{"report_id":"c1ac5653-4196-4d9b-8757-b6449ab38807","version":0,"status":"done","tags":[],"date":"2026-06-28T03:47:17Z","url":{"schema":"http","addr":"waddyworks.com/","fqdn":"waddyworks.com","domain":"waddyworks.com","tld":"com"},"ip":{"addr":"192.249.120.161","port":0,"asn":22611,"as":"INMOTION","country":"United States","country_code":"US"},"final":{"url":{"schema":"https","addr":"waddyworks.com/","fqdn":"waddyworks.com","domain":"waddyworks.com","tld":"com"},"title":"Waddyworks – Design | Brand | Dream","dom":{"size":221265,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (9139)","md5":"0c57ef3ae3af51dd679d0ab3dfe4479f","sha1":"d48d8c024404c635e1f151118c1955d23cd51f4f","sha256":"8e1e23ff22bbd9958d554b750c47bac15101e490e4316d6d7c39d2cb9293fc2b","sha512":"0f34873d4a3117716c84af833422844f0855277a3d7f7c15e445bfd484656aaa61e7c0cbb13ec5aa0af7b779d129fe8743e0b9ae24e19ee90fb346b6547a83dc","ssdeep":"3072:R17s2ldYQyT1DT+WbU/wuOEfBc10AhFrlPNlLtw7B8Fkk:rYQL/3OEfy1B","tlshash":"f9242ae137891879710f63df8113360c6487aaf6ea5195f4f2fe1520a3f2ce87aa3195","dom_hash":"domhash4a9eec077c27ef2a1fed3b7a8155b98a","first_seen":"2026-06-28T03:47:21.861045Z","last_seen":"2026-06-28T03:47:21.861045Z","times_seen":1,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"waddyworks.com/","fqdn":"waddyworks.com","domain":"waddyworks.com","tld":"com"},"ip":{"addr":"192.249.120.161","port":0,"asn":22611,"as":"INMOTION","country":"United States","country_code":"US"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-08-02T03:47:17Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":5}},"detection":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"waddyworks.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"waddyworks.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"waddyworks.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"waddyworks.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"waddyworks.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"cdn.jsdelivr.net","ip":{"addr":"104.17.208.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2012-05-16","domain_rank":1678,"first_seen":"2012-09-30T00:15:09Z","last_seen":"2026-06-21T22:46:13.623663Z","alert_count":0,"request_count":1,"received_data":10168,"sent_data":492,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]},{"fqdn":"fonts.googleapis.com","ip":{"addr":"142.250.178.42","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2005-01-25","domain_rank":313,"first_seen":"2012-05-23T12:41:44Z","last_seen":"2026-06-21T22:22:12.048317Z","alert_count":0,"request_count":1,"received_data":5757,"sent_data":561,"comment":"","tags":null,"fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}]},{"fqdn":"fonts.gstatic.com","ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"domain_registered":"2008-02-11","domain_rank":0,"first_seen":"2014-04-02T10:51:04Z","last_seen":"2026-06-21T22:19:08.810882Z","alert_count":0,"request_count":3,"received_data":113235,"sent_data":1731,"comment":"","tags":null,"fingerprints":null},{"fqdn":"s.w.org","ip":{"addr":"192.0.77.48","port":443,"asn":2635,"as":"AUTOMATTIC","country":"United States","country_code":"US"},"domain_registered":"1993-12-01","domain_rank":27695,"first_seen":"2017-01-30T04:56:16Z","last_seen":"2026-06-22T08:08:18.440156Z","alert_count":0,"request_count":2,"received_data":1860,"sent_data":1115,"comment":"","tags":null,"fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}]},{"fqdn":"waddyworks.com","ip":{"addr":"192.249.120.161","port":443,"asn":22611,"as":"INMOTION","country":"United States","country_code":"US"},"domain_registered":"unknown","domain_rank":0,"first_seen":"2026-04-23T11:06:14.816121Z","last_seen":"2026-06-02T14:14:08.243135Z","alert_count":400,"request_count":80,"received_data":1989266,"sent_data":41563,"comment":"","tags":null,"fingerprints":[{"name":"Nginx:1.31.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"jsDelivr","description":"JSDelivr is a free public CDN for open-source projects. It can serve web files directly from the npm registry and GitHub repositories without any configuration.","website":"https://www.jsdelivr.com/","common_platform_enumeration":"","icon":"jsdelivr-icon.svg","categories":["CDN"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Bootstrap","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]},{"name":"Elementor:4.1.4","description":"Elementor is a website builder platform for professionals on WordPress.","website":"https://elementor.com","common_platform_enumeration":"","icon":"Elementor.svg","categories":["Page builders","WordPress plugins"]},{"name":"particles.js","description":"Particles.js is a JavaScript library for creating particles.","website":"https://github.com/VincentGarreau/particles.js","common_platform_enumeration":"","icon":"","categories":["JavaScript graphics"]},{"name":"Easy Pie Chart","description":"Lightweight jQuery plugin to render and animate nice pie charts with the HTML5 canvas element.","website":"https://rendro.github.io/easy-pie-chart/","common_platform_enumeration":"","icon":"","categories":["JavaScript libraries"]},{"name":"LottieFiles","description":"LottieFiles is an open-source animation file format that's tiny, high quality, interactive, and can be manipulated at runtime.","website":"https://lottiefiles.com","common_platform_enumeration":"","icon":"LottieFiles.svg","categories":["Miscellaneous"]},{"name":"jQuery Migrate:3.4.1","description":"Query Migrate is a javascript library that allows you to preserve the compatibility of your jQuery code developed for versions of jQuery older than 1.9.","website":"https://github.com/jquery/jquery-migrate","common_platform_enumeration":"","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"OWL Carousel","description":"OWL Carousel is an enabled jQuery plugin that lets you create responsive carousel sliders.","website":"https://owlcarousel2.github.io/OwlCarousel2/","common_platform_enumeration":"","icon":"OWL Carousel.png","categories":["JavaScript libraries"]},{"name":"Font Awesome","description":"Font Awesome is a font and icon toolkit based on CSS and Less.","website":"https://fontawesome.com/","common_platform_enumeration":"","icon":"Font Awesome.svg","categories":["Font scripts"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]},{"name":"Unpkg","description":"Unpkg is a content delivery network for everything on npm.","website":"https://unpkg.com","common_platform_enumeration":"","icon":"Unpkg.png","categories":["CDN"]},{"name":"WordPress:7.0","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]}]},{"fqdn":"lottie.host","ip":{"addr":"52.84.50.31","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"domain_registered":"2019-10-18","domain_rank":46478,"first_seen":"2022-08-22T00:10:05Z","last_seen":"2026-06-27T10:58:48.236701Z","alert_count":0,"request_count":24,"received_data":849956,"sent_data":11916,"comment":"","tags":null,"fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}]},{"fqdn":"unpkg.com","ip":{"addr":"104.18.1.22","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2016-01-06","domain_rank":1093,"first_seen":"2016-01-07T23:26:01Z","last_seen":"2026-06-22T07:36:22.266568Z","alert_count":0,"request_count":2,"received_data":385395,"sent_data":988,"comment":"","tags":null,"fingerprints":[{"name":"Fly.io","description":"Fly is a platform for running full stack apps and databases.","website":"https://fly.io","common_platform_enumeration":"","icon":"Fly.io.png","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"waddyworks.com/wp-content/themes/progrisaas/js/jquery.isotope.min.js?ver=20210110","fqdn":"waddyworks.com","domain":"waddyworks.com","tld":"com"},"ip":{"addr":"192.249.120.161","port":443,"asn":22611,"as":"INMOTION","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"5fb7c19c9c51cfb99f5ff942629f0f21","sha1":"14c7f59e73d2a99aa688c2443a9a9b24acbff43c","sha256":"a931e5af561b1f0efaf6cdb96aeac4c035c30756dd6edd1091da1a68747d35bc","sha512":"c634a129ea9a27dd22c8382b46a94f07465001f26a027707849d60b402f21470ee5f329d46902084f317705cda5873eeed22d0624ee21220e88f09d23f317039","ssdeep":"768:PAyxsGKyc1gfflZVP4eAnmc6FumKSshD6cD6GLQfq9SvDz231Fxt:/xVKDSfJP4Nnmc6FuCshD6cD6xS9ODzE","tlshash":"faf2d84f73403925468bf166926f160fb137a56c6a4790acba6ad8db1c79c0d6033fbc","size":35456,"data":"","first_seen":"2023-03-07T01:18:38Z","last_seen":"2026-08-09T06:30:48.623069Z","times_seen":6914,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"waddyworks.com/wp-content/themes/progrisaas/js/lightgallery-all.min.js?ver=20210110","fqdn":"waddyworks.com","domain":"waddyworks.com","tld":"com"},"ip":{"addr":"192.249.120.161","port":443,"asn":22611,"as":"INMOTION","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"818d80543b146e46f9e37928e8c4cc25","sha1":"ae37b1d56043fe7e482f39d223cf85f7b8c1b569","sha256":"a52fcfb97c389e4b58ba2c2f2062161af4e04e513568e48fc7fb2e2955ae5ec9","sha512":"aa8f0d9872c3ac893bcea98c961af1d55c2202cab724b92f71f663f3e1ba773a7e253d7c75376572bcbb6342f544b4a095dd17c4c9ef1ebecfea67d01887ec74","ssdeep":"768:4dJeyyOOvejjy1ZP1UzEZj5zMGG0Gzh38dDovJheMiVj1kuu8+nCuo3YFuAN7W6e:43yOPGc32bMiVWuz+nCuoO14txbf","tlshash":"3a33b81934381342172b16d5a01baa0e31b7342ff506846e7cbdc4f67ab6cce355eaad","size":50941,"data":"","first_seen":"2023-03-08T00:14:36Z","last_seen":"2026-08-09T04:33:59.988198Z","times_seen":418,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"waddyworks.com/wp-content/plugins/elementor/assets/js/webpack.runtime.min.js?ver=4.1.4","fqdn":"waddyworks.com","domain":"waddyworks.com","tld":"com"},"ip":{"addr":"192.249.120.161","port":443,"asn":22611,"as":"INMOTION","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"0d490d1bad7e9038b5741f77a7bcee6c","sha1":"64f3096d6f0121949d2b88ef19d4b9adcf38fd89","sha256":"8dd3674bae946e2e04bc962443f0994d736a761bb28e816c20aee6391ef242ed","sha512":"9860efe572a0bda18b274965bc81ae0f513a1c826eeaf9b67cc7b6cec2b78164a67ee15f586e63905cf6b8cc520b00039ff7e9e1460b32dd0977dc4a85cd24b2","ssdeep":"96:+nsL0Z9Z4JfrjqyWiNDy9XOWZp5Rm4leN8EVrzLyVx2UlKBKGarNcl8/2:WsLGyrjiiNWZ5RmHFJW6x7G/2","tlshash":"1cc161941a54fd2b21e139d8e01ba775253ec0373c1af981fa32eced54e4ed087aa531","size":5819,"data":"","first_seen":"2026-05-12T16:52:28.591446Z","last_seen":"2026-08-09T06:23:07.977515Z","times_seen":19070,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"waddyworks.com/wp-content/themes/progrisaas/js/jquery.multiscroll.js?ver=20180910","fqdn":"waddyworks.com","domain":"waddyworks.com","tld":"com"},"ip":{"addr":"192.249.120.161","port":443,"asn":22611,"as":"INMOTION","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"d0987df1d6d0ae72863def629798db9f","sha1":"e1de70aedabf6504deac29c55971f288b122ae6b","sha256":"9b5abd8315568ebdc6119d91be4ac8cb91d8cb78f110047bd5eb71834921b99b","sha512":"eec2e6828c8601ac6ede8852633cf90bdd98b94775da413e0bbc5681558d5790a55218de8a72dd908fa88645e76003e1968b9f3f7968870dc475c0e397d48b70","ssdeep":"768:nKHXAH9q20oDd8ajlyoSPYek52LCZSI6uK6831g8uoM2:nKHXAH9q20oDd83oSPYek52LCZSIJK6A","tlshash":"9b03878e7442322141b7336bdbab1248eb3581174250a2c0bcfd9be41fb15a59397fee","size":38044,"data":"","first_seen":"2023-11-03T05:35:11Z","last_seen":"2026-08-05T16:56:15.431818Z","times_seen":16,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"waddyworks.com/wp-content/themes/progrisaas/js/elementor-header.js?ver=20210110","fqdn":"waddyworks.com","domain":"waddyworks.com","tld":"com"},"ip":{"addr":"192.249.120.161","port":443,"asn":22611,"as":"INMOTION","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"b44ae86998c2f81ed5fade7300c1529f","sha1":"e5b13f1a61f8a54a32b8157f32863919095e4fee","sha256":"eee9ef28384ddcfd04866d66a257160c453ab7256679aff5f3f0b3cad329f66f","sha512":"1c55c7ccab8ddff3e62d5dc11c22bfb76c8e96a72fe927b01d203e46869c0bf465fb121847e6a5fe959dff54edc11bbad2c1ca12ca415e65eb611cab2c31a385","ssdeep":"96:LkAEBbpHYkPBBI0BNi5qF6FR0dleZ/3ONwAkYL54hrp2825U2iW2pM:7SJYs+Ai5nADOC","tlshash":"66e1ce06bcd5a2b1513ff22b5bb7e885fb61849f82064360babc52701f3460471dfa9d","size":7086,"data":"","first_seen":"2026-05-23T22:28:22.182112Z","last_seen":"2026-06-28T03:47:21.905082Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"waddyworks.com/wp-content/themes/progrisaas/js/scripts.js?ver=20210110","fqdn":"waddyworks.com","domain":"waddyworks.com","tld":"com"},"ip":{"addr":"192.249.120.161","port":443,"asn":22611,"as":"INMOTION","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"3adadb107cb6ffc58e1dc109d2eb5af6","sha1":"0f2eedfffa8ee8032adbc079052b24f42dcc78e1","sha256":"1bd8a04a236c85fbb7aeab530c6dbc1a0be47034a3bae4cd708e8c0dda577dc3","sha512":"d53dd1401596257739aec4425b8ef225864c3b370b974384010bb7f8aecaf9b426eb70e9be8c3beff2f1de231a6a05ed0954ac12be417df35d60367d92ce0971","ssdeep":"192:3g6CC5kMlR8Ic1S8I0Df2+/x/3nkERyFv:wDekIGICS8I0D++JPtR8v","tlshash":"6d423304feecbd6a55f7f319983e8901eb3dd22b40028656b9bd50ac6f71004e25dead","size":12845,"data":"","first_seen":"2023-04-13T14:29:49Z","last_seen":"2026-08-05T16:56:15.406234Z","times_seen":22,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"waddyworks.com/wp-content/themes/progrisaas-child/js/custom.js","fqdn":"waddyworks.com","domain":"waddyworks.com","tld":"com"},"ip":{"addr":"192.249.120.161","port":443,"asn":22611,"as":"INMOTION","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"1d4155802629d0d78ad66864c4648892","sha1":"d8f1b73aad76aaac595ea6b75276e0765fb9c8c3","sha256":"c120fbc27dafeec2eddc25842d893828c0e64611ae6c4f193078eafe8a1bc988","sha512":"311e904f4b6326ac599a135253e1a13c61b5e4e4e94af21cca86783b4c5baf77a0c2a60c38d4f5eb43d5a519fa0a2f489592442834e5f0a60b416e08cf7c579c","ssdeep":"96:7NoYLfpe9OQS70HUSlqoda1BZ3p0yfltBWzTprR:KYLfpe9OpQUSgBZ3CyfltBWzT5R","tlshash":"8f81422872a121ed95b73428d7bf62a8303750177508fc0ab90e82765f2c23d15f7afa","size":4135,"data":"","first_seen":"2026-05-23T22:28:22.179569Z","last_seen":"2026-06-28T03:47:21.971115Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"waddyworks.com/wp-content/themes/progrisaas/js/elementor.js?ver=20210110","fqdn":"waddyworks.com","domain":"waddyworks.com","tld":"com"},"ip":{"addr":"192.249.120.161","port":443,"asn":22611,"as":"INMOTION","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"f35c8e643629a90358e219239d422dd7","sha1":"a5233c52bb9920e019b98062a8dfc1ede541a59c","sha256":"3b8c49654e7d325e08f92b59bbefcab63f46183e07a9cef6afd5ffa66b20b57a","sha512":"77ce268d638148aac8ddad3b9c91b731ecfb76ad1b843b6fa1cb1140c5432a108d784ea4f585b611bac752c745408511058de5f8b257d4f5f4fa829d3ab89670","ssdeep":"384:kqyEAWnYEy/gX+WaNIG9I7I2yV/I2yHNI2yQI2yYI2ysI2yuI2yGI2yFID9I2ywt:We2/g8OGesC3OtFJT7migKuWugYmITW4","tlshash":"be23611dbc9810629477e32bdf6ba504fb728a5b0000a362bdfd42a49f7045463adfed","size":45567,"data":"","first_seen":"2025-10-26T02:20:10.87535Z","last_seen":"2026-07-17T05:17:47.336664Z","times_seen":8,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"unpkg.com/@lottiefiles/lottie-player@latest/dist/lottie-player.js","fqdn":"unpkg.com","domain":"unpkg.com","tld":"com"},"ip":{"addr":"104.18.1.22","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"bc1ccb003c8dbdb1f75efa1fd38362bf","sha1":"8ae598f92b85ef618e90e0129d57fb94c8f6c3b8","sha256":"b396c6847f916f93b353dddc9245b056ad900d115cfb589e7909ba996eaf70af","sha512":"da7392435a35a21260083593ad27b6b451b8094f21bab08644ea542a8a2980f1d3da6516cb59a02de776d667f695ef27f60676737ba3387ba25e58af02762f4d","ssdeep":"6144:a4oQYPIDD5g3/btDQ3PSIoPabTzf/W8tpgsQ5cDo4Dd:SPI3+Ch+p5c35","tlshash":"478418597254743905c54069803f090bf636392e246ac09cb76cf4efa9bde8d32beb79","size":383981,"data":"","first_seen":"2024-11-04T13:40:42.622928Z","last_seen":"2026-08-09T00:51:04.096046Z","times_seen":4774,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"waddyworks.com/wp-includes/js/jquery/jquery.min.js?ver=3.7.1","fqdn":"waddyworks.com","domain":"waddyworks.com","tld":"com"},"ip":{"addr":"192.249.120.161","port":443,"asn":22611,"as":"INMOTION","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"826eb77e86b02ab7724fe3d0141ff87c","sha1":"79cd3587d565afe290076a8d36c31c305a573d18","sha256":"cb6f2d32c49d1c2b25e9ffc9aaafa3f83075346c01bcd4ae6eb187392a4292cf","sha512":"fc79fdb76763025dc39fac045a215ff155ef2f492a0e9640079d6f089fa6218af2b3ab7c6eaf636827dee9294e6939a95ab24554e870c976679c25567ad6374c","ssdeep":"1536:0RUX9uDgwxcy2KVBNwchN6SLaHEk2BSrBESp+a/IEk4aAocVi8SMBQ47GKO:sHNwcv9VBQpLl88SMBQ47GKO","tlshash":"7483f8df77ca702247ab30b9006f550bf276199d684d4400f159d8e9bcb8a4a827bf7e","size":87553,"data":"","first_seen":"2023-11-03T09:26:43Z","last_seen":"2026-08-09T06:47:47.698844Z","times_seen":1011235,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"waddyworks.com/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.4.1","fqdn":"waddyworks.com","domain":"waddyworks.com","tld":"com"},"ip":{"addr":"192.249.120.161","port":443,"asn":22611,"as":"INMOTION","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"9ffeb32e2d9efbf8f70caabded242267","sha1":"3ad0c10e501ac2a9bfa18f9cd7e700219b378738","sha256":"5274f11e6fb32ae0cf2dfb9f8043272865c397a7c4223b4cfa7d50ea52fbde89","sha512":"8d6be545508a1c38278b8ad780c3758ae48a25e4e12eee443375aa56031d9b356f8c90f22d4f251140fa3f65603af40523165e33cae2e2d62fc78ec106e3d731","ssdeep":"192:5rprDN+sag6ifKIUpQI99P1tLm9kdgyq1+J3aCJQ+h4MPLORq:5rprxaefKI0LP19m4q1WW+h4Mjp","tlshash":"9952c8adb56679724eb721b8f03bd24f71b205de560d8940d19cc4f6282dc6e812bf78","size":13577,"data":"","first_seen":"2023-05-09T19:21:05Z","last_seen":"2026-08-09T06:47:47.699414Z","times_seen":926508,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"waddyworks.com/progrisaas_scripts-js-extra","fqdn":"waddyworks.com","domain":"waddyworks.com","tld":"com"},"ip":{"addr":"192.249.120.161","port":443,"asn":22611,"as":"INMOTION","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"65e79ef58bcecd4a67c05e7b2e228a45","sha1":"74ccd6b97d2329ee7ade6c72f2e7f795e0b3dcc5","sha256":"bc508b714e95418b8b742ed9e104e8949de16617af5daa99591b7325e5d994a9","sha512":"fb777d76b9e3bb4dc7d7cd240a4f422152c3a3d82d86bac4d7d40866e18b31d8c19ac2712a6fa2b4bb190211b81ca754f1ae95fee311ad1fd144e06aa2e24554","ssdeep":"","tlshash":"ead02b45ccc4be03d2d41df80610b93301b85410f5319c047e844824c3f4e425c0c300","size":213,"data":"","first_seen":"2026-06-28T03:47:21.994112Z","last_seen":"2026-06-28T03:47:21.994112Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"waddyworks.com/wp-content/plugins/elementor/assets/lib/font-awesome/js/v4-shims.min.js?ver=4.1.4","fqdn":"waddyworks.com","domain":"waddyworks.com","tld":"com"},"ip":{"addr":"192.249.120.161","port":443,"asn":22611,"as":"INMOTION","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"ef17c8ffc514d7418b4bec001b8473fb","sha1":"9d406018e5be8d46b89809d38eb6cea4f8bf62a2","sha256":"6f35273b8502706ee06854d797337ab40bc1b3a7421960a2ceb5392ac85a0f54","sha512":"6a3288f610d5f70344a48f885ea5a1877bd869035fb50f6e5159ddc09c67c7ffcc6d9aac4cc537800f3e84349aa26345d42134f305b41bdd5004e71b2160cbf1","ssdeep":"192:bP6lw28fajqZFSJtd4fxVOT2iQsVJqYqV5PnX9dUWFjWqh2P9e93f7POD3g:On8fajqZFwtdykZwRXcoWI2P9o7S3g","tlshash":"0262337bbd000da93cac595852a27d046d0eb32fbb430c6bbdc59de623a23f5719e006","size":15073,"data":"","first_seen":"2024-03-11T13:11:57Z","last_seen":"2026-08-09T06:23:07.995809Z","times_seen":72638,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"waddyworks.com/","fqdn":"waddyworks.com","domain":"waddyworks.com","tld":"com"},"ip":{"addr":"192.249.120.161","port":443,"asn":22611,"as":"INMOTION","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"d8a2adcc69e7332aaf48f2736bec57fe","sha1":"0200e6b2f556461992d88ea128dfa3a46ee158d3","sha256":"e7fa02f2b4fb4f9e78e558e9734ef0af059154d70877cee51217977ce6c8fc16","sha512":"5e6e3c1770657ef2bd1271ac121914e5378926a557ef1f373d74b7ff539cf913600143b44573fa5dc9e242addec3b0b38f11593f30f6ea68639f45e7ef1979d2","ssdeep":"","tlshash":"1ac02b45ccc4be03d2d41df80210b93301785410f5315c047e800824c3b4e425c0c300","size":136,"data":"","first_seen":"2026-06-28T03:47:21.995378Z","last_seen":"2026-06-28T03:47:21.995378Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"waddyworks.com/","fqdn":"waddyworks.com","domain":"waddyworks.com","tld":"com"},"ip":{"addr":"192.249.120.161","port":443,"asn":22611,"as":"INMOTION","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"cb723d749493893fef00de4a102d5b14","sha1":"83e4d476c5ce53d9fd2a5f07a72db8395c5be20e","sha256":"5025f2112d7c4786e6cdd0d8becf512b1a989a81c5f37fa072c3ca944ca9211e","sha512":"bac6e6754071aa4499cda15909e69619377a5f862a69a99ad4b5577143b8bcadac6ddafbd243f0754f6602063c5bc3c629027c5f767c90d71861b7952764d479","ssdeep":"","tlshash":"c411ccf3b7dd907fba9e6d66593402cd5a1d90735c110a5bfeac3575cc8442534b1d40","size":913,"data":"","first_seen":"2024-04-17T16:07:41Z","last_seen":"2026-08-09T06:10:19.202237Z","times_seen":36009,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"waddyworks.com/","fqdn":"waddyworks.com","domain":"waddyworks.com","tld":"com"},"ip":{"addr":"192.249.120.161","port":443,"asn":22611,"as":"INMOTION","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":true,"md5":"27fb3c94143611ce17055aec70cc385f","sha1":"f917a13d88df8fdb8a58f24bf0e13f355a6bf8c0","sha256":"01f91fb945fe7f9408944d2c9f460c27c9e9a956c6fe6ce9b7bfb3c9bb4ce2e0","sha512":"8d4ce6a5c5341a8cf9ca04535212fdf520d94bdb66d09265d1f1aa12cf33a3005e447f6495c89b772d166afe4377e327cde8caa984c047b39b50f7850ae0258c","ssdeep":"","tlshash":"3951a42079016e7f83d39b803e27be07587c05259041b9e9f8fd49ad15f69692207e47","size":2633,"data":"","first_seen":"2026-06-28T03:47:21.997295Z","last_seen":"2026-06-28T03:47:21.997295Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"waddyworks.com/wp-content/themes/progrisaas/js/jquery.countdown.min.js?ver=20180910","fqdn":"waddyworks.com","domain":"waddyworks.com","tld":"com"},"ip":{"addr":"192.249.120.161","port":443,"asn":22611,"as":"INMOTION","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"e50eb7ff560027f8dcccf4005e7639e4","sha1":"c4599f343f4c057a4e231b20609dd84b877781f1","sha256":"e64bd6a80b3b75ea7a453c2749f5f6eeb306ee334ff0cf344a24678e2d8e668c","sha512":"572e5d42e5137d7f09a58365f280134f63e1249e61c567fd7de2011a5bdc2db562f7759313ebd60b3470eb913eb15c7642f4ae2138ada1e2776ca580edc24496","ssdeep":"","tlshash":"7b21f000b77d15647a32a55e029da28172758e32b86fc96a915fc8f01d38da4924ef09","size":1316,"data":"","first_seen":"2023-03-08T00:14:36Z","last_seen":"2026-08-09T04:33:59.919495Z","times_seen":197,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"waddyworks.com/wp-content/plugins/elementor/assets/js/frontend-modules.min.js?ver=4.1.4","fqdn":"waddyworks.com","domain":"waddyworks.com","tld":"com"},"ip":{"addr":"192.249.120.161","port":443,"asn":22611,"as":"INMOTION","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"a3543601e9c09c9b8554ec6f6c8a2174","sha1":"8b05f21356996037f9d17fd012f43393238ac53c","sha256":"c66f47147d5fe3cceeaa47a93ff7440a328f859b049deec2f9d8f414e9137474","sha512":"3b5d80182a9b187171ceb59b4d384ad6b5e59dc0f5890cbdc0fb01109423a3ed847cfa88d67a0db8c84ed163985fb035b069f0530cf9b7a579c4ed47e67f56e9","ssdeep":"1536:yCyQ5RSSYeAjA6c9CST+I83Fy0K4cR8+yhiA2pXSz2faNQAzeLHeBHmjkVziNT:s+uhIAu","tlshash":"7633d9853652f4b70beb45da902f440af25718a8a40df4d5bfe9dce194b0d8e133ab78","size":50602,"data":"","first_seen":"2026-03-23T23:03:30.149895Z","last_seen":"2026-08-09T06:50:30.028549Z","times_seen":57042,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"waddyworks.com/wp-includes/js/jquery/ui/core.min.js?ver=1.13.3","fqdn":"waddyworks.com","domain":"waddyworks.com","tld":"com"},"ip":{"addr":"192.249.120.161","port":443,"asn":22611,"as":"INMOTION","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"da215ae12b95b3aeeb2047667016c7f8","sha1":"480a7087aa74b5b47c47f05a11670e823a3ae4c0","sha256":"699210a5ed06e497b4730ec83bb65ac4c2269ae4a0ee8af3f24aae7ee5b66b76","sha512":"d256ddc828c06f7b84f7df706a4481928a186ea6d3e1358254a1ec02f403d72d2f3aecd682a93aad61b8f236f17dbcf7e6ca100f78c30a348682bf8ee125d8ff","ssdeep":"384:G/rsrDr8LVyraS3dtrqorqr8hrpCip8fuxNhlGX0CiS9rH/OrLrErJ29FkFvd:iS33ZdvK47kv","tlshash":"06a2d94eb246380586f7a2a5402f521fb132e25cb105c8ddf468d8da3c7eea95173f79","size":21464,"data":"","first_seen":"2025-04-15T23:53:17.313193Z","last_seen":"2026-08-09T06:24:16.942118Z","times_seen":339941,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"waddyworks.com/wp-includes/js/wp-emoji-loader.min.js","fqdn":"waddyworks.com","domain":"waddyworks.com","tld":"com"},"ip":{"addr":"192.249.120.161","port":443,"asn":22611,"as":"INMOTION","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"0089983bbb8e94e69dd5db73aedec201","sha1":"d2664c860952962434f0f8ceb1fde2313d6a4378","sha256":"5baf6019edf9ca6c03bc61e347cfed399c4968a97663c2142b3965b170d1326d","sha512":"37a6c9fd3ac059534a3fc4a522c726a69f72aae06d2315608ff6bc94d07ed12855646d65040f90e814192205233de3ceff95b32ef3b5aaa20f123dca2b6b440d","ssdeep":"96:svcHtHRA5NTDXnM2E0+1lfYsPHgRhR3Ss:JN0LE0+1lfYsvSj","tlshash":"b791869ae7763cdbb2f900f2697a0d47eb614435d6c8d438c9bea3141cb5893c274b46","size":4528,"data":"","first_seen":"2026-06-28T03:47:21.998765Z","last_seen":"2026-06-28T03:47:21.998765Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"waddyworks.com/wp-includes/js/wp-emoji-release.min.js?ver=7.0","fqdn":"waddyworks.com","domain":"waddyworks.com","tld":"com"},"ip":{"addr":"192.249.120.161","port":443,"asn":22611,"as":"INMOTION","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"f0cc9ba5cf46af0cd73d521803e3b07e","sha1":"7d2a74f87dc70a39eccce3bae1d4cc404cb134f4","sha256":"fd59b0ebf6282ed71647bf2f6e0d1925bbfd1f270865a832079ebb60259aabca","sha512":"7ec44f08676c195547a623504c7105ef3d0acea5839675599598043f3e0b5a3386452e3db6fbea90722f7be9e6effdae1b89c49e2b05b22b8c415616e07d471d","ssdeep":"384:WzevzApRZTbXU/3o//bEPhXgA5POkpJTX:Wsk9XU/3o//YpXgAs+hX","tlshash":"7fa2959ba33a4e8f343e3bd78d968f4dc9da555321c0e079dbefb6c169a00568274c80","size":22762,"data":"","first_seen":"2025-11-10T19:52:32.864936Z","last_seen":"2026-08-09T06:17:56.993507Z","times_seen":310686,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"waddyworks.com/wp-content/themes/progrisaas/js/easypiechart.min.js?ver=20190829","fqdn":"waddyworks.com","domain":"waddyworks.com","tld":"com"},"ip":{"addr":"192.249.120.161","port":443,"asn":22611,"as":"INMOTION","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"8d29ed543ea77682ebfaa80d0539977c","sha1":"fe0ec96dd91247856768db69e172ea2b530b1205","sha256":"6a2507b941afb2782b6e7c7dc2eb3022e58745d98bd9ccb69116819ffc4af0c6","sha512":"41413c32351023da0b0a2e4bf5ab26b7bd3104f60d8ac7dcc1d4b0d6d8dae80a36f5824b47908d11f836be8752022b9f9fa1fcf69abc1eb3bc182b1449110289","ssdeep":"","tlshash":"6f817186b161351950336535917f920b322764f5744f4c28b728e1be3eb590d227ff3a","size":3998,"data":"","first_seen":"2023-03-07T12:07:05Z","last_seen":"2026-08-09T04:33:59.997079Z","times_seen":602,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"waddyworks.com/wp-content/plugins/elementor/assets/js/frontend.min.js?ver=4.1.4","fqdn":"waddyworks.com","domain":"waddyworks.com","tld":"com"},"ip":{"addr":"192.249.120.161","port":443,"asn":22611,"as":"INMOTION","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"1c6aa09d0faf7577c8ae64d43b8241ad","sha1":"9d31e838cc042539556ca9223a635349f6e4af35","sha256":"1842d6e4d3c7399fdb01ab4b0a7dd5c1d9c096110de0532181ed581f14e9e813","sha512":"d754acb067d44f5fd9648cc63b6da0e95166a48d50a25dcfb378a6a5cd8c94334413c4466e598d01830a1cab6b183cf4812ac68500ac8e6d64ceabe45f5c46f3","ssdeep":"768:D1c+6idHZRdzM4ZBOBTmduNFXaz1EfcJR8RjDKv//Dk3iHVgbpMYMLKEnzBc5Gkl:ZcURdzMMBOB0mFrcJR8RjD8/xHVlqEni","tlshash":"0de208523296e866069f48a3f0231119f3775dd9b80af0d5b2bcdce5a471e877362b34","size":32098,"data":"","first_seen":"2026-05-18T18:48:00.243251Z","last_seen":"2026-08-09T06:50:30.060095Z","times_seen":22174,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/jquery.marquee@1.6.0/jquery.marquee.min.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"104.17.208.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"38cf1efd3af828942692f619be330bcd","sha1":"c7836fb3eb61f96e6c8bc0344d77cf5618798315","sha256":"feade23a47f6041e6d1008885642dd7ab7cc4f12d94b0c7191c9cf8ca55df97d","sha512":"24726ffcbe3cb351e8776e22488d2ef5b705fc99548be61ac6588a75b6ac9f0fd4d4ba7dc715a4699dcee4eb903cc915c0e557785905e27e35efaa2e03a3f2dc","ssdeep":"96:v7zVMfcftw6RO0c4xwW5uO/kFzFYejD4CHDvDAFWa3QMy9mtlHxHf2KAHfqWVHfT:vX6fcf5P5tkFz1BaWoROjiSFx/7T","tlshash":"311221d2aa613450c7db13bfd44f46864e349932251e4d7fb472c099ae60b08ab97f3a","size":9029,"data":"","first_seen":"2023-03-07T12:21:25Z","last_seen":"2026-08-09T03:17:34.379798Z","times_seen":4533,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"waddyworks.com/wp-content/plugins/elementor/assets/js/shared-frontend-handlers.03caa53373b56d3bab67.bundle.min.js","fqdn":"waddyworks.com","domain":"waddyworks.com","tld":"com"},"ip":{"addr":"192.249.120.161","port":443,"asn":22611,"as":"INMOTION","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"a4df0433011e4a5ca770a6b46d01ab7d","sha1":"ced6acab63205209ef5db818700ba7e7f9277044","sha256":"77c0a6d635dad44b53a9eb9f0f367a1bd3bf3620c0e41d3a4c15d1313f2553f0","sha512":"d9059dc3da43bd052276c6544b81db20e438378541274eb2da852b7c535bc1738eac7c902a4c7c0913f1cef7f76a51bfd0d55e23dd659b4ed6c858141b0e1272","ssdeep":"192:IwfFpzqxODCWV5lxZmdXLf+UvDZ5CMtakRhPZT8cMkCw+v10QITpRHvcwxDnPoG0:rHzqxOPV5lxodXLfpvD/NtakRhPZT8cw","tlshash":"3802310a74c1982db58b58ba3532432866a8014de1018f6db1bf79fbc5a5d82277b7f1","size":8481,"data":"","first_seen":"2025-10-21T21:24:49.172997Z","last_seen":"2026-08-09T06:50:30.090869Z","times_seen":150029,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"waddyworks.com/wp-content/themes/progrisaas/js/owl.carousel.min.js?ver=20210110","fqdn":"waddyworks.com","domain":"waddyworks.com","tld":"com"},"ip":{"addr":"192.249.120.161","port":443,"asn":22611,"as":"INMOTION","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"47c357c05cb99cedbac2874840319818","sha1":"d8b05365de4b760618328fdeef7672e8374978e4","sha256":"4e0781bdd2cbb5db04da3b5e059eeca34e325fabb893bee7457b5babf5b7c029","sha512":"960b76113c78220acc1c87e437c6698fbf1066b8cf7b15a6d4d33f31ab69d8e16bd9823c07ce1897db4d0bdfe08b39e5c7085b79a7a8ef80760e87d9aa789e2e","ssdeep":"768:RCI7dmuMFAAJG4dlQKNORpnXGAtep2lcwJeL+wr2RSNc7UuHjRUQuFBt33:AITMFC4dbMVRSNcgRDV","tlshash":"39137346b3202d2a869b61a0663f160bb23a241ce414547d7d79e6de6d7dc8c213ffbc","size":44348,"data":"","first_seen":"2023-03-07T01:06:30Z","last_seen":"2026-08-09T01:31:28.358183Z","times_seen":13949,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"waddyworks.com/wp-content/themes/progrisaas/js/particles.min.js?ver=20180910","fqdn":"waddyworks.com","domain":"waddyworks.com","tld":"com"},"ip":{"addr":"192.249.120.161","port":443,"asn":22611,"as":"INMOTION","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"08bd8ed926fa216a54b076590a459e67","sha1":"b4d9a963b9200cc77ceaa1bf4a12537a29c0626a","sha256":"e143ea82cbb391479838962ed3a39a9f2319679ddf33e689217d26b0e206d724","sha512":"7f5bf533e4151c0a84bc10909b1ea78ccd16d9f0cff336108e61402ef94df6389972a4ea01926b981cb79747d57512ca6020271b4f5111e72f4b1102b8f2dd73","ssdeep":"384:FkfJtGvWjT6uYvqhCz8wSEHESxtVAFPQcYpeib+9rOEKXWd/:FC7T6uYvn8wRxwyryVOEKXW5","tlshash":"42a2934d23f73e77339ab2e05be9d122c774a4d1399b04b0f93c667da52549201ee7a0","size":23372,"data":"","first_seen":"2023-03-07T01:17:29Z","last_seen":"2026-08-08T09:50:16.975879Z","times_seen":2494,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"waddyworks.com/wp-content/plugins/elementor/assets/js/text-editor.45609661e409413f1cef.bundle.min.js","fqdn":"waddyworks.com","domain":"waddyworks.com","tld":"com"},"ip":{"addr":"192.249.120.161","port":443,"asn":22611,"as":"INMOTION","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"b272ececde530e5621637a7e529abc8b","sha1":"a3fedafc836049d71aa3b1d9ddc1debcd6f73dd2","sha256":"4543f55b0b8bc8fe912da8ddd1da7b07d0e8d3e77a824295a6bccd90d4f8aa13","sha512":"d2efaf6be07605e855c348a6fd5aad58520f20912188578a3711de8840a9cd29e41860b49b36d3d7a72082077c9dcdfe8571e0279985a771cac102a520f7b020","ssdeep":"","tlshash":"f62112b371a2dded48df148a34522d16f2574d5db8caa01ef5aa08df24b2e843362634","size":1348,"data":"","first_seen":"2025-10-22T21:27:55.827503Z","last_seen":"2026-08-09T06:50:30.065476Z","times_seen":127624,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"waddyworks.com/wp-content/themes/progrisaas/js/myloadmore.js?ver=1782610122","fqdn":"waddyworks.com","domain":"waddyworks.com","tld":"com"},"ip":{"addr":"192.249.120.161","port":443,"asn":22611,"as":"INMOTION","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"8b1c97ccc1b27572026073afb7f6b11d","sha1":"ee40eea59938f1fa1394c85f115fa48cc3dea727","sha256":"1b9e8cf39cc7fd25bd567bec872d046285cd1cbb581fe39dcd0dae0b34886668","sha512":"5ef392b1445f5d70d5c9b9aa2d0310866927129fee26ba19955fdc314abd5ebbdcebdb64b9f33a93840ff941869a19f2eafcbef07a273bb077a1b0e034388ee1","ssdeep":"","tlshash":"c8511144b17ef81a8af3367ea83a9c04f63de0374401a435355c94788ff8950e23ad6d","size":2521,"data":"","first_seen":"2023-04-13T14:29:49Z","last_seen":"2026-08-05T16:56:15.495091Z","times_seen":22,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"waddyworks.com/elementor-frontend-js-before","fqdn":"waddyworks.com","domain":"waddyworks.com","tld":"com"},"ip":{"addr":"192.249.120.161","port":443,"asn":22611,"as":"INMOTION","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"f3ce08e111a5d9bf7ad11b1109841cc8","sha1":"0ffb1add716261ec8628a6567b52fe232130747d","sha256":"a81b93ab0b5a13e9ed03716ae0801e1ce83dee92aee1d46f9afeea78a6a23aad","sha512":"32751124968696f3a2ad3be69f30238655dafc1f10f8b39c08b2e82649cdfd3cdf6953a208c4cde846811c52338eb5b98b73c764d1603e53213478576e3f5690","ssdeep":"48:a4AFkPuRv/1rOZ4dXHpMut3IZPeCWP5JixJBt0tQf/SsGR9VBVMnLELHhyIxs:a5qPCuUUeXRJwJByhRTFFyIxs","tlshash":"91819320f9016e7f83d39bb03e27be07586c0525d041b9a9f8fd49ad15f69692207e47","size":4187,"data":"","first_seen":"2026-06-28T03:47:22.000399Z","last_seen":"2026-06-28T03:47:22.000399Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"waddyworks.com/wp-content/plugins/elementor/assets/js/section-frontend-handlers.d85ab872da118940910d.bundle.min.js","fqdn":"waddyworks.com","domain":"waddyworks.com","tld":"com"},"ip":{"addr":"192.249.120.161","port":443,"asn":22611,"as":"INMOTION","country":"United States","country_code":"US"},"introduction_type":"scriptElement","is_inline":false,"md5":"9dd361b7473936c5c8f5bf661c323973","sha1":"5c8f2bcac20956a31c9cff999d50b99f9ee8f9fd","sha256":"55922883b583583787dd3e36a6ee97b5bedc12eec38a24b6bd271d53b8ebf1c2","sha512":"4181a000ecc679d08f6cad5ddac0283744c6dcb07822a19d2552105e4a9191f1baa4a1590975a71325c56714a37084f8122afe463170ce54b5a56d1a1c7780c4","ssdeep":"","tlshash":"a4f05c7a70d278ff200b44520a97105de6a81cf5012961417fbd44382a75ea4a23139f","size":449,"data":"","first_seen":"2025-06-30T23:09:48.860419Z","last_seen":"2026-08-09T06:28:42.333888Z","times_seen":93761,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":[{"level":"log","text":"JQMIGRATE: Migrate is installed, version 3.4.1","filename":"https://waddyworks.com/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.4.1","line_number":2,"column_number":981}]},"http":[{"url":{"schema":"https","addr":"waddyworks.com/wp-content/themes/progrisaas/js/jquery.multiscroll.js?ver=20180910","fqdn":"waddyworks.com","domain":"waddyworks.com","tld":"com"},"ip":{"addr":"192.249.120.161","port":443,"asn":22611,"as":"INMOTION","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://waddyworks.com/","date":"2026-06-28T03:46:52.783Z","timestamp":1782618412783,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"waddyworks.