617278Z","last_seen":"2026-04-04T16:45:59.443462Z","times_seen":10,"resource_available":true,"data":null}},"time_used":712,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":712,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-03","alert":"Sinkholed","trigger":"shippersthird.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"shippersthird.com/account/user/smarty/modern/js/scripts.js","fqdn":"shippersthird.com","domain":"shippersthird.com","tld":"com"},"ip":{"addr":"63.250.38.89","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://shippersthird.com/account/user/login.php","date":"2025-10-03T11:43:34.157Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"shippersthird.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Wed, 24 Sep 2025 00:00:00 GMT","end":"Thu, 24 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"DB:07:C1:40:C0:B8:F9:D9:B2:AA:C6:AE:7F:34:D7:49:EA:71:29:0F","sha256":"BC:B7:5B:0A:20:08:DC:47:9B:E2:C3:1D:41:27:2A:BB:8C:FF:84:B6:96:4C:8C:49:68:A6:06:A5:3F:EF:34:97"}}},"request":{"raw":"GET /account/user/smarty/modern/js/scripts.js HTTP/1.1\r\nHost: shippersthird.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://shippersthird.com/account/user/login.php\r\nCookie: PHPSESSID=8ed5318a64433c7dd08a98f06cde89fb\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Mon, 25 Nov 2024 11:56:24 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 1592\r\ndate: Fri, 03 Oct 2025 11:43:34 GMT\r\nserver: LiteSpeed\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":6679,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text","md5":"680c34ea7e1bf488eb245b7ae7aecdec","sha1":"ba44601a585a4c386eab0515597500a7f9fb9f20","sha256":"3d6abc8e1ae77776f7a92c3ea1b403591d207d726c3ba5f49f64aae06b5d155e","sha512":"0b90d74fa70b60e67988d6b978d027feff53965b4d94b4cc70b62ae61b3a8d404a44643190f38167b448f296ad4f70eb154567d6cc8023b4b3d2c41e9437d487","ssdeep":"192:9hGWXDlZ4QIWw5WL8cCPBXXiuYM7AaaAPDW5VwPBM:9gWTlA55WIrPBTYMmsqj","tlshash":"0fd1bd0ef5b3219250bb317c4fdfa14425382847844eef647c9c6be05f846baa1a27dd","first_seen":"2025-10-03T11:44:03.620344Z","last_seen":"2026-04-04T16:45:59.442638Z","times_seen":9,"resource_available":true,"data":null}},"time_used":713,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":713,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-03","alert":"Sinkholed","trigger":"shippersthird.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/montserrat/v31/JTUSjIg1_i6t8kCHKm459WlhyyTn89ddpQ.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.74.131","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://shippersthird.com/account/user/login.php","date":"2025-10-03T11:43:34.787Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Sep 2025 08:36:13 GMT","end":"Mon, 08 Dec 2025 08:36:12 GMT"},"fingerprint":{"sha1":"F3:C7:68:20:2E:52:7F:61:4B:43:46:72:CB:A9:29:91:40:A0:5A:96","sha256":"1A:0B:E2:45:70:7A:DB:88:E8:4C:4E:DF:ED:F5:08:2F:2B:2A:CA:33:09:72:DC:80:8B:D2:7B:C6:48:3D:CA:D1"}}},"request":{"raw":"GET /s/montserrat/v31/JTUSjIg1_i6t8kCHKm459WlhyyTn89ddpQ.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nOrigin: https://shippersthird.com\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 37756\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 02 Oct 2025 13:02:46 GMT\r\nexpires: Fri, 02 Oct 2026 13:02:46 GMT\r\ncache-control: public, max-age=31536000\r\nage: 81648\r\nlast-modified: Thu, 04 Sep 2025 17:09:21 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":null,"data":{"size":37756,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 37756, version 