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 23 Jun 2026 21:15:09 GMT","end":"Mon, 21 Sep 2026 21:15:08 GMT"},"fingerprint":{"sha1":"36:B3:8F:D5:4C:8F:D3:9A:A1:96:28:AF:1E:DD:B4:4C:A4:E3:76:39","sha256":"D0:18:E5:82:DB:FA:BD:AC:94:15:25:FE:BC:EA:EB:B8:A9:39:9A:89:98:DC:71:24:FE:95:4B:15:05:52:EF:C1"}}},"request":{"raw":"GET /wp-content/themes/progrisaas/js/jquery.multiscroll.js?ver=20180910 HTTP/1.1\r\nHost: waddyworks.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://waddyworks.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.31.1\r\ndate: Sun, 28 Jun 2026 03:46:52 GMT\r\ncontent-type: text/javascript\r\nvary: Accept-Encoding\r\nlast-modified: Wed, 24 Jun 2026 21:38:19 GMT\r\nx-proxy-cache: HIT\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx:1.31.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":38044,"size_decoded":9503,"mime_type":"text/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with CRLF line terminators","md5":"d0987df1d6d0ae72863def629798db9f","sha1":"e1de70aedabf6504deac29c55971f288b122ae6b","sha256":"9b5abd8315568ebdc6119d91be4ac8cb91d8cb78f110047bd5eb71834921b99b","sha512":"eec2e6828c8601ac6ede8852633cf90bdd98b94775da413e0bbc5681558d5790a55218de8a72dd908fa88645e76003e1968b9f3f7968870dc475c0e397d48b70","ssdeep":"768:nKHXAH9q20oDd8ajlyoSPYek52LCZSI6uK6831g8uoM2:nKHXAH9q20oDd83oSPYek52LCZSIJK6A","tlshash":"9b03878e7442322141b7336bdbab1248eb3581174250a2c0bcfd9be41fb15a59397fee","first_seen":"2023-11-03T05:35:11Z","last_seen":"2026-08-05T16:56:15.431818Z","times_seen":16,"resource_available":true,"data":null}},"time_used":420,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":420,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"waddyworks.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"waddyworks.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"waddyworks.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"waddyworks.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"waddyworks.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"waddyworks.com/wp-content/uploads/2021/05/google.svg","fqdn":"waddyworks.com","domain":"waddyworks.com","tld":"com"},"ip":{"addr":"192.249.120.161","port":443,"asn":22611,"as":"INMOTION","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://waddyworks.com/","date":"2026-06-28T03:46:52.811Z","timestamp":1782618412811,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"waddyworks.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 23 Jun 2026 21:15:09 GMT","end":"Mon, 21 Sep 2026 21:15:08 GMT"},"fingerprint":{"sha1":"36:B3:8F:D5:4C:8F:D3:9A:A1:96:28:AF:1E:DD:B4:4C:A4:E3:76:39","sha256":"D0:18:E5:82:DB:FA:BD:AC:94:15:25:FE:BC:EA:EB:B8:A9:39:9A:89:98:DC:71:24:FE:95:4B:15:05:52:EF:C1"}}},"request":{"raw":"GET /wp-content/uploads/2021/05/google.svg HTTP/1.1\r\nHost: waddyworks.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://waddyworks.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.31.1\r\ndate: Sun, 28 Jun 2026 03:46:52 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 4454\r\nlast-modified: Wed, 24 Jun 2026 21:38:19 GMT\r\nvary: Accept-Encoding\r\netag: \"6a3c4e4b-1166\"\r\nexpires: Sun, 05 Jul 2026 03:46:52 GMT\r\ncache-control: max-age=604800, public, must-revalidate\r\nx-proxy-cache: STATIC/PATH\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx:1.31.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":4454,"size_decoded":4837,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"3c91e9f05b4fddf1d5c540e93d568dac","sha1":"5dd0a3ab0a81073f3d301be3957f6601084ba21f","sha256":"a2acc5f681da56f77400321a13383ed450123d7bb829a8e9d01f86f3c09356d7","sha512":"61303a046c4be8568b93782f7633bf8a6a55f03ea542eae5dc2296a7a993a1f1bf7963b60d7dae1d0d7f14ffb829b2dfff060cd5c032528fdb00222e459c7461","ssdeep":"96:Ak+8BpzrMnizQ+5O8nrSzSxdIaP8aaYAMXPBNbhlTIzjx:AJmpLQ+5O8r3Ia0ZRMXPBvU1","tlshash":"3391a6cd2fb119d05dc887d9ff21e0aab61a50bf86184a68c00c4be464c6c2ced5af4a","first_seen":"2026-05-23T22:28:22.21009Z","last_seen":"2026-06-28T03:47:21.867455Z","times_seen":2,"resource_available":false,"data":null}},"time_used":400,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":400,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"waddyworks.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"waddyworks.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"waddyworks.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"waddyworks.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"waddyworks.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"waddyworks.com/wp-content/uploads/2024/05/logoIcon.png","fqdn":"waddyworks.com","domain":"waddyworks.com","tld":"com"},"ip":{"addr":"192.249.120.161","port":443,"asn":22611,"as":"INMOTION","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://waddyworks.com/","date":"2026-06-28T03:46:52.812Z","timestamp":1782618412812,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"waddyworks.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 23 Jun 2026 21:15:09 GMT","end":"Mon, 21 Sep 2026 21:15:08 GMT"},"fingerprint":{"sha1":"36:B3:8F:D5:4C:8F:D3:9A:A1:96:28:AF:1E:DD:B4:4C:A4:E3:76:39","sha256":"D0:18:E5:82:DB:FA:BD:AC:94:15:25:FE:BC:EA:EB:B8:A9:39:9A:89:98:DC:71:24:FE:95:4B:15:05:52:EF:C1"}}},"request":{"raw":"GET /wp-content/uploads/2024/05/logoIcon.png HTTP/1.1\r\nHost: waddyworks.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://waddyworks.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.31.1\r\ndate: Sun, 28 Jun 2026 03:46:52 GMT\r\ncontent-type: image/png\r\ncontent-length: 82064\r\nlast-modified: Wed, 24 Jun 2026 21:38:19 GMT\r\nvary: Accept-Encoding\r\netag: \"6a3c4e4b-14090\"\r\nexpires: Sun, 05 Jul 2026 03:46:52 GMT\r\ncache-control: max-age=604800, public, must-revalidate\r\nx-proxy-cache: STATIC/PATH\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx:1.31.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":82064,"size_decoded":82445,"mime_type":"image/png","magic":"PNG image data, 447 x 363, 8-bit/color RGBA, non-interlaced","md5":"3783cceb14034c6356c39e78dc7cfea3","sha1":"a012134db7e040fcde911658493eeac6992cfcb9","sha256":"b54734fff81723130030ce938b2ba5e6db482ff5b9fa1500c2c856f25795cc0a","sha512":"f431676a01f6fc2fadbe2d1846abecc7eab348f0f1922041c718f2a4dd3abb979ca3c374efb34267ca5619a8f62deeb093edf3fe5b10e54f9a33a4174a0e7500","ssdeep":"1536:hK4KdaY0Beil+6LSD/T6TPPxh7g6N9tnQTJeGGVp1lN8zaSr3WTab:wnda51tS/6TPP1N9tQTJMVdTAiab","tlshash":"3a8302cf3a398d50f21f38b174a75de08c5685d384b8ef0e4d067bb55e0841e8b58aae","first_seen":"2026-05-23T22:28:22.072754Z","last_seen":"2026-06-28T03:47:21.870376Z","times_seen":2,"resource_available":false,"data":null}},"time_used":555,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":402,"receive":153,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"waddyworks.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"waddyworks.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"waddyworks.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"waddyworks.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"waddyworks.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"waddyworks.com/wp-content/uploads/2024/05/favicon.png","fqdn":"waddyworks.com","domain":"waddyworks.com","tld":"com"},"ip":{"addr":"192.249.120.161","port":443,"asn":22611,"as":"INMOTION","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://waddyworks.com/","date":"2026-06-28T03:46:53.943Z","timestamp":1782618413943,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"waddyworks.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 23 Jun 2026 21:15:09 GMT","end":"Mon, 21 Sep 2026 21:15:08 GMT"},"fingerprint":{"sha1":"36:B3:8F:D5:4C:8F:D3:9A:A1:96:28:AF:1E:DD:B4:4C:A4:E3:76:39","sha256":"D0:18:E5:82:DB:FA:BD:AC:94:15:25:FE:BC:EA:EB:B8:A9:39:9A:89:98:DC:71:24:FE:95:4B:15:05:52:EF:C1"}}},"request":{"raw":"GET /wp-content/uploads/2024/05/favicon.png HTTP/1.1\r\nHost: waddyworks.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://waddyworks.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.31.1\r\ndate: Sun, 28 Jun 2026 03:46:54 GMT\r\ncontent-type: image/png\r\ncontent-length: 31530\r\nlast-modified: Wed, 24 Jun 2026 21:38:19 GMT\r\nvary: Accept-Encoding\r\netag: \"6a3c4e4b-7b2a\"\r\nexpires: Sun, 05 Jul 2026 03:46:54 GMT\r\ncache-control: max-age=604800, public, must-revalidate\r\nx-proxy-cache: STATIC/PATH\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx:1.31.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":31530,"size_decoded":31910,"mime_type":"image/png","magic":"PNG image data, 201 x 163, 8-bit/color RGBA, non-interlaced","md5":"a21476839b70a2b4db8033f51537cd78","sha1":"bb5d0783c5a789220fa1d02ca4a3463bbac0a56d","sha256":"16e58da7ae2e6c808e13200f56cc9122d399ef925801a5d5eda276e164e7bb55","sha512":"e7d754b4deca20ac2c105a65d5492a0e927de399d852d0585a3a7a02b1224cdebe779036db247fc97733de251108392158485a73cfffa3bfce51dfe2e1f8f741","ssdeep":"768:nfocVRPvXdI/1MpOy32rs9nfTXP6qYWc3oQt25w:nfzVBlIkOy32rwLyqYWcOW","tlshash":"13e2f15548c06e85c71cf6d754a28c21d686dc866f84ca151eeec2f38abd329b772983","first_seen":"2026-05-23T22:28:22.021588Z","last_seen":"2026-06-28T03:47:21.872811Z","times_seen":2,"resource_available":false,"data":null}},"time_used":301,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":164,"receive":137,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"waddyworks.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"waddyworks.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"waddyworks.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"waddyworks.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"waddyworks.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"waddyworks.com/wp-includes/js/jquery/jquery.min.js?ver=3.7.1","fqdn":"waddyworks.com","domain":"waddyworks.com","tld":"com"},"ip":{"addr":"192.249.120.161","port":443,"asn":22611,"as":"INMOTION","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://waddyworks.com/","date":"2026-06-28T03:46:52.737Z","timestamp":1782618412737,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"waddyworks.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 23 Jun 2026 21:15:09 GMT","end":"Mon, 21 Sep 2026 21:15:08 GMT"},"fingerprint":{"sha1":"36:B3:8F:D5:4C:8F:D3:9A:A1:96:28:AF:1E:DD:B4:4C:A4:E3:76:39","sha256":"D0:18:E5:82:DB:FA:BD:AC:94:15:25:FE:BC:EA:EB:B8:A9:39:9A:89:98:DC:71:24:FE:95:4B:15:05:52:EF:C1"}}},"request":{"raw":"GET /wp-includes/js/jquery/jquery.min.js?ver=3.7.1 HTTP/1.1\r\nHost: waddyworks.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://waddyworks.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.31.1\r\ndate: Sun, 28 Jun 2026 03:46:52 GMT\r\ncontent-type: text/javascript\r\nvary: Accept-Encoding\r\nlast-modified: Tue, 29 Aug 2023 00:14:24 GMT\r\nx-proxy-cache: HIT\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx:1.31.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":87553,"size_decoded":31645,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (65447)","md5":"826eb77e86b02ab7724fe3d0141ff87c","sha1":"79cd3587d565afe290076a8d36c31c305a573d18","sha256":"cb6f2d32c49d1c2b25e9ffc9aaafa3f83075346c01bcd4ae6eb187392a4292cf","sha512":"fc79fdb76763025dc39fac045a215ff155ef2f492a0e9640079d6f089fa6218af2b3ab7c6eaf636827dee9294e6939a95ab24554e870c976679c25567ad6374c","ssdeep":"1536:0RUX9uDgwxcy2KVBNwchN6SLaHEk2BSrBESp+a/IEk4aAocVi8SMBQ47GKO:sHNwcv9VBQpLl88SMBQ47GKO","tlshash":"7483f8df77ca702247ab30b9006f550bf276199d684d4400f159d8e9bcb8a4a827bf7e","first_seen":"2023-11-03T09:26:43Z","last_seen":"2026-08-09T06:47:47.698844Z","times_seen":1011235,"resource_available":true,"data":null}},"time_used":305,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":305,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"waddyworks.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"waddyworks.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"waddyworks.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"waddyworks.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"waddyworks.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"waddyworks.com/wp-content/plugins/elementor/assets/lib/font-awesome/js/v4-shims.min.js?ver=4.1.4","fqdn":"waddyworks.com","domain":"waddyworks.com","tld":"com"},"ip":{"addr":"192.249.120.161","port":443,"asn":22611,"as":"INMOTION","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://waddyworks.com/","date":"2026-06-28T03:46:52.740Z","timestamp":1782618412740,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"waddyworks.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 23 Jun 2026 21:15:09 GMT","end":"Mon, 21 Sep 2026 21:15:08 GMT"},"fingerprint":{"sha1":"36:B3:8F:D5:4C:8F:D3:9A:A1:96:28:AF:1E:DD:B4:4C:A4:E3:76:39","sha256":"D0:18:E5:82:DB:FA:BD:AC:94:15:25:FE:BC:EA:EB:B8:A9:39:9A:89:98:DC:71:24:FE:95:4B:15:05:52:EF:C1"}}},"request":{"raw":"GET /wp-content/plugins/elementor/assets/lib/font-awesome/js/v4-shims.min.js?ver=4.1.4 HTTP/1.1\r\nHost: waddyworks.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://waddyworks.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.31.1\r\ndate: Sun, 28 Jun 2026 03:46:52 GMT\r\ncontent-type: text/javascript\r\nvary: Accept-Encoding\r\nlast-modified: Wed, 24 Jun 2026 21:40:50 GMT\r\nx-proxy-cache: HIT\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx:1.31.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":15073,"size_decoded":4484,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (14886)","md5":"ef17c8ffc514d7418b4bec001b8473fb","sha1":"9d406018e5be8d46b89809d38eb6cea4f8bf62a2","sha256":"6f35273b8502706ee06854d797337ab40bc1b3a7421960a2ceb5392ac85a0f54","sha512":"6a3288f610d5f70344a48f885ea5a1877bd869035fb50f6e5159ddc09c67c7ffcc6d9aac4cc537800f3e84349aa26345d42134f305b41bdd5004e71b2160cbf1","ssdeep":"192:bP6lw28fajqZFSJtd4fxVOT2iQsVJqYqV5PnX9dUWFjWqh2P9e93f7POD3g:On8fajqZFwtdykZwRXcoWI2P9o7S3g","tlshash":"0262337bbd000da93cac595852a27d046d0eb32fbb430c6bbdc59de623a23f5719e006","first_seen":"2024-03-11T13:11:57Z","last_seen":"2026-08-09T06:23:07.995809Z","times_seen":72638,"resource_available":true,"data":null}},"time_used":306,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":306,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"waddyworks.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"waddyworks.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"waddyworks.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"waddyworks.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"waddyworks.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"waddyworks.com/wp-content/themes/progrisaas/js/jquery.countdown.min.js?ver=20180910","fqdn":"waddyworks.com","domain":"waddyworks.com","tld":"com"},"ip":{"addr":"192.249.120.161","port":443,"asn":22611,"as":"INMOTION","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://waddyworks.com/","date":"2026-06-28T03:46:52.780Z","timestamp":1782618412780,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"waddyworks.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 23 Jun 2026 21:15:09 GMT","end":"Mon, 21 Sep 2026 21:15:08 GMT"},"fingerprint":{"sha1":"36:B3:8F:D5:4C:8F:D3:9A:A1:96:28:AF:1E:DD:B4:4C:A4:E3:76:39","sha256":"D0:18:E5:82:DB:FA:BD:AC:94:15:25:FE:BC:EA:EB:B8:A9:39:9A:89:98:DC:71:24:FE:95:4B:15:05:52:EF:C1"}}},"request":{"raw":"GET /wp-content/themes/progrisaas/js/jquery.countdown.min.js?ver=20180910 HTTP/1.1\r\nHost: waddyworks.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://waddyworks.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.31.1\r\ndate: Sun, 28 Jun 2026 03:46:52 GMT\r\ncontent-type: text/javascript\r\nvary: Accept-Encoding\r\nlast-modified: Wed, 24 Jun 2026 21:38:19 GMT\r\nx-proxy-cache: HIT\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx:1.31.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1316,"size_decoded":922,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (1156), with CRLF line terminators","md5":"e50eb7ff560027f8dcccf4005e7639e4","sha1":"c4599f343f4c057a4e231b20609dd84b877781f1","sha256":"e64bd6a80b3b75ea7a453c2749f5f6eeb306ee334ff0cf344a24678e2d8e668c","sha512":"572e5d42e5137d7f09a58365f280134f63e1249e61c567fd7de2011a5bdc2db562f7759313ebd60b3470eb913eb15c7642f4ae2138ada1e2776ca580edc24496","ssdeep":"","tlshash":"7b21f000b77d15647a32a55e029da28172758e32b86fc96a915fc8f01d38da4924ef09","first_seen":"2023-03-08T00:14:36Z","last_seen":"2026-08-09T04:33:59.919495Z","times_seen":197,"resource_available":true,"data":null}},"time_used":421,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":421,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"waddyworks.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"waddyworks.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"waddyworks.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"waddyworks.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"waddyworks.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"waddyworks.com/wp-content/uploads/elementor/google-fonts/fonts/dmsans-rp2yp2ywxg089urii5-g4vlh9vod8cmcqbu0-k4.woff2","fqdn":"waddyworks.com","domain":"waddyworks.com","tld":"com"},"ip":{"addr":"192.249.120.161","port":443,"asn":22611,"as":"INMOTION","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://waddyworks.com/","date":"2026-06-28T03:46:53.549Z","timestamp":1782618413549,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"waddyworks.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 23 Jun 2026 21:15:09 GMT","end":"Mon, 21 Sep 2026 21:15:08 GMT"},"fingerprint":{"sha1":"36:B3:8F:D5:4C:8F:D3:9A:A1:96:28:AF:1E:DD:B4:4C:A4:E3:76:39","sha256":"D0:18:E5:82:DB:FA:BD:AC:94:15:25:FE:BC:EA:EB:B8:A9:39:9A:89:98:DC:71:24:FE:95:4B:15:05:52:EF:C1"}}},"request":{"raw":"GET /wp-content/uploads/elementor/google-fonts/fonts/dmsans-rp2yp2ywxg089urii5-g4vlh9vod8cmcqbu0-k4.woff2 HTTP/1.1\r\nHost: waddyworks.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://waddyworks.com/wp-content/uploads/elementor/google-fonts/css/dmsans.css?ver=1751394154\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.31.1\r\ndate: Sun, 28 Jun 2026 03:46:53 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 36916\r\nlast-modified: Wed, 24 Jun 2026 21:38:19 GMT\r\nvary: Accept-Encoding\r\netag: \"6a3c4e4b-9034\"\r\nexpires: Sun, 05 Jul 2026 03:46:53 GMT\r\ncache-control: max-age=604800, public, must-revalidate\r\nx-proxy-cache: STATIC/PATH\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx:1.31.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":36916,"size_decoded":37297,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 36916, version 1.0","md5":"f0244b919a1d63ca2c430cbea5a9760b","sha1":"e85051d4a760f8feb6b2293ad9ba3cde1cbec15e","sha256":"967ec653e45a62f5dc91767eba95b0e2df6ed754bc4de4354e5efdf4ac9de068","sha512":"04d130036a5545024d95cd29b5562e4343ca475499b154c3d26458d2a4db6323f64ad4a9be6470982947b95f543f4003fccdcfe5072dabb04ccc5cb5d7148323","ssdeep":"768:GxfGQAfOaEkOfBo6V3Wz0sIPDNmgJPkM2SHhQ4DU7ol0CB1Y74bpmh:GxfGQy/WfBhC0ZvVLhxUUfB1Yvh","tlshash":"24f2f239bfe7dec3f0da9350113fc4108314a7e6a7482f42d6d585f8a45d424daadd98","first_seen":"2025-06-02T18:48:01.285787Z","last_seen":"2026-08-09T06:08:11.357965Z","times_seen":4149,"resource_available":false,"data":null}},"time_used":162,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":161,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"waddyworks.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"waddyworks.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"waddyworks.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"waddyworks.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"waddyworks.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"lottie.host/8eeeee9c-3677-4693-930f-5ceec51e2872/aP9I7KDvBU.json","fqdn":"lottie.host","domain":"lottie.host","tld":"host"},"ip":{"addr":"52.84.50.31","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://waddyworks.com/","date":"2026-06-28T03:46:53.628Z","timestamp":1782618413628,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lottie.host","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Fri, 10 Apr 2026 00:00:00 GMT","end":"Sat, 24 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"7A:0B:2F:B8:B0:CF:81:E2:62:2C:F2:C1:74:3A:AD:E1:04:FA:B4:2D","sha256":"85:C9:E9:F0:50:5B:02:EC:98:FC:DD:11:D7:97:BA:EA:AE:96:4E:9C:37:65:43:94:7D:D8:EF:A0:3B:AF:80:4B"}}},"request":{"raw":"GET /8eeeee9c-3677-4693-930f-5ceec51e2872/aP9I7KDvBU.json HTTP/1.1\r\nHost: lottie.host\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://waddyworks.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://waddyworks.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: application/json\r\ndate: Sun, 28 Jun 2026 03:44:36 GMT\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, PUT, POST\r\naccess-control-max-age: 1800\r\nlast-modified: Mon, 27 May 2024 06:38:00 GMT\r\ncontent-encoding: br\r\nx-amz-server-side-encryption: AES256\r\nx-amz-version-id: 6bzZRyCh8tQ5aHtHC6b.Lta5JuN5zPyf\r\nserver: AmazonS3\r\netag: W/\"c8a211612997f0703333dfe33db7a1be\"\r\nvary: Origin,Accept-Encoding\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 d85ed2d2deba50aaf4938eae2cbcf3ac.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P3\r\nx-amz-cf-id: GBgIwveqs14mZhMXAtaUqP_di9DXY4-x6whG9pWFuOUNwRaZVSSi_A==\r\nage: 138\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":18322,"size_decoded":3550,"mime_type":"application/json","magic":"JSON text data","md5":"c8a211612997f0703333dfe33db7a1be","sha1":"04d1a9ddb77c5304dc836e0c97eeb797679c9999","sha256":"682787021ebc8bf8b9d0bc724ad1f404f706a0fa2ad6a4110dc619d0e1ad76a7","sha512":"9630701c1e219b13267137812573ae9e04123fbe7644dd4605650fcbd75d10726d9feb33e11c56eebebb9aa7af7f330ceb225cf66b84a0f742cffe7f6d0ef855","ssdeep":"96:uQG1wY20wYQL9LwEe+hINQL9Lw4jxHSC5d6doTT1a9jHSC7AMAGST2EkTcHSC7Nt:uQH70VRi64jBBPOyGST2irRTd/C41b5","tlshash":"e3828b980f7142ecfb145950cf4370e9cfe488896fc145daeabb5c249ea1a5e2302e1b","first_seen":"2026-05-23T22:28:22.104705Z","last_seen":"2026-06-28T03:47:21.879826Z","times_seen":2,"resource_available":false,"data":null}},"time_used":53,"timings":{"blocked":25,"dns":0,"connect":0,"send":0,"wait":28,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"waddyworks.com/wp-content/uploads/elementor/google-fonts/css/dmsans.css?ver=1751394154","fqdn":"waddyworks.com","domain":"waddyworks.com","tld":"com"},"ip":{"addr":"192.249.120.161","port":443,"asn":22611,"as":"INMOTION","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://waddyworks.com/","date":"2026-06-28T03:46:52.775Z","timestamp":1782618412775,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"waddyworks.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 23 Jun 2026 21:15:09 GMT","end":"Mon, 21 Sep 2026 21:15:08 GMT"},"fingerprint":{"sha1":"36:B3:8F:D5:4C:8F:D3:9A:A1:96:28:AF:1E:DD:B4:4C:A4:E3:76:39","sha256":"D0:18:E5:82:DB:FA:BD:AC:94:15:25:FE:BC:EA:EB:B8:A9:39:9A:89:98:DC:71:24:FE:95:4B:15:05:52:EF:C1"}}},"request":{"raw":"GET /wp-content/uploads/elementor/google-fonts/css/dmsans.css?ver=1751394154 HTTP/1.1\r\nHost: waddyworks.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://waddyworks.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.31.1\r\ndate: Sun, 28 Jun 2026 03:46:52 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 24 Jun 2026 21:38:19 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a3c4e4b-42e7\"\r\nexpires: Sun, 05 Jul 2026 03:46:52 GMT\r\ncache-control: max-age=604800, public, must-revalidate\r\nx-proxy-cache: STATIC/PATH\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx:1.31.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":17127,"size_decoded":896,"mime_type":"text/css","magic":"ASCII text","md5":"c586630e26d0a049d9f17af1511366de","sha1":"f7f24a72b7d483c4aa2ecae5e8ff6396687a238a","sha256":"57e1d133f1a9cb48d2aee7aaa4a428c8584f689f302fca2ae9cb93b8bbad7c8c","sha512":"4668ca0450e5dd44fa7852c1a221f9fd3afc982cf59dd4a82a87979e188f2aa3229e1edd3403f8b43ed315dfe9bf32a43a496e298c561313056dd059c037e55a","ssdeep":"192:M3pzV3p1AzVA1nzVn1OzVO1NzVN1EzVE1rzVr1CzVC1xzVx4pGYp7GRUGiJGDaGP:M333PswB1uOTDYEdZ6C/+FI","tlshash":"8f720091086b6200d7a39dc176dd3d22ee1ee191b80499b46bfe048cfde6c2d637279d","first_seen":"2026-05-23T22:28:22.19339Z","last_seen":"2026-06-28T03:47:21.882478Z","times_seen":2,"resource_available":false,"data":null}},"time_used":277,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":277,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"waddyworks.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"waddyworks.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"waddyworks.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"waddyworks.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"waddyworks.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"waddyworks.com/wp-content/uploads/2021/05/logo-client6.svg","fqdn":"waddyworks.com","domain":"waddyworks.com","tld":"com"},"ip":{"addr":"192.249.120.161","port":443,"asn":22611,"as":"INMOTION","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://waddyworks.com/","date":"2026-06-28T03:46:52.805Z","timestamp":1782618412805,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"waddyworks.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 23 Jun 2026 21:15:09 GMT","end":"Mon, 21 Sep 2026 21:15:08 GMT"},"fingerprint":{"sha1":"36:B3:8F:D5:4C:8F:D3:9A:A1:96:28:AF:1E:DD:B4:4C:A4:E3:76:39","sha256":"D0:18:E5:82:DB:FA:BD:AC:94:15:25:FE:BC:EA:EB:B8:A9:39:9A:89:98:DC:71:24:FE:95:4B:15:05:52:EF:C1"}}},"request":{"raw":"GET /wp-content/uploads/2021/05/logo-client6.svg HTTP/1.1\r\nHost: waddyworks.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://waddyworks.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.31.1\r\ndate: Sun, 28 Jun 2026 03:46:52 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 5492\r\nlast-modified: Wed, 24 Jun 2026 21:38:19 GMT\r\nvary: Accept-Encoding\r\netag: \"6a3c4e4b-1574\"\r\nexpires: Sun, 05 Jul 2026 03:46:52 GMT\r\ncache-control: max-age=604800, public, must-revalidate\r\nx-proxy-cache: STATIC/PATH\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx:1.31.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":5492,"size_decoded":5875,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"4f1715087da20bd52a72c4528f0a4ecf","sha1":"8b89b041a0b339f6e4b69f7705b253e6d844faf5","sha256":"07ec51ab8b64fe5a564a84695ec5434ed76b8eee735efd9fc19ed7e0782a9725","sha512":"1873dbc23d5970a13bb636dfa743ea2bb5aaf3faacd61c5a4ad97737852690975b626c2a297ed246a05f6889dcc742daff60dcb0f2bb082d5b7df7312766b151","ssdeep":"96:w1isI1xoDZYvhb/PAGjr1onAan2IvHxHq51f7Zb01hPBLHYuXoEvcf/ZcFLgPLyn:w1isI1iDOhb/PA4uAmHq5lxgXHY0loc/","tlshash":"edb174cd37a7a7e9115826e79b11897e7d0669ebce0d0d10c0388f34a8c2d6cdc893d6","first_seen":"2026-05-23T22:28:22.131167Z","last_seen":"2026-06-28T03:47:21.885641Z","times_seen":2,"resource_available":false,"data":null}},"time_used":401,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":401,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"waddyworks.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"waddyworks.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"waddyworks.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"waddyworks.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"waddyworks.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"unpkg.com/@lottiefiles/lottie-player@2.0.12/dist/lottie-player.js","fqdn":"unpkg.com","domain":"unpkg.com","tld":"com"},"ip":{"addr":"104.18.1.22","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://waddyworks.com/","date":"2026-06-28T03:46:52.856Z","timestamp":1782618412856,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"unpkg.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 16 Jun 2026 08:46:51 GMT","end":"Mon, 14 Sep 2026 09:46:24 GMT"},"fingerprint":{"sha1":"BE:A8:55:77:27:FA:F2:90:06:36:65:E9:19:F6:FD:ED:5A:06:9D:D5","sha256":"F8:65:79:AE:79:B2:0F:45:A2:F1:17:30:50:86:B7:3D:E8:9A:27:7A:4A:87:7E:CD:39:A4:0E:EC:92:07:2F:94"}}},"request":{"raw":"GET /@lottiefiles/lottie-player@2.0.12/dist/lottie-player.js HTTP/1.1\r\nHost: unpkg.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://waddyworks.com/\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\ndate: Sun, 28 Jun 2026 03:46:52 GMT\r\ncontent-type: text/javascript; charset=utf-8\r\ncf-ray: a129b4f85ee54e4c-OSL\r\ncf-cache-status: HIT\r\npriority: u=3,i=?0\r\naccess-control-allow-origin: *\r\nage: 48928\r\ncache-control: public, max-age=31536000\r\nexpires: Mon, 28 Jun 2027 03:46:52 GMT\r\nlast-modified: Sun, 07 Jun 2026 11:20:50 GMT\r\nserver: cloudflare\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nvary: accept-encoding\r\nvia: 1.1 fly.io, 1.1 fly.io\r\naccess-control-allow-headers: *\r\naccess-control-allow-methods: GET, HEAD, OPTIONS\r\naccess-control-expose-headers: *\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\ncontent-digest: sha256=:s5bGhH+Rb5OzU93ckkWwVq2QDRFc+1ieeQm6mW6vcK8=:\r\nfly-request-id: 01KREH1Z4KC9W4RYREKAPA55AP-fra\r\ncontent-encoding: gzip\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Fly.io","description":"Fly is a platform for running full stack apps and databases.","website":"https://fly.io","common_platform_enumeration":"","icon":"Fly.io.png","categories":["PaaS"]},{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":383981,"size_decoded":98749,"mime_type":"text/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (27447)","md5":"bc1ccb003c8dbdb1f75efa1fd38362bf","sha1":"8ae598f92b85ef618e90e0129d57fb94c8f6c3b8","sha256":"b396c6847f916f93b353dddc9245b056ad900d115cfb589e7909ba996eaf70af","sha512":"da7392435a35a21260083593ad27b6b451b8094f21bab08644ea542a8a2980f1d3da6516cb59a02de776d667f695ef27f60676737ba3387ba25e58af02762f4d","ssdeep":"6144:a4oQYPIDD5g3/btDQ3PSIoPabTzf/W8tpgsQ5cDo4Dd:SPI3+Ch+p5c35","tlshash":"478418597254743905c54069803f090bf636392e246ac09cb76cf4efa9bde8d32beb79","first_seen":"2024-11-04T13:40:42.622928Z","last_seen":"2026-08-09T00:51:04.096046Z","times_seen":4774,"resource_available":true,"data":null}},"time_used":32,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":27,"receive":5,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lottie.host/7401522f-2d8b-4049-ad18-eb0edb6af224/CE9lFrNlEH.json","fqdn":"lottie.host","domain":"lottie.host","tld":"host"},"ip":{"addr":"52.84.50.31","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://waddyworks.com/","date":"2026-06-28T03:46:53.601Z","timestamp":1782618413601,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lottie.host","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Fri, 10 Apr 2026 00:00:00 GMT","end":"Sat, 24 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"7A:0B:2F:B8:B0:CF:81:E2:62:2C:F2:C1:74:3A:AD:E1:04:FA:B4:2D","sha256":"85:C9:E9:F0:50:5B:02:EC:98:FC:DD:11:D7:97:BA:EA:AE:96:4E:9C:37:65:43:94:7D:D8:EF:A0:3B:AF:80:4B"}}},"request":{"raw":"GET /7401522f-2d8b-4049-ad18-eb0edb6af224/CE9lFrNlEH.json HTTP/1.1\r\nHost: lottie.host\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://waddyworks.