1.0","md5":"8a6a885dd57e60ddd85f3190737fa209","sha1":"dbca56b7fe8ee5e4bfb648d639fc6a3bfc5c6e85","sha256":"b9b102f608e8252e3c1e7287309832b16af7dcc6e788651fa503a3faacd7fb2f","sha512":"2bd785869777dc57dbb5934d4c6915b66f89746dd79897820eb4bbd0d262b2612bafdfb07c1e092658ad819f582a97e6a196531f74187d8a0b0bbd07fcbba56a","ssdeep":"768:sqRKhgpCf9U72WeD4A/5IqtBr0ikGvEaQh38/LBu3Emdc043RpgZKMqjkEfO1m:jKgp+9U7Ve8A/7Ai9Et3EBKEUE3RqMMu","tlshash":"3e030130df5884edcc0ba371fdeea81fc7a332a594c0b3368297af1b80111499d99e49","first_seen":"2025-09-05T00:25:10.258656Z","last_seen":"2026-04-05T07:49:43.073201Z","times_seen":307900,"resource_available":false,"data":null}},"time_used":135,"timings":{"blocked":62,"dns":0,"connect":8,"send":0,"wait":8,"receive":3,"ssl":53},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"shippersthird.com/favicon.ico","fqdn":"shippersthird.com","domain":"shippersthird.com","tld":"com"},"ip":{"addr":"63.250.38.89","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://shippersthird.com/account/user/login.php","date":"2025-10-03T11:43:35.056Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"shippersthird.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Wed, 24 Sep 2025 00:00:00 GMT","end":"Thu, 24 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"DB:07:C1:40:C0:B8:F9:D9:B2:AA:C6:AE:7F:34:D7:49:EA:71:29:0F","sha256":"BC:B7:5B:0A:20:08:DC:47:9B:E2:C3:1D:41:27:2A:BB:8C:FF:84:B6:96:4C:8C:49:68:A6:06:A5:3F:EF:34:97"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: shippersthird.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://shippersthird.com/account/user/login.php\r\nCookie: PHPSESSID=8ed5318a64433c7dd08a98f06cde89fb\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\ncache-control: private, no-cache, no-store, must-revalidate, max-age=0\r\npragma: no-cache\r\ncontent-type: text/html\r\ncontent-length: 1251\r\ndate: Fri, 03 Oct 2025 11:43:35 GMT\r\nserver: LiteSpeed\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":1251,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF, LF line terminators","md5":"8150f458ed6fb9b1db4e5cfa57a1a281","sha1":"6e5726854d28687b560d7fdcb5c782c425c7dfb9","sha256":"4c13d452dd5d49671bd93ca32f2b4f85c78e39b6ab0ad1f38d98ed267f8fd896","sha512":"4cc6a112673aef8bb8bb8a385c26791b805d43bb707b509880e894f1c83bab4e16f13de187036c5f660c3bec1d286258396b7bde65c5d7945c5019665196818c","ssdeep":"","tlshash":"c021353ec1c1560ae0271164fbc1f7a86669825291970f703b9eb176f6cd0bb56a36c8","first_seen":"2024-02-08T16:48:55Z","last_seen":"2026-04-05T07:46:40.528781Z","times_seen":115871,"resource_available":true,"data":null}},"time_used":189,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":189,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-03","alert":"Sinkholed","trigger":"shippersthird.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"shippersthird.com/account/login.php","fqdn":"shippersthird.com","domain":"shippersthird.com","tld":"com"},"ip":{"addr":"63.250.38.89","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-10-03T11:43:33.094Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"shippersthird.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Wed, 24 Sep 2025 00:00:00 GMT","end":"Thu, 24 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"DB:07:C1:40:C0:B8:F9:D9:B2:AA:C6:AE:7F:34:D7:49:EA:71:29:0F","sha256":"BC:B7:5B:0A:20:08:DC:47:9B:E2:C3:1D:41:27:2A:BB:8C:FF:84:B6:96:4C:8C:49:68:A6:06:A5:3F:EF:34:97"}}},"request":{"raw":"GET /account/login.php HTTP/1.1\r\nHost: shippersthird.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 302 Found\r\nx-powered-by: PHP/7.4.33\r\ncontent-type: text/html; charset=utf-8\r\nset-cookie: PHPSESSID=8ed5318a64433c7dd08a98f06cde89fb; path=/; secure\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-cache, no-store, must-revalidate, max-age=0\r\npragma: no-cache\r\nlocation: user/\r\ncontent-length: 0\r\ndate: Fri, 03 Oct 2025 11:43:33 GMT\r\nserver: LiteSpeed\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"Found","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"PHP:7.4.33","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":3895,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-04-05T07:47:05.597876Z","times_seen":13365748,"resource_available":true,"data":null}},"time_used":1048,"timings":{"blocked":432,"dns":0,"connect":180,"send":0,"wait":185,"receive":0,"ssl":250},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-03","alert":"Sinkholed","trigger":"shippersthird.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"shippersthird.com/account/user/smarty/modern/modules/bootstrap/css/bootstrap.min.css","fqdn":"shippersthird.com","domain":"shippersthird.com","tld":"com"},"ip":{"addr":"63.250.38.89","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://shippersthird.com/account/user/login.php","date":"2025-10-03T11:43:34.152Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"shippersthird.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Wed, 24 Sep 2025 00:00:00 GMT","end":"Thu, 24 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"DB:07:C1:40:C0:B8:F9:D9:B2:AA:C6:AE:7F:34:D7:49:EA:71:29:0F","sha256":"BC:B7:5B:0A:20:08:DC:47:9B:E2:C3:1D:41:27:2A:BB:8C:FF:84:B6:96:4C:8C:49:68:A6:06:A5:3F:EF:34:97"}}},"request":{"raw":"GET /account/user/smarty/modern/modules/bootstrap/css/bootstrap.min.css HTTP/1.1\r\nHost: shippersthird.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://shippersthird.com/account/user/login.php\r\nCookie: PHPSESSID=8ed5318a64433c7dd08a98f06cde89fb\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 10 Oct 2025 11:43:34 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 25 Nov 2024 11:56:24 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 18561\r\ndate: Fri, 03 Oct 2025 11:43:34 GMT\r\nserver: LiteSpeed\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":142181,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with very long lines (65318)","md5":"0fe16469d67bc0a43ed2b613b0ff74ad","sha1":"2e05bae34384b1ac6829cc15cb12248e7265f181","sha256":"23d369ca1966885ced9edcf84bbb1465bc0848e8c9beeb73f1460b06f7f96be5","sha512":"3bb5a5b80ae89cdf85faa27850664a7955741041a6bf4e2e5fac63efd3757e61ae4625cfff1194d7a4c71afba5ddfd651a4ec4de9bc7163df6f2e8eac7785c96","ssdeep":"1536:ojwQ+wCzP+dsxGD7TcDEBi82NcuSEgL4PP+oENM6HN260:oUQr4PoMPWoENM6HN260","tlshash":"d0d39567f0a1326da097c91851c0bbfe066f8155d6221ffbb4277b608b8a6c70a73d0d","first_seen":"2025-10-03T11:44:03.625301Z","last_seen":"2026-04-04T16:45:59.440838Z","times_seen":11,"resource_available":false,"data":null}},"time_used":358,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":358,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-03","alert":"Sinkholed","trigger":"shippersthird.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"shippersthird.com/account/user/smarty/modern/modules/popper.js","fqdn":"shippersthird.com","domain":"shippersthird.com","tld":"com"},"ip":{"addr":"63.250.38.89","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://shippersthird.com/account/user/login.php","date":"2025-10-03T11:43:34.154Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"shippersthird.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Wed, 24 Sep 2025 00:00:00 GMT","end":"Thu, 24 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"DB:07:C1:40:C0:B8:F9:D9:B2:AA:C6:AE:7F:34:D7:49:EA:71:29:0F","sha256":"BC:B7:5B:0A:20:08:DC:47:9B:E2:C3:1D:41:27:2A:BB:8C:FF:84:B6:96:4C:8C:49:68:A6:06:A5:3F:EF:34:97"}}},"request":{"raw":"GET /account/user/smarty/modern/modules/popper.js HTTP/1.1\r\nHost: shippersthird.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://shippersthird.com/account/user/login.php\r\nCookie: PHPSESSID=8ed5318a64433c7dd08a98f06cde89fb\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Mon, 25 Nov 2024 11:56:25 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 6644\r\ndate: Fri, 03 Oct 2025 11:43:34 GMT\r\nserver: LiteSpeed\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":19187,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (19015)","md5":"124bf4d1a7db31dd60d4642dce268035","sha1":"d3745247363d9cb016aaef057bbf2a363796cc01","sha256":"5614d21225b2e012e3765c1b32fba0b8762bcecd8863c8705c1bcc0d03ec19de","sha512":"2d9f8b89336c39da4aface69209c016e2edc4449f134129e3c6453240bb90e7b81e6386a4a0a430892eb131faa4b6f45882f3c5b9e53b89443c66b589d5158e2","ssdeep":"384:+CbuG4xGNoDic2UjKPafxwC5b/4xQviOJU7QzxzivDdE3pcGdjkd/9jt3B+Kb96G:zb4xGmiJfaf7gxQvVU7eziv+cSjknZ33","tlshash":"4882a3cc3291b06643a79167a06f960fb2339979614e9410f199f2d87c70ef9913fc7a","first_seen":"2023-03-07T01:20:21Z","last_seen":"2026-04-04T17:58:46.882044Z","times_seen":1505,"resource_available":true,"data":null}},"time_used":536,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":536,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-03","alert":"Sinkholed","trigger":"shippersthird.