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://waddyworks.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: application/json\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, PUT, POST\r\naccess-control-max-age: 1800\r\nlast-modified: Wed, 21 Jun 2023 11:42:09 GMT\r\ncontent-encoding: br\r\nx-amz-server-side-encryption: AES256\r\nx-amz-version-id: .4C26IQCCg.vsF.jI0pWsqEX.R6VPBTw\r\nserver: AmazonS3\r\ndate: Sun, 28 Jun 2026 03:46:54 GMT\r\netag: W/\"da5b696132a7002af479a0b83755072d\"\r\nvary: Origin,Accept-Encoding\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 d85ed2d2deba50aaf4938eae2cbcf3ac.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P3\r\nx-amz-cf-id: Utmzn4aUR5ZvS_1WtertHn37YKuWNHEPlv7tiNJ4R0q9Y6RLmWR7rA==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":142142,"size_decoded":15008,"mime_type":"application/json","magic":"JSON text data","md5":"da5b696132a7002af479a0b83755072d","sha1":"0921fc2d6bafa366aa16919a4ff5408989da1acc","sha256":"5780b2ddb9b0680abe5d771efe2ee26de17b6e4ce050c4ed6b657041e0ee6a8d","sha512":"a31860bb741c7fe8de2f6b0c2f8ccda32b3104a4de25077173dda83335ec049ec2c0b381b1b73c116ec9513a693dab7fa50b3bd965e259ac2869f75917bd889d","ssdeep":"3072:P1UF7DS48LnOlFjHVYl8Wzwu6X9rllITxtHo1Xo1RrCD2Jl9lUUUll+Jl2TzJv4+:P1UF7DS48LnOlFjHVYl8Wzwu6X9rllIi","tlshash":"29d3dd8947a1c07cd65e2690ca4f74d9dfc49586cfc6485ca6beac248b89faf3300b57","first_seen":"2026-05-23T22:28:22.158581Z","last_seen":"2026-06-28T03:47:21.889731Z","times_seen":2,"resource_available":false,"data":null}},"time_used":279,"timings":{"blocked":-1,"dns":50,"connect":3,"send":0,"wait":4,"receive":0,"ssl":219},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"waddyworks.com/wp-content/plugins/elementor/assets/css/frontend.min.css?ver=4.1.4","fqdn":"waddyworks.com","domain":"waddyworks.com","tld":"com"},"ip":{"addr":"192.249.120.161","port":443,"asn":22611,"as":"INMOTION","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://waddyworks.com/","date":"2026-06-28T03:46:52.717Z","timestamp":1782618412717,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"waddyworks.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 23 Jun 2026 21:15:09 GMT","end":"Mon, 21 Sep 2026 21:15:08 GMT"},"fingerprint":{"sha1":"36:B3:8F:D5:4C:8F:D3:9A:A1:96:28:AF:1E:DD:B4:4C:A4:E3:76:39","sha256":"D0:18:E5:82:DB:FA:BD:AC:94:15:25:FE:BC:EA:EB:B8:A9:39:9A:89:98:DC:71:24:FE:95:4B:15:05:52:EF:C1"}}},"request":{"raw":"GET /wp-content/plugins/elementor/assets/css/frontend.min.css?ver=4.1.4 HTTP/1.1\r\nHost: waddyworks.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://waddyworks.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.31.1\r\ndate: Sun, 28 Jun 2026 03:46:52 GMT\r\ncontent-type: text/css\r\nvary: Accept-Encoding\r\nlast-modified: Wed, 24 Jun 2026 21:40:50 GMT\r\nx-proxy-cache: HIT\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx:1.31.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":54666,"size_decoded":7674,"mime_type":"text/css","magic":"ASCII text, with very long lines (54666), with no line terminators","md5":"4fb5f7fc5e41f736ec0527b162519d52","sha1":"33697641c940c68153509fa7c9d7d0c3c760ce2d","sha256":"0a5d398672e25dc7f020f69df92a985481b248a60e301fee232d0c8afd648dc5","sha512":"5da1e9708bfdbd38beb7cee98d806ebc84b4d8337ce638a363d28461ebd9fda5189618bfa62167a5261ec2e98b02cb88ee4ff7bd5ecdd2d2facd480965e0c7a6","ssdeep":"384:Ws4J/8DEksCoI+SBQYO22/RmRs5Cz9TQXPTkvmGkvmCFldtraiIks05ArOk:dFLh5mP3RbrlDdps05Xk","tlshash":"17330da23d13b269226f442b82c7364c526499c1ee0375d9f944c523dafece63b36c5b","first_seen":"2026-01-29T13:38:24.653388Z","last_seen":"2026-08-09T06:50:30.06447Z","times_seen":70856,"resource_available":false,"data":null}},"time_used":166,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":166,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"waddyworks.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"waddyworks.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"waddyworks.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"waddyworks.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"waddyworks.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"unpkg.com/@lottiefiles/lottie-player@latest/dist/lottie-player.js","fqdn":"unpkg.com","domain":"unpkg.com","tld":"com"},"ip":{"addr":"104.18.1.22","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://waddyworks.com/","date":"2026-06-28T03:46:52.798Z","timestamp":1782618412798,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"unpkg.com","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Tue, 16 Jun 2026 08:46:51 GMT","end":"Mon, 14 Sep 2026 09:46:24 GMT"},"fingerprint":{"sha1":"BE:A8:55:77:27:FA:F2:90:06:36:65:E9:19:F6:FD:ED:5A:06:9D:D5","sha256":"F8:65:79:AE:79:B2:0F:45:A2:F1:17:30:50:86:B7:3D:E8:9A:27:7A:4A:87:7E:CD:39:A4:0E:EC:92:07:2F:94"}}},"request":{"raw":"GET /@lottiefiles/lottie-player@latest/dist/lottie-player.js HTTP/1.1\r\nHost: unpkg.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://waddyworks.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 302 \r\ndate: Sun, 28 Jun 2026 03:46:52 GMT\r\ncontent-type: text/plain;charset=UTF-8\r\ncontent-length: 71\r\nlocation: /@lottiefiles/lottie-player@2.0.12/dist/lottie-player.js\r\naccess-control-allow-origin: *\r\ncache-control: public, max-age=60, s-maxage=300\r\ncross-origin-resource-policy: cross-origin\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-content-type-options: nosniff\r\npriority: u=3,i=?0\r\nserver: cloudflare\r\ncf-ray: a129b4f81e9e4e4c-OSL\r\nalt-svc: h3=\":443\"; ma=86400\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"302","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":0,"size_decoded":0,"mime_type":"text/javascript; charset=utf-8","magic":"","md5":"d41d8cd98f00b204e9800998ecf8427e","sha1":"da39a3ee5e6b4b0d3255bfef95601890afd80709","sha256":"e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855","sha512":"cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e","ssdeep":"","tlshash":"","first_seen":"0001-01-01T00:00:00Z","last_seen":"2026-08-09T06:49:09.656184Z","times_seen":17795041,"resource_available":true,"data":null}},"time_used":32,"timings":{"blocked":-1,"dns":2,"connect":15,"send":0,"wait":14,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lottie.host/5d404df4-271d-465b-b3bf-5f35f6c4799b/LGPbQ2ftsy.json","fqdn":"lottie.host","domain":"lottie.host","tld":"host"},"ip":{"addr":"52.84.50.31","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://waddyworks.com/","date":"2026-06-28T03:46:53.622Z","timestamp":1782618413622,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lottie.host","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Fri, 10 Apr 2026 00:00:00 GMT","end":"Sat, 24 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"7A:0B:2F:B8:B0:CF:81:E2:62:2C:F2:C1:74:3A:AD:E1:04:FA:B4:2D","sha256":"85:C9:E9:F0:50:5B:02:EC:98:FC:DD:11:D7:97:BA:EA:AE:96:4E:9C:37:65:43:94:7D:D8:EF:A0:3B:AF:80:4B"}}},"request":{"raw":"GET /5d404df4-271d-465b-b3bf-5f35f6c4799b/LGPbQ2ftsy.json HTTP/1.1\r\nHost: lottie.host\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://waddyworks.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://waddyworks.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: application/json\r\ndate: Sun, 28 Jun 2026 03:44:36 GMT\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, PUT, POST\r\naccess-control-max-age: 1800\r\nlast-modified: Mon, 27 May 2024 06:36:25 GMT\r\ncontent-encoding: br\r\nx-amz-server-side-encryption: AES256\r\nx-amz-version-id: utSE.UnLfhCAc_uR8DdX7B5ZHmSJrKKk\r\nserver: AmazonS3\r\netag: W/\"cbeabb3d31cebb10f141915063deb741\"\r\nvary: Origin,Accept-Encoding\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 d85ed2d2deba50aaf4938eae2cbcf3ac.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P3\r\nx-amz-cf-id: WheRpKnTVqdcWWJ1SR1sFbNMrL1sZ9gOa9kDudKA69O9keh7UWcLPg==\r\nage: 138\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":5200,"size_decoded":1433,"mime_type":"application/json","magic":"JSON text data","md5":"cbeabb3d31cebb10f141915063deb741","sha1":"5f83e1173f26b903a3b4d9f4d3f1af65dcdb1053","sha256":"60a227536784de8593bb58ff6bfc605506f06305efd7ffe8cff5d05048f0a4d4","sha512":"7399c43d15597b4f2bcaf854aad4e262f5cc3b51984ea5f9e18f3f0ed84ac0215e2ad15d0ad24848a7b217974e0efa4e4ecb5f8be36b8c550fe7218fa6887313","ssdeep":"48:Y+w/QGAcniUBX5v3CF3mGBZJs9kcnF1dJBX5ekF3mGBZJb:TMQG3bLiqLFjJ7p","tlshash":"d3b1e3988a6042bddf252d82cb573095cfd18a825fc248fad5b7bc255fb15df4301b2a","first_seen":"2026-05-23T22:28:22.041736Z","last_seen":"2026-06-28T03:47:21.894085Z","times_seen":2,"resource_available":false,"data":null}},"time_used":55,"timings":{"blocked":28,"dns":0,"connect":0,"send":0,"wait":27,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"waddyworks.com/wp-content/plugins/elementor/assets/lib/animations/styles/bounceInUp.min.css?ver=4.1.4","fqdn":"waddyworks.com","domain":"waddyworks.com","tld":"com"},"ip":{"addr":"192.249.120.161","port":443,"asn":22611,"as":"INMOTION","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://waddyworks.com/","date":"2026-06-28T03:46:52.729Z","timestamp":1782618412729,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"waddyworks.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 23 Jun 2026 21:15:09 GMT","end":"Mon, 21 Sep 2026 21:15:08 GMT"},"fingerprint":{"sha1":"36:B3:8F:D5:4C:8F:D3:9A:A1:96:28:AF:1E:DD:B4:4C:A4:E3:76:39","sha256":"D0:18:E5:82:DB:FA:BD:AC:94:15:25:FE:BC:EA:EB:B8:A9:39:9A:89:98:DC:71:24:FE:95:4B:15:05:52:EF:C1"}}},"request":{"raw":"GET /wp-content/plugins/elementor/assets/lib/animations/styles/bounceInUp.min.css?ver=4.1.4 HTTP/1.1\r\nHost: waddyworks.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://waddyworks.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.31.1\r\ndate: Sun, 28 Jun 2026 03:46:52 GMT\r\ncontent-type: text/css\r\nvary: Accept-Encoding\r\nlast-modified: Wed, 24 Jun 2026 21:40:50 GMT\r\nx-proxy-cache: HIT\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx:1.31.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":340,"size_decoded":413,"mime_type":"text/css","magic":"ASCII text, with very long lines (340), with no line terminators","md5":"b0b2e5ff2a6ff61d6ee9103d45c5649c","sha1":"323777872fb2502ad14b40221f1e1941cebdc96c","sha256":"548c0496682c4450ea2af4c97b3bd4e4ac65e46b50973d1cf5ed3c11bab5794a","sha512":"9bdea2a148af0998d295ae39ff01082ff96c481ad8b8ad9d5110be948f064c598869a40cf66635aa02c8d6ccbffc9a6c4383483003b521f6e57e06f7821fd6ad","ssdeep":"","tlshash":"41e0200c9911045c10a59369d6c55fad563dcaa360310cde7346040b4f51ade33ae597","first_seen":"2024-10-13T03:39:22.114124Z","last_seen":"2026-08-08T13:40:53.739836Z","times_seen":2745,"resource_available":false,"data":null}},"time_used":309,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":309,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"waddyworks.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"waddyworks.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"waddyworks.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"waddyworks.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"waddyworks.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"waddyworks.com/wp-content/uploads/elementor/google-fonts/css/robotoslab.css?ver=1751394153","fqdn":"waddyworks.com","domain":"waddyworks.com","tld":"com"},"ip":{"addr":"192.249.120.161","port":443,"asn":22611,"as":"INMOTION","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://waddyworks.com/","date":"2026-06-28T03:46:52.736Z","timestamp":1782618412736,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"waddyworks.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 23 Jun 2026 21:15:09 GMT","end":"Mon, 21 Sep 2026 21:15:08 GMT"},"fingerprint":{"sha1":"36:B3:8F:D5:4C:8F:D3:9A:A1:96:28:AF:1E:DD:B4:4C:A4:E3:76:39","sha256":"D0:18:E5:82:DB:FA:BD:AC:94:15:25:FE:BC:EA:EB:B8:A9:39:9A:89:98:DC:71:24:FE:95:4B:15:05:52:EF:C1"}}},"request":{"raw":"GET /wp-content/uploads/elementor/google-fonts/css/robotoslab.css?ver=1751394153 HTTP/1.1\r\nHost: waddyworks.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://waddyworks.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.31.1\r\ndate: Sun, 28 Jun 2026 03:46:52 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 24 Jun 2026 21:38:19 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a3c4e4b-60f6\"\r\nexpires: Sun, 05 Jul 2026 03:46:52 GMT\r\ncache-control: max-age=604800, public, must-revalidate\r\nx-proxy-cache: STATIC/PATH\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx:1.31.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":24822,"size_decoded":1126,"mime_type":"text/css","magic":"ASCII text","md5":"5485e4ffc7764cf9cd4fe1200426278a","sha1":"5488aff62367ae36f178d92ca1915437daa6fc3f","sha256":"aa70df5c75fedfc963800d71bf5d5a9e7f834e565ede93601f25c8966f487ac8","sha512":"a5382c97853c488ef8ce739c1b94b308ecd088253480c30732fb2a0f92474380760b81e6567659b49d8dcf6eb9d6b322c9af7dba5b90b4510823d1873a8c3c54","ssdeep":"768:b1P1D1y1o1k1R14MgTNpyLvTgSOti+ql7/IdZlqocbsY03pNuPr30OSJmq+ZHjkO:59BGcof4MgTNpyLvTgSOti+ql7/IdZlk","tlshash":"69b2c9d0548a1502d7934cc573ca7f25a84d9049f480d6fe5ffd08dcaeebe2622a179e","first_seen":"2026-05-23T22:28:22.314079Z","last_seen":"2026-06-28T03:47:21.897604Z","times_seen":2,"resource_available":false,"data":null}},"time_used":305,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":305,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"waddyworks.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"waddyworks.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"waddyworks.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"waddyworks.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"waddyworks.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"lottie.host/109d0105-eaf7-4b9c-beb0-a5d8c1f1fc1e/V2Bvu8adT8.json","fqdn":"lottie.host","domain":"lottie.host","tld":"host"},"ip":{"addr":"52.84.50.31","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://waddyworks.com/","date":"2026-06-28T03:46:53.604Z","timestamp":1782618413604,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lottie.host","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Fri, 10 Apr 2026 00:00:00 GMT","end":"Sat, 24 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"7A:0B:2F:B8:B0:CF:81:E2:62:2C:F2:C1:74:3A:AD:E1:04:FA:B4:2D","sha256":"85:C9:E9:F0:50:5B:02:EC:98:FC:DD:11:D7:97:BA:EA:AE:96:4E:9C:37:65:43:94:7D:D8:EF:A0:3B:AF:80:4B"}}},"request":{"raw":"GET /109d0105-eaf7-4b9c-beb0-a5d8c1f1fc1e/V2Bvu8adT8.json HTTP/1.1\r\nHost: lottie.host\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://waddyworks.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://waddyworks.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: application/json\r\ndate: Sun, 28 Jun 2026 03:44:36 GMT\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, PUT, POST\r\naccess-control-max-age: 1800\r\nlast-modified: Mon, 27 May 2024 12:54:48 GMT\r\ncontent-encoding: br\r\nx-amz-server-side-encryption: AES256\r\nx-amz-version-id: MWi3TrQfpjKnVlruxx1RAwzkFZo5W3RM\r\nserver: AmazonS3\r\netag: W/\"628e5df2b545f73a11e8091cd2b1a280\"\r\nvary: Origin,Accept-Encoding\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 d85ed2d2deba50aaf4938eae2cbcf3ac.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P3\r\nx-amz-cf-id: v4DD-lOIpRGgHwhDXBaLzCCPpyIrK_CB-I2w5KOaOuNFA8-YFAuRQw==\r\nage: 138\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":3484,"size_decoded":1564,"mime_type":"application/json","magic":"JSON text data","md5":"628e5df2b545f73a11e8091cd2b1a280","sha1":"bdd0796fbd34385284bcff16230ec06d67f330ce","sha256":"742965f0d6cc43ab06fe9a6848831ee07d1ecf3d2af4da7dbd4bfa9b8484ef37","sha512":"54c2baf56a40d1df46296a4413df3794d54affeafc527734cfc3c2a8f1774df6e8c5875449e9dc6674d62940b457ad8a7168bc59b429ca45183e4007b8ecd4fc","ssdeep":"","tlshash":"c7715c8983b102acf74528c0db8334d4cfc585576fc619bdd9b99d188be5a6e2302e17","first_seen":"2026-05-23T22:28:22.170374Z","last_seen":"2026-06-28T03:47:21.90074Z","times_seen":2,"resource_available":false,"data":null}},"time_used":278,"timings":{"blocked":-1,"dns":48,"connect":1,"send":0,"wait":3,"receive":0,"ssl":223},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"waddyworks.com/wp-content/themes/progrisaas/css/lightgallery.css?ver=7.0","fqdn":"waddyworks.com","domain":"waddyworks.com","tld":"com"},"ip":{"addr":"192.249.120.161","port":443,"asn":22611,"as":"INMOTION","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://waddyworks.com/","date":"2026-06-28T03:46:52.712Z","timestamp":1782618412712,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"waddyworks.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 23 Jun 2026 21:15:09 GMT","end":"Mon, 21 Sep 2026 21:15:08 GMT"},"fingerprint":{"sha1":"36:B3:8F:D5:4C:8F:D3:9A:A1:96:28:AF:1E:DD:B4:4C:A4:E3:76:39","sha256":"D0:18:E5:82:DB:FA:BD:AC:94:15:25:FE:BC:EA:EB:B8:A9:39:9A:89:98:DC:71:24:FE:95:4B:15:05:52:EF:C1"}}},"request":{"raw":"GET /wp-content/themes/progrisaas/css/lightgallery.css?ver=7.0 HTTP/1.1\r\nHost: waddyworks.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://waddyworks.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.31.1\r\ndate: Sun, 28 Jun 2026 03:46:52 GMT\r\ncontent-type: text/css\r\nvary: Accept-Encoding\r\nlast-modified: Wed, 24 Jun 2026 21:38:19 GMT\r\nx-proxy-cache: HIT\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx:1.31.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":25809,"size_decoded":4579,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"a40ea16996d21adae43eafbd16680e11","sha1":"60dbe76f1a5222cc1335d71b4245299f0ecead20","sha256":"4aadec278b24b0c238dfee72a24d96e6e5241aa0c03e7b958edaac95b700bc49","sha512":"791f12024146985d32b4880b831701a373a0c2c4a8d5a659235482cf2cd08eb2afcf99519727860646bf55836b5bf81da66f19a3a443744df2f8da4de2ed1206","ssdeep":"384:84drVsFNFPF3FdKUISOHHlMlZqYo089FAXDdFCiey8s0+e/asNVF:bVZHZ7","tlshash":"63c2457d97071104723bcb1ca3da4b387b7e82a19a1304aab7db9447a3e7b5c4072de5","first_seen":"2023-04-13T14:29:49Z","last_seen":"2026-08-06T00:56:34.581563Z","times_seen":281,"resource_available":false,"data":null}},"time_used":167,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":167,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"waddyworks.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"waddyworks.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"waddyworks.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"waddyworks.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"waddyworks.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"waddyworks.com/wp-content/plugins/elementor/assets/css/widget-social-icons.min.css?ver=4.1.4","fqdn":"waddyworks.com","domain":"waddyworks.com","tld":"com"},"ip":{"addr":"192.249.120.161","port":443,"asn":22611,"as":"INMOTION","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://waddyworks.com/","date":"2026-06-28T03:46:52.773Z","timestamp":1782618412773,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"waddyworks.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 23 Jun 2026 21:15:09 GMT","end":"Mon, 21 Sep 2026 21:15:08 GMT"},"fingerprint":{"sha1":"36:B3:8F:D5:4C:8F:D3:9A:A1:96:28:AF:1E:DD:B4:4C:A4:E3:76:39","sha256":"D0:18:E5:82:DB:FA:BD:AC:94:15:25:FE:BC:EA:EB:B8:A9:39:9A:89:98:DC:71:24:FE:95:4B:15:05:52:EF:C1"}}},"request":{"raw":"GET /wp-content/plugins/elementor/assets/css/widget-social-icons.min.css?ver=4.1.4 HTTP/1.1\r\nHost: waddyworks.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://waddyworks.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.31.1\r\ndate: Sun, 28 Jun 2026 03:46:52 GMT\r\ncontent-type: text/css\r\nvary: Accept-Encoding\r\nlast-modified: Wed, 24 Jun 2026 21:40:50 GMT\r\nx-proxy-cache: HIT\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx:1.31.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":5110,"size_decoded":1315,"mime_type":"text/css","magic":"ASCII text, with very long lines (5110), with no line terminators","md5":"d026a17938c5380cc610572fdda43f40","sha1":"2b5df61e56b7fe1dfb88f1707d4b017909b02a75","sha256":"91079644ee1e76145b30c207470b56866770b0564f0fbf1373ab8b11d94f8c9f","sha512":"00dd387f3726c15e71f2f7379c4fd3bdef41c2d81d73f22f3212991b4d18d4b663ae89906722fd9e188606c1061f3f8b5472deee2cd514680e64a29f8193cd66","ssdeep":"48:FDoWozmcbWsiYPt3U/vjfQIeyiZ8Fu2ifnFNZP1NsXUyG9eoL:5oz/WkBUHjfQL7aFu2if3Jf9HL","tlshash":"e5b17651be4f9586321f002a0993f309d05a12c5dc8c6f78f856b16e59b6fe43a73eb2","first_seen":"2025-02-28T14:24:31.329664Z","last_seen":"2026-08-09T06:50:30.038518Z","times_seen":77521,"resource_available":true,"data":null}},"time_used":278,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":278,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"waddyworks.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"waddyworks.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"waddyworks.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"waddyworks.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"waddyworks.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"waddyworks.com/wp-content/themes/progrisaas/js/elementor-header.js?ver=20210110","fqdn":"waddyworks.com","domain":"waddyworks.com","tld":"com"},"ip":{"addr":"192.249.120.161","port":443,"asn":22611,"as":"INMOTION","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://waddyworks.com/","date":"2026-06-28T03:46:52.785Z","timestamp":1782618412785,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"waddyworks.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 23 Jun 2026 21:15:09 GMT","end":"Mon, 21 Sep 2026 21:15:08 GMT"},"fingerprint":{"sha1":"36:B3:8F:D5:4C:8F:D3:9A:A1:96:28:AF:1E:DD:B4:4C:A4:E3:76:39","sha256":"D0:18:E5:82:DB:FA:BD:AC:94:15:25:FE:BC:EA:EB:B8:A9:39:9A:89:98:DC:71:24:FE:95:4B:15:05:52:EF:C1"}}},"request":{"raw":"GET /wp-content/themes/progrisaas/js/elementor-header.js?ver=20210110 HTTP/1.1\r\nHost: waddyworks.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://waddyworks.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.31.1\r\ndate: Sun, 28 Jun 2026 03:46:52 GMT\r\ncontent-type: text/javascript\r\nvary: Accept-Encoding\r\nlast-modified: Wed, 24 Jun 2026 21:38:19 GMT\r\nx-proxy-cache: HIT\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx:1.31.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":7086,"size_decoded":1772,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (315), with CRLF line terminators","md5":"b44ae86998c2f81ed5fade7300c1529f","sha1":"e5b13f1a61f8a54a32b8157f32863919095e4fee","sha256":"eee9ef28384ddcfd04866d66a257160c453ab7256679aff5f3f0b3cad329f66f","sha512":"1c55c7ccab8ddff3e62d5dc11c22bfb76c8e96a72fe927b01d203e46869c0bf465fb121847e6a5fe959dff54edc11bbad2c1ca12ca415e65eb611cab2c31a385","ssdeep":"96:LkAEBbpHYkPBBI0BNi5qF6FR0dleZ/3ONwAkYL54hrp2825U2iW2pM:7SJYs+Ai5nADOC","tlshash":"66e1ce06bcd5a2b1513ff22b5bb7e885fb61849f82064360babc52701f3460471dfa9d","first_seen":"2026-05-23T22:28:22.182112Z","last_seen":"2026-06-28T03:47:21.905082Z","times_seen":2,"resource_available":true,"data":null}},"time_used":420,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":420,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"waddyworks.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"waddyworks.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"waddyworks.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"waddyworks.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"waddyworks.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"waddyworks.com/wp-content/themes/progrisaas/fonts/Flaticon.woff2","fqdn":"waddyworks.com","domain":"waddyworks.com","tld":"com"},"ip":{"addr":"192.249.120.161","port":443,"asn":22611,"as":"INMOTION","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://waddyworks.com/","date":"2026-06-28T03:46:53.508Z","timestamp":1782618413508,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"waddyworks.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 23 Jun 2026 21:15:09 GMT","end":"Mon, 21 Sep 2026 21:15:08 GMT"},"fingerprint":{"sha1":"36:B3:8F:D5:4C:8F:D3:9A:A1:96:28:AF:1E:DD:B4:4C:A4:E3:76:39","sha256":"D0:18:E5:82:DB:FA:BD:AC:94:15:25:FE:BC:EA:EB:B8:A9:39:9A:89:98:DC:71:24:FE:95:4B:15:05:52:EF:C1"}}},"request":{"raw":"GET /wp-content/themes/progrisaas/fonts/Flaticon.woff2 HTTP/1.1\r\nHost: waddyworks.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://waddyworks.com/wp-content/themes/progrisaas/css/flaticon.css?ver=7.0\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.31.1\r\ndate: Sun, 28 Jun 2026 03:46:53 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 3292\r\nlast-modified: Wed, 24 Jun 2026 21:38:19 GMT\r\nx-proxy-cache: HIT\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx:1.31.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3292,"size_decoded":3522,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 3292, version 1.0","md5":"c6f18cbc633dca5b0059f1a09e29d340","sha1":"bfaebc4054970ab50877d62d34e33f351df5b894","sha256":"cf2805cc1dd52cf783ef12346ed43856b3f0aef378b3c5a9aef2647f30c031e2","sha512":"7ef4f7a3728797957b5fc1a629d061f280e0e1ed805d2fe2f8b66ee83fa9e8b59a53299826ca0409fd758f9082ab5b465e10000a0d7a346adce338f114a4745f","ssdeep":"","tlshash":"1a615c5990a1c76f8d671030f75d50b37034fe15bd16f987acd4e045d2b2c71a4dd159","first_seen":"2023-09-05T15:56:03Z","last_seen":"2026-08-05T16:56:15.418815Z","times_seen":24,"resource_available":false,"data":null}},"time_used":202,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":202,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"waddyworks.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"waddyworks.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"waddyworks.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"waddyworks.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"waddyworks.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"lottie.host/5d404df4-271d-465b-b3bf-5f35f6c4799b/LGPbQ2ftsy.json","fqdn":"lottie.host","domain":"lottie.host","tld":"host"},"ip":{"addr":"52.84.50.31","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://waddyworks.com/","date":"2026-06-28T03:46:53.637Z","timestamp":1782618413637,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lottie.host","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Fri, 10 Apr 2026 00:00:00 GMT","end":"Sat, 24 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"7A:0B:2F:B8:B0:CF:81:E2:62:2C:F2:C1:74:3A:AD:E1:04:FA:B4:2D","sha256":"85:C9:E9:F0:50:5B:02:EC:98:FC:DD:11:D7:97:BA:EA:AE:96:4E:9C:37:65:43:94:7D:D8:EF:A0:3B:AF:80:4B"}}},"request":{"raw":"GET /5d404df4-271d-465b-b3bf-5f35f6c4799b/LGPbQ2ftsy.json HTTP/1.1\r\nHost: lottie.host\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://waddyworks.com/\r\nOrigin: https://waddyworks.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: application/json\r\ndate: Sun, 28 Jun 2026 03:44:36 GMT\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, PUT, POST\r\naccess-control-max-age: 1800\r\nlast-modified: Mon, 27 May 2024 06:36:25 GMT\r\ncontent-encoding: br\r\nx-amz-server-side-encryption: AES256\r\nx-amz-version-id: utSE.UnLfhCAc_uR8DdX7B5ZHmSJrKKk\r\nserver: AmazonS3\r\netag: W/\"cbeabb3d31cebb10f141915063deb741\"\r\nvary: Origin,Accept-Encoding\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 d85ed2d2deba50aaf4938eae2cbcf3ac.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P3\r\nx-amz-cf-id: _Qwv3xOflvyghDavyfLB56iXhJ-q0AFwrdn-vp4AORrK83GKprMzSQ==\r\nage: 138\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":5200,"size_decoded":1433,"mime_type":"application/json","magic":"JSON text data","md5":"cbeabb3d31cebb10f141915063deb741","sha1":"5f83e1173f26b903a3b4d9f4d3f1af65dcdb1053","sha256":"60a227536784de8593bb58ff6bfc605506f06305efd7ffe8cff5d05048f0a4d4","sha512":"7399c43d15597b4f2bcaf854aad4e262f5cc3b51984ea5f9e18f3f0ed84ac0215e2ad15d0ad24848a7b217974e0efa4e4ecb5f8be36b8c550fe7218fa6887313","ssdeep":"48:Y+w/QGAcniUBX5v3CF3mGBZJs9kcnF1dJBX5ekF3mGBZJb:TMQG3bLiqLFjJ7p","tlshash":"d3b1e3988a6042bddf252d82cb573095cfd18a825fc248fad5b7bc255fb15df4301b2a","first_seen":"2026-05-23T22:28:22.041736Z","last_seen":"2026-06-28T03:47:21.894085Z","times_seen":2,"resource_available":false,"data":null}},"time_used":49,"timings":{"blocked":23,"dns":0,"connect":0,"send":0,"wait":26,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"waddyworks.com/wp-content/uploads/2024/05/65da2485ff5fcdc97cd23ac3_dots.svg","fqdn":"waddyworks.com","domain":"waddyworks.com","tld":"com"},"ip":{"addr":"192.249.120.161","port":443,"asn":22611,"as":"INMOTION","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://waddyworks.com/","date":"2026-06-28T03:46:53.448Z","timestamp":1782618413448,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"waddyworks.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 23 Jun 2026 21:15:09 GMT","end":"Mon, 21 Sep 2026 21:15:08 GMT"},"fingerprint":{"sha1":"36:B3:8F:D5:4C:8F:D3:9A:A1:96:28:AF:1E:DD:B4:4C:A4:E3:76:39","sha256":"D0:18:E5:82:DB:FA:BD:AC:94:15:25:FE:BC:EA:EB:B8:A9:39:9A:89:98:DC:71:24:FE:95:4B:15:05:52:EF:C1"}}},"request":{"raw":"GET /wp-content/uploads/2024/05/65da2485ff5fcdc97cd23ac3_dots.svg HTTP/1.1\r\nHost: waddyworks.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://waddyworks.com/wp-content/uploads/elementor/css/post-7262.css?ver=1782362191\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.31.1\r\ndate: Sun, 28 Jun 2026 03:46:53 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 99549\r\nlast-modified: Wed, 24 Jun 2026 21:38:19 GMT\r\nvary: Accept-Encoding\r\netag: \"6a3c4e4b-184dd\"\r\nexpires: Sun, 05 Jul 2026 03:46:53 GMT\r\ncache-control: max-age=604800, public, must-revalidate\r\nx-proxy-cache: STATIC/PATH\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx:1.31.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":99549,"size_decoded":99934,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"18ca824a66fb6f8970e2dfe07b518d0f","sha1":"6ed0a2492abe716a10c23e6d882aff223ee6fc26","sha256":"6efbfdce3db9a399acb4fb66521da5bc725bcfc15acdefc528af3fb2d640dcd3","sha512":"010afc558ac6e2f42c3bbabd11f6970e3ab021fb6de976082dbd8ede6f77c8157cb64c3a4eeda403fb5856c536170e8c145502073c8145f67a5bfdb01db1d8ee","ssdeep":"384:jo4PBkvok6GSl/r98zXUDJFN6Y/2BbscYaVButKf86SOFzwRacfz79uWV2F2N7In:ju","tlshash":"2da3f8f8e15cbe564a12820ee12f7691b05b0ccc4792836824726f27f505af73bad7d6","first_seen":"2026-05-23T22:28:22.075455Z","last_seen":"2026-06-28T03:47:21.908153Z","times_seen":2,"resource_available":false,"data":null}},"time_used":174,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":171,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"waddyworks.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"waddyworks.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"waddyworks.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"waddyworks.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"waddyworks.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"waddyworks.com/wp-content/plugins/elementor/assets/lib/animations/styles/fadeInRight.min.css?ver=4.1.4","fqdn":"waddyworks.com","domain":"waddyworks.com","tld":"com"},"ip":{"addr":"192.249.120.161","port":443,"asn":22611,"as":"INMOTION","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://waddyworks.com/","date":"2026-06-28T03:46:52.724Z","timestamp":1782618412724,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"waddyworks.