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"shippersthird.com/account/user/smarty/modern/modules/tooltip.js","fqdn":"shippersthird.com","domain":"shippersthird.com","tld":"com"},"ip":{"addr":"63.250.38.89","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://shippersthird.com/account/user/login.php","date":"2025-10-03T11:43:34.155Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"shippersthird.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Wed, 24 Sep 2025 00:00:00 GMT","end":"Thu, 24 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"DB:07:C1:40:C0:B8:F9:D9:B2:AA:C6:AE:7F:34:D7:49:EA:71:29:0F","sha256":"BC:B7:5B:0A:20:08:DC:47:9B:E2:C3:1D:41:27:2A:BB:8C:FF:84:B6:96:4C:8C:49:68:A6:06:A5:3F:EF:34:97"}}},"request":{"raw":"GET /account/user/smarty/modern/modules/tooltip.js HTTP/1.1\r\nHost: shippersthird.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://shippersthird.com/account/user/login.php\r\nCookie: PHPSESSID=8ed5318a64433c7dd08a98f06cde89fb\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Mon, 25 Nov 2024 11:56:25 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 1877\r\ndate: Fri, 03 Oct 2025 11:43:34 GMT\r\nserver: LiteSpeed\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":5277,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (5104)","md5":"351db056de78bf577a7523ff1c30c62e","sha1":"c3b2283c598f3d0755b527635434a982de8dff4c","sha256":"089c442eec7d639eb3fbc9a2e06efe0062cee4950560accea896d8cc76747e54","sha512":"34677f410897dba9cb6dd960a7d1c2ab08a4d11228d5ffa0d94a1b183b2c19fe695b1fd2e9ce529e18ce75268fa360b99905517bf7c12fcd62156322ac61c026","ssdeep":"96:kPdhyqcz5wDTjlE5qQmmRj1bnPoGpMl/2xuClALMoYJjvD6TxrGD:Ed8qcV4jlHERj1bPoGpMluxuwAooS4xc","tlshash":"adb1624ab6b27933418a7175527b220f717798aa79c88c7cf264e8dc2e3c804b556e78","first_seen":"2023-03-09T05:04:02Z","last_seen":"2026-04-04T16:45:59.429595Z","times_seen":53,"resource_available":true,"data":null}},"time_used":536,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":536,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-03","alert":"Sinkholed","trigger":"shippersthird.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"shippersthird.com/account/user/login.php","fqdn":"shippersthird.com","domain":"shippersthird.com","tld":"com"},"ip":{"addr":"63.250.38.89","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2025-10-03T11:43:33.899Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"shippersthird.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Wed, 24 Sep 2025 00:00:00 GMT","end":"Thu, 24 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"DB:07:C1:40:C0:B8:F9:D9:B2:AA:C6:AE:7F:34:D7:49:EA:71:29:0F","sha256":"BC:B7:5B:0A:20:08:DC:47:9B:E2:C3:1D:41:27:2A:BB:8C:FF:84:B6:96:4C:8C:49:68:A6:06:A5:3F:EF:34:97"}}},"request":{"raw":"GET /account/user/login.php HTTP/1.1\r\nHost: shippersthird.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nCookie: PHPSESSID=8ed5318a64433c7dd08a98f06cde89fb\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\nx-powered-by: PHP/7.4.33\r\ncontent-type: text/html; charset=utf-8\r\nexpires: Thu, 19 Nov 1981 08:52:00 GMT\r\ncache-control: no-store, no-cache, must-revalidate\r\npragma: no-cache\r\ncontent-length: 906\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Fri, 03 Oct 2025 11:43:34 GMT\r\nserver: LiteSpeed\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"PHP:7.4.33","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Moment.js","description":"Moment.js is a free and open-source JavaScript library that removes the need to use the