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 23 Jun 2026 21:15:09 GMT","end":"Mon, 21 Sep 2026 21:15:08 GMT"},"fingerprint":{"sha1":"36:B3:8F:D5:4C:8F:D3:9A:A1:96:28:AF:1E:DD:B4:4C:A4:E3:76:39","sha256":"D0:18:E5:82:DB:FA:BD:AC:94:15:25:FE:BC:EA:EB:B8:A9:39:9A:89:98:DC:71:24:FE:95:4B:15:05:52:EF:C1"}}},"request":{"raw":"GET /wp-content/plugins/elementor/assets/lib/animations/styles/fadeInRight.min.css?ver=4.1.4 HTTP/1.1\r\nHost: waddyworks.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://waddyworks.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.31.1\r\ndate: Sun, 28 Jun 2026 03:46:52 GMT\r\ncontent-type: text/css\r\nvary: Accept-Encoding\r\nlast-modified: Wed, 24 Jun 2026 21:40:50 GMT\r\nx-proxy-cache: HIT\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx:1.31.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":139,"size_decoded":335,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"3275f888e6b23c5a6e2b79dc95663ae2","sha1":"429ec7db5d25b8312bd88150c638293b1b3fd309","sha256":"80a88126612557f5c61f6cc39ca0f8770127d55b477ed38933ebbb2f385ea214","sha512":"ee49abbe2e237946f865047d31c2d02b67bd02a65a6afa3ba23a9c9263fcddf05c4384c2b71ddf4b154bb03de05f162c51691309e1ba05ef00d1d4e4a8cf98f8","ssdeep":"","tlshash":"c8c09b988964010701b115d394e47551d435c7f5e4f32dff71445d464d97dee2385153","first_seen":"2024-09-10T20:44:21Z","last_seen":"2026-08-09T04:55:08.272882Z","times_seen":26015,"resource_available":false,"data":null}},"time_used":314,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":314,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"waddyworks.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"waddyworks.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"waddyworks.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"waddyworks.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"waddyworks.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"waddyworks.com/wp-content/plugins/elementor/assets/lib/animations/styles/fadeIn.min.css?ver=4.1.4","fqdn":"waddyworks.com","domain":"waddyworks.com","tld":"com"},"ip":{"addr":"192.249.120.161","port":443,"asn":22611,"as":"INMOTION","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://waddyworks.com/","date":"2026-06-28T03:46:52.732Z","timestamp":1782618412732,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"waddyworks.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 23 Jun 2026 21:15:09 GMT","end":"Mon, 21 Sep 2026 21:15:08 GMT"},"fingerprint":{"sha1":"36:B3:8F:D5:4C:8F:D3:9A:A1:96:28:AF:1E:DD:B4:4C:A4:E3:76:39","sha256":"D0:18:E5:82:DB:FA:BD:AC:94:15:25:FE:BC:EA:EB:B8:A9:39:9A:89:98:DC:71:24:FE:95:4B:15:05:52:EF:C1"}}},"request":{"raw":"GET /wp-content/plugins/elementor/assets/lib/animations/styles/fadeIn.min.css?ver=4.1.4 HTTP/1.1\r\nHost: waddyworks.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://waddyworks.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.31.1\r\ndate: Sun, 28 Jun 2026 03:46:52 GMT\r\ncontent-type: text/css\r\nvary: Accept-Encoding\r\nlast-modified: Wed, 24 Jun 2026 21:40:50 GMT\r\nx-proxy-cache: HIT\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx:1.31.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":77,"size_decoded":299,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"a006a019fa982ad49f20d7bbeb9523db","sha1":"6a547c9bbab84d6cdba37f24c9926065ef76abc3","sha256":"d9c370831c74b1850d70f5b1c99453d6cda21e5099428a3f21c43bd96c3acb5d","sha512":"4f0ffd920100618ad627d6b3c2dc95ff6fc362db3e358b74331136e65d49063e8fa38b6d2f25f0d0ea01ce47ac1a299f2b48667899892e961a874166d6d93495","ssdeep":"","tlshash":"d3a0029dcb84566742eb05f33818e9419a324cf5f8f332e964e8488886ddb9c2742555","first_seen":"2024-09-10T20:44:21Z","last_seen":"2026-08-09T06:08:11.36343Z","times_seen":49436,"resource_available":false,"data":null}},"time_used":307,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":307,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"waddyworks.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"waddyworks.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"waddyworks.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"waddyworks.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"waddyworks.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"waddyworks.com/wp-content/themes/progrisaas/js/lightgallery-all.min.js?ver=20210110","fqdn":"waddyworks.com","domain":"waddyworks.com","tld":"com"},"ip":{"addr":"192.249.120.161","port":443,"asn":22611,"as":"INMOTION","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://waddyworks.com/","date":"2026-06-28T03:46:52.777Z","timestamp":1782618412777,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"waddyworks.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 23 Jun 2026 21:15:09 GMT","end":"Mon, 21 Sep 2026 21:15:08 GMT"},"fingerprint":{"sha1":"36:B3:8F:D5:4C:8F:D3:9A:A1:96:28:AF:1E:DD:B4:4C:A4:E3:76:39","sha256":"D0:18:E5:82:DB:FA:BD:AC:94:15:25:FE:BC:EA:EB:B8:A9:39:9A:89:98:DC:71:24:FE:95:4B:15:05:52:EF:C1"}}},"request":{"raw":"GET /wp-content/themes/progrisaas/js/lightgallery-all.min.js?ver=20210110 HTTP/1.1\r\nHost: waddyworks.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://waddyworks.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.31.1\r\ndate: Sun, 28 Jun 2026 03:46:52 GMT\r\ncontent-type: text/javascript\r\nvary: Accept-Encoding\r\nlast-modified: Wed, 24 Jun 2026 21:38:19 GMT\r\nx-proxy-cache: HIT\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx:1.31.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":50941,"size_decoded":13140,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (31952), with CRLF line terminators","md5":"818d80543b146e46f9e37928e8c4cc25","sha1":"ae37b1d56043fe7e482f39d223cf85f7b8c1b569","sha256":"a52fcfb97c389e4b58ba2c2f2062161af4e04e513568e48fc7fb2e2955ae5ec9","sha512":"aa8f0d9872c3ac893bcea98c961af1d55c2202cab724b92f71f663f3e1ba773a7e253d7c75376572bcbb6342f544b4a095dd17c4c9ef1ebecfea67d01887ec74","ssdeep":"768:4dJeyyOOvejjy1ZP1UzEZj5zMGG0Gzh38dDovJheMiVj1kuu8+nCuo3YFuAN7W6e:43yOPGc32bMiVWuz+nCuoO14txbf","tlshash":"3a33b81934381342172b16d5a01baa0e31b7342ff506846e7cbdc4f67ab6cce355eaad","first_seen":"2023-03-08T00:14:36Z","last_seen":"2026-08-09T04:33:59.988198Z","times_seen":418,"resource_available":true,"data":null}},"time_used":275,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":275,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"waddyworks.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"waddyworks.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"waddyworks.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"waddyworks.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"waddyworks.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"waddyworks.com/wp-content/themes/progrisaas/js/particles.min.js?ver=20180910","fqdn":"waddyworks.com","domain":"waddyworks.com","tld":"com"},"ip":{"addr":"192.249.120.161","port":443,"asn":22611,"as":"INMOTION","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://waddyworks.com/","date":"2026-06-28T03:46:52.782Z","timestamp":1782618412782,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"waddyworks.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 23 Jun 2026 21:15:09 GMT","end":"Mon, 21 Sep 2026 21:15:08 GMT"},"fingerprint":{"sha1":"36:B3:8F:D5:4C:8F:D3:9A:A1:96:28:AF:1E:DD:B4:4C:A4:E3:76:39","sha256":"D0:18:E5:82:DB:FA:BD:AC:94:15:25:FE:BC:EA:EB:B8:A9:39:9A:89:98:DC:71:24:FE:95:4B:15:05:52:EF:C1"}}},"request":{"raw":"GET /wp-content/themes/progrisaas/js/particles.min.js?ver=20180910 HTTP/1.1\r\nHost: waddyworks.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://waddyworks.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.31.1\r\ndate: Sun, 28 Jun 2026 03:46:52 GMT\r\ncontent-type: text/javascript\r\nvary: Accept-Encoding\r\nlast-modified: Wed, 24 Jun 2026 21:38:19 GMT\r\nx-proxy-cache: HIT\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx:1.31.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":23372,"size_decoded":6430,"mime_type":"text/javascript","magic":"ASCII text, with very long lines (23002), with CRLF line terminators","md5":"08bd8ed926fa216a54b076590a459e67","sha1":"b4d9a963b9200cc77ceaa1bf4a12537a29c0626a","sha256":"e143ea82cbb391479838962ed3a39a9f2319679ddf33e689217d26b0e206d724","sha512":"7f5bf533e4151c0a84bc10909b1ea78ccd16d9f0cff336108e61402ef94df6389972a4ea01926b981cb79747d57512ca6020271b4f5111e72f4b1102b8f2dd73","ssdeep":"384:FkfJtGvWjT6uYvqhCz8wSEHESxtVAFPQcYpeib+9rOEKXWd/:FC7T6uYvn8wRxwyryVOEKXW5","tlshash":"42a2934d23f73e77339ab2e05be9d122c774a4d1399b04b0f93c667da52549201ee7a0","first_seen":"2023-03-07T01:17:29Z","last_seen":"2026-08-08T09:50:16.975879Z","times_seen":2494,"resource_available":true,"data":null}},"time_used":419,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":419,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"waddyworks.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"waddyworks.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"waddyworks.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"waddyworks.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"waddyworks.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"cdn.jsdelivr.net/npm/jquery.marquee@1.6.0/jquery.marquee.min.js","fqdn":"cdn.jsdelivr.net","domain":"jsdelivr.net","tld":"net"},"ip":{"addr":"104.17.208.5","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://waddyworks.com/","date":"2026-06-28T03:46:52.799Z","timestamp":1782618412799,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.jsdelivr.net","organization":""},"issuer":{"commonName":"Sectigo Public Server Authentication CA DV R36","organization":"Sectigo Limited"},"validity":{"start":"Wed, 22 Apr 2026 00:00:00 GMT","end":"Fri, 06 Nov 2026 23:59:59 GMT"},"fingerprint":{"sha1":"65:D9:C4:7E:04:4C:FD:DD:60:E0:CC:18:B5:B7:01:68:B4:2D:C7:34","sha256":"50:6C:A4:F6:ED:74:C7:E9:68:DB:32:56:5A:68:4C:98:ED:01:28:36:F8:13:BA:CC:19:A7:FD:7A:0A:6E:E7:D4"}}},"request":{"raw":"GET /npm/jquery.marquee@1.6.0/jquery.marquee.min.js HTTP/1.1\r\nHost: cdn.jsdelivr.net\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://waddyworks.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ndate: Sun, 28 Jun 2026 03:46:52 GMT\r\ncontent-type: application/javascript; charset=utf-8\r\ncontent-length: 2320\r\naccess-control-allow-origin: *\r\naccess-control-expose-headers: *\r\ntiming-allow-origin: *\r\ncache-control: public, max-age=31536000, s-maxage=31536000, immutable\r\ncross-origin-resource-policy: cross-origin\r\nx-content-type-options: nosniff\r\nstrict-transport-security: max-age=31536000; includeSubDomains; preload\r\nx-jsd-version: 1.6.0\r\nx-jsd-version-type: version\r\netag: W/\"2345-x4Nvs+th+W5si8A0TXfPVhh5gxU\"\r\ncontent-encoding: br\r\naccept-ranges: bytes\r\nx-served-by: cache-fra-etou8220158-FRA, cache-ber1080053-BER\r\nx-cache: HIT, HIT\r\nvary: Accept-Encoding\r\nalt-svc: h3=\":443\"; ma=86400\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.01,\"max_age\":604800}\r\nage: 3622214\r\ncf-cache-status: HIT\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=ffYbc4w25lQTRK5t%2F25VZnDdyPdZDXzkvLoNcQpm6WU5vHD0VdtBaPdKk40PC48to57yx2AEzk2UZyjXWVkjAO3Wz%2BfqnTx78SutUPjONLw9I2yQoMl3fABcW44gllchnsE%3D\"}]}\r\nserver: cloudflare\r\ncf-ray: a129b4f81a051525-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":9029,"size_decoded":3459,"mime_type":"application/javascript; charset=utf-8","magic":"JavaScript source, ASCII text, with very long lines (9029), with no line terminators","md5":"38cf1efd3af828942692f619be330bcd","sha1":"c7836fb3eb61f96e6c8bc0344d77cf5618798315","sha256":"feade23a47f6041e6d1008885642dd7ab7cc4f12d94b0c7191c9cf8ca55df97d","sha512":"24726ffcbe3cb351e8776e22488d2ef5b705fc99548be61ac6588a75b6ac9f0fd4d4ba7dc715a4699dcee4eb903cc915c0e557785905e27e35efaa2e03a3f2dc","ssdeep":"96:v7zVMfcftw6RO0c4xwW5uO/kFzFYejD4CHDvDAFWa3QMy9mtlHxHf2KAHfqWVHfT:vX6fcf5P5tkFz1BaWoROjiSFx/7T","tlshash":"311221d2aa613450c7db13bfd44f46864e349932251e4d7fb472c099ae60b08ab97f3a","first_seen":"2023-03-07T12:21:25Z","last_seen":"2026-08-09T03:17:34.379798Z","times_seen":4533,"resource_available":true,"data":null}},"time_used":23,"timings":{"blocked":-1,"dns":3,"connect":1,"send":0,"wait":7,"receive":0,"ssl":12},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lottie.host/f6dfd03d-afc0-4b03-83fa-f5ba2ea23a75/UHejs3V0Im.json","fqdn":"lottie.host","domain":"lottie.host","tld":"host"},"ip":{"addr":"52.84.50.31","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://waddyworks.com/","date":"2026-06-28T03:46:53.631Z","timestamp":1782618413631,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lottie.host","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Fri, 10 Apr 2026 00:00:00 GMT","end":"Sat, 24 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"7A:0B:2F:B8:B0:CF:81:E2:62:2C:F2:C1:74:3A:AD:E1:04:FA:B4:2D","sha256":"85:C9:E9:F0:50:5B:02:EC:98:FC:DD:11:D7:97:BA:EA:AE:96:4E:9C:37:65:43:94:7D:D8:EF:A0:3B:AF:80:4B"}}},"request":{"raw":"GET /f6dfd03d-afc0-4b03-83fa-f5ba2ea23a75/UHejs3V0Im.json HTTP/1.1\r\nHost: lottie.host\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://waddyworks.com/\r\nOrigin: https://waddyworks.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: application/json\r\ndate: Sun, 28 Jun 2026 03:44:36 GMT\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, PUT, POST\r\naccess-control-max-age: 1800\r\nlast-modified: Mon, 27 May 2024 06:04:23 GMT\r\ncontent-encoding: br\r\nx-amz-server-side-encryption: AES256\r\nx-amz-version-id: e5gM5YxDSX.x_W5ShLgKqSgqO8fWXsmE\r\nserver: AmazonS3\r\netag: W/\"ba5bca211c7010e9e3cdf94b1fac785e\"\r\nvary: Origin,Accept-Encoding\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 d85ed2d2deba50aaf4938eae2cbcf3ac.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P3\r\nx-amz-cf-id: glr8TL20KHWHnYUYQhBXEwKQ42KuYBurMCAYPozzYx8NdiEevOr2eg==\r\nage: 138\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":2163,"size_decoded":1301,"mime_type":"application/json","magic":"JSON text data","md5":"ba5bca211c7010e9e3cdf94b1fac785e","sha1":"6f42816befab00a33476357cb3c9795cdbf42c2c","sha256":"b18b204507ef240707fb708f638c33ae8a0e6ae2a050ec265ca6fb27c4f311c1","sha512":"8dd899fdb72189337e3401d472b8bf184e77705a96aa75d000d8a603ba61c4dd5874ef3114f6703e9094ab71eeb65776245c070c824306e4ef3fe9fd4a664b74","ssdeep":"","tlshash":"5a41051e0e75428dee14ae82cf4330948be19b417fca44d9eef75c195f6218e5302e7a","first_seen":"2026-05-23T22:28:22.078032Z","last_seen":"2026-06-28T03:47:21.914682Z","times_seen":2,"resource_available":false,"data":null}},"time_used":50,"timings":{"blocked":23,"dns":0,"connect":0,"send":0,"wait":27,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lottie.host/8eeeee9c-3677-4693-930f-5ceec51e2872/aP9I7KDvBU.json","fqdn":"lottie.host","domain":"lottie.host","tld":"host"},"ip":{"addr":"52.84.50.31","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://waddyworks.com/","date":"2026-06-28T03:46:53.640Z","timestamp":1782618413640,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lottie.host","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Fri, 10 Apr 2026 00:00:00 GMT","end":"Sat, 24 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"7A:0B:2F:B8:B0:CF:81:E2:62:2C:F2:C1:74:3A:AD:E1:04:FA:B4:2D","sha256":"85:C9:E9:F0:50:5B:02:EC:98:FC:DD:11:D7:97:BA:EA:AE:96:4E:9C:37:65:43:94:7D:D8:EF:A0:3B:AF:80:4B"}}},"request":{"raw":"GET /8eeeee9c-3677-4693-930f-5ceec51e2872/aP9I7KDvBU.json HTTP/1.1\r\nHost: lottie.host\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://waddyworks.com/\r\nOrigin: https://waddyworks.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: application/json\r\ndate: Sun, 28 Jun 2026 03:44:36 GMT\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, PUT, POST\r\naccess-control-max-age: 1800\r\nlast-modified: Mon, 27 May 2024 06:38:00 GMT\r\ncontent-encoding: br\r\nx-amz-server-side-encryption: AES256\r\nx-amz-version-id: 6bzZRyCh8tQ5aHtHC6b.Lta5JuN5zPyf\r\nserver: AmazonS3\r\netag: W/\"c8a211612997f0703333dfe33db7a1be\"\r\nvary: Origin,Accept-Encoding\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 d85ed2d2deba50aaf4938eae2cbcf3ac.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P3\r\nx-amz-cf-id: hY1udRxmaK9lfRCGCxLm080_BcTlG2KYPn2om9FWcYvDcVL-H7KwgQ==\r\nage: 138\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":18322,"size_decoded":3550,"mime_type":"application/json","magic":"JSON text data","md5":"c8a211612997f0703333dfe33db7a1be","sha1":"04d1a9ddb77c5304dc836e0c97eeb797679c9999","sha256":"682787021ebc8bf8b9d0bc724ad1f404f706a0fa2ad6a4110dc619d0e1ad76a7","sha512":"9630701c1e219b13267137812573ae9e04123fbe7644dd4605650fcbd75d10726d9feb33e11c56eebebb9aa7af7f330ceb225cf66b84a0f742cffe7f6d0ef855","ssdeep":"96:uQG1wY20wYQL9LwEe+hINQL9Lw4jxHSC5d6doTT1a9jHSC7AMAGST2EkTcHSC7Nt:uQH70VRi64jBBPOyGST2irRTd/C41b5","tlshash":"e3828b980f7142ecfb145950cf4370e9cfe488896fc145daeabb5c249ea1a5e2302e1b","first_seen":"2026-05-23T22:28:22.104705Z","last_seen":"2026-06-28T03:47:21.879826Z","times_seen":2,"resource_available":false,"data":null}},"time_used":50,"timings":{"blocked":23,"dns":0,"connect":0,"send":0,"wait":27,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"waddyworks.com/wp-content/plugins/elementor/assets/lib/animations/styles/rotateIn.min.css?ver=4.1.4","fqdn":"waddyworks.com","domain":"waddyworks.com","tld":"com"},"ip":{"addr":"192.249.120.161","port":443,"asn":22611,"as":"INMOTION","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://waddyworks.com/","date":"2026-06-28T03:46:52.771Z","timestamp":1782618412771,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"waddyworks.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 23 Jun 2026 21:15:09 GMT","end":"Mon, 21 Sep 2026 21:15:08 GMT"},"fingerprint":{"sha1":"36:B3:8F:D5:4C:8F:D3:9A:A1:96:28:AF:1E:DD:B4:4C:A4:E3:76:39","sha256":"D0:18:E5:82:DB:FA:BD:AC:94:15:25:FE:BC:EA:EB:B8:A9:39:9A:89:98:DC:71:24:FE:95:4B:15:05:52:EF:C1"}}},"request":{"raw":"GET /wp-content/plugins/elementor/assets/lib/animations/styles/rotateIn.min.css?ver=4.1.4 HTTP/1.1\r\nHost: waddyworks.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://waddyworks.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.31.1\r\ndate: Sun, 28 Jun 2026 03:46:52 GMT\r\ncontent-type: text/css\r\nvary: Accept-Encoding\r\nlast-modified: Wed, 24 Jun 2026 21:40:50 GMT\r\nx-proxy-cache: HIT\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx:1.31.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":180,"size_decoded":344,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"be55969c7d604c02245fe8d742c59bd5","sha1":"8cf0a16973a7dcbe8c3fe94b4b8d36a57fa2f78c","sha256":"29663c77f1829c89bfbf842eee76b2ca52fd6c0dcd30bede60e99b3db8b83801","sha512":"076534606c07e70b82286caa5b38427958a3fbed1d7ece283763800e3da07a10f9403c9f37c5129201181519402c2f1c0662cb24e9efbf662ceba593ee8f9c86","ssdeep":"","tlshash":"aac012ae4e9140514ad51a6092d84e28c625cb972cb978ca239541cac7c67ff01ea307","first_seen":"2024-09-28T07:45:06.934466Z","last_seen":"2026-08-06T11:02:00.649017Z","times_seen":935,"resource_available":false,"data":null}},"time_used":280,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":280,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"waddyworks.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"waddyworks.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"waddyworks.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"waddyworks.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"waddyworks.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"lottie.host/7401522f-2d8b-4049-ad18-eb0edb6af224/CE9lFrNlEH.json","fqdn":"lottie.host","domain":"lottie.host","tld":"host"},"ip":{"addr":"52.84.50.31","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://waddyworks.com/","date":"2026-06-28T03:46:53.599Z","timestamp":1782618413599,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lottie.host","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Fri, 10 Apr 2026 00:00:00 GMT","end":"Sat, 24 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"7A:0B:2F:B8:B0:CF:81:E2:62:2C:F2:C1:74:3A:AD:E1:04:FA:B4:2D","sha256":"85:C9:E9:F0:50:5B:02:EC:98:FC:DD:11:D7:97:BA:EA:AE:96:4E:9C:37:65:43:94:7D:D8:EF:A0:3B:AF:80:4B"}}},"request":{"raw":"GET /7401522f-2d8b-4049-ad18-eb0edb6af224/CE9lFrNlEH.json HTTP/1.1\r\nHost: lottie.host\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://waddyworks.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://waddyworks.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: application/json\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, PUT, POST\r\naccess-control-max-age: 1800\r\nlast-modified: Wed, 21 Jun 2023 11:42:09 GMT\r\ncontent-encoding: br\r\nx-amz-server-side-encryption: AES256\r\nx-amz-version-id: .4C26IQCCg.vsF.jI0pWsqEX.R6VPBTw\r\nserver: AmazonS3\r\ndate: Sun, 28 Jun 2026 03:46:54 GMT\r\netag: W/\"da5b696132a7002af479a0b83755072d\"\r\nvary: Origin,Accept-Encoding\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 d85ed2d2deba50aaf4938eae2cbcf3ac.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P3\r\nx-amz-cf-id: NhtEZV4Kqy-bpMthCieemwgb0JWDjBXcEDN-lt1HF1xeelX0-sybvg==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":142142,"size_decoded":15008,"mime_type":"application/json","magic":"JSON text data","md5":"da5b696132a7002af479a0b83755072d","sha1":"0921fc2d6bafa366aa16919a4ff5408989da1acc","sha256":"5780b2ddb9b0680abe5d771efe2ee26de17b6e4ce050c4ed6b657041e0ee6a8d","sha512":"a31860bb741c7fe8de2f6b0c2f8ccda32b3104a4de25077173dda83335ec049ec2c0b381b1b73c116ec9513a693dab7fa50b3bd965e259ac2869f75917bd889d","ssdeep":"3072:P1UF7DS48LnOlFjHVYl8Wzwu6X9rllITxtHo1Xo1RrCD2Jl9lUUUll+Jl2TzJv4+:P1UF7DS48LnOlFjHVYl8Wzwu6X9rllIi","tlshash":"29d3dd8947a1c07cd65e2690ca4f74d9dfc49586cfc6485ca6beac248b89faf3300b57","first_seen":"2026-05-23T22:28:22.158581Z","last_seen":"2026-06-28T03:47:21.889731Z","times_seen":2,"resource_available":false,"data":null}},"time_used":86,"timings":{"blocked":-1,"dns":51,"connect":1,"send":0,"wait":24,"receive":0,"ssl":10},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"waddyworks.com/wp-content/uploads/2024/05/how6.svg","fqdn":"waddyworks.com","domain":"waddyworks.com","tld":"com"},"ip":{"addr":"192.249.120.161","port":443,"asn":22611,"as":"INMOTION","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://waddyworks.com/","date":"2026-06-28T03:46:52.802Z","timestamp":1782618412802,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"waddyworks.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 23 Jun 2026 21:15:09 GMT","end":"Mon, 21 Sep 2026 21:15:08 GMT"},"fingerprint":{"sha1":"36:B3:8F:D5:4C:8F:D3:9A:A1:96:28:AF:1E:DD:B4:4C:A4:E3:76:39","sha256":"D0:18:E5:82:DB:FA:BD:AC:94:15:25:FE:BC:EA:EB:B8:A9:39:9A:89:98:DC:71:24:FE:95:4B:15:05:52:EF:C1"}}},"request":{"raw":"GET /wp-content/uploads/2024/05/how6.svg HTTP/1.1\r\nHost: waddyworks.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://waddyworks.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.31.1\r\ndate: Sun, 28 Jun 2026 03:46:52 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 15682\r\nlast-modified: Wed, 24 Jun 2026 21:38:19 GMT\r\nvary: Accept-Encoding\r\netag: \"6a3c4e4b-3d42\"\r\nexpires: Sun, 05 Jul 2026 03:46:52 GMT\r\ncache-control: max-age=604800, public, must-revalidate\r\nx-proxy-cache: STATIC/PATH\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx:1.31.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":15682,"size_decoded":16066,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"d61abdd943835581f1c8263b77336c87","sha1":"c241d97a997e7563ea743a72a947a9f196ed09ab","sha256":"80dd60e51824e2d734a0f0ce36a7b9673afc22f14bff673589765eb3506cc8c8","sha512":"11e2068c9b8c422ea00298d44d322e9b453aa9cd9506138be19582ff2a6ade2cabea977a1da9e407e7937edd5a0066b4ff2a5740d68c9bd58d98ee21a7454c35","ssdeep":"384:myJ3a9yJ3A0ei66pBtgDYFnQ87VyziQWXXy5dbOf9sVi:muoumKnYYq8QrHrWKi","tlshash":"2b6297fd3b741ef1dd89e3c7ef1201a8350a91bb69924b6cc35c9e1c388686cd952d86","first_seen":"2026-05-23T22:28:22.055992Z","last_seen":"2026-06-28T03:47:21.917766Z","times_seen":2,"resource_available":false,"data":null}},"time_used":407,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":406,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"waddyworks.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"waddyworks.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"waddyworks.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"waddyworks.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"waddyworks.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"waddyworks.com/wp-content/uploads/2021/05/logo-client3.svg","fqdn":"waddyworks.com","domain":"waddyworks.com","tld":"com"},"ip":{"addr":"192.249.120.161","port":443,"asn":22611,"as":"INMOTION","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://waddyworks.com/","date":"2026-06-28T03:46:52.806Z","timestamp":1782618412806,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"waddyworks.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 23 Jun 2026 21:15:09 GMT","end":"Mon, 21 Sep 2026 21:15:08 GMT"},"fingerprint":{"sha1":"36:B3:8F:D5:4C:8F:D3:9A:A1:96:28:AF:1E:DD:B4:4C:A4:E3:76:39","sha256":"D0:18:E5:82:DB:FA:BD:AC:94:15:25:FE:BC:EA:EB:B8:A9:39:9A:89:98:DC:71:24:FE:95:4B:15:05:52:EF:C1"}}},"request":{"raw":"GET /wp-content/uploads/2021/05/logo-client3.svg HTTP/1.1\r\nHost: waddyworks.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://waddyworks.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.31.1\r\ndate: Sun, 28 Jun 2026 03:46:52 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 5597\r\nlast-modified: Wed, 24 Jun 2026 21:38:19 GMT\r\nvary: Accept-Encoding\r\netag: \"6a3c4e4b-15dd\"\r\nexpires: Sun, 05 Jul 2026 03:46:52 GMT\r\ncache-control: max-age=604800, public, must-revalidate\r\nx-proxy-cache: STATIC/PATH\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx:1.31.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":5597,"size_decoded":5980,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"4d0fbefb83b2b215a519f4c506b679b0","sha1":"233c18c31b44d10ffed4af6e57467fbc5ebb6d13","sha256":"200cdcee4f878fd108c3e4b1701b80c5e940892cea7359530610c98ada41370e","sha512":"06db8ae27365eee8b075d676a3ce8262c787d7bf29458b11cded14d8d5285f13bb2ca52761dc8e3d71b4f174576dbd202dda17070d88dc151f61b664f536def2","ssdeep":"96:WRB8+plas6b/3/yB30PBB/WIwAVAenlhd54LpZI34pbcM0webUZ/U:Y8Vs6bf+3m+EV/lxUZmBfbUZc","tlshash":"99b187dc3bd563f0d18aa7f0d926e1d93e9f34fe7a48c6b9c6987cc196068ac45c4880","first_seen":"2026-05-23T22:28:22.115251Z","last_seen":"2026-06-28T03:47:21.919703Z","times_seen":2,"resource_available":false,"data":null}},"time_used":402,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":402,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"waddyworks.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"waddyworks.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"waddyworks.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"waddyworks.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"waddyworks.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"waddyworks.com/wp-content/uploads/2021/05/logo-client10.svg","fqdn":"waddyworks.com","domain":"waddyworks.com","tld":"com"},"ip":{"addr":"192.249.120.161","port":443,"asn":22611,"as":"INMOTION","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://waddyworks.com/","date":"2026-06-28T03:46:52.810Z","timestamp":1782618412810,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"waddyworks.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 23 Jun 2026 21:15:09 GMT","end":"Mon, 21 Sep 2026 21:15:08 GMT"},"fingerprint":{"sha1":"36:B3:8F:D5:4C:8F:D3:9A:A1:96:28:AF:1E:DD:B4:4C:A4:E3:76:39","sha256":"D0:18:E5:82:DB:FA:BD:AC:94:15:25:FE:BC:EA:EB:B8:A9:39:9A:89:98:DC:71:24:FE:95:4B:15:05:52:EF:C1"}}},"request":{"raw":"GET /wp-content/uploads/2021/05/logo-client10.svg HTTP/1.1\r\nHost: waddyworks.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://waddyworks.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.31.1\r\ndate: Sun, 28 Jun 2026 03:46:52 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 3422\r\nlast-modified: Wed, 24 Jun 2026 21:38:19 GMT\r\nvary: Accept-Encoding\r\netag: \"6a3c4e4b-d5e\"\r\nexpires: Sun, 05 Jul 2026 03:46:52 GMT\r\ncache-control: max-age=604800, public, must-revalidate\r\nx-proxy-cache: STATIC/PATH\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx:1.31.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3422,"size_decoded":3804,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"0f95fde00c2f3e23a7ba67e266c1a0bf","sha1":"c7d29d48856547b966cf29af11ca564bc60e47fd","sha256":"23dc6e9326d2062ff7f46fd950435a7dc1734ccb8f859b011083e9c1bf16c7d2","sha512":"69c41eaa16b2ba898644d536917782d05d80e5d5a8a334e6bd02ca5eed609e68b0148a52d0b77903d7752b36535f8a4543ebd0593eaee2867b9d59b1d6894412","ssdeep":"","tlshash":"db6161cd3bd4a3e874dcb3f78b92a85d3c4865f6378c4c75c22c0a5828cd514ae869da","first_seen":"2026-05-23T22:28:22.117529Z","last_seen":"2026-06-28T03:47:21.921768Z","times_seen":2,"resource_available":false,"data":null}},"time_used":400,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":400,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"waddyworks.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"waddyworks.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"waddyworks.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"waddyworks.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"waddyworks.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"waddyworks.com/wp-content/plugins/elementor/assets/js/shared-frontend-handlers.03caa53373b56d3bab67.bundle.min.js","fqdn":"waddyworks.com","domain":"waddyworks.com","tld":"com"},"ip":{"addr":"192.249.120.161","port":443,"asn":22611,"as":"INMOTION","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://waddyworks.com/","date":"2026-06-28T03:46:54.083Z","timestamp":1782618414083,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"waddyworks.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 23 Jun 2026 21:15:09 GMT","end":"Mon, 21 Sep 2026 21:15:08 GMT"},"fingerprint":{"sha1":"36:B3:8F:D5:4C:8F:D3:9A:A1:96:28:AF:1E:DD:B4:4C:A4:E3:76:39","sha256":"D0:18:E5:82:DB:FA:BD:AC:94:15:25:FE:BC:EA:EB:B8:A9:39:9A:89:98:DC:71:24:FE:95:4B:15:05:52:EF:C1"}}},"request":{"raw":"GET /wp-content/plugins/elementor/assets/js/shared-frontend-handlers.03caa53373b56d3bab67.bundle.min.js HTTP/1.1\r\nHost: waddyworks.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://waddyworks.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.31.1\r\ndate: Sun, 28 Jun 2026 03:46:54 GMT\r\ncontent-type: text/javascript\r\nvary: Accept-Encoding\r\nlast-modified: Wed, 24 Jun 2026 21:40:50 GMT\r\nx-proxy-cache: HIT\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx:1.31.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":8481,"size_decoded":2958,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (8481), with no line terminators","md5":"a4df0433011e4a5ca770a6b46d01ab7d","sha1":"ced6acab63205209ef5db818700ba7e7f9277044","sha256":"77c0a6d635dad44b53a9eb9f0f367a1bd3bf3620c0e41d3a4c15d1313f2553f0","sha512":"d9059dc3da43bd052276c6544b81db20e438378541274eb2da852b7c535bc1738eac7c902a4c7c0913f1cef7f76a51bfd0d55e23dd659b4ed6c858141b0e1272","ssdeep":"192:IwfFpzqxODCWV5lxZmdXLf+UvDZ5CMtakRhPZT8cMkCw+v10QITpRHvcwxDnPoG0:rHzqxOPV5lxodXLfpvD/NtakRhPZT8cw","tlshash":"3802310a74c1982db58b58ba3532432866a8014de1018f6db1bf79fbc5a5d82277b7f1","first_seen":"2025-10-21T21:24:49.172997Z","last_seen":"2026-08-09T06:50:30.090869Z","times_seen":150029,"resource_available":true,"data":null}},"time_used":168,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":168,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"waddyworks.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"waddyworks.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"waddyworks.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"waddyworks.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"waddyworks.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"waddyworks.com/wp-content/themes/progrisaas/js/owl.carousel.min.js?ver=20210110","fqdn":"waddyworks.com","domain":"waddyworks.com","tld":"com"},"ip":{"addr":"192.249.120.161","port":443,"asn":22611,"as":"INMOTION","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://waddyworks.com/","date":"2026-06-28T03:46:52.778Z","timestamp":1782618412778,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"waddyworks.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 23 Jun 2026 21:15:09 GMT","end":"Mon, 21 Sep 2026 21:15:08 GMT"},"fingerprint":{"sha1":"36:B3:8F:D5:4C:8F:D3:9A:A1:96:28:AF:1E:DD:B4:4C:A4:E3:76:39","sha256":"D0:18:E5:82:DB:FA:BD:AC:94:15:25:FE:BC:EA:EB:B8:A9:39:9A:89:98:DC:71:24:FE:95:4B:15:05:52:EF:C1"}}},"request":{"raw":"GET /wp-content/themes/progrisaas/js/owl.carousel.min.js?ver=20210110 HTTP/1.1\r\nHost: waddyworks.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://waddyworks.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.31.1\r\ndate: Sun, 28 Jun 2026 03:46:52 GMT\r\ncontent-type: text/javascript\r\nvary: Accept-Encoding\r\nlast-modified: Wed, 24 Jun 2026 21:38:19 GMT\r\nx-proxy-cache: HIT\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx:1.31.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":44348,"size_decoded":12227,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (31997), with CRLF line terminators","md5":"47c357c05cb99cedbac2874840319818","sha1":"d8b05365de4b760618328fdeef7672e8374978e4","sha256":"4e0781bdd2cbb5db04da3b5e059eeca34e325fabb893bee7457b5babf5b7c029","sha512":"960b76113c78220acc1c87e437c6698fbf1066b8cf7b15a6d4d33f31ab69d8e16bd9823c07ce1897db4d0bdfe08b39e5c7085b79a7a8ef80760e87d9aa789e2e","ssdeep":"768:RCI7dmuMFAAJG4dlQKNORpnXGAtep2lcwJeL+wr2RSNc7UuHjRUQuFBt33:AITMFC4dbMVRSNcgRDV","tlshash":"39137346b3202d2a869b61a0663f160bb23a241ce414547d7d79e6de6d7dc8c213ffbc","first_seen":"2023-03-07T01:06:30Z","last_seen":"2026-08-09T01:31:28.358183Z","times_seen":13949,"resource_available":true,"data":null}},"time_used":423,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":423,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"waddyworks.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"waddyworks.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"waddyworks.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"waddyworks.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"waddyworks.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"waddyworks.com/wp-content/themes/progrisaas/css/flaticon.css?ver=7.0","fqdn":"waddyworks.com","domain":"waddyworks.com","tld":"com"},"ip":{"addr":"192.249.120.161","port":443,"asn":22611,"as":"INMOTION","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://waddyworks.com/","date":"2026-06-28T03:46:52.707Z","timestamp":1782618412707,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"waddyworks.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 23 Jun 2026 21:15:09 GMT","end":"Mon, 21 Sep 2026 21:15:08 GMT"},"fingerprint":{"sha1":"36:B3:8F:D5:4C:8F:D3:9A:A1:96:28:AF:1E:DD:B4:4C:A4:E3:76:39","sha256":"D0:18:E5:82:DB:FA:BD:AC:94:15:25:FE:BC:EA:EB:B8:A9:39:9A:89:98:DC:71:24:FE:95:4B:15:05:52:EF:C1"}}},"request":{"raw":"GET /wp-content/themes/progrisaas/css/flaticon.css?ver=7.0 HTTP/1.1\r\nHost: waddyworks.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://waddyworks.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.31.1\r\ndate: Sun, 28 Jun 2026 03:46:52 GMT\r\ncontent-type: text/css\r\nvary: Accept-Encoding\r\nlast-modified: Wed, 24 Jun 2026 21:38:19 GMT\r\nx-proxy-cache: HIT\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx:1.31.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2285,"size_decoded":809,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"dadda153a982c5b8953b9c72b5c57530","sha1":"c2ad53ccac3ca3aa5652d7a463689d896e67db88","sha256":"d81d199a9aeb6c64357e0bc85260c3a39237538d0c1eca8fdc595b013749edb3","sha512":"9b9ddfdc0e412bed786320d4c75ff875e696ee500398449300b7876908462165f2fa03a38f7a960c861f4176070525e247f35819e70f9b33c113020fde669e87","ssdeep":"","tlshash":"034198f5d16e004263219f45eeafa280ab89b1ac9ac0ec95f1151c6deff1d6983c17dc","first_seen":"2023-04-13T14:29:49Z","last_seen":"2026-08-05T16:56:15.51205Z","times_seen":20,"resource_available":false,"data":null}},"time_used":165,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":165,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"waddyworks.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"waddyworks.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"waddyworks.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"waddyworks.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"waddyworks.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"waddyworks.com/wp-content/themes/progrisaas/css/jquery.multiscroll.css?ver=7.0","fqdn":"waddyworks.com","domain":"waddyworks.com","tld":"com"},"ip":{"addr":"192.249.120.161","port":443,"asn":22611,"as":"INMOTION","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://waddyworks.com/","date":"2026-06-28T03:46:52.713Z","timestamp":1782618412713,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"waddyworks.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 23 Jun 2026 21:15:09 GMT","end":"Mon, 21 Sep 2026 21:15:08 GMT"},"fingerprint":{"sha1":"36:B3:8F:D5:4C:8F:D3:9A:A1:96:28:AF:1E:DD:B4:4C:A4:E3:76:39","sha256":"D0:18:E5:82:DB:FA:BD:AC:94:15:25:FE:BC:EA:EB:B8:A9:39:9A:89:98:DC:71:24:FE:95:4B:15:05:52:EF:C1"}}},"request":{"raw":"GET /wp-content/themes/progrisaas/css/jquery.multiscroll.css?ver=7.0 HTTP/1.1\r\nHost: waddyworks.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://waddyworks.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.31.1\r\ndate: Sun, 28 Jun 2026 03:46:52 GMT\r\ncontent-type: text/css\r\nvary: Accept-Encoding\r\nlast-modified: Wed, 24 Jun 2026 21:38:19 GMT\r\nx-proxy-cache: HIT\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx:1.31.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2333,"size_decoded":962,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"3193b1bd79660375ed7aee09bd6cdfde","sha1":"e0266fbda445d032740791e625520441b43058f2","sha256":"38af064b3c1e1b52cea2c3e702c7319822fa2c477ce5a49865b2559c45c3d5c1","sha512":"1b5387e960f8fab2e043f8f080e11a67caa72218190da53755a95081529ab1108d62f61f90f8f271182d0ca8502c3e3b29577dc815dbf120a2f1a7fcca74af5a","ssdeep":"","tlshash":"cb4101aece40214062baebe547f5475ee87a00879f13105c7ac46f905ffea2e4452ec9","first_seen":"2023-11-03T05:35:11Z","last_seen":"2026-08-05T16:56:15.385473Z","times_seen":16,"resource_available":false,"data":null}},"time_used":167,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":167,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"waddyworks.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"waddyworks.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"waddyworks.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"waddyworks.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"waddyworks.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"waddyworks.com/wp-content/uploads/elementor/google-fonts/fonts/dmsans-rp2yp2ywxg089urii5-g4vlh9vod8cmcqbu0-k4.woff2","fqdn":"waddyworks.com","domain":"waddyworks.com","tld":"com"},"ip":{"addr":"192.249.120.161","port":443,"asn":22611,"as":"INMOTION","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://waddyworks.com/","date":"2026-06-28T03:46:53.552Z","timestamp":1782618413552,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"waddyworks.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 23 Jun 2026 21:15:09 GMT","end":"Mon, 21 Sep 2026 21:15:08 GMT"},"fingerprint":{"sha1":"36:B3:8F:D5:4C:8F:D3:9A:A1:96:28:AF:1E:DD:B4:4C:A4:E3:76:39","sha256":"D0:18:E5:82:DB:FA:BD:AC:94:15:25:FE:BC:EA:EB:B8:A9:39:9A:89:98:DC:71:24:FE:95:4B:15:05:52:EF:C1"}}},"request":{"raw":"GET /wp-content/uploads/elementor/google-fonts/fonts/dmsans-rp2yp2ywxg089urii5-g4vlh9vod8cmcqbu0-k4.woff2 HTTP/1.1\r\nHost: waddyworks.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://waddyworks.com/wp-content/uploads/elementor/google-fonts/css/dmsans.css?ver=1751394154\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.31.1\r\ndate: Sun, 28 Jun 2026 03:46:53 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 36916\r\nlast-modified: Wed, 24 Jun 2026 21:38:19 GMT\r\nvary: Accept-Encoding\r\netag: \"6a3c4e4b-9034\"\r\nexpires: Sun, 05 Jul 2026 03:46:53 GMT\r\ncache-control: max-age=604800, public, must-revalidate\r\nx-proxy-cache: STATIC/PATH\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx:1.31.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":36916,"size_decoded":37297,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 36916, version 1.0","md5":"f0244b919a1d63ca2c430cbea5a9760b","sha1":"e85051d4a760f8feb6b2293ad9ba3cde1cbec15e","sha256":"967ec653e45a62f5dc91767eba95b0e2df6ed754bc4de4354e5efdf4ac9de068","sha512":"04d130036a5545024d95cd29b5562e4343ca475499b154c3d26458d2a4db6323f64ad4a9be6470982947b95f543f4003fccdcfe5072dabb04ccc5cb5d7148323","ssdeep":"768:GxfGQAfOaEkOfBo6V3Wz0sIPDNmgJPkM2SHhQ4DU7ol0CB1Y74bpmh:GxfGQy/WfBhC0ZvVLhxUUfB1Yvh","tlshash":"24f2f239bfe7dec3f0da9350113fc4108314a7e6a7482f42d6d585f8a45d424daadd98","first_seen":"2025-06-02T18:48:01.285787Z","last_seen":"2026-08-09T06:08:11.357965Z","times_seen":4149,"resource_available":false,"data":null}},"time_used":218,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":162,"receive":56,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"waddyworks.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"waddyworks.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"waddyworks.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"waddyworks.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"waddyworks.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"waddyworks.com/wp-content/themes/progrisaas/css/bootstrap.css?ver=4.0","fqdn":"waddyworks.com","domain":"waddyworks.com","tld":"com"},"ip":{"addr":"192.249.120.161","port":443,"asn":22611,"as":"INMOTION","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://waddyworks.com/","date":"2026-06-28T03:46:52.709Z","timestamp":1782618412709,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"waddyworks.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 23 Jun 2026 21:15:09 GMT","end":"Mon, 21 Sep 2026 21:15:08 GMT"},"fingerprint":{"sha1":"36:B3:8F:D5:4C:8F:D3:9A:A1:96:28:AF:1E:DD:B4:4C:A4:E3:76:39","sha256":"D0:18:E5:82:DB:FA:BD:AC:94:15:25:FE:BC:EA:EB:B8:A9:39:9A:89:98:DC:71:24:FE:95:4B:15:05:52:EF:C1"}}},"request":{"raw":"GET /wp-content/themes/progrisaas/css/bootstrap.css?ver=4.0 HTTP/1.1\r\nHost: waddyworks.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://waddyworks.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.31.1\r\ndate: Sun, 28 Jun 2026 03:46:52 GMT\r\ncontent-type: text/css\r\nvary: Accept-Encoding\r\nlast-modified: Wed, 24 Jun 2026 21:38:19 GMT\r\nx-proxy-cache: HIT\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx:1.31.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":12229,"size_decoded":2920,"mime_type":"text/css","magic":"ASCII text, with very long lines (11782), with CRLF line terminators","md5":"15f6dda8d118290e170924a6b8e6fb73","sha1":"aab09d59a6eedc8088210918aa278b64cea3ef39","sha256":"a3d1b57cdf4187ea8479435ad218267ce2bdbdb9530a303bad60efac7f9269ee","sha512":"e2ea8bcdd542bb11d4283d3d864a465685908ab0bd4626dd22277dca9faeea8a8763638abf3e45a40d49d2625830ca715c8267bcd5c77120c4362be65ec4c6a0","ssdeep":"96:TVx4mle2xoTUc/tpUcLQaDwCzOo/AE5ETlD/R4FPYqJ9j7dnEtEhdjX5OvQFRvs:5xyDtDDrzOoR8h54d9JZ5EShpJOvQFVs","tlshash":"144299c45d312d679037ce2b7091bc4f60aa74067bb2eebbf3e62d558daa5434861603","first_seen":"2023-04-07T00:54:13Z","last_seen":"2026-08-09T04:33:59.972064Z","times_seen":2995,"resource_available":false,"data":null}},"time_used":167,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":167,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"waddyworks.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"waddyworks.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"waddyworks.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"waddyworks.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"waddyworks.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"waddyworks.com/wp-content/plugins/elementor/assets/js/webpack.runtime.min.js?ver=4.1.4","fqdn":"waddyworks.com","domain":"waddyworks.com","tld":"com"},"ip":{"addr":"192.249.120.161","port":443,"asn":22611,"as":"INMOTION","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://waddyworks.com/","date":"2026-06-28T03:46:52.792Z","timestamp":1782618412792,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"waddyworks.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 23 Jun 2026 21:15:09 GMT","end":"Mon, 21 Sep 2026 21:15:08 GMT"},"fingerprint":{"sha1":"36:B3:8F:D5:4C:8F:D3:9A:A1:96:28:AF:1E:DD:B4:4C:A4:E3:76:39","sha256":"D0:18:E5:82:DB:FA:BD:AC:94:15:25:FE:BC:EA:EB:B8:A9:39:9A:89:98:DC:71:24:FE:95:4B:15:05:52:EF:C1"}}},"request":{"raw":"GET /wp-content/plugins/elementor/assets/js/webpack.runtime.min.js?ver=4.1.4 HTTP/1.1\r\nHost: waddyworks.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://waddyworks.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.31.1\r\ndate: Sun, 28 Jun 2026 03:46:52 GMT\r\ncontent-type: text/javascript\r\nvary: Accept-Encoding\r\nlast-modified: Wed, 24 Jun 2026 21:40:50 GMT\r\nx-proxy-cache: HIT\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx:1.31.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":5819,"size_decoded":2776,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (5819), with no line terminators","md5":"0d490d1bad7e9038b5741f77a7bcee6c","sha1":"64f3096d6f0121949d2b88ef19d4b9adcf38fd89","sha256":"8dd3674bae946e2e04bc962443f0994d736a761bb28e816c20aee6391ef242ed","sha512":"9860efe572a0bda18b274965bc81ae0f513a1c826eeaf9b67cc7b6cec2b78164a67ee15f586e63905cf6b8cc520b00039ff7e9e1460b32dd0977dc4a85cd24b2","ssdeep":"96:+nsL0Z9Z4JfrjqyWiNDy9XOWZp5Rm4leN8EVrzLyVx2UlKBKGarNcl8/2:WsLGyrjiiNWZ5RmHFJW6x7G/2","tlshash":"1cc161941a54fd2b21e139d8e01ba775253ec0373c1af981fa32eced54e4ed087aa531","first_seen":"2026-05-12T16:52:28.591446Z","last_seen":"2026-08-09T06:23:07.977515Z","times_seen":19070,"resource_available":true,"data":null}},"time_used":413,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":413,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"waddyworks.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"waddyworks.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"waddyworks.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"waddyworks.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"waddyworks.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"waddyworks.com/wp-content/uploads/elementor/google-fonts/fonts/roboto-kfo7cnqeu92fr1me7ksn66agldtyluama3yuba.woff2","fqdn":"waddyworks.com","domain":"waddyworks.com","tld":"com"},"ip":{"addr":"192.249.120.161","port":443,"asn":22611,"as":"INMOTION","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://waddyworks.com/","date":"2026-06-28T03:46:53.504Z","timestamp":1782618413504,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"waddyworks.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 23 Jun 2026 21:15:09 GMT","end":"Mon, 21 Sep 2026 21:15:08 GMT"},"fingerprint":{"sha1":"36:B3:8F:D5:4C:8F:D3:9A:A1:96:28:AF:1E:DD:B4:4C:A4:E3:76:39","sha256":"D0:18:E5:82:DB:FA:BD:AC:94:15:25:FE:BC:EA:EB:B8:A9:39:9A:89:98:DC:71:24:FE:95:4B:15:05:52:EF:C1"}}},"request":{"raw":"GET /wp-content/uploads/elementor/google-fonts/fonts/roboto-kfo7cnqeu92fr1me7ksn66agldtyluama3yuba.woff2 HTTP/1.1\r\nHost: waddyworks.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://waddyworks.com/wp-content/uploads/elementor/google-fonts/css/roboto.css?ver=1751394152\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.31.1\r\ndate: Sun, 28 Jun 2026 03:46:53 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 40128\r\nlast-modified: Wed, 24 Jun 2026 21:38:19 GMT\r\nvary: Accept-Encoding\r\netag: \"6a3c4e4b-9cc0\"\r\nexpires: Sun, 05 Jul 2026 03:46:53 GMT\r\ncache-control: max-age=604800, public, must-revalidate\r\nx-proxy-cache: STATIC/PATH\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx:1.31.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":40128,"size_decoded":40509,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 40128, version 1.0","md5":"9a01b69183a9604ab3a439e388b30501","sha1":"8ed1d59003d0dbe6360481017b44665153665fbe","sha256":"20b535fa80c8189e3b87d1803038389960203a886d502bc2ef1857affc2f38d2","sha512":"0e6795255b6eea00b5403fd7e3b904d52776d49ac63a31c2778361262883697943aedcb29feee85694ba6f19eaa34dddb9a5bfe7118f4a25b4757e92c331feca","ssdeep":"768:Vce3jkow68wmT4IBX0tXdlSirS61gSjcz0GPwHbP+w2jec56O:VcI/iEEEtXdFJj+0GPwHbP+w5rO","tlshash":"3703023a5e3ccf1a84157a703950f6d9a8481e548e9d143b4f1ac7bf085dde2209b6d4","first_seen":"2025-01-08T22:59:02.845106Z","last_seen":"2026-08-09T06:43:17.726768Z","times_seen":959463,"resource_available":false,"data":null}},"time_used":169,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":168,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"waddyworks.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"waddyworks.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"waddyworks.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"waddyworks.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"waddyworks.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"lottie.host/a3725380-cbf6-43b8-a198-5f315a99a66a/m94QV3TNEX.json","fqdn":"lottie.host","domain":"lottie.host","tld":"host"},"ip":{"addr":"52.84.50.31","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://waddyworks.com/","date":"2026-06-28T03:46:53.632Z","timestamp":1782618413632,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lottie.host","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Fri, 10 Apr 2026 00:00:00 GMT","end":"Sat, 24 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"7A:0B:2F:B8:B0:CF:81:E2:62:2C:F2:C1:74:3A:AD:E1:04:FA:B4:2D","sha256":"85:C9:E9:F0:50:5B:02:EC:98:FC:DD:11:D7:97:BA:EA:AE:96:4E:9C:37:65:43:94:7D:D8:EF:A0:3B:AF:80:4B"}}},"request":{"raw":"GET /a3725380-cbf6-43b8-a198-5f315a99a66a/m94QV3TNEX.json HTTP/1.1\r\nHost: lottie.host\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://waddyworks.com/\r\nOrigin: https://waddyworks.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: application/json\r\ndate: Sun, 28 Jun 2026 03:44:36 GMT\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, PUT, POST\r\naccess-control-max-age: 1800\r\nlast-modified: Mon, 27 May 2024 06:34:08 GMT\r\ncontent-encoding: br\r\nx-amz-server-side-encryption: AES256\r\nx-amz-version-id: 0xpr6IxZaUYTaPOQC.1.ZmnBNMbeqhkx\r\nserver: AmazonS3\r\netag: W/\"5fe0d7a56f9e65ffc22637fa19fb77da\"\r\nvary: Origin,Accept-Encoding\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 d85ed2d2deba50aaf4938eae2cbcf3ac.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P3\r\nx-amz-cf-id: BmRcPlje1a7ptv8-QZVT4RwIdRdmpuhQcDKbxFN08G-0O1viR6vacQ==\r\nage: 138\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":32696,"size_decoded":3947,"mime_type":"application/json","magic":"JSON text data","md5":"5fe0d7a56f9e65ffc22637fa19fb77da","sha1":"3cd93867e04bfcaba2053648ddbae60db731b20d","sha256":"8156a744bb195f288bf9b2266681ee4fae0fff51ca625b206f0f09097a575e81","sha512":"319fdb17b3ddae350c893464c05f6faab0fc121f52048a8b2b30f1dac6750c3bf42d8989796ef824a18d6d6d5295d81247f24bc9ef5bda35a92ee2ce0f24fa36","ssdeep":"384:mILp/dlt1Rcslh8eJ9ALp9en4nxFEoI8YEEl:mILpxJ9ALp8n4nxFvI8LEl","tlshash":"bbe2ee89ca6142bceb1429d0cf5330948fe5c9436ec54dbedaba6d148bb55df2301b2b","first_seen":"2026-05-23T22:28:22.143251Z","last_seen":"2026-06-28T03:47:21.932111Z","times_seen":2,"resource_available":false,"data":null}},"time_used":88,"timings":{"blocked":23,"dns":0,"connect":0,"send":0,"wait":65,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"waddyworks.com/wp-content/uploads/2024/05/logo.png","fqdn":"waddyworks.com","domain":"waddyworks.com","tld":"com"},"ip":{"addr":"192.249.120.161","port":443,"asn":22611,"as":"INMOTION","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"imageset","requested_by":"https://waddyworks.com/","date":"2026-06-28T03:46:52.742Z","timestamp":1782618412742,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"waddyworks.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 23 Jun 2026 21:15:09 GMT","end":"Mon, 21 Sep 2026 21:15:08 GMT"},"fingerprint":{"sha1":"36:B3:8F:D5:4C:8F:D3:9A:A1:96:28:AF:1E:DD:B4:4C:A4:E3:76:39","sha256":"D0:18:E5:82:DB:FA:BD:AC:94:15:25:FE:BC:EA:EB:B8:A9:39:9A:89:98:DC:71:24:FE:95:4B:15:05:52:EF:C1"}}},"request":{"raw":"GET /wp-content/uploads/2024/05/logo.png HTTP/1.1\r\nHost: waddyworks.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://waddyworks.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.31.1\r\ndate: Sun, 28 Jun 2026 03:46:52 GMT\r\ncontent-type: image/png\r\ncontent-length: 13256\r\nlast-modified: Wed, 24 Jun 2026 21:38:19 GMT\r\nvary: Accept-Encoding\r\netag: \"6a3c4e4b-33c8\"\r\nexpires: Sun, 05 Jul 2026 03:46:52 GMT\r\ncache-control: max-age=604800, public, must-revalidate\r\nx-proxy-cache: STATIC/PATH\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx:1.31.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":13256,"size_decoded":13636,"mime_type":"image/png","magic":"PNG image data, 992 x 186, 8-bit/color RGBA, non-interlaced","md5":"e5bbf0c1475d638ee29be4bbace1f689","sha1":"0a82057b68be13dc50c8d29d0578a13b9a794485","sha256":"3fbc1f8895a52ccd8994d000c302c73b1ca3f212e6c65fe93eac0e7907510735","sha512":"70351ccf80abccbd96e6b2cdfc6bc2b1de04658d881b96aecba6960325af267a003e9f32ad87c2e23d6830d8805b0eea738efcb277572e8211223234d1c26cbf","ssdeep":"192:LB9kwk9vWzhFvwqiewY7+y6hl4/LHrlI8Hzb+oaNqVi4LOVZcNM37aa7kEJ:LPk9vIyewfy6k/Lp/3h9LOUN1ckEJ","tlshash":"5d52bf8fe1100c41cd98aab310f7a932af11ec444779fe630b5dd1ca1e86699ad3364a","first_seen":"2026-05-23T22:28:22.070038Z","last_seen":"2026-06-28T03:47:21.93413Z","times_seen":2,"resource_available":false,"data":null}},"time_used":310,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":308,"receive":2,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"waddyworks.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"waddyworks.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"waddyworks.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"waddyworks.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"waddyworks.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"waddyworks.com/wp-content/plugins/elementor/assets/js/frontend.min.js?ver=4.1.4","fqdn":"waddyworks.com","domain":"waddyworks.com","tld":"com"},"ip":{"addr":"192.249.120.161","port":443,"asn":22611,"as":"INMOTION","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://waddyworks.com/","date":"2026-06-28T03:46:52.796Z","timestamp":1782618412796,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"waddyworks.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 23 Jun 2026 21:15:09 GMT","end":"Mon, 21 Sep 2026 21:15:08 GMT"},"fingerprint":{"sha1":"36:B3:8F:D5:4C:8F:D3:9A:A1:96:28:AF:1E:DD:B4:4C:A4:E3:76:39","sha256":"D0:18:E5:82:DB:FA:BD:AC:94:15:25:FE:BC:EA:EB:B8:A9:39:9A:89:98:DC:71:24:FE:95:4B:15:05:52:EF:C1"}}},"request":{"raw":"GET /wp-content/plugins/elementor/assets/js/frontend.min.js?ver=4.1.4 HTTP/1.1\r\nHost: waddyworks.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://waddyworks.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.31.1\r\ndate: Sun, 28 Jun 2026 03:46:52 GMT\r\ncontent-type: text/javascript\r\nvary: Accept-Encoding\r\nlast-modified: Wed, 24 Jun 2026 21:40:50 GMT\r\nx-proxy-cache: HIT\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx:1.31.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":32098,"size_decoded":11044,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (32098), with no line terminators","md5":"1c6aa09d0faf7577c8ae64d43b8241ad","sha1":"9d31e838cc042539556ca9223a635349f6e4af35","sha256":"1842d6e4d3c7399fdb01ab4b0a7dd5c1d9c096110de0532181ed581f14e9e813","sha512":"d754acb067d44f5fd9648cc63b6da0e95166a48d50a25dcfb378a6a5cd8c94334413c4466e598d01830a1cab6b183cf4812ac68500ac8e6d64ceabe45f5c46f3","ssdeep":"768:D1c+6idHZRdzM4ZBOBTmduNFXaz1EfcJR8RjDKv//Dk3iHVgbpMYMLKEnzBc5Gkl:ZcURdzMMBOB0mFrcJR8RjD8/xHVlqEni","tlshash":"0de208523296e866069f48a3f0231119f3775dd9b80af0d5b2bcdce5a471e877362b34","first_seen":"2026-05-18T18:48:00.243251Z","last_seen":"2026-08-09T06:50:30.060095Z","times_seen":22174,"resource_available":true,"data":null}},"time_used":411,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":411,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"waddyworks.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"waddyworks.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"waddyworks.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"waddyworks.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"waddyworks.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"lottie.host/f6dfd03d-afc0-4b03-83fa-f5ba2ea23a75/UHejs3V0Im.json","fqdn":"lottie.host","domain":"lottie.host","tld":"host"},"ip":{"addr":"52.84.50.31","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://waddyworks.com/","date":"2026-06-28T03:46:53.612Z","timestamp":1782618413612,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lottie.host","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Fri, 10 Apr 2026 00:00:00 GMT","end":"Sat, 24 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"7A:0B:2F:B8:B0:CF:81:E2:62:2C:F2:C1:74:3A:AD:E1:04:FA:B4:2D","sha256":"85:C9:E9:F0:50:5B:02:EC:98:FC:DD:11:D7:97:BA:EA:AE:96:4E:9C:37:65:43:94:7D:D8:EF:A0:3B:AF:80:4B"}}},"request":{"raw":"GET /f6dfd03d-afc0-4b03-83fa-f5ba2ea23a75/UHejs3V0Im.json HTTP/1.1\r\nHost: lottie.host\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://waddyworks.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://waddyworks.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: application/json\r\ndate: Sun, 28 Jun 2026 03:44:36 GMT\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, PUT, POST\r\naccess-control-max-age: 1800\r\nlast-modified: Mon, 27 May 2024 06:04:23 GMT\r\ncontent-encoding: br\r\nx-amz-server-side-encryption: AES256\r\nx-amz-version-id: e5gM5YxDSX.x_W5ShLgKqSgqO8fWXsmE\r\nserver: AmazonS3\r\netag: W/\"ba5bca211c7010e9e3cdf94b1fac785e\"\r\nvary: Origin,Accept-Encoding\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 d85ed2d2deba50aaf4938eae2cbcf3ac.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P3\r\nx-amz-cf-id: BWKo83f_DzdfySus75Rog6AD7jJrfQNnAs6P5pNfrzi4iJkIav4JGQ==\r\nage: 138\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":2163,"size_decoded":1301,"mime_type":"application/json","magic":"JSON text data","md5":"ba5bca211c7010e9e3cdf94b1fac785e","sha1":"6f42816befab00a33476357cb3c9795cdbf42c2c","sha256":"b18b204507ef240707fb708f638c33ae8a0e6ae2a050ec265ca6fb27c4f311c1","sha512":"8dd899fdb72189337e3401d472b8bf184e77705a96aa75d000d8a603ba61c4dd5874ef3114f6703e9094ab71eeb65776245c070c824306e4ef3fe9fd4a664b74","ssdeep":"","tlshash":"5a41051e0e75428dee14ae82cf4330948be19b417fca44d9eef75c195f6218e5302e7a","first_seen":"2026-05-23T22:28:22.078032Z","last_seen":"2026-06-28T03:47:21.914682Z","times_seen":2,"resource_available":false,"data":null}},"time_used":60,"timings":{"blocked":32,"dns":0,"connect":0,"send":0,"wait":28,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"waddyworks.com/wp-content/plugins/elementor/assets/lib/font-awesome/css/v4-shims.min.css?ver=4.1.4","fqdn":"waddyworks.com","domain":"waddyworks.com","tld":"com"},"ip":{"addr":"192.249.120.161","port":443,"asn":22611,"as":"INMOTION","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://waddyworks.com/","date":"2026-06-28T03:46:52.720Z","timestamp":1782618412720,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"waddyworks.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 23 Jun 2026 21:15:09 GMT","end":"Mon, 21 Sep 2026 21:15:08 GMT"},"fingerprint":{"sha1":"36:B3:8F:D5:4C:8F:D3:9A:A1:96:28:AF:1E:DD:B4:4C:A4:E3:76:39","sha256":"D0:18:E5:82:DB:FA:BD:AC:94:15:25:FE:BC:EA:EB:B8:A9:39:9A:89:98:DC:71:24:FE:95:4B:15:05:52:EF:C1"}}},"request":{"raw":"GET /wp-content/plugins/elementor/assets/lib/font-awesome/css/v4-shims.min.css?ver=4.1.4 HTTP/1.1\r\nHost: waddyworks.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://waddyworks.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.31.1\r\ndate: Sun, 28 Jun 2026 03:46:52 GMT\r\ncontent-type: text/css\r\nvary: Accept-Encoding\r\nlast-modified: Wed, 24 Jun 2026 21:40:50 GMT\r\nx-proxy-cache: HIT\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx:1.31.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":26702,"size_decoded":4438,"mime_type":"text/css","magic":"ASCII text, with very long lines (26516)","md5":"c55205bce667f5d812354fd1353e7389","sha1":"f22de0af271eba636a022c873c94fbcd81b4c89a","sha256":"c55902832fb84522d02ea1a60a30747403a140d8651fa748f13ba398b0c0df3a","sha512":"89a2e11075b7a7e64d8240ca062e3311f1fe69600c189ec8ee78ea0f78ca9db374bb1e0692e9aedaf8ee23bd58528bf6d0e20f977477daff073be57ee8e81bbd","ssdeep":"192:dP6RT1bIl4w0QUmQ10PwKLaAu5CwWavpHo4O6wgLPbJVR8XD7mycP:0Ral4w0QK+PwK05eavpmgPPeXD7mycP","tlshash":"1ec20665930c60d3a3eef847ba0172a8277577999a864c54f30b7c9c8dc3a5772e8f18","first_seen":"2023-04-05T04:00:29Z","last_seen":"2026-08-09T06:08:11.445675Z","times_seen":87831,"resource_available":false,"data":null}},"time_used":317,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":317,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"waddyworks.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"waddyworks.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"waddyworks.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"waddyworks.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"waddyworks.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"waddyworks.com/wp-content/plugins/elementor/assets/css/widget-image.min.css?ver=4.1.4","fqdn":"waddyworks.com","domain":"waddyworks.com","tld":"com"},"ip":{"addr":"192.249.120.161","port":443,"asn":22611,"as":"INMOTION","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://waddyworks.com/","date":"2026-06-28T03:46:52.725Z","timestamp":1782618412725,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"waddyworks.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 23 Jun 2026 21:15:09 GMT","end":"Mon, 21 Sep 2026 21:15:08 GMT"},"fingerprint":{"sha1":"36:B3:8F:D5:4C:8F:D3:9A:A1:96:28:AF:1E:DD:B4:4C:A4:E3:76:39","sha256":"D0:18:E5:82:DB:FA:BD:AC:94:15:25:FE:BC:EA:EB:B8:A9:39:9A:89:98:DC:71:24:FE:95:4B:15:05:52:EF:C1"}}},"request":{"raw":"GET /wp-content/plugins/elementor/assets/css/widget-image.min.css?ver=4.1.4 HTTP/1.1\r\nHost: waddyworks.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://waddyworks.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.31.1\r\ndate: Sun, 28 Jun 2026 03:46:52 GMT\r\ncontent-type: text/css\r\nvary: Accept-Encoding\r\nlast-modified: Wed, 24 Jun 2026 21:40:50 GMT\r\nx-proxy-cache: HIT\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx:1.31.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":214,"size_decoded":335,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"12045858d487a8ae56337b554a5ee03c","sha1":"f002d465c77cc210b1a049da21d2d8dfb4bba080","sha256":"fb8690e594b2f9b841585895d811e8cb839667a1a63963d1a1cdea11e2aa2abb","sha512":"2d50371adad63f2b9b384b10b87546b85344fe46560b65f9321100515c257e6a147e1353946f8ef5c4300827a41ce6641c3cedc82c9f63847874c3aae39485ac","ssdeep":"","tlshash":"b2d0c901792783c6302f896926ab669e39d01dddf246db90aca166165abecc82772160","first_seen":"2025-01-03T10:53:39.937643Z","last_seen":"2026-08-09T06:08:11.451491Z","times_seen":118263,"resource_available":false,"data":null}},"time_used":314,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":314,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"waddyworks.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"waddyworks.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"waddyworks.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"waddyworks.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"waddyworks.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"waddyworks.com/wp-content/plugins/elementor/assets/lib/animations/styles/slideInDown.min.css?ver=4.1.4","fqdn":"waddyworks.com","domain":"waddyworks.com","tld":"com"},"ip":{"addr":"192.249.120.161","port":443,"asn":22611,"as":"INMOTION","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://waddyworks.com/","date":"2026-06-28T03:46:52.728Z","timestamp":1782618412728,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"waddyworks.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 23 Jun 2026 21:15:09 GMT","end":"Mon, 21 Sep 2026 21:15:08 GMT"},"fingerprint":{"sha1":"36:B3:8F:D5:4C:8F:D3:9A:A1:96:28:AF:1E:DD:B4:4C:A4:E3:76:39","sha256":"D0:18:E5:82:DB:FA:BD:AC:94:15:25:FE:BC:EA:EB:B8:A9:39:9A:89:98:DC:71:24:FE:95:4B:15:05:52:EF:C1"}}},"request":{"raw":"GET /wp-content/plugins/elementor/assets/lib/animations/styles/slideInDown.min.css?ver=4.1.4 HTTP/1.1\r\nHost: waddyworks.