native JavaScript Date object directly.","website":"https://momentjs.com","common_platform_enumeration":"cpe:2.3:a:momentjs:moment:*:*:*:*:*:*:*:*","icon":"Moment.js.svg","categories":["JavaScript libraries"]},{"name":"Bootstrap","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Popper","description":"Popper is a positioning engine, its purpose is to calculate the position of an element to make it possible to position it near a given reference element.","website":"https://popper.js.org","common_platform_enumeration":"","icon":"Popper.svg","categories":["Miscellaneous"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]}],"data":{"size":3895,"size_decoded":0,"mime_type":"text/html; charset=utf-8","magic":"HTML document, ASCII text","md5":"8ea32624f8c7cb13468e99a357f15564","sha1":"b7a683b8cebd7c62abfe17cb32ad58e62610f6c6","sha256":"e94f93ff88a176e1efdcc861dce9b661f4c8f2e42e022588472c040007f56eaf","sha512":"78a8508afa6243461c35a449234f0dd87bd195d2b8834ec198836e81281cb6a16f27288612bdc4b577d849e98562e4ce5b831322488ad8fc0aeae0b443cd8613","ssdeep":"","tlshash":"4781da0859b45b6701c258c4bfa89a0f6cd5d82bed678519b2fc4bd00f8af8e895701e","first_seen":"2025-10-03T11:44:03.633352Z","last_seen":"2026-04-04T16:45:59.439913Z","times_seen":8,"resource_available":true,"data":null}},"time_used":187,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":187,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-03","alert":"Sinkholed","trigger":"shippersthird.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"shippersthird.com/account/user/smarty/modern/css/demo.css","fqdn":"shippersthird.com","domain":"shippersthird.com","tld":"com"},"ip":{"addr":"63.250.38.89","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://shippersthird.com/account/user/login.php","date":"2025-10-03T11:43:34.153Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"shippersthird.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Wed, 24 Sep 2025 00:00:00 GMT","end":"Thu, 24 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"DB:07:C1:40:C0:B8:F9:D9:B2:AA:C6:AE:7F:34:D7:49:EA:71:29:0F","sha256":"BC:B7:5B:0A:20:08:DC:47:9B:E2:C3:1D:41:27:2A:BB:8C:FF:84:B6:96:4C:8C:49:68:A6:06:A5:3F:EF:34:97"}}},"request":{"raw":"GET /account/user/smarty/modern/css/demo.css HTTP/1.1\r\nHost: shippersthird.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://shippersthird.com/account/user/login.php\r\nCookie: PHPSESSID=8ed5318a64433c7dd08a98f06cde89fb\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncache-control: public, max-age=604800\r\nexpires: Fri, 10 Oct 2025 11:43:34 GMT\r\ncontent-type: text/css\r\nlast-modified: Mon, 25 Nov 2024 11:56:24 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 512\r\ndate: Fri, 03 Oct 2025 11:43:34 GMT\r\nserver: LiteSpeed\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":2123,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text","md5":"f77afaceed3d17b01b8be923164659dd","sha1":"8dbcf962aad2d985454dc026c41e7c3158d83041","sha256":"b528c57b3442c2f6428c8577454b6b798cf32fe01ffe200e0662223ec32fb445","sha512":"567459f5f263894905321fc10169330ff8e8ecc9fc17b0c6463da78a407ed8642764359128e47479e01326d4fc7cc6ad20c945c708d3b47b58004b8bbe362479","ssdeep":"","tlshash":"7b419e752308124ab82ba3782ee43758737480097b79c47e7be2251c6e856c9a0b3ac4","first_seen":"2025-10-03T11:44:03.637611Z","last_seen":"2026-04-04T16:45:59.441699Z","times_seen":11,"resource_available":false,"data":null}},"time_used":357,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":357,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-03","alert":"Sinkholed","trigger":"shippersthird.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"shippersthird.com/account/user/smarty/modern/modules/moment.min.js","fqdn":"shippersthird.com","domain":"shippersthird.com","tld":"com"},"ip":{"addr":"63.250.38.89","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://shippersthird.com/account/user/login.php","date":"2025-10-03T11:43:34.156Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"shippersthird.