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://waddyworks.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.31.1\r\ndate: Sun, 28 Jun 2026 03:46:52 GMT\r\ncontent-type: text/css\r\nvary: Accept-Encoding\r\nlast-modified: Wed, 24 Jun 2026 21:40:50 GMT\r\nx-proxy-cache: HIT\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx:1.31.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":153,"size_decoded":333,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"86f3e0dfe44db331736e557c06344d41","sha1":"5143aa2148b55e01f763b6425a5e1ef13fdcf5ab","sha256":"3436fb120128be48f9cb58e38456b21fa3a13f4f862d8b83cdb3dc0175180fc1","sha512":"fa7f49d406a4f462c2d37c355b55733d62cf201086b4f637efaf020f60b2b73af5a5ae8db89ef3df4d4777c9a1213a0f2532ab9acedd725d829f0a7a426a7eea","ssdeep":"","tlshash":"a5c08c2804404cb80884a202c0d0c9785b8afaa190214c4e3299308a0e40bae335c5e6","first_seen":"2024-09-20T08:25:11Z","last_seen":"2026-08-08T22:14:16.620655Z","times_seen":5075,"resource_available":false,"data":null}},"time_used":311,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":311,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"waddyworks.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"waddyworks.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"waddyworks.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"waddyworks.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"waddyworks.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"waddyworks.com/wp-content/themes/progrisaas/js/myloadmore.js?ver=1782610122","fqdn":"waddyworks.com","domain":"waddyworks.com","tld":"com"},"ip":{"addr":"192.249.120.161","port":443,"asn":22611,"as":"INMOTION","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://waddyworks.com/","date":"2026-06-28T03:46:52.739Z","timestamp":1782618412739,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"waddyworks.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 23 Jun 2026 21:15:09 GMT","end":"Mon, 21 Sep 2026 21:15:08 GMT"},"fingerprint":{"sha1":"36:B3:8F:D5:4C:8F:D3:9A:A1:96:28:AF:1E:DD:B4:4C:A4:E3:76:39","sha256":"D0:18:E5:82:DB:FA:BD:AC:94:15:25:FE:BC:EA:EB:B8:A9:39:9A:89:98:DC:71:24:FE:95:4B:15:05:52:EF:C1"}}},"request":{"raw":"GET /wp-content/themes/progrisaas/js/myloadmore.js?ver=1782610122 HTTP/1.1\r\nHost: waddyworks.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://waddyworks.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.31.1\r\ndate: Sun, 28 Jun 2026 03:46:52 GMT\r\ncontent-type: text/javascript\r\nvary: Accept-Encoding\r\nlast-modified: Wed, 24 Jun 2026 21:38:19 GMT\r\nx-proxy-cache: HIT\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx:1.31.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2521,"size_decoded":1284,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with CRLF line terminators","md5":"8b1c97ccc1b27572026073afb7f6b11d","sha1":"ee40eea59938f1fa1394c85f115fa48cc3dea727","sha256":"1b9e8cf39cc7fd25bd567bec872d046285cd1cbb581fe39dcd0dae0b34886668","sha512":"5ef392b1445f5d70d5c9b9aa2d0310866927129fee26ba19955fdc314abd5ebbdcebdb64b9f33a93840ff941869a19f2eafcbef07a273bb077a1b0e034388ee1","ssdeep":"","tlshash":"c8511144b17ef81a8af3367ea83a9c04f63de0374401a435355c94788ff8950e23ad6d","first_seen":"2023-04-13T14:29:49Z","last_seen":"2026-08-05T16:56:15.495091Z","times_seen":22,"resource_available":true,"data":null}},"time_used":307,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":307,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"waddyworks.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"waddyworks.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"waddyworks.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"waddyworks.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"waddyworks.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"waddyworks.com/wp-content/themes/progrisaas/js/easypiechart.min.js?ver=20190829","fqdn":"waddyworks.com","domain":"waddyworks.com","tld":"com"},"ip":{"addr":"192.249.120.161","port":443,"asn":22611,"as":"INMOTION","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://waddyworks.com/","date":"2026-06-28T03:46:52.779Z","timestamp":1782618412779,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"waddyworks.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 23 Jun 2026 21:15:09 GMT","end":"Mon, 21 Sep 2026 21:15:08 GMT"},"fingerprint":{"sha1":"36:B3:8F:D5:4C:8F:D3:9A:A1:96:28:AF:1E:DD:B4:4C:A4:E3:76:39","sha256":"D0:18:E5:82:DB:FA:BD:AC:94:15:25:FE:BC:EA:EB:B8:A9:39:9A:89:98:DC:71:24:FE:95:4B:15:05:52:EF:C1"}}},"request":{"raw":"GET /wp-content/themes/progrisaas/js/easypiechart.min.js?ver=20190829 HTTP/1.1\r\nHost: waddyworks.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://waddyworks.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.31.1\r\ndate: Sun, 28 Jun 2026 03:46:52 GMT\r\ncontent-type: text/javascript\r\nvary: Accept-Encoding\r\nlast-modified: Wed, 24 Jun 2026 21:38:19 GMT\r\nx-proxy-cache: HIT\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx:1.31.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":3998,"size_decoded":1930,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (3765), with CRLF line terminators","md5":"8d29ed543ea77682ebfaa80d0539977c","sha1":"fe0ec96dd91247856768db69e172ea2b530b1205","sha256":"6a2507b941afb2782b6e7c7dc2eb3022e58745d98bd9ccb69116819ffc4af0c6","sha512":"41413c32351023da0b0a2e4bf5ab26b7bd3104f60d8ac7dcc1d4b0d6d8dae80a36f5824b47908d11f836be8752022b9f9fa1fcf69abc1eb3bc182b1449110289","ssdeep":"","tlshash":"6f817186b161351950336535917f920b322764f5744f4c28b728e1be3eb590d227ff3a","first_seen":"2023-03-07T12:07:05Z","last_seen":"2026-08-09T04:33:59.997079Z","times_seen":602,"resource_available":true,"data":null}},"time_used":422,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":422,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"waddyworks.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"waddyworks.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"waddyworks.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"waddyworks.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"waddyworks.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"waddyworks.com/wp-content/uploads/elementor/google-fonts/fonts/roboto-kfo7cnqeu92fr1me7ksn66agldtyluama3yuba.woff2","fqdn":"waddyworks.com","domain":"waddyworks.com","tld":"com"},"ip":{"addr":"192.249.120.161","port":443,"asn":22611,"as":"INMOTION","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://waddyworks.com/","date":"2026-06-28T03:46:53.502Z","timestamp":1782618413502,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"waddyworks.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 23 Jun 2026 21:15:09 GMT","end":"Mon, 21 Sep 2026 21:15:08 GMT"},"fingerprint":{"sha1":"36:B3:8F:D5:4C:8F:D3:9A:A1:96:28:AF:1E:DD:B4:4C:A4:E3:76:39","sha256":"D0:18:E5:82:DB:FA:BD:AC:94:15:25:FE:BC:EA:EB:B8:A9:39:9A:89:98:DC:71:24:FE:95:4B:15:05:52:EF:C1"}}},"request":{"raw":"GET /wp-content/uploads/elementor/google-fonts/fonts/roboto-kfo7cnqeu92fr1me7ksn66agldtyluama3yuba.woff2 HTTP/1.1\r\nHost: waddyworks.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://waddyworks.com/wp-content/uploads/elementor/google-fonts/css/roboto.css?ver=1751394152\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.31.1\r\ndate: Sun, 28 Jun 2026 03:46:53 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 40128\r\nlast-modified: Wed, 24 Jun 2026 21:38:19 GMT\r\nvary: Accept-Encoding\r\netag: \"6a3c4e4b-9cc0\"\r\nexpires: Sun, 05 Jul 2026 03:46:53 GMT\r\ncache-control: max-age=604800, public, must-revalidate\r\nx-proxy-cache: STATIC/PATH\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx:1.31.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":40128,"size_decoded":40509,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 40128, version 1.0","md5":"9a01b69183a9604ab3a439e388b30501","sha1":"8ed1d59003d0dbe6360481017b44665153665fbe","sha256":"20b535fa80c8189e3b87d1803038389960203a886d502bc2ef1857affc2f38d2","sha512":"0e6795255b6eea00b5403fd7e3b904d52776d49ac63a31c2778361262883697943aedcb29feee85694ba6f19eaa34dddb9a5bfe7118f4a25b4757e92c331feca","ssdeep":"768:Vce3jkow68wmT4IBX0tXdlSirS61gSjcz0GPwHbP+w2jec56O:VcI/iEEEtXdFJj+0GPwHbP+w5rO","tlshash":"3703023a5e3ccf1a84157a703950f6d9a8481e548e9d143b4f1ac7bf085dde2209b6d4","first_seen":"2025-01-08T22:59:02.845106Z","last_seen":"2026-08-09T06:43:17.726768Z","times_seen":959463,"resource_available":false,"data":null}},"time_used":170,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":162,"receive":8,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"waddyworks.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"waddyworks.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"waddyworks.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"waddyworks.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"waddyworks.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"lottie.host/953eadcc-785f-4f37-89a1-5cb81cb4a091/qb28qIANNO.json","fqdn":"lottie.host","domain":"lottie.host","tld":"host"},"ip":{"addr":"52.84.50.31","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://waddyworks.com/","date":"2026-06-28T03:46:53.619Z","timestamp":1782618413619,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lottie.host","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Fri, 10 Apr 2026 00:00:00 GMT","end":"Sat, 24 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"7A:0B:2F:B8:B0:CF:81:E2:62:2C:F2:C1:74:3A:AD:E1:04:FA:B4:2D","sha256":"85:C9:E9:F0:50:5B:02:EC:98:FC:DD:11:D7:97:BA:EA:AE:96:4E:9C:37:65:43:94:7D:D8:EF:A0:3B:AF:80:4B"}}},"request":{"raw":"GET /953eadcc-785f-4f37-89a1-5cb81cb4a091/qb28qIANNO.json HTTP/1.1\r\nHost: lottie.host\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://waddyworks.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://waddyworks.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: application/json\r\ndate: Sun, 28 Jun 2026 03:44:36 GMT\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, PUT, POST\r\naccess-control-max-age: 1800\r\nlast-modified: Mon, 27 May 2024 06:35:38 GMT\r\ncontent-encoding: br\r\nx-amz-server-side-encryption: AES256\r\nx-amz-version-id: tcrGlJwL7kGDVBkmfLRo_ttmecLJKJ70\r\nserver: AmazonS3\r\netag: W/\"f0454a29f8a70ce45b4d317ec38d2134\"\r\nvary: Origin,Accept-Encoding\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 d85ed2d2deba50aaf4938eae2cbcf3ac.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P3\r\nx-amz-cf-id: 8YaMD4-MIaIggUwoEnyNfQyIBEUPV8KbL6zPSDFHFFfih1JMHCjATg==\r\nage: 138\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":6011,"size_decoded":2339,"mime_type":"application/json","magic":"JSON text data","md5":"f0454a29f8a70ce45b4d317ec38d2134","sha1":"33667ebdc41f2d0a76dd77bfe7aef8370caef4f5","sha256":"5911d1d88a3fa75e94169c820f4990c43c1832eb86d162751dd39797e8c5e4c4","sha512":"0c0b6e7b7087364884bf15d03c23ed44967adaeb8c6e437fc2ae9f72495505cce469b563d4e4806b8e5d3ae27183fdc1ee2e5d6295f8826e255006e6061d2789","ssdeep":"96:IQ72Nod3GNo0NoJ29WTbCtaNY8Evj2hri+rrBWRL:IQqNoENo0No49WTbeiY8Yy1i+PEF","tlshash":"91c1eecc87b6c2acee941dc0cda374e4df955161aec7448ce97e6d1096b0e9e2300e57","first_seen":"2026-05-23T22:28:22.019156Z","last_seen":"2026-06-28T03:47:21.942018Z","times_seen":2,"resource_available":false,"data":null}},"time_used":56,"timings":{"blocked":30,"dns":0,"connect":0,"send":0,"wait":26,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lottie.host/0e746926-5f8c-4487-a305-8a462e5381d2/pmxbSZgFyk.json","fqdn":"lottie.host","domain":"lottie.host","tld":"host"},"ip":{"addr":"52.84.50.31","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://waddyworks.com/","date":"2026-06-28T03:46:53.623Z","timestamp":1782618413623,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lottie.host","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Fri, 10 Apr 2026 00:00:00 GMT","end":"Sat, 24 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"7A:0B:2F:B8:B0:CF:81:E2:62:2C:F2:C1:74:3A:AD:E1:04:FA:B4:2D","sha256":"85:C9:E9:F0:50:5B:02:EC:98:FC:DD:11:D7:97:BA:EA:AE:96:4E:9C:37:65:43:94:7D:D8:EF:A0:3B:AF:80:4B"}}},"request":{"raw":"GET /0e746926-5f8c-4487-a305-8a462e5381d2/pmxbSZgFyk.json HTTP/1.1\r\nHost: lottie.host\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://waddyworks.com/\r\nOrigin: https://waddyworks.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: application/json\r\ndate: Sun, 28 Jun 2026 03:44:36 GMT\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, PUT, POST\r\naccess-control-max-age: 1800\r\nlast-modified: Mon, 27 May 2024 12:54:04 GMT\r\ncontent-encoding: br\r\nx-amz-server-side-encryption: AES256\r\nx-amz-version-id: kURgSE3gRtytWpVXqz2tn4vnL_PldrFc\r\nserver: AmazonS3\r\netag: W/\"da761b531228ea30b29b1c0c45ddb7c0\"\r\nvary: Origin,Accept-Encoding\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 d85ed2d2deba50aaf4938eae2cbcf3ac.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P3\r\nx-amz-cf-id: fdvC3dtUiOdC3A20sM_yVR3EleewUZPTHyXZXV28IjGSR5CK-keYEg==\r\nage: 138\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":12453,"size_decoded":2137,"mime_type":"application/json","magic":"JSON text data","md5":"da761b531228ea30b29b1c0c45ddb7c0","sha1":"04cfcfc0d24f5f4c45a42f88331795aa647e59e0","sha256":"2fbaaca47213a741e0dd0edb64588c5fc32f32ff481bb557aac15f108d3a75e7","sha512":"f7f5126256e52dda48409894ccf9b84beef521691875b521b9b0e1c92cf2f89ab3095114a141f3f71c74d067e82e68d9f9a26c9c9502e57671833e25180efee8","ssdeep":"96:qQqbcFhJkXzkXPhFbz3RDq41xD1O0WzOD3fwLEohXiQLOyG:qQqSHXbVvHFYiOG","tlshash":"d14225990a2503adeb215880cb4770e5cfd4c996afc245eedbb75c148fa668f1302f27","first_seen":"2026-05-23T22:28:22.100422Z","last_seen":"2026-06-28T03:47:21.943777Z","times_seen":2,"resource_available":false,"data":null}},"time_used":56,"timings":{"blocked":26,"dns":0,"connect":0,"send":0,"wait":30,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.googleapis.com/css?family=DM+Sans%3A400%2C400i%2C500%2C500i%2C700%2C700i\u0026subset=latin%2Clatin-ext","fqdn":"fonts.googleapis.com","domain":"fonts.googleapis.com","tld":"googleapis.com"},"ip":{"addr":"142.250.178.42","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://waddyworks.com/","date":"2026-06-28T03:46:52.706Z","timestamp":1782618412706,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"upload.video.google.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Jun 2026 08:38:10 GMT","end":"Mon, 31 Aug 2026 08:38:09 GMT"},"fingerprint":{"sha1":"8A:2F:DC:6F:C0:09:07:D3:E5:9C:B7:EE:C2:C4:63:DC:59:36:B5:1B","sha256":"64:7C:E4:55:AB:5C:58:7E:89:F1:19:3B:95:DB:7B:4B:E6:75:42:2C:0C:51:2E:66:85:F5:BB:51:58:08:39:19"}}},"request":{"raw":"GET /css?family=DM+Sans%3A400%2C400i%2C500%2C500i%2C700%2C700i\u0026subset=latin%2Clatin-ext HTTP/1.1\r\nHost: fonts.googleapis.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://waddyworks.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/css; charset=utf-8\r\nvary: Sec-Fetch-Dest, Sec-Fetch-Mode, Sec-Fetch-Site\r\naccess-control-allow-origin: *\r\ntiming-allow-origin: *\r\nlink: \u003chttps://fonts.gstatic.com\u003e; rel=preconnect; crossorigin\r\nstrict-transport-security: max-age=31536000\r\nexpires: Sun, 28 Jun 2026 03:46:52 GMT\r\ndate: Sun, 28 Jun 2026 03:46:52 GMT\r\ncache-control: private, max-age=86400\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin-allow-popups\r\ncontent-encoding: gzip\r\nserver: ESF\r\nx-xss-protection: 0\r\nx-frame-options: SAMEORIGIN\r\nx-content-type-options: nosniff\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"HSTS","description":"HTTP Strict Transport Security (HSTS) informs browsers that the site should only be accessed using HTTPS.","website":"https://www.rfc-editor.org/rfc/rfc6797#section-6.1","common_platform_enumeration":"","icon":"","categories":["Security"]}],"data":{"size":5073,"size_decoded":1202,"mime_type":"text/css; charset=utf-8","magic":"ASCII text","md5":"f4e1f5c4ff6e9deb6102b21ba339ae4a","sha1":"a8708234998e304bb82fb2d752f54dbdf6772952","sha256":"8145f894956db814a791739ee38b2198b928e522b874eed053b9a6cffabd3d5d","sha512":"6b1e55b8cc3ce2a116bb68dbe4849adcda6890f3dbed9fdaf38fdc80f717477c92d0894dd24b6e9c71ae492cefd38e0eb53bbf8651be07f6fbb3cc89067408fb","ssdeep":"96:jYgL0Jc+ufYgLcNkYgg0Jc+ufYggcNkYgC0Jc+ufYgCcNkOLXsXJc+ufOLX+L0NS:MkQVkkPQVPkpQVp+wx+pw++PwM+3","tlshash":"1ca1ed91083ba154a7932dc422de7d32ef1fa19464456c74abfe2888fc66c7e5372b4c","first_seen":"2025-09-20T16:53:38.736056Z","last_seen":"2026-08-08T04:16:37.098717Z","times_seen":221,"resource_available":false,"data":null}},"time_used":86,"timings":{"blocked":-1,"dns":2,"connect":15,"send":0,"wait":36,"receive":0,"ssl":33},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"waddyworks.com/wp-includes/js/jquery/ui/core.min.js?ver=1.13.3","fqdn":"waddyworks.com","domain":"waddyworks.com","tld":"com"},"ip":{"addr":"192.249.120.161","port":443,"asn":22611,"as":"INMOTION","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://waddyworks.com/","date":"2026-06-28T03:46:52.795Z","timestamp":1782618412795,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"waddyworks.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 23 Jun 2026 21:15:09 GMT","end":"Mon, 21 Sep 2026 21:15:08 GMT"},"fingerprint":{"sha1":"36:B3:8F:D5:4C:8F:D3:9A:A1:96:28:AF:1E:DD:B4:4C:A4:E3:76:39","sha256":"D0:18:E5:82:DB:FA:BD:AC:94:15:25:FE:BC:EA:EB:B8:A9:39:9A:89:98:DC:71:24:FE:95:4B:15:05:52:EF:C1"}}},"request":{"raw":"GET /wp-includes/js/jquery/ui/core.min.js?ver=1.13.3 HTTP/1.1\r\nHost: waddyworks.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://waddyworks.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.31.1\r\ndate: Sun, 28 Jun 2026 03:46:52 GMT\r\ncontent-type: text/javascript\r\nvary: Accept-Encoding\r\nlast-modified: Fri, 07 Feb 2025 01:27:26 GMT\r\nx-proxy-cache: HIT\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx:1.31.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":21464,"size_decoded":7493,"mime_type":"text/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (8189)","md5":"da215ae12b95b3aeeb2047667016c7f8","sha1":"480a7087aa74b5b47c47f05a11670e823a3ae4c0","sha256":"699210a5ed06e497b4730ec83bb65ac4c2269ae4a0ee8af3f24aae7ee5b66b76","sha512":"d256ddc828c06f7b84f7df706a4481928a186ea6d3e1358254a1ec02f403d72d2f3aecd682a93aad61b8f236f17dbcf7e6ca100f78c30a348682bf8ee125d8ff","ssdeep":"384:G/rsrDr8LVyraS3dtrqorqr8hrpCip8fuxNhlGX0CiS9rH/OrLrErJ29FkFvd:iS33ZdvK47kv","tlshash":"06a2d94eb246380586f7a2a5402f521fb132e25cb105c8ddf468d8da3c7eea95173f79","first_seen":"2025-04-15T23:53:17.313193Z","last_seen":"2026-08-09T06:24:16.942118Z","times_seen":339941,"resource_available":true,"data":null}},"time_used":412,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":412,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"waddyworks.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"waddyworks.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"waddyworks.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"waddyworks.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"waddyworks.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"waddyworks.com/wp-content/uploads/2024/05/how.svg","fqdn":"waddyworks.com","domain":"waddyworks.com","tld":"com"},"ip":{"addr":"192.249.120.161","port":443,"asn":22611,"as":"INMOTION","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://waddyworks.com/","date":"2026-06-28T03:46:52.803Z","timestamp":1782618412803,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"waddyworks.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 23 Jun 2026 21:15:09 GMT","end":"Mon, 21 Sep 2026 21:15:08 GMT"},"fingerprint":{"sha1":"36:B3:8F:D5:4C:8F:D3:9A:A1:96:28:AF:1E:DD:B4:4C:A4:E3:76:39","sha256":"D0:18:E5:82:DB:FA:BD:AC:94:15:25:FE:BC:EA:EB:B8:A9:39:9A:89:98:DC:71:24:FE:95:4B:15:05:52:EF:C1"}}},"request":{"raw":"GET /wp-content/uploads/2024/05/how.svg HTTP/1.1\r\nHost: waddyworks.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://waddyworks.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.31.1\r\ndate: Sun, 28 Jun 2026 03:46:52 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 9665\r\nlast-modified: Wed, 24 Jun 2026 21:38:19 GMT\r\nvary: Accept-Encoding\r\netag: \"6a3c4e4b-25c1\"\r\nexpires: Sun, 05 Jul 2026 03:46:52 GMT\r\ncache-control: max-age=604800, public, must-revalidate\r\nx-proxy-cache: STATIC/PATH\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx:1.31.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":9665,"size_decoded":10048,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"fa532b25887ea88431210ecc8a6b9224","sha1":"a234a1940aceb5ca393bc456838ce5d561c51f95","sha256":"f0baca7b60a23f51580b771467b51426421ff907db325203cea6cfbf6d25311e","sha512":"99836847b210726f033a4f1869400d8430a6926be528fa707bf834372267583a49ecc1615b2daa8ddc77396cb9ddd02045aed24191119a7f57c5acb503115e17","ssdeep":"192:yeF9/0JDb/ynJjZLQpmWLjZLQpGFLUFzuuosQUkiDWpENP/jmD:y69/0InddStvdSVPF/jk","tlshash":"c01263ee6b641af4dccad3dbff250559750a90be15c18f38c26d9f48389389cc859d82","first_seen":"2026-05-23T22:28:22.128665Z","last_seen":"2026-06-28T03:47:21.947252Z","times_seen":2,"resource_available":false,"data":null}},"time_used":406,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":406,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"waddyworks.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"waddyworks.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"waddyworks.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"waddyworks.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"waddyworks.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"waddyworks.com/wp-content/uploads/2021/06/home5-bg-piece-1.png","fqdn":"waddyworks.com","domain":"waddyworks.com","tld":"com"},"ip":{"addr":"192.249.120.161","port":443,"asn":22611,"as":"INMOTION","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://waddyworks.com/","date":"2026-06-28T03:46:53.451Z","timestamp":1782618413451,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"waddyworks.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 23 Jun 2026 21:15:09 GMT","end":"Mon, 21 Sep 2026 21:15:08 GMT"},"fingerprint":{"sha1":"36:B3:8F:D5:4C:8F:D3:9A:A1:96:28:AF:1E:DD:B4:4C:A4:E3:76:39","sha256":"D0:18:E5:82:DB:FA:BD:AC:94:15:25:FE:BC:EA:EB:B8:A9:39:9A:89:98:DC:71:24:FE:95:4B:15:05:52:EF:C1"}}},"request":{"raw":"GET /wp-content/uploads/2021/06/home5-bg-piece-1.png HTTP/1.1\r\nHost: waddyworks.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://waddyworks.com/wp-content/uploads/elementor/css/post-7262.css?ver=1782362191\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.31.1\r\ndate: Sun, 28 Jun 2026 03:46:53 GMT\r\ncontent-type: image/png\r\ncontent-length: 2410\r\nlast-modified: Wed, 24 Jun 2026 21:38:19 GMT\r\nvary: Accept-Encoding\r\netag: \"6a3c4e4b-96a\"\r\nexpires: Sun, 05 Jul 2026 03:46:53 GMT\r\ncache-control: max-age=604800, public, must-revalidate\r\nx-proxy-cache: STATIC/PATH\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx:1.31.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":2410,"size_decoded":2788,"mime_type":"image/png","magic":"PNG image data, 179 x 211, 8-bit colormap, non-interlaced","md5":"5071cf9dfa29a676e0d0f7de7ab28e07","sha1":"29130d8d06b35ac05067e57ec7b2a7bd0bc1bda1","sha256":"891e074b4835a0fc523146ea3d0756c1f70c29307834fc6cef7055b1bdca6c89","sha512":"446a47f17f6f2a0e8f5ced9af958fe608d615364b3ec2055e72752eab74b2288fc4a6a22537dee57d8abf551e0be0ad19b95402ca1a94cceef7d1c6a08a80267","ssdeep":"","tlshash":"c241080ebf417cd08485898a2cf344e768437a8c8091f55caecfc4a7792416957c5aea","first_seen":"2026-05-23T22:28:22.140952Z","last_seen":"2026-06-28T03:47:21.94895Z","times_seen":2,"resource_available":false,"data":null}},"time_used":213,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":213,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"waddyworks.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"waddyworks.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"waddyworks.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"waddyworks.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"waddyworks.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/dmsans/v17/rP2Yp2ywxg089UriI5-g4vlH9VoD8Cmcqbu0-K6z8GXhnU0.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://waddyworks.com/","date":"2026-06-28T03:46:53.509Z","timestamp":1782618413509,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Jun 2026 08:38:09 GMT","end":"Mon, 31 Aug 2026 08:38:08 GMT"},"fingerprint":{"sha1":"AD:F1:0B:84:58:92:40:26:B7:10:85:A1:EA:3E:80:1E:FD:E6:A8:F3","sha256":"8F:94:50:CA:96:9B:D0:F9:09:5A:E2:3D:DC:C3:5D:F5:E0:80:CB:17:17:30:2C:CF:86:BD:FB:8B:1B:0B:6D:DE"}}},"request":{"raw":"GET /s/dmsans/v17/rP2Yp2ywxg089UriI5-g4vlH9VoD8Cmcqbu0-K6z8GXhnU0.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://waddyworks.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 36932\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 25 Jun 2026 04:37:42 GMT\r\nexpires: Fri, 25 Jun 2027 04:37:42 GMT\r\ncache-control: public, max-age=31536000\r\nage: 256151\r\nlast-modified: Wed, 10 Sep 2025 16:31:03 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":36932,"size_decoded":37745,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 36932, version 1.0","md5":"7c87a648293fbb5b2924aafaa59e8aea","sha1":"c57593e0adc4cf99dd9e67cb782242220a061a9d","sha256":"9fea608a947e67020c33cad9a6fe3d60c54119dfb8cff87768a8117a15ed7543","sha512":"764ced325a768dca84e1fb0cc458818239ce379dbcbdb324ee8849bbe15f54e3f0254ae6e52ee5a92741840637b4f9885d246a0978af23176b3acfe5b9cec23f","ssdeep":"768:mMQPOAQQKW6GccoXQ+OGpHNzXgtDM0SVu7P3nqtPl9Bf2csDpHUjbYE8j2:mMQz4W5og+tpH6tDJku73EPlPOcs5U/l","tlshash":"c0f2f23e7ea5691487c2b0be506b00935344c9bd37c18121bbb953f44ea67addc5d63c","first_seen":"2025-09-11T17:08:25.889763Z","last_seen":"2026-08-09T06:48:21.660221Z","times_seen":33100,"resource_available":false,"data":null}},"time_used":70,"timings":{"blocked":24,"dns":0,"connect":0,"send":0,"wait":28,"receive":18,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lottie.host/0e746926-5f8c-4487-a305-8a462e5381d2/pmxbSZgFyk.json","fqdn":"lottie.host","domain":"lottie.host","tld":"host"},"ip":{"addr":"52.84.50.31","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://waddyworks.com/","date":"2026-06-28T03:46:53.606Z","timestamp":1782618413606,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lottie.host","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Fri, 10 Apr 2026 00:00:00 GMT","end":"Sat, 24 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"7A:0B:2F:B8:B0:CF:81:E2:62:2C:F2:C1:74:3A:AD:E1:04:FA:B4:2D","sha256":"85:C9:E9:F0:50:5B:02:EC:98:FC:DD:11:D7:97:BA:EA:AE:96:4E:9C:37:65:43:94:7D:D8:EF:A0:3B:AF:80:4B"}}},"request":{"raw":"GET /0e746926-5f8c-4487-a305-8a462e5381d2/pmxbSZgFyk.json HTTP/1.1\r\nHost: lottie.host\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://waddyworks.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://waddyworks.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: application/json\r\ndate: Sun, 28 Jun 2026 03:44:36 GMT\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, PUT, POST\r\naccess-control-max-age: 1800\r\nlast-modified: Mon, 27 May 2024 12:54:04 GMT\r\ncontent-encoding: br\r\nx-amz-server-side-encryption: AES256\r\nx-amz-version-id: kURgSE3gRtytWpVXqz2tn4vnL_PldrFc\r\nserver: AmazonS3\r\netag: W/\"da761b531228ea30b29b1c0c45ddb7c0\"\r\nvary: Origin,Accept-Encoding\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 d85ed2d2deba50aaf4938eae2cbcf3ac.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P3\r\nx-amz-cf-id: bZBRle6VlH3f3kio2EqlRua9ARWokTnsD_Mq3BZbwo-mGj4OQHBUiQ==\r\nage: 138\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":12453,"size_decoded":2137,"mime_type":"application/json","magic":"JSON text data","md5":"da761b531228ea30b29b1c0c45ddb7c0","sha1":"04cfcfc0d24f5f4c45a42f88331795aa647e59e0","sha256":"2fbaaca47213a741e0dd0edb64588c5fc32f32ff481bb557aac15f108d3a75e7","sha512":"f7f5126256e52dda48409894ccf9b84beef521691875b521b9b0e1c92cf2f89ab3095114a141f3f71c74d067e82e68d9f9a26c9c9502e57671833e25180efee8","ssdeep":"96:qQqbcFhJkXzkXPhFbz3RDq41xD1O0WzOD3fwLEohXiQLOyG:qQqSHXbVvHFYiOG","tlshash":"d14225990a2503adeb215880cb4770e5cfd4c996afc245eedbb75c148fa668f1302f27","first_seen":"2026-05-23T22:28:22.100422Z","last_seen":"2026-06-28T03:47:21.943777Z","times_seen":2,"resource_available":false,"data":null}},"time_used":274,"timings":{"blocked":-1,"dns":45,"connect":2,"send":0,"wait":3,"receive":0,"ssl":220},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lottie.host/7401522f-2d8b-4049-ad18-eb0edb6af224/CE9lFrNlEH.json","fqdn":"lottie.host","domain":"lottie.host","tld":"host"},"ip":{"addr":"52.84.50.31","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://waddyworks.com/","date":"2026-06-28T03:46:53.617Z","timestamp":1782618413617,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lottie.host","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Fri, 10 Apr 2026 00:00:00 GMT","end":"Sat, 24 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"7A:0B:2F:B8:B0:CF:81:E2:62:2C:F2:C1:74:3A:AD:E1:04:FA:B4:2D","sha256":"85:C9:E9:F0:50:5B:02:EC:98:FC:DD:11:D7:97:BA:EA:AE:96:4E:9C:37:65:43:94:7D:D8:EF:A0:3B:AF:80:4B"}}},"request":{"raw":"GET /7401522f-2d8b-4049-ad18-eb0edb6af224/CE9lFrNlEH.json HTTP/1.1\r\nHost: lottie.host\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://waddyworks.com/\r\nOrigin: https://waddyworks.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: application/json\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, PUT, POST\r\naccess-control-max-age: 1800\r\nlast-modified: Wed, 21 Jun 2023 11:42:09 GMT\r\ncontent-encoding: br\r\nx-amz-server-side-encryption: AES256\r\nx-amz-version-id: .4C26IQCCg.vsF.jI0pWsqEX.R6VPBTw\r\nserver: AmazonS3\r\ndate: Sun, 28 Jun 2026 03:46:54 GMT\r\netag: W/\"da5b696132a7002af479a0b83755072d\"\r\nvary: Origin,Accept-Encoding\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 d85ed2d2deba50aaf4938eae2cbcf3ac.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P3\r\nx-amz-cf-id: ejlEfg9m2fZlWLMrBhr0O4HXne2qAd9yZdJLa3STD6aD_UOsKcpBOg==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":142142,"size_decoded":15008,"mime_type":"application/json","magic":"JSON text data","md5":"da5b696132a7002af479a0b83755072d","sha1":"0921fc2d6bafa366aa16919a4ff5408989da1acc","sha256":"5780b2ddb9b0680abe5d771efe2ee26de17b6e4ce050c4ed6b657041e0ee6a8d","sha512":"a31860bb741c7fe8de2f6b0c2f8ccda32b3104a4de25077173dda83335ec049ec2c0b381b1b73c116ec9513a693dab7fa50b3bd965e259ac2869f75917bd889d","ssdeep":"3072:P1UF7DS48LnOlFjHVYl8Wzwu6X9rllITxtHo1Xo1RrCD2Jl9lUUUll+Jl2TzJv4+:P1UF7DS48LnOlFjHVYl8Wzwu6X9rllIi","tlshash":"29d3dd8947a1c07cd65e2690ca4f74d9dfc49586cfc6485ca6beac248b89faf3300b57","first_seen":"2026-05-23T22:28:22.158581Z","last_seen":"2026-06-28T03:47:21.889731Z","times_seen":2,"resource_available":false,"data":null}},"time_used":55,"timings":{"blocked":31,"dns":0,"connect":0,"send":0,"wait":24,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lottie.host/54fa8e2a-7931-486c-b3f0-f446a52891b4/YekVwcD2Rn.json","fqdn":"lottie.host","domain":"lottie.host","tld":"host"},"ip":{"addr":"52.84.50.31","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://waddyworks.com/","date":"2026-06-28T03:46:53.624Z","timestamp":1782618413624,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lottie.host","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Fri, 10 Apr 2026 00:00:00 GMT","end":"Sat, 24 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"7A:0B:2F:B8:B0:CF:81:E2:62:2C:F2:C1:74:3A:AD:E1:04:FA:B4:2D","sha256":"85:C9:E9:F0:50:5B:02:EC:98:FC:DD:11:D7:97:BA:EA:AE:96:4E:9C:37:65:43:94:7D:D8:EF:A0:3B:AF:80:4B"}}},"request":{"raw":"GET /54fa8e2a-7931-486c-b3f0-f446a52891b4/YekVwcD2Rn.json HTTP/1.1\r\nHost: lottie.host\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://waddyworks.com/\r\nOrigin: https://waddyworks.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: application/json\r\ndate: Sun, 28 Jun 2026 03:44:36 GMT\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, PUT, POST\r\naccess-control-max-age: 1800\r\nlast-modified: Mon, 27 May 2024 12:53:16 GMT\r\ncontent-encoding: br\r\nx-amz-server-side-encryption: AES256\r\nx-amz-version-id: kR41FIdp1XpBWpyuc2LdQGF4dmud2Ul6\r\nserver: AmazonS3\r\netag: W/\"5987a2d749a0024179113ed5e06495fa\"\r\nvary: Origin,Accept-Encoding\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 d85ed2d2deba50aaf4938eae2cbcf3ac.