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Wed, 24 Sep 2025 00:00:00 GMT","end":"Thu, 24 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"DB:07:C1:40:C0:B8:F9:D9:B2:AA:C6:AE:7F:34:D7:49:EA:71:29:0F","sha256":"BC:B7:5B:0A:20:08:DC:47:9B:E2:C3:1D:41:27:2A:BB:8C:FF:84:B6:96:4C:8C:49:68:A6:06:A5:3F:EF:34:97"}}},"request":{"raw":"GET /account/user/smarty/modern/modules/moment.min.js HTTP/1.1\r\nHost: shippersthird.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://shippersthird.com/account/user/login.php\r\nCookie: PHPSESSID=8ed5318a64433c7dd08a98f06cde89fb\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\ncache-control: private, no-cache, no-store, must-revalidate, max-age=0\r\npragma: no-cache\r\ncontent-type: text/html\r\ncontent-length: 1251\r\ndate: Fri, 03 Oct 2025 11:43:34 GMT\r\nserver: LiteSpeed\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":1251,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF, LF line terminators","md5":"8150f458ed6fb9b1db4e5cfa57a1a281","sha1":"6e5726854d28687b560d7fdcb5c782c425c7dfb9","sha256":"4c13d452dd5d49671bd93ca32f2b4f85c78e39b6ab0ad1f38d98ed267f8fd896","sha512":"4cc6a112673aef8bb8bb8a385c26791b805d43bb707b509880e894f1c83bab4e16f13de187036c5f660c3bec1d286258396b7bde65c5d7945c5019665196818c","ssdeep":"","tlshash":"c021353ec1c1560ae0271164fbc1f7a86669825291970f703b9eb176f6cd0bb56a36c8","first_seen":"2024-02-08T16:48:55Z","last_seen":"2026-04-05T07:46:40.528781Z","times_seen":115871,"resource_available":true,"data":null}},"time_used":713,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":713,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-03","alert":"Sinkholed","trigger":"shippersthird.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"shippersthird.com/account/user/smarty/modern/js/sa-functions.js","fqdn":"shippersthird.com","domain":"shippersthird.com","tld":"com"},"ip":{"addr":"63.250.38.89","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://shippersthird.com/account/user/login.php","date":"2025-10-03T11:43:34.157Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"shippersthird.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Wed, 24 Sep 2025 00:00:00 GMT","end":"Thu, 24 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"DB:07:C1:40:C0:B8:F9:D9:B2:AA:C6:AE:7F:34:D7:49:EA:71:29:0F","sha256":"BC:B7:5B:0A:20:08:DC:47:9B:E2:C3:1D:41:27:2A:BB:8C:FF:84:B6:96:4C:8C:49:68:A6:06:A5:3F:EF:34:97"}}},"request":{"raw":"GET /account/user/smarty/modern/js/sa-functions.js HTTP/1.1\r\nHost: shippersthird.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://shippersthird.com/account/user/login.php\r\nCookie: PHPSESSID=8ed5318a64433c7dd08a98f06cde89fb\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/javascript\r\nlast-modified: Mon, 25 Nov 2024 11:56:24 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 332\r\ndate: Fri, 03 Oct 2025 11:43:34 GMT\r\nserver: LiteSpeed\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":862,"size_decoded":0,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text","md5":"7795496d1293c76119431d1ec612687b","sha1":"242a19807b5b511df3f9a06096645141cc99c602","sha256":"b60a13032a595ee77c5c7c27570f09f150abc74dd4e1c58d03ef588a5bf90b92","sha512":"18d714292dc785435836190e83e57e14782570ad32d8fe2279ec69b371a520907f363696f4aae5e0a75df695df5690a02b2ccd5d2f6c1e2e7ca52e6df9e71ba1","ssdeep":"","tlshash":"dc11a3a6ff7d1f27407b3e56006d6347033d8163d40e88114c2187d44d5cb5456c3d6d","first_seen":"2025-10-03T11:44:03.64017Z","last_seen":"2026-04-04T16:45:59.43838Z","times_seen":10,"resource_available":true,"data":null}},"time_used":713,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":713,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-03","alert":"Sinkholed","trigger":"shippersthird.