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P3\r\nx-amz-cf-id: MHvxoyyMoBGWlaGWRYSS3h8jWAmTwhntUU8livPjk3wlYJe_I71XjA==\r\nage: 138\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]}],"data":{"size":9460,"size_decoded":2418,"mime_type":"application/json","magic":"JSON text data","md5":"5987a2d749a0024179113ed5e06495fa","sha1":"1c45e80fcde6595aa9847d30a369ae9c134c3d1b","sha256":"847aae74332fbb93bf5253c35f73cfe74014609a27880ba2238a30f0fe847a2b","sha512":"445dae6e7711cef5294875d93c37dbb550aaf4c11dd275a2daeb2bc9e055113f195e383343115b48563c2d5be363c5bb3bd075f864875f18b96d2a04adfc2d92","ssdeep":"96:oQ/wQaQCQ4xz89j2Kq+DAUnnMZifdC5aWRSH0CvUU:oQoJvtiCgdYRCvD","tlshash":"16127ba5876002fceb1419d2ce4370d49fe4c9666ed209addb76ad248bb1adf2301f17","first_seen":"2026-05-23T22:28:22.186487Z","last_seen":"2026-06-28T03:47:21.951558Z","times_seen":2,"resource_available":false,"data":null}},"time_used":55,"timings":{"blocked":26,"dns":0,"connect":0,"send":0,"wait":29,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lottie.host/54953c1e-5d82-45e9-969a-4f67e59efd73/uveK2Lq37g.json","fqdn":"lottie.host","domain":"lottie.host","tld":"host"},"ip":{"addr":"52.84.50.31","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://waddyworks.com/","date":"2026-06-28T03:46:53.630Z","timestamp":1782618413630,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lottie.host","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Fri, 10 Apr 2026 00:00:00 GMT","end":"Sat, 24 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"7A:0B:2F:B8:B0:CF:81:E2:62:2C:F2:C1:74:3A:AD:E1:04:FA:B4:2D","sha256":"85:C9:E9:F0:50:5B:02:EC:98:FC:DD:11:D7:97:BA:EA:AE:96:4E:9C:37:65:43:94:7D:D8:EF:A0:3B:AF:80:4B"}}},"request":{"raw":"GET /54953c1e-5d82-45e9-969a-4f67e59efd73/uveK2Lq37g.json HTTP/1.1\r\nHost: lottie.host\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://waddyworks.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://waddyworks.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: application/json\r\ndate: Sun, 28 Jun 2026 03:44:36 GMT\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, PUT, POST\r\naccess-control-max-age: 1800\r\nlast-modified: Tue, 28 May 2024 12:47:58 GMT\r\ncontent-encoding: br\r\nx-amz-server-side-encryption: AES256\r\nx-amz-version-id: mYxCz2nRzf0K5HQveTQ9Dsevn5uKam9T\r\nserver: AmazonS3\r\netag: W/\"03d7b099529b2a889c172ec7414bf47a\"\r\nvary: Origin,Accept-Encoding\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 d85ed2d2deba50aaf4938eae2cbcf3ac.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P3\r\nx-amz-cf-id: 9aKdFPAGJCYNn0fnzm9B48iswse2l2uKjbaBlqOQ8ceWqFXaWKa_OA==\r\nage: 138\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":2518,"size_decoded":1244,"mime_type":"application/json","magic":"JSON text data","md5":"03d7b099529b2a889c172ec7414bf47a","sha1":"0b40f4f57784b3bdadfba3fcfff7b9446e9459c2","sha256":"b2a17e8b51442430d4b00fb51a09fc70f572fad9f46b90897246f40ddff7356f","sha512":"8acc894ac8d1447a8d7ca5bc5c340197760916473f57560677542fc8b96f8853d95449ee906d9c185e98fc961e134d55ae418b7b351609b2a45c0376855a5ac5","ssdeep":"","tlshash":"8f51f1850ab503dcfb1514a0cf0374e9cbd48c95afc200d6dab75d28dba69ae2301e2b","first_seen":"2026-05-23T22:28:22.039052Z","last_seen":"2026-06-28T03:47:21.953266Z","times_seen":2,"resource_available":false,"data":null}},"time_used":49,"timings":{"blocked":23,"dns":0,"connect":0,"send":0,"wait":26,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"waddyworks.com/wp-content/uploads/2024/05/benifit2.svg","fqdn":"waddyworks.com","domain":"waddyworks.com","tld":"com"},"ip":{"addr":"192.249.120.161","port":443,"asn":22611,"as":"INMOTION","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://waddyworks.com/","date":"2026-06-28T03:46:53.672Z","timestamp":1782618413672,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"waddyworks.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 23 Jun 2026 21:15:09 GMT","end":"Mon, 21 Sep 2026 21:15:08 GMT"},"fingerprint":{"sha1":"36:B3:8F:D5:4C:8F:D3:9A:A1:96:28:AF:1E:DD:B4:4C:A4:E3:76:39","sha256":"D0:18:E5:82:DB:FA:BD:AC:94:15:25:FE:BC:EA:EB:B8:A9:39:9A:89:98:DC:71:24:FE:95:4B:15:05:52:EF:C1"}}},"request":{"raw":"GET /wp-content/uploads/2024/05/benifit2.svg HTTP/1.1\r\nHost: waddyworks.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://waddyworks.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.31.1\r\ndate: Sun, 28 Jun 2026 03:46:53 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 8590\r\nlast-modified: Wed, 24 Jun 2026 21:38:19 GMT\r\nvary: Accept-Encoding\r\netag: \"6a3c4e4b-218e\"\r\nexpires: Sun, 05 Jul 2026 03:46:53 GMT\r\ncache-control: max-age=604800, public, must-revalidate\r\nx-proxy-cache: STATIC/PATH\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx:1.31.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":8590,"size_decoded":8973,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"8583869cdd19759ca816e2611f4eecdb","sha1":"82df2f3037dfade646bf7c01a159dad9525761f4","sha256":"2831894bce1fb454eed73b73321cc69f1a2229e22345b9074e04166c59e7daea","sha512":"3fad37704984bf73a31819e4b15ad3448a26de27fdf57614cf39c8713863f0299431683c652762f7da118d814d8854608de6b26064b711daa2ce47bbfed17fbb","ssdeep":"192:NRcWMySaRcWMKeDXooeD7vkR1IBcgv4Wo0HcyrKoAZh:/ouNoXb6vq1OvNontr","tlshash":"4802c8ec4bb00ee4dac883eaef3748e83a2761776951c538c32c1a4d2553dcd5859e8b","first_seen":"2026-05-23T22:28:22.167908Z","last_seen":"2026-06-28T03:47:21.955351Z","times_seen":2,"resource_available":false,"data":null}},"time_used":166,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":166,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"waddyworks.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"waddyworks.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"waddyworks.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"waddyworks.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"waddyworks.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"s.w.org/images/core/emoji/17.0.2/svg/1f4de.svg","fqdn":"s.w.org","domain":"w.org","tld":"org"},"ip":{"addr":"192.0.77.48","port":443,"asn":2635,"as":"AUTOMATTIC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://waddyworks.com/","date":"2026-06-28T03:46:55.015Z","timestamp":1782618415015,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"s.w.org","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 23 Jun 2026 19:44:46 GMT","end":"Mon, 21 Sep 2026 19:44:45 GMT"},"fingerprint":{"sha1":"BD:56:B9:45:20:E2:D6:AF:A0:99:69:6F:6D:9E:65:F7:AC:CD:DB:26","sha256":"D5:EF:82:ED:A8:E3:27:81:64:4D:95:F4:A5:07:67:01:77:69:BB:A5:F5:BD:F0:6E:A2:DF:35:1A:24:92:0B:4F"}}},"request":{"raw":"GET /images/core/emoji/17.0.2/svg/1f4de.svg HTTP/1.1\r\nHost: s.w.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://waddyworks.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 28 Jun 2026 03:46:58 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 391\r\nlast-modified: Fri, 07 Nov 2025 05:25:34 GMT\r\nx-frame-options: SAMEORIGIN\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\naccess-control-allow-methods: GET, HEAD\r\naccess-control-allow-origin: *\r\nalt-svc: clear\r\nx-nc: HIT arn 33\r\nserver-timing: a8c-cdn, dc;desc=arn, cache;desc=HIT;dur=1.0\r\nx-content-type-options: nosniff\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":391,"size_decoded":900,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"f34c63197816c3e60bea4a9537c5fffa","sha1":"d0cb02de1a16ba96121b7f588c83068a5cbea2bc","sha256":"75c52e1c16937c12b0237d384089300a6d05d8e12d390995674abe2e56886445","sha512":"0c3c3935b6c34becaa73d3eaa0e86bf1c461b7f7015a12a89a4157adc5a8704b6513fb1a126203527547ed1249842501f19acc4f1eb3d203d0eca44dbf582490","ssdeep":"","tlshash":"72e022ebc594d4508a2a1afcefb8009d195340ce66cf60c0c0b39e63a8cb9caac44e12","first_seen":"2023-05-10T13:56:12Z","last_seen":"2026-08-09T04:22:22.045447Z","times_seen":4073,"resource_available":false,"data":null}},"time_used":3273,"timings":{"blocked":0,"dns":1,"connect":8,"send":0,"wait":9,"receive":0,"ssl":3254},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lottie.host/52335641-3e85-4581-b2a7-a60c177fa9ef/4yurcBNNk8.json","fqdn":"lottie.host","domain":"lottie.host","tld":"host"},"ip":{"addr":"52.84.50.31","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://waddyworks.com/","date":"2026-06-28T03:46:53.610Z","timestamp":1782618413610,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lottie.host","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Fri, 10 Apr 2026 00:00:00 GMT","end":"Sat, 24 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"7A:0B:2F:B8:B0:CF:81:E2:62:2C:F2:C1:74:3A:AD:E1:04:FA:B4:2D","sha256":"85:C9:E9:F0:50:5B:02:EC:98:FC:DD:11:D7:97:BA:EA:AE:96:4E:9C:37:65:43:94:7D:D8:EF:A0:3B:AF:80:4B"}}},"request":{"raw":"GET /52335641-3e85-4581-b2a7-a60c177fa9ef/4yurcBNNk8.json HTTP/1.1\r\nHost: lottie.host\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://waddyworks.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://waddyworks.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: application/json\r\ndate: Sun, 28 Jun 2026 03:44:36 GMT\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, PUT, POST\r\naccess-control-max-age: 1800\r\nlast-modified: Mon, 27 May 2024 06:30:22 GMT\r\ncontent-encoding: br\r\nx-amz-server-side-encryption: AES256\r\nx-amz-version-id: m8Cln9oHQGeUuC1f.bveIFJpHURzInWb\r\nserver: AmazonS3\r\netag: W/\"b968cb75d69766e95fc546ed80ba156a\"\r\nvary: Origin,Accept-Encoding\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 d85ed2d2deba50aaf4938eae2cbcf3ac.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P3\r\nx-amz-cf-id: 49MwvOmygPXSPwg93QB6Fq8Gi4PKqQP5F0ITpDORmZ5tLi-cZLRbSA==\r\nage: 138\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":40391,"size_decoded":2841,"mime_type":"application/json","magic":"JSON text data","md5":"b968cb75d69766e95fc546ed80ba156a","sha1":"f5acd1e74f2a2fa5aec6744c71b4ab6a380676ed","sha256":"aa96decf1977e163ab503f7a55daffbb1995f11f0ad36431e33c6340111f5a39","sha512":"ef907501d202a0a123c52050f038e69ffcaaca307bde584735d7ffe9916f1558d318de1e0dfbe2afd4de75f8e3ec5b9035f8972fc2b2640ef59e47bd433a3126","ssdeep":"768:ZkQ5OWQ/CC12qQI50isrQ73urmpHFAQBFt36QjoDwAcFvL1/8:ZObx2vg3urmpHF/3aw/vL1/8","tlshash":"f803d2958e6201bc934764d0cb9772e48fd8c543dac98bbdd6b52e14abb56db0308f23","first_seen":"2026-05-23T22:28:22.044334Z","last_seen":"2026-06-28T03:47:21.958209Z","times_seen":2,"resource_available":false,"data":null}},"time_used":270,"timings":{"blocked":-1,"dns":41,"connect":2,"send":0,"wait":4,"receive":0,"ssl":221},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lottie.host/52335641-3e85-4581-b2a7-a60c177fa9ef/4yurcBNNk8.json","fqdn":"lottie.host","domain":"lottie.host","tld":"host"},"ip":{"addr":"52.84.50.31","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://waddyworks.com/","date":"2026-06-28T03:46:53.629Z","timestamp":1782618413629,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lottie.host","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Fri, 10 Apr 2026 00:00:00 GMT","end":"Sat, 24 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"7A:0B:2F:B8:B0:CF:81:E2:62:2C:F2:C1:74:3A:AD:E1:04:FA:B4:2D","sha256":"85:C9:E9:F0:50:5B:02:EC:98:FC:DD:11:D7:97:BA:EA:AE:96:4E:9C:37:65:43:94:7D:D8:EF:A0:3B:AF:80:4B"}}},"request":{"raw":"GET /52335641-3e85-4581-b2a7-a60c177fa9ef/4yurcBNNk8.json HTTP/1.1\r\nHost: lottie.host\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://waddyworks.com/\r\nOrigin: https://waddyworks.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: application/json\r\ndate: Sun, 28 Jun 2026 03:44:36 GMT\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, PUT, POST\r\naccess-control-max-age: 1800\r\nlast-modified: Mon, 27 May 2024 06:30:22 GMT\r\ncontent-encoding: br\r\nx-amz-server-side-encryption: AES256\r\nx-amz-version-id: m8Cln9oHQGeUuC1f.bveIFJpHURzInWb\r\nserver: AmazonS3\r\netag: W/\"b968cb75d69766e95fc546ed80ba156a\"\r\nvary: Origin,Accept-Encoding\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 d85ed2d2deba50aaf4938eae2cbcf3ac.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P3\r\nx-amz-cf-id: jXpCei2c6wfHr0uKdUri_0ZkgJsp3iB1RI6uAl0TY2s_xGJG5eqHXA==\r\nage: 138\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":40391,"size_decoded":2841,"mime_type":"application/json","magic":"JSON text data","md5":"b968cb75d69766e95fc546ed80ba156a","sha1":"f5acd1e74f2a2fa5aec6744c71b4ab6a380676ed","sha256":"aa96decf1977e163ab503f7a55daffbb1995f11f0ad36431e33c6340111f5a39","sha512":"ef907501d202a0a123c52050f038e69ffcaaca307bde584735d7ffe9916f1558d318de1e0dfbe2afd4de75f8e3ec5b9035f8972fc2b2640ef59e47bd433a3126","ssdeep":"768:ZkQ5OWQ/CC12qQI50isrQ73urmpHFAQBFt36QjoDwAcFvL1/8:ZObx2vg3urmpHF/3aw/vL1/8","tlshash":"f803d2958e6201bc934764d0cb9772e48fd8c543dac98bbdd6b52e14abb56db0308f23","first_seen":"2026-05-23T22:28:22.044334Z","last_seen":"2026-06-28T03:47:21.958209Z","times_seen":2,"resource_available":false,"data":null}},"time_used":53,"timings":{"blocked":24,"dns":0,"connect":0,"send":0,"wait":29,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"waddyworks.com/wp-content/themes/progrisaas-child/style.css?ver=7.0","fqdn":"waddyworks.com","domain":"waddyworks.com","tld":"com"},"ip":{"addr":"192.249.120.161","port":443,"asn":22611,"as":"INMOTION","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://waddyworks.com/","date":"2026-06-28T03:46:52.715Z","timestamp":1782618412715,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"waddyworks.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 23 Jun 2026 21:15:09 GMT","end":"Mon, 21 Sep 2026 21:15:08 GMT"},"fingerprint":{"sha1":"36:B3:8F:D5:4C:8F:D3:9A:A1:96:28:AF:1E:DD:B4:4C:A4:E3:76:39","sha256":"D0:18:E5:82:DB:FA:BD:AC:94:15:25:FE:BC:EA:EB:B8:A9:39:9A:89:98:DC:71:24:FE:95:4B:15:05:52:EF:C1"}}},"request":{"raw":"GET /wp-content/themes/progrisaas-child/style.css?ver=7.0 HTTP/1.1\r\nHost: waddyworks.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://waddyworks.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.31.1\r\ndate: Sun, 28 Jun 2026 03:46:52 GMT\r\ncontent-type: text/css\r\nvary: Accept-Encoding\r\nlast-modified: Wed, 24 Jun 2026 21:38:19 GMT\r\nx-proxy-cache: HIT\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx:1.31.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":10830,"size_decoded":3108,"mime_type":"text/css","magic":"ASCII text","md5":"574bd0daac1fe172d4a4af4554ada58e","sha1":"b9a5b60077256db505c4ca70834f14fffa4b57cb","sha256":"33ef374767bfa765ada1ab740b2b625d2406ed0c86115484019e51f930ea9a49","sha512":"774d4b23795a7163b67a98f6da412ba77e9a7b89be59dd252b87050c483e6c746c93becd2c3ac2823bc578a08007e8477540717c4285af4894fdfa501638f272","ssdeep":"192:+pNZE7BWdQ5rljGL3q+Z2l07ikQaF/7MFdH2wNgaV5xbfcPT:cEebw4FQFdH2rT","tlshash":"29228552dee31c86b507c1685ff6e768533ca0039a0f9e7ab7de21888fc95d442b7648","first_seen":"2026-05-23T22:28:22.250767Z","last_seen":"2026-06-28T03:47:21.959947Z","times_seen":2,"resource_available":false,"data":null}},"time_used":167,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":167,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"waddyworks.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"waddyworks.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"waddyworks.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"waddyworks.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"waddyworks.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"waddyworks.com/wp-content/plugins/elementor/assets/lib/animations/styles/fadeInDown.min.css?ver=4.1.4","fqdn":"waddyworks.com","domain":"waddyworks.com","tld":"com"},"ip":{"addr":"192.249.120.161","port":443,"asn":22611,"as":"INMOTION","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://waddyworks.com/","date":"2026-06-28T03:46:52.726Z","timestamp":1782618412726,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"waddyworks.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 23 Jun 2026 21:15:09 GMT","end":"Mon, 21 Sep 2026 21:15:08 GMT"},"fingerprint":{"sha1":"36:B3:8F:D5:4C:8F:D3:9A:A1:96:28:AF:1E:DD:B4:4C:A4:E3:76:39","sha256":"D0:18:E5:82:DB:FA:BD:AC:94:15:25:FE:BC:EA:EB:B8:A9:39:9A:89:98:DC:71:24:FE:95:4B:15:05:52:EF:C1"}}},"request":{"raw":"GET /wp-content/plugins/elementor/assets/lib/animations/styles/fadeInDown.min.css?ver=4.1.4 HTTP/1.1\r\nHost: waddyworks.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://waddyworks.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.31.1\r\ndate: Sun, 28 Jun 2026 03:46:52 GMT\r\ncontent-type: text/css\r\nvary: Accept-Encoding\r\nlast-modified: Wed, 24 Jun 2026 21:40:50 GMT\r\nx-proxy-cache: HIT\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx:1.31.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":137,"size_decoded":335,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"213b8c4eb2b35897bce80cd293410b73","sha1":"a01463905eaec1255620662679dfe847a44b2f74","sha256":"13037a61480cee3d2149c59c4f6ddddce6cec4653016cb189bc6bedd42aca2fd","sha512":"6e103fed608ba80069d3e490b359210fb659377c06081294a17a8db778aaa8b2cf1598fd5a301c1baeb01935efd296ca2ea11f9247766c0cd0d0c1c7131e4026","ssdeep":"","tlshash":"aec02b2c89500870008100d254c055009d35d7f1e4332ccf315474050e80bfd03401e3","first_seen":"2024-09-10T20:44:21Z","last_seen":"2026-08-09T05:55:23.188675Z","times_seen":18647,"resource_available":false,"data":null}},"time_used":312,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":312,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"waddyworks.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"waddyworks.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"waddyworks.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"waddyworks.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"waddyworks.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"waddyworks.com/wp-content/themes/progrisaas/style.css","fqdn":"waddyworks.com","domain":"waddyworks.com","tld":"com"},"ip":{"addr":"192.249.120.161","port":443,"asn":22611,"as":"INMOTION","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://waddyworks.com/","date":"2026-06-28T03:46:52.934Z","timestamp":1782618412934,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"waddyworks.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 23 Jun 2026 21:15:09 GMT","end":"Mon, 21 Sep 2026 21:15:08 GMT"},"fingerprint":{"sha1":"36:B3:8F:D5:4C:8F:D3:9A:A1:96:28:AF:1E:DD:B4:4C:A4:E3:76:39","sha256":"D0:18:E5:82:DB:FA:BD:AC:94:15:25:FE:BC:EA:EB:B8:A9:39:9A:89:98:DC:71:24:FE:95:4B:15:05:52:EF:C1"}}},"request":{"raw":"GET /wp-content/themes/progrisaas/style.css HTTP/1.1\r\nHost: waddyworks.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://waddyworks.com/wp-content/themes/progrisaas-child/style.css?ver=7.0\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.31.1\r\ndate: Sun, 28 Jun 2026 03:46:53 GMT\r\ncontent-type: text/css\r\nvary: Accept-Encoding\r\nlast-modified: Wed, 24 Jun 2026 21:38:19 GMT\r\nx-proxy-cache: HIT\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx:1.31.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":211526,"size_decoded":31981,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (423)","md5":"dcb7b0e2fcf75913f9e767d34f5e008a","sha1":"d92c65dc42c66e9e00e34f77167a405c7ca97af1","sha256":"583f408d5fe9afa0d3cd9f8a530f48162253a4725a51a1c264584914f8bb8c63","sha512":"d2390667b3bcb417d29858e7442f1f35b054bc3ea11e5465500be238c28c3dcd90f780a369fc55cfb0304920b23d88e0a16cf96fc9d870479e6eceaafabdc87e","ssdeep":"6144:O+3IElYbzMhRWz/YjIErPz2VdqH5yk3GItdGrtoeqIIEFx8zFLqwIE3rB0YANMz:O+3IElYbzMhRWz/YjIErPz2VdqlmtoeW","tlshash":"142475a51e750905312bd66817c6af59f3bc8013e61bd9a8fad1700c8f8abc8417f79e","first_seen":"2026-05-23T22:28:22.164968Z","last_seen":"2026-06-28T03:47:21.962517Z","times_seen":2,"resource_available":false,"data":null}},"time_used":434,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":434,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"waddyworks.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"waddyworks.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"waddyworks.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"waddyworks.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"waddyworks.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"waddyworks.com/wp-content/plugins/elementor/assets/lib/font-awesome/css/all.min.css?ver=4.1.4","fqdn":"waddyworks.com","domain":"waddyworks.com","tld":"com"},"ip":{"addr":"192.249.120.161","port":443,"asn":22611,"as":"INMOTION","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://waddyworks.com/","date":"2026-06-28T03:46:52.719Z","timestamp":1782618412719,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"waddyworks.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 23 Jun 2026 21:15:09 GMT","end":"Mon, 21 Sep 2026 21:15:08 GMT"},"fingerprint":{"sha1":"36:B3:8F:D5:4C:8F:D3:9A:A1:96:28:AF:1E:DD:B4:4C:A4:E3:76:39","sha256":"D0:18:E5:82:DB:FA:BD:AC:94:15:25:FE:BC:EA:EB:B8:A9:39:9A:89:98:DC:71:24:FE:95:4B:15:05:52:EF:C1"}}},"request":{"raw":"GET /wp-content/plugins/elementor/assets/lib/font-awesome/css/all.min.css?ver=4.1.4 HTTP/1.1\r\nHost: waddyworks.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://waddyworks.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.31.1\r\ndate: Sun, 28 Jun 2026 03:46:52 GMT\r\ncontent-type: text/css\r\nvary: Accept-Encoding\r\nlast-modified: Wed, 24 Jun 2026 21:40:50 GMT\r\nx-proxy-cache: HIT\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx:1.31.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":59344,"size_decoded":13112,"mime_type":"text/css","magic":"ASCII text, with very long lines (59158)","md5":"74bab4578692993514e7f882cc15c218","sha1":"b6293bcfd851f963edbe859498570c4c0c7eaae4","sha256":"d87ddf917b7a1449ab45e2b8e3c98354629bdd65b6659c37e6023bbea1ce1386","sha512":"8810579bc7d6f74fa7b8b7122a56e6acf70b6b4393f76c4ed4122c67ecb00d6642beab1681c715de0168441bf4cfef1d2c9832007221477e5565cda833f808d7","ssdeep":"768:0Eh31IPiyXNq4YxBowbgJlkwF//zMQyYJYX9Bft6VSzl:0E0PxXE4YXJgndFTfy9lt5B","tlshash":"0a43fbb8e54c01c9b731c44bef82b2bc61b6f73de5914d95f00e691c2ad26a811c5fba","first_seen":"2023-04-05T04:00:29Z","last_seen":"2026-08-09T06:20:38.96913Z","times_seen":111752,"resource_available":false,"data":null}},"time_used":166,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":166,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"waddyworks.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"waddyworks.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"waddyworks.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"waddyworks.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"waddyworks.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"waddyworks.com/wp-content/plugins/elementor/assets/lib/animations/styles/zoomIn.min.css?ver=4.1.4","fqdn":"waddyworks.com","domain":"waddyworks.com","tld":"com"},"ip":{"addr":"192.249.120.161","port":443,"asn":22611,"as":"INMOTION","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://waddyworks.com/","date":"2026-06-28T03:46:52.727Z","timestamp":1782618412727,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"waddyworks.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 23 Jun 2026 21:15:09 GMT","end":"Mon, 21 Sep 2026 21:15:08 GMT"},"fingerprint":{"sha1":"36:B3:8F:D5:4C:8F:D3:9A:A1:96:28:AF:1E:DD:B4:4C:A4:E3:76:39","sha256":"D0:18:E5:82:DB:FA:BD:AC:94:15:25:FE:BC:EA:EB:B8:A9:39:9A:89:98:DC:71:24:FE:95:4B:15:05:52:EF:C1"}}},"request":{"raw":"GET /wp-content/plugins/elementor/assets/lib/animations/styles/zoomIn.min.css?ver=4.1.4 HTTP/1.1\r\nHost: waddyworks.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://waddyworks.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.31.1\r\ndate: Sun, 28 Jun 2026 03:46:52 GMT\r\ncontent-type: text/css\r\nvary: Accept-Encoding\r\nlast-modified: Wed, 24 Jun 2026 21:40:50 GMT\r\nx-proxy-cache: HIT\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx:1.31.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":106,"size_decoded":325,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"7339af1b7f9c226094755fe645ff381a","sha1":"47eaf7b16cc7a2b5d729cdfcc7b38042e02d43b3","sha256":"af6953d433e9b119661eac422ce9c9e09a195a0a68ad42ad392e960df31201cc","sha512":"d9f851c919e3620434835ff980060d917136526dfa8cf1efe1b8a0f7bdf41605b6b4a9fe1577cbac895eb5cd3fcbf97edaa040ea4b448537249e4417bc95c102","ssdeep":"","tlshash":"dfb012448945059d414501f365849f84446c4bce36721d972cd008584f552ed31c2103","first_seen":"2024-09-12T11:59:50Z","last_seen":"2026-08-09T04:00:09.781718Z","times_seen":13135,"resource_available":false,"data":null}},"time_used":311,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":311,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"waddyworks.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"waddyworks.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"waddyworks.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"waddyworks.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"waddyworks.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"waddyworks.com/wp-content/uploads/elementor/css/post-7262.css?ver=1782362191","fqdn":"waddyworks.com","domain":"waddyworks.com","tld":"com"},"ip":{"addr":"192.249.120.161","port":443,"asn":22611,"as":"INMOTION","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://waddyworks.com/","date":"2026-06-28T03:46:52.734Z","timestamp":1782618412734,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"waddyworks.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 23 Jun 2026 21:15:09 GMT","end":"Mon, 21 Sep 2026 21:15:08 GMT"},"fingerprint":{"sha1":"36:B3:8F:D5:4C:8F:D3:9A:A1:96:28:AF:1E:DD:B4:4C:A4:E3:76:39","sha256":"D0:18:E5:82:DB:FA:BD:AC:94:15:25:FE:BC:EA:EB:B8:A9:39:9A:89:98:DC:71:24:FE:95:4B:15:05:52:EF:C1"}}},"request":{"raw":"GET /wp-content/uploads/elementor/css/post-7262.css?ver=1782362191 HTTP/1.1\r\nHost: waddyworks.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://waddyworks.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.31.1\r\ndate: Sun, 28 Jun 2026 03:46:52 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 25 Jun 2026 04:36:31 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a3cb04f-d356\"\r\nexpires: Sun, 05 Jul 2026 03:46:52 GMT\r\ncache-control: max-age=604800, public, must-revalidate\r\nx-proxy-cache: STATIC/PATH\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx:1.31.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":54102,"size_decoded":5355,"mime_type":"text/css","magic":"ASCII text, with very long lines (27903)","md5":"35dedfea1dbc87723a4e60bab065d4e9","sha1":"4641971b7511da3848c70274cb056cb2f4f146b1","sha256":"863c2a92a1832f18dba28510c909363808b9729ffb8fbb315b6314f3ffffbdff","sha512":"965eadd4fc00fd30af18b83a3e21e2eab39d2d73029011eae98c51effeebd8c27386e4e947761a8060b343ebf5c4b8540e1dcc8d2ec2eba35d676ace1934d53f","ssdeep":"768:Ehyntw1khXE9bTrD+wMcZiLb3W37e80hnKjmyfx/LZ0q4DBQL4qXPGX9hZlP9P6T:yyyvP4DBQL4qXPGX9RhoEPdCPBUhG","tlshash":"e73311543d436a35b22fb13f6017b68ca8245ccbd57e66eafc20601bf4bae9133e1915","first_seen":"2026-05-23T22:28:22.190927Z","last_seen":"2026-06-28T03:47:21.966005Z","times_seen":2,"resource_available":false,"data":null}},"time_used":305,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":305,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"waddyworks.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"waddyworks.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"waddyworks.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"waddyworks.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"waddyworks.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"waddyworks.com/wp-content/uploads/elementor/google-fonts/css/roboto.css?ver=1751394152","fqdn":"waddyworks.com","domain":"waddyworks.com","tld":"com"},"ip":{"addr":"192.249.120.161","port":443,"asn":22611,"as":"INMOTION","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://waddyworks.com/","date":"2026-06-28T03:46:52.735Z","timestamp":1782618412735,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"waddyworks.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 23 Jun 2026 21:15:09 GMT","end":"Mon, 21 Sep 2026 21:15:08 GMT"},"fingerprint":{"sha1":"36:B3:8F:D5:4C:8F:D3:9A:A1:96:28:AF:1E:DD:B4:4C:A4:E3:76:39","sha256":"D0:18:E5:82:DB:FA:BD:AC:94:15:25:FE:BC:EA:EB:B8:A9:39:9A:89:98:DC:71:24:FE:95:4B:15:05:52:EF:C1"}}},"request":{"raw":"GET /wp-content/uploads/elementor/google-fonts/css/roboto.css?ver=1751394152 HTTP/1.1\r\nHost: waddyworks.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://waddyworks.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.31.1\r\ndate: Sun, 28 Jun 2026 03:46:52 GMT\r\ncontent-type: text/css\r\nlast-modified: Wed, 24 Jun 2026 21:38:19 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a3c4e4b-1a24a\"\r\nexpires: Sun, 05 Jul 2026 03:46:52 GMT\r\ncache-control: max-age=604800, public, must-revalidate\r\nx-proxy-cache: STATIC/PATH\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx:1.31.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":107082,"size_decoded":2362,"mime_type":"text/css","magic":"ASCII text, with very long lines (1572)","md5":"b46d2ee7525ba2ccbf05fec7c3447f76","sha1":"4aa7bf0723741e839e744123b26b4390cbed13c4","sha256":"2bbf2e91859f93ea595d7671abf8e0dda315e10584398b8e1fbc2a0b09454cd5","sha512":"bc0a5314b1043bc194c483f3b35c56e990f41ea9e4f0964f5f94de0de979f13ccbe3ae540277b3ede4441337fbb44f8ae6dc12a804e32b4fbe0dc352878f23d6","ssdeep":"768:y9dgNgB0K7nTlgcQfMuUBwoo7kay5CnH44xLO29JVCPPdwDFNOX71MC:ox6D09WPQHazc12Xopt","tlshash":"a0a331a200070101a79758e223ce7e28fd0ed215b544d1b9abfc4bafefdbd6512a935d","first_seen":"2026-05-23T22:28:22.200153Z","last_seen":"2026-06-28T03:47:21.967573Z","times_seen":2,"resource_available":false,"data":null}},"time_used":304,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":304,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"waddyworks.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"waddyworks.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"waddyworks.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"waddyworks.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"waddyworks.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"waddyworks.com/wp-content/themes/progrisaas-child/images/favicon.png","fqdn":"waddyworks.com","domain":"waddyworks.com","tld":"com"},"ip":{"addr":"192.249.120.161","port":443,"asn":22611,"as":"INMOTION","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://waddyworks.com/","date":"2026-06-28T03:46:53.446Z","timestamp":1782618413446,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"waddyworks.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 23 Jun 2026 21:15:09 GMT","end":"Mon, 21 Sep 2026 21:15:08 GMT"},"fingerprint":{"sha1":"36:B3:8F:D5:4C:8F:D3:9A:A1:96:28:AF:1E:DD:B4:4C:A4:E3:76:39","sha256":"D0:18:E5:82:DB:FA:BD:AC:94:15:25:FE:BC:EA:EB:B8:A9:39:9A:89:98:DC:71:24:FE:95:4B:15:05:52:EF:C1"}}},"request":{"raw":"GET /wp-content/themes/progrisaas-child/images/favicon.png HTTP/1.1\r\nHost: waddyworks.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://waddyworks.com/wp-content/themes/progrisaas-child/style.css?ver=7.0\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.31.1\r\ndate: Sun, 28 Jun 2026 03:46:53 GMT\r\ncontent-type: image/png\r\ncontent-length: 31530\r\nlast-modified: Wed, 24 Jun 2026 21:38:19 GMT\r\nx-proxy-cache: HIT\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx:1.31.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":31530,"size_decoded":31760,"mime_type":"image/png","magic":"PNG image data, 201 x 163, 8-bit/color RGBA, non-interlaced","md5":"a21476839b70a2b4db8033f51537cd78","sha1":"bb5d0783c5a789220fa1d02ca4a3463bbac0a56d","sha256":"16e58da7ae2e6c808e13200f56cc9122d399ef925801a5d5eda276e164e7bb55","sha512":"e7d754b4deca20ac2c105a65d5492a0e927de399d852d0585a3a7a02b1224cdebe779036db247fc97733de251108392158485a73cfffa3bfce51dfe2e1f8f741","ssdeep":"768:nfocVRPvXdI/1MpOy32rs9nfTXP6qYWc3oQt25w:nfzVBlIkOy32rwLyqYWcOW","tlshash":"13e2f15548c06e85c71cf6d754a28c21d686dc866f84ca151eeec2f38abd329b772983","first_seen":"2026-05-23T22:28:22.021588Z","last_seen":"2026-06-28T03:47:21.872811Z","times_seen":2,"resource_available":false,"data":null}},"time_used":162,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":162,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"waddyworks.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"waddyworks.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"waddyworks.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"waddyworks.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"waddyworks.