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css?family=Montserrat:400,500,600,700","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.74.42","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://shippersthird.com/account/user/login.php","date":"2025-10-03T11:43:34.692Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WR2","organization":"Google Trust Services"},"validity":{"start":"Mon, 15 Sep 2025 08:36:13 GMT","end":"Mon, 08 Dec 2025 08:36:12 GMT"},"fingerprint":{"sha1":"54:09:EF:2E:96:03:5C:86:DF:F0:DA:AC:A6:7A:0D:35:49:4E:68:90","sha256":"0E:84:83:07:1D:C1:46:17:EB:EA:2F:15:CE:88:56:D2:FF:9E:AE:31:D2:C3:FC:DA:00:24:46:48:43:CD:11:1F"}}},"request":{"raw":"GET /css?family=Montserrat:400,500,600,700 HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://shippersthird.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Fri, 03 Oct 2025 11:43:34 GMT\r\ndate: Fri, 03 Oct 2025 11:43:34 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":7268,"size_decoded":0,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"428698905d9bce4c4adb7f17bcc077dc","sha1":"45755ee76b673f94c670103d6b35ec9d3062cce1","sha256":"09fc499482a8077a5c43d9ffba39678edb22e842134606c8c1ad14c633ffd2be","sha512":"b08d982370ec0197400766e4f0e8e5cf79d1e7dda2b22ba8ec4f7812ba45464646d5787cac6d36492f0068702fb0ea20e4d59412864feeddd1c4f3c8294e2985","ssdeep":"192:qRa7h5OsuyR97uGOXu7R47nfOeuQRD780ORu8:+SjpbAfnM","tlshash":"e1e19e51101ae500a7432cc923cf7e26cd4e61667494c5767bfe2ca8ade6c365361b3d","first_seen":"2025-09-07T09:11:36.864992Z","last_seen":"2026-04-05T02:51:49.375189Z","times_seen":940,"resource_available":false,"data":null}},"time_used":141,"timings":{"blocked":59,"dns":0,"connect":9,"send":0,"wait":23,"receive":0,"ssl":49},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"shippersthird.com/account/user/smarty/modern/modules/moment.min.js","fqdn":"shippersthird.com","domain":"shippersthird.com","tld":"com"},"ip":{"addr":"63.250.38.89","port":443,"asn":22612,"as":"NAMECHEAP-NET","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://shippersthird.com/account/user/login.php","date":"2025-10-03T11:43:34.870Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"shippersthird.com","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Wed, 24 Sep 2025 00:00:00 GMT","end":"Thu, 24 Sep 2026 23:59:59 GMT"},"fingerprint":{"sha1":"DB:07:C1:40:C0:B8:F9:D9:B2:AA:C6:AE:7F:34:D7:49:EA:71:29:0F","sha256":"BC:B7:5B:0A:20:08:DC:47:9B:E2:C3:1D:41:27:2A:BB:8C:FF:84:B6:96:4C:8C:49:68:A6:06:A5:3F:EF:34:97"}}},"request":{"raw":"GET /account/user/smarty/modern/modules/moment.min.js HTTP/1.1\r\nHost: shippersthird.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://shippersthird.com/account/user/login.php\r\nCookie: PHPSESSID=8ed5318a64433c7dd08a98f06cde89fb\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 Not Found\r\ncache-control: private, no-cache, no-store, must-revalidate, max-age=0\r\npragma: no-cache\r\ncontent-type: text/html\r\ncontent-length: 1251\r\ndate: Fri, 03 Oct 2025 11:43:34 GMT\r\nserver: LiteSpeed\r\nx-turbo-charged-by: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1251,"size_decoded":0,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF, LF line terminators","md5":"8150f458ed6fb9b1db4e5cfa57a1a281","sha1":"6e5726854d28687b560d7fdcb5c782c425c7dfb9","sha256":"4c13d452dd5d49671bd93ca32f2b4f85c78e39b6ab0ad1f38d98ed267f8fd896","sha512":"4cc6a112673aef8bb8bb8a385c26791b805d43bb707b509880e894f1c83bab4e16f13de187036c5f660c3bec1d286258396b7bde65c5d7945c5019665196818c","ssdeep":"","tlshash":"c021353ec1c1560ae0271164fbc1f7a86669825291970f703b9eb176f6cd0bb56a36c8","first_seen":"2024-02-08T16:48:55Z","last_seen":"2026-04-05T07:46:40.528781Z","times_seen":115871,"resource_available":true,"data":null}},"time_used":182,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":182,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns0","sensor_type":"DNS","title":"DNS0 Zero","description":"DNS0 Zero","scan_date":"2025-10-03","alert":"Sinkholed","trigger":"shippersthird.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS (SOA: negative-caching.dns0.eu)","link":"https://www.dns0.eu/zero","meta":null}],"urlquery":null}}]}