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"lottie.host/54fa8e2a-7931-486c-b3f0-f446a52891b4/YekVwcD2Rn.json","fqdn":"lottie.host","domain":"lottie.host","tld":"host"},"ip":{"addr":"52.84.50.31","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://waddyworks.com/","date":"2026-06-28T03:46:53.608Z","timestamp":1782618413608,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lottie.host","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Fri, 10 Apr 2026 00:00:00 GMT","end":"Sat, 24 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"7A:0B:2F:B8:B0:CF:81:E2:62:2C:F2:C1:74:3A:AD:E1:04:FA:B4:2D","sha256":"85:C9:E9:F0:50:5B:02:EC:98:FC:DD:11:D7:97:BA:EA:AE:96:4E:9C:37:65:43:94:7D:D8:EF:A0:3B:AF:80:4B"}}},"request":{"raw":"GET /54fa8e2a-7931-486c-b3f0-f446a52891b4/YekVwcD2Rn.json HTTP/1.1\r\nHost: lottie.host\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://waddyworks.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://waddyworks.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: application/json\r\ndate: Sun, 28 Jun 2026 03:44:36 GMT\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, PUT, POST\r\naccess-control-max-age: 1800\r\nlast-modified: Mon, 27 May 2024 12:53:16 GMT\r\ncontent-encoding: br\r\nx-amz-server-side-encryption: AES256\r\nx-amz-version-id: kR41FIdp1XpBWpyuc2LdQGF4dmud2Ul6\r\nserver: AmazonS3\r\netag: W/\"5987a2d749a0024179113ed5e06495fa\"\r\nvary: Origin,Accept-Encoding\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 d85ed2d2deba50aaf4938eae2cbcf3ac.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P3\r\nx-amz-cf-id: gcjmMIX-I7glBJiyvGPXQZqqlrgSUnPIvoO9gExuXZ2lGMLucncdHQ==\r\nage: 138\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":9460,"size_decoded":2418,"mime_type":"application/json","magic":"JSON text data","md5":"5987a2d749a0024179113ed5e06495fa","sha1":"1c45e80fcde6595aa9847d30a369ae9c134c3d1b","sha256":"847aae74332fbb93bf5253c35f73cfe74014609a27880ba2238a30f0fe847a2b","sha512":"445dae6e7711cef5294875d93c37dbb550aaf4c11dd275a2daeb2bc9e055113f195e383343115b48563c2d5be363c5bb3bd075f864875f18b96d2a04adfc2d92","ssdeep":"96:oQ/wQaQCQ4xz89j2Kq+DAUnnMZifdC5aWRSH0CvUU:oQoJvtiCgdYRCvD","tlshash":"16127ba5876002fceb1419d2ce4370d49fe4c9666ed209addb76ad248bb1adf2301f17","first_seen":"2026-05-23T22:28:22.186487Z","last_seen":"2026-06-28T03:47:21.951558Z","times_seen":2,"resource_available":false,"data":null}},"time_used":272,"timings":{"blocked":-1,"dns":43,"connect":2,"send":0,"wait":4,"receive":0,"ssl":220},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lottie.host/953eadcc-785f-4f37-89a1-5cb81cb4a091/qb28qIANNO.json","fqdn":"lottie.host","domain":"lottie.host","tld":"host"},"ip":{"addr":"52.84.50.31","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://waddyworks.com/","date":"2026-06-28T03:46:53.635Z","timestamp":1782618413635,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lottie.host","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Fri, 10 Apr 2026 00:00:00 GMT","end":"Sat, 24 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"7A:0B:2F:B8:B0:CF:81:E2:62:2C:F2:C1:74:3A:AD:E1:04:FA:B4:2D","sha256":"85:C9:E9:F0:50:5B:02:EC:98:FC:DD:11:D7:97:BA:EA:AE:96:4E:9C:37:65:43:94:7D:D8:EF:A0:3B:AF:80:4B"}}},"request":{"raw":"GET /953eadcc-785f-4f37-89a1-5cb81cb4a091/qb28qIANNO.json HTTP/1.1\r\nHost: lottie.host\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://waddyworks.com/\r\nOrigin: https://waddyworks.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: application/json\r\ndate: Sun, 28 Jun 2026 03:44:36 GMT\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, PUT, POST\r\naccess-control-max-age: 1800\r\nlast-modified: Mon, 27 May 2024 06:35:38 GMT\r\ncontent-encoding: br\r\nx-amz-server-side-encryption: AES256\r\nx-amz-version-id: tcrGlJwL7kGDVBkmfLRo_ttmecLJKJ70\r\nserver: AmazonS3\r\netag: W/\"f0454a29f8a70ce45b4d317ec38d2134\"\r\nvary: Origin,Accept-Encoding\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 d85ed2d2deba50aaf4938eae2cbcf3ac.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P3\r\nx-amz-cf-id: g7yNgd7nAvSqUl8abp4CKw7QdczqiasQuHtnnmpN52kvj7lWUOx4nw==\r\nage: 138\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":6011,"size_decoded":2339,"mime_type":"application/json","magic":"JSON text data","md5":"f0454a29f8a70ce45b4d317ec38d2134","sha1":"33667ebdc41f2d0a76dd77bfe7aef8370caef4f5","sha256":"5911d1d88a3fa75e94169c820f4990c43c1832eb86d162751dd39797e8c5e4c4","sha512":"0c0b6e7b7087364884bf15d03c23ed44967adaeb8c6e437fc2ae9f72495505cce469b563d4e4806b8e5d3ae27183fdc1ee2e5d6295f8826e255006e6061d2789","ssdeep":"96:IQ72Nod3GNo0NoJ29WTbCtaNY8Evj2hri+rrBWRL:IQqNoENo0No49WTbeiY8Yy1i+PEF","tlshash":"91c1eecc87b6c2acee941dc0cda374e4df955161aec7448ce97e6d1096b0e9e2300e57","first_seen":"2026-05-23T22:28:22.019156Z","last_seen":"2026-06-28T03:47:21.942018Z","times_seen":2,"resource_available":false,"data":null}},"time_used":48,"timings":{"blocked":23,"dns":0,"connect":0,"send":0,"wait":25,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"waddyworks.com/wp-content/plugins/elementor/assets/css/widget-icon-box.min.css?ver=4.1.4","fqdn":"waddyworks.com","domain":"waddyworks.com","tld":"com"},"ip":{"addr":"192.249.120.161","port":443,"asn":22611,"as":"INMOTION","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://waddyworks.com/","date":"2026-06-28T03:46:52.731Z","timestamp":1782618412731,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"waddyworks.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 23 Jun 2026 21:15:09 GMT","end":"Mon, 21 Sep 2026 21:15:08 GMT"},"fingerprint":{"sha1":"36:B3:8F:D5:4C:8F:D3:9A:A1:96:28:AF:1E:DD:B4:4C:A4:E3:76:39","sha256":"D0:18:E5:82:DB:FA:BD:AC:94:15:25:FE:BC:EA:EB:B8:A9:39:9A:89:98:DC:71:24:FE:95:4B:15:05:52:EF:C1"}}},"request":{"raw":"GET /wp-content/plugins/elementor/assets/css/widget-icon-box.min.css?ver=4.1.4 HTTP/1.1\r\nHost: waddyworks.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://waddyworks.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.31.1\r\ndate: Sun, 28 Jun 2026 03:46:52 GMT\r\ncontent-type: text/css\r\nvary: Accept-Encoding\r\nlast-modified: Wed, 24 Jun 2026 21:40:50 GMT\r\nx-proxy-cache: HIT\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx:1.31.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":4726,"size_decoded":647,"mime_type":"text/css","magic":"ASCII text, with very long lines (4726), with no line terminators","md5":"c5fd583e176fa5c734da0599bfa3dab0","sha1":"cb5471dfa3e203d47469046bc1533a7269c5e000","sha256":"398e2425ac154b75384c55af3fcb40cf68ef50e15714b9dda11bf54ee0b9fc35","sha512":"666a401784702b993c79d2868133b6a2541e283054f82c01ba510aa21070135259a6842ae45eb7d0a8502d2910a30ecc52f12104fd32afa83913e6ea916c4240","ssdeep":"96:jm1PrPhP7VSPdiDPvmRpwPRAE3wBfPJLFZkPhO:jm1PrPhP7VSPdiDPvUmPV3wBfPJLFZkE","tlshash":"53a1910238d32002192f951f0a53291c557588d8dcdbb9a6f862e7169bffdca376287d","first_seen":"2026-01-07T23:29:45.243297Z","last_seen":"2026-08-09T04:34:34.184245Z","times_seen":18635,"resource_available":false,"data":null}},"time_used":308,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":308,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"waddyworks.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"waddyworks.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"waddyworks.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"waddyworks.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"waddyworks.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"waddyworks.com/wp-content/uploads/elementor/css/post-7369.css?ver=1782362031","fqdn":"waddyworks.com","domain":"waddyworks.com","tld":"com"},"ip":{"addr":"192.249.120.161","port":443,"asn":22611,"as":"INMOTION","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://waddyworks.com/","date":"2026-06-28T03:46:52.768Z","timestamp":1782618412768,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"waddyworks.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 23 Jun 2026 21:15:09 GMT","end":"Mon, 21 Sep 2026 21:15:08 GMT"},"fingerprint":{"sha1":"36:B3:8F:D5:4C:8F:D3:9A:A1:96:28:AF:1E:DD:B4:4C:A4:E3:76:39","sha256":"D0:18:E5:82:DB:FA:BD:AC:94:15:25:FE:BC:EA:EB:B8:A9:39:9A:89:98:DC:71:24:FE:95:4B:15:05:52:EF:C1"}}},"request":{"raw":"GET /wp-content/uploads/elementor/css/post-7369.css?ver=1782362031 HTTP/1.1\r\nHost: waddyworks.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://waddyworks.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.31.1\r\ndate: Sun, 28 Jun 2026 03:46:52 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 25 Jun 2026 04:33:51 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a3cafaf-2194\"\r\nexpires: Sun, 05 Jul 2026 03:46:52 GMT\r\ncache-control: max-age=604800, public, must-revalidate\r\nx-proxy-cache: STATIC/PATH\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx:1.31.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":8596,"size_decoded":1607,"mime_type":"text/css","magic":"ASCII text, with very long lines (3402), with CRLF line terminators","md5":"15dee877b11ecbe286cfeb3f6c1f3c6d","sha1":"b8e3ab0008353a83e27965bf7d25c76a63b37ad3","sha256":"338099ea346a5ddadd9c63ce9cfb3107a8d6596694059dccc3e24fe572fe477c","sha512":"7484d6e2fec2579896ef233c93e30cc3006462822c3992f968327865eab1d86961379e3c082977b4acdfd60f49e275aed9e71e275ba35bbb573cf649b5ad969b","ssdeep":"192:708d9/uuFuzalsKsD8oKLlp2k6o2s4PWlulus8F2:1QW92","tlshash":"88024d963e67a929712f701f0023e28c63b69ccae12d37c9f9b19543f4bad9137e1914","first_seen":"2026-05-23T22:28:22.119939Z","last_seen":"2026-06-28T03:47:21.969704Z","times_seen":2,"resource_available":false,"data":null}},"time_used":283,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":283,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"waddyworks.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"waddyworks.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"waddyworks.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"waddyworks.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"waddyworks.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"waddyworks.com/wp-content/themes/progrisaas-child/js/custom.js","fqdn":"waddyworks.com","domain":"waddyworks.com","tld":"com"},"ip":{"addr":"192.249.120.161","port":443,"asn":22611,"as":"INMOTION","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://waddyworks.com/","date":"2026-06-28T03:46:52.800Z","timestamp":1782618412800,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"waddyworks.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 23 Jun 2026 21:15:09 GMT","end":"Mon, 21 Sep 2026 21:15:08 GMT"},"fingerprint":{"sha1":"36:B3:8F:D5:4C:8F:D3:9A:A1:96:28:AF:1E:DD:B4:4C:A4:E3:76:39","sha256":"D0:18:E5:82:DB:FA:BD:AC:94:15:25:FE:BC:EA:EB:B8:A9:39:9A:89:98:DC:71:24:FE:95:4B:15:05:52:EF:C1"}}},"request":{"raw":"GET /wp-content/themes/progrisaas-child/js/custom.js HTTP/1.1\r\nHost: waddyworks.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://waddyworks.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.31.1\r\ndate: Sun, 28 Jun 2026 03:46:52 GMT\r\ncontent-type: text/javascript\r\nvary: Accept-Encoding\r\nlast-modified: Wed, 24 Jun 2026 21:38:19 GMT\r\nx-proxy-cache: HIT\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx:1.31.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":4135,"size_decoded":1714,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text","md5":"1d4155802629d0d78ad66864c4648892","sha1":"d8f1b73aad76aaac595ea6b75276e0765fb9c8c3","sha256":"c120fbc27dafeec2eddc25842d893828c0e64611ae6c4f193078eafe8a1bc988","sha512":"311e904f4b6326ac599a135253e1a13c61b5e4e4e94af21cca86783b4c5baf77a0c2a60c38d4f5eb43d5a519fa0a2f489592442834e5f0a60b416e08cf7c579c","ssdeep":"96:7NoYLfpe9OQS70HUSlqoda1BZ3p0yfltBWzTprR:KYLfpe9OpQUSgBZ3CyfltBWzT5R","tlshash":"8f81422872a121ed95b73428d7bf62a8303750177508fc0ab90e82765f2c23d15f7afa","first_seen":"2026-05-23T22:28:22.179569Z","last_seen":"2026-06-28T03:47:21.971115Z","times_seen":2,"resource_available":true,"data":null}},"time_used":407,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":407,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"waddyworks.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"waddyworks.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"waddyworks.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"waddyworks.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"waddyworks.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"waddyworks.com/wp-content/uploads/2024/05/benifit1.svg","fqdn":"waddyworks.com","domain":"waddyworks.com","tld":"com"},"ip":{"addr":"192.249.120.161","port":443,"asn":22611,"as":"INMOTION","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://waddyworks.com/","date":"2026-06-28T03:46:53.673Z","timestamp":1782618413673,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"waddyworks.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 23 Jun 2026 21:15:09 GMT","end":"Mon, 21 Sep 2026 21:15:08 GMT"},"fingerprint":{"sha1":"36:B3:8F:D5:4C:8F:D3:9A:A1:96:28:AF:1E:DD:B4:4C:A4:E3:76:39","sha256":"D0:18:E5:82:DB:FA:BD:AC:94:15:25:FE:BC:EA:EB:B8:A9:39:9A:89:98:DC:71:24:FE:95:4B:15:05:52:EF:C1"}}},"request":{"raw":"GET /wp-content/uploads/2024/05/benifit1.svg HTTP/1.1\r\nHost: waddyworks.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://waddyworks.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.31.1\r\ndate: Sun, 28 Jun 2026 03:46:53 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 18042\r\nlast-modified: Wed, 24 Jun 2026 21:38:19 GMT\r\nvary: Accept-Encoding\r\netag: \"6a3c4e4b-467a\"\r\nexpires: Sun, 05 Jul 2026 03:46:53 GMT\r\ncache-control: max-age=604800, public, must-revalidate\r\nx-proxy-cache: STATIC/PATH\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx:1.31.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":18042,"size_decoded":18426,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"8b6cca313b10a865b19f8622564f03ab","sha1":"8db334103dfc51e95bfd919d0021093a52e42b78","sha256":"e1513442e60c561b64b7cd7dde34a9d00f93b1a8d480ed604865af1ef797f2ed","sha512":"6826ffe8647f1e157157da9281890d0a8b7c5e870a5f803ca602ad9645a7d5529c2c1893933011efbbc32ee1b733dc5e6ff2cd9bbf18d8fd537d8de8f382fedd","ssdeep":"384:avEFNTvEF2tIz/TCUwEt2PcLcQT4IE9AGJ5C7iiDayzNK28fT0zL:dF6F2tqn2Pc4jnL5Yp8b0zL","tlshash":"3682b4ed2bb01de4cecdc7d7bf2180ac3417967b99908e28c36d8e58249186edd16dc6","first_seen":"2026-05-23T22:28:22.298161Z","last_seen":"2026-06-28T03:47:21.972576Z","times_seen":2,"resource_available":false,"data":null}},"time_used":167,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":164,"receive":3,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"waddyworks.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"waddyworks.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"waddyworks.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"waddyworks.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"waddyworks.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"waddyworks.com/wp-content/plugins/elementor/assets/lib/animations/styles/slideInRight.min.css?ver=4.1.4","fqdn":"waddyworks.com","domain":"waddyworks.com","tld":"com"},"ip":{"addr":"192.249.120.161","port":443,"asn":22611,"as":"INMOTION","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://waddyworks.com/","date":"2026-06-28T03:46:52.733Z","timestamp":1782618412733,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"waddyworks.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 23 Jun 2026 21:15:09 GMT","end":"Mon, 21 Sep 2026 21:15:08 GMT"},"fingerprint":{"sha1":"36:B3:8F:D5:4C:8F:D3:9A:A1:96:28:AF:1E:DD:B4:4C:A4:E3:76:39","sha256":"D0:18:E5:82:DB:FA:BD:AC:94:15:25:FE:BC:EA:EB:B8:A9:39:9A:89:98:DC:71:24:FE:95:4B:15:05:52:EF:C1"}}},"request":{"raw":"GET /wp-content/plugins/elementor/assets/lib/animations/styles/slideInRight.min.css?ver=4.1.4 HTTP/1.1\r\nHost: waddyworks.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://waddyworks.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.31.1\r\ndate: Sun, 28 Jun 2026 03:46:52 GMT\r\ncontent-type: text/css\r\nvary: Accept-Encoding\r\nlast-modified: Wed, 24 Jun 2026 21:40:50 GMT\r\nx-proxy-cache: HIT\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx:1.31.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":155,"size_decoded":334,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"5144b262df1bba4f71d9dc1db70afeff","sha1":"53e27a4ca78f4d4ce16cf36554bf914d5e1e3e8e","sha256":"377461349f66b2ccbd1e1f289cee9ebe37b81a366f5cda5846fd289996a7ec7e","sha512":"2b7f10dc1f6bda1db77cc99676d9e9e3e96df9fbc8fddd0ecc8ec576672df463b52af4182ffbc23e232f9d1434f2470f0371b4fff67b071a637b71abb4a7ae42","ssdeep":"","tlshash":"4fc08c980450082a08b86303c0e4e8748289dab150a38c3e3285258a0e42aca338c587","first_seen":"2024-09-17T14:45:00Z","last_seen":"2026-08-08T20:09:30.587714Z","times_seen":10316,"resource_available":false,"data":null}},"time_used":306,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":306,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"waddyworks.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"waddyworks.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"waddyworks.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"waddyworks.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"waddyworks.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"waddyworks.com/wp-content/uploads/2021/05/logo-client2.svg","fqdn":"waddyworks.com","domain":"waddyworks.com","tld":"com"},"ip":{"addr":"192.249.120.161","port":443,"asn":22611,"as":"INMOTION","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://waddyworks.com/","date":"2026-06-28T03:46:52.804Z","timestamp":1782618412804,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"waddyworks.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 23 Jun 2026 21:15:09 GMT","end":"Mon, 21 Sep 2026 21:15:08 GMT"},"fingerprint":{"sha1":"36:B3:8F:D5:4C:8F:D3:9A:A1:96:28:AF:1E:DD:B4:4C:A4:E3:76:39","sha256":"D0:18:E5:82:DB:FA:BD:AC:94:15:25:FE:BC:EA:EB:B8:A9:39:9A:89:98:DC:71:24:FE:95:4B:15:05:52:EF:C1"}}},"request":{"raw":"GET /wp-content/uploads/2021/05/logo-client2.svg HTTP/1.1\r\nHost: waddyworks.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://waddyworks.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.31.1\r\ndate: Sun, 28 Jun 2026 03:46:52 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 5472\r\nlast-modified: Wed, 24 Jun 2026 21:38:19 GMT\r\nvary: Accept-Encoding\r\netag: \"6a3c4e4b-1560\"\r\nexpires: Sun, 05 Jul 2026 03:46:52 GMT\r\ncache-control: max-age=604800, public, must-revalidate\r\nx-proxy-cache: STATIC/PATH\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx:1.31.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":5472,"size_decoded":5855,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"dae9811d0ee6c5a244222be0876e7ed0","sha1":"6a94e83e7f3b86181032f1c1b5280d9460b4577f","sha256":"da3c1267950f047f693e536e0afac4ea54dc6ad7003e96e7b6eb9e42bebcccf3","sha512":"f233e502c083b0b9f7648ee9c8f313a15070162ba9f2695d5cafaa8d9ca2399fc0cee0e23838d6e4064d5665ec06f3549e222f5c3402559af02f739fe9e548c9","ssdeep":"96:3xucDc1DA5J5Z8UbYA0MBngDda43O+cMJdWBpLE95sg69YBtlmvOSOUs:Bh41DA5aeYSdgDcWO+BsbLE7C0vmvBy","tlshash":"c3b112ea93e262f49806f7e4d9212a753d6f24777bddcba9c3a35e68b95504c44c0cc0","first_seen":"2026-05-23T22:28:22.112816Z","last_seen":"2026-06-28T03:47:21.974719Z","times_seen":2,"resource_available":false,"data":null}},"time_used":401,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":401,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"waddyworks.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"waddyworks.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"waddyworks.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"waddyworks.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"waddyworks.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"waddyworks.com/wp-content/uploads/elementor/google-fonts/fonts/dmsans-rp2yp2ywxg089urii5-g4vlh9vod8cmcqbu0-k4.woff2","fqdn":"waddyworks.com","domain":"waddyworks.com","tld":"com"},"ip":{"addr":"192.249.120.161","port":443,"asn":22611,"as":"INMOTION","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://waddyworks.com/","date":"2026-06-28T03:46:53.551Z","timestamp":1782618413551,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"waddyworks.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 23 Jun 2026 21:15:09 GMT","end":"Mon, 21 Sep 2026 21:15:08 GMT"},"fingerprint":{"sha1":"36:B3:8F:D5:4C:8F:D3:9A:A1:96:28:AF:1E:DD:B4:4C:A4:E3:76:39","sha256":"D0:18:E5:82:DB:FA:BD:AC:94:15:25:FE:BC:EA:EB:B8:A9:39:9A:89:98:DC:71:24:FE:95:4B:15:05:52:EF:C1"}}},"request":{"raw":"GET /wp-content/uploads/elementor/google-fonts/fonts/dmsans-rp2yp2ywxg089urii5-g4vlh9vod8cmcqbu0-k4.woff2 HTTP/1.1\r\nHost: waddyworks.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://waddyworks.com/wp-content/uploads/elementor/google-fonts/css/dmsans.css?ver=1751394154\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.31.1\r\ndate: Sun, 28 Jun 2026 03:46:53 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 36916\r\nlast-modified: Wed, 24 Jun 2026 21:38:19 GMT\r\nvary: Accept-Encoding\r\netag: \"6a3c4e4b-9034\"\r\nexpires: Sun, 05 Jul 2026 03:46:53 GMT\r\ncache-control: max-age=604800, public, must-revalidate\r\nx-proxy-cache: STATIC/PATH\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx:1.31.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":36916,"size_decoded":37297,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 36916, version 1.0","md5":"f0244b919a1d63ca2c430cbea5a9760b","sha1":"e85051d4a760f8feb6b2293ad9ba3cde1cbec15e","sha256":"967ec653e45a62f5dc91767eba95b0e2df6ed754bc4de4354e5efdf4ac9de068","sha512":"04d130036a5545024d95cd29b5562e4343ca475499b154c3d26458d2a4db6323f64ad4a9be6470982947b95f543f4003fccdcfe5072dabb04ccc5cb5d7148323","ssdeep":"768:GxfGQAfOaEkOfBo6V3Wz0sIPDNmgJPkM2SHhQ4DU7ol0CB1Y74bpmh:GxfGQy/WfBhC0ZvVLhxUUfB1Yvh","tlshash":"24f2f239bfe7dec3f0da9350113fc4108314a7e6a7482f42d6d585f8a45d424daadd98","first_seen":"2025-06-02T18:48:01.285787Z","last_seen":"2026-08-09T06:08:11.357965Z","times_seen":4149,"resource_available":false,"data":null}},"time_used":162,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":161,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"waddyworks.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"waddyworks.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"waddyworks.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"waddyworks.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"waddyworks.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"waddyworks.com/wp-content/plugins/elementor/assets/lib/animations/styles/fadeInUp.min.css?ver=4.1.4","fqdn":"waddyworks.com","domain":"waddyworks.com","tld":"com"},"ip":{"addr":"192.249.120.161","port":443,"asn":22611,"as":"INMOTION","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://waddyworks.com/","date":"2026-06-28T03:46:52.722Z","timestamp":1782618412722,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"waddyworks.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 23 Jun 2026 21:15:09 GMT","end":"Mon, 21 Sep 2026 21:15:08 GMT"},"fingerprint":{"sha1":"36:B3:8F:D5:4C:8F:D3:9A:A1:96:28:AF:1E:DD:B4:4C:A4:E3:76:39","sha256":"D0:18:E5:82:DB:FA:BD:AC:94:15:25:FE:BC:EA:EB:B8:A9:39:9A:89:98:DC:71:24:FE:95:4B:15:05:52:EF:C1"}}},"request":{"raw":"GET /wp-content/plugins/elementor/assets/lib/animations/styles/fadeInUp.min.css?ver=4.1.4 HTTP/1.1\r\nHost: waddyworks.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://waddyworks.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.31.1\r\ndate: Sun, 28 Jun 2026 03:46:52 GMT\r\ncontent-type: text/css\r\nvary: Accept-Encoding\r\nlast-modified: Wed, 24 Jun 2026 21:40:50 GMT\r\nx-proxy-cache: HIT\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx:1.31.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":130,"size_decoded":333,"mime_type":"text/css","magic":"ASCII text, with no line terminators","md5":"18b6260305b3bdc5100c937971d28906","sha1":"12c44b736a53dfa11c8286fe3ef05c2f64f47a47","sha256":"7263363f11b6184fe306b05a849db2de5a674258610578e594068bec72b4f2a9","sha512":"2c1751f012fd78fdf93ee1700536c117a4d9eac6fb442f3386aea7339f72ad2fcdf4835b309eafc6214da2c584bdfb47680291e191ac4b3721b21c32e5cdd2d8","ssdeep":"","tlshash":"78c092488aa4414d029a05fabcc4a951c53acbf6e9732edf7294494b4b81aad13892e3","first_seen":"2023-10-30T21:54:19Z","last_seen":"2026-08-09T04:55:08.034386Z","times_seen":45964,"resource_available":false,"data":null}},"time_used":317,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":317,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"waddyworks.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"waddyworks.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"waddyworks.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"waddyworks.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"waddyworks.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"waddyworks.com/wp-content/uploads/elementor/css/post-3462.css?ver=1782362031","fqdn":"waddyworks.com","domain":"waddyworks.com","tld":"com"},"ip":{"addr":"192.249.120.161","port":443,"asn":22611,"as":"INMOTION","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://waddyworks.com/","date":"2026-06-28T03:46:52.769Z","timestamp":1782618412769,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"waddyworks.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 23 Jun 2026 21:15:09 GMT","end":"Mon, 21 Sep 2026 21:15:08 GMT"},"fingerprint":{"sha1":"36:B3:8F:D5:4C:8F:D3:9A:A1:96:28:AF:1E:DD:B4:4C:A4:E3:76:39","sha256":"D0:18:E5:82:DB:FA:BD:AC:94:15:25:FE:BC:EA:EB:B8:A9:39:9A:89:98:DC:71:24:FE:95:4B:15:05:52:EF:C1"}}},"request":{"raw":"GET /wp-content/uploads/elementor/css/post-3462.css?ver=1782362031 HTTP/1.1\r\nHost: waddyworks.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://waddyworks.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.31.1\r\ndate: Sun, 28 Jun 2026 03:46:52 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 25 Jun 2026 04:33:51 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a3cafaf-228e\"\r\nexpires: Sun, 05 Jul 2026 03:46:52 GMT\r\ncache-control: max-age=604800, public, must-revalidate\r\nx-proxy-cache: STATIC/PATH\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx:1.31.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":8846,"size_decoded":1769,"mime_type":"text/css","magic":"ASCII text, with very long lines (4839), with CRLF line terminators","md5":"d9e8870c7d790b2143149698694f1d2a","sha1":"00012ba15695522775ada9418e680288fedb584e","sha256":"be578d37c97f383ea0c6871867aaa920a13659161f9716bba200d771d26e2fb7","sha512":"5fa99f263042e5bc0a967bf16045ecda489f480d922701aa44a272de58058273e14a881a2ba10621e2c0eeae9d65426eb20ab8b7c4fc62ba6f4abe44db3bf72c","ssdeep":"192:z0OhlbtKCj040408btXucuzxmwCuB+U0cp4ioi8idu4d08bZJbnJWMHgWDGgA:nlmot38z/gbgA","tlshash":"460256987c435134b02f293fa01ba58c26ba4cced52ef7eae9a15013b4fad9533e1d11","first_seen":"2026-05-23T22:28:22.176749Z","last_seen":"2026-06-28T03:47:21.976705Z","times_seen":2,"resource_available":false,"data":null}},"time_used":282,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":282,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"waddyworks.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"waddyworks.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"waddyworks.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"waddyworks.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"waddyworks.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"lottie.host/54953c1e-5d82-45e9-969a-4f67e59efd73/uveK2Lq37g.json","fqdn":"lottie.host","domain":"lottie.host","tld":"host"},"ip":{"addr":"52.84.50.31","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://waddyworks.com/","date":"2026-06-28T03:46:53.641Z","timestamp":1782618413641,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lottie.host","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Fri, 10 Apr 2026 00:00:00 GMT","end":"Sat, 24 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"7A:0B:2F:B8:B0:CF:81:E2:62:2C:F2:C1:74:3A:AD:E1:04:FA:B4:2D","sha256":"85:C9:E9:F0:50:5B:02:EC:98:FC:DD:11:D7:97:BA:EA:AE:96:4E:9C:37:65:43:94:7D:D8:EF:A0:3B:AF:80:4B"}}},"request":{"raw":"GET /54953c1e-5d82-45e9-969a-4f67e59efd73/uveK2Lq37g.json HTTP/1.1\r\nHost: lottie.host\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://waddyworks.com/\r\nOrigin: https://waddyworks.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: application/json\r\ndate: Sun, 28 Jun 2026 03:44:36 GMT\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, PUT, POST\r\naccess-control-max-age: 1800\r\nlast-modified: Tue, 28 May 2024 12:47:58 GMT\r\ncontent-encoding: br\r\nx-amz-server-side-encryption: AES256\r\nx-amz-version-id: mYxCz2nRzf0K5HQveTQ9Dsevn5uKam9T\r\nserver: AmazonS3\r\netag: W/\"03d7b099529b2a889c172ec7414bf47a\"\r\nvary: Origin,Accept-Encoding\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 d85ed2d2deba50aaf4938eae2cbcf3ac.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P3\r\nx-amz-cf-id: 2XWMyYW3LSDxlcrXBGFspO3_Kh9IJ7MU-BJGTODdCcPuEKTcyYjnqg==\r\nage: 138\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":2518,"size_decoded":1244,"mime_type":"application/json","magic":"JSON text data","md5":"03d7b099529b2a889c172ec7414bf47a","sha1":"0b40f4f57784b3bdadfba3fcfff7b9446e9459c2","sha256":"b2a17e8b51442430d4b00fb51a09fc70f572fad9f46b90897246f40ddff7356f","sha512":"8acc894ac8d1447a8d7ca5bc5c340197760916473f57560677542fc8b96f8853d95449ee906d9c185e98fc961e134d55ae418b7b351609b2a45c0376855a5ac5","ssdeep":"","tlshash":"8f51f1850ab503dcfb1514a0cf0374e9cbd48c95afc200d6dab75d28dba69ae2301e2b","first_seen":"2026-05-23T22:28:22.039052Z","last_seen":"2026-06-28T03:47:21.953266Z","times_seen":2,"resource_available":false,"data":null}},"time_used":47,"timings":{"blocked":22,"dns":0,"connect":0,"send":0,"wait":25,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"waddyworks.com/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.4.1","fqdn":"waddyworks.com","domain":"waddyworks.com","tld":"com"},"ip":{"addr":"192.249.120.161","port":443,"asn":22611,"as":"INMOTION","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://waddyworks.com/","date":"2026-06-28T03:46:52.738Z","timestamp":1782618412738,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"waddyworks.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 23 Jun 2026 21:15:09 GMT","end":"Mon, 21 Sep 2026 21:15:08 GMT"},"fingerprint":{"sha1":"36:B3:8F:D5:4C:8F:D3:9A:A1:96:28:AF:1E:DD:B4:4C:A4:E3:76:39","sha256":"D0:18:E5:82:DB:FA:BD:AC:94:15:25:FE:BC:EA:EB:B8:A9:39:9A:89:98:DC:71:24:FE:95:4B:15:05:52:EF:C1"}}},"request":{"raw":"GET /wp-includes/js/jquery/jquery-migrate.min.js?ver=3.4.1 HTTP/1.1\r\nHost: waddyworks.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://waddyworks.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.31.1\r\ndate: Sun, 28 Jun 2026 03:46:52 GMT\r\ncontent-type: text/javascript\r\nvary: Accept-Encoding\r\nlast-modified: Fri, 09 Jun 2023 12:49:24 GMT\r\nx-proxy-cache: HIT\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx:1.31.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":13577,"size_decoded":5235,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (13479)","md5":"9ffeb32e2d9efbf8f70caabded242267","sha1":"3ad0c10e501ac2a9bfa18f9cd7e700219b378738","sha256":"5274f11e6fb32ae0cf2dfb9f8043272865c397a7c4223b4cfa7d50ea52fbde89","sha512":"8d6be545508a1c38278b8ad780c3758ae48a25e4e12eee443375aa56031d9b356f8c90f22d4f251140fa3f65603af40523165e33cae2e2d62fc78ec106e3d731","ssdeep":"192:5rprDN+sag6ifKIUpQI99P1tLm9kdgyq1+J3aCJQ+h4MPLORq:5rprxaefKI0LP19m4q1WW+h4Mjp","tlshash":"9952c8adb56679724eb721b8f03bd24f71b205de560d8940d19cc4f6282dc6e812bf78","first_seen":"2023-05-09T19:21:05Z","last_seen":"2026-08-09T06:47:47.699414Z","times_seen":926508,"resource_available":true,"data":null}},"time_used":307,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":307,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"waddyworks.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"waddyworks.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"waddyworks.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"waddyworks.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"waddyworks.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"waddyworks.com/wp-content/themes/progrisaas/js/scripts.js?ver=20210110","fqdn":"waddyworks.com","domain":"waddyworks.com","tld":"com"},"ip":{"addr":"192.249.120.161","port":443,"asn":22611,"as":"INMOTION","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://waddyworks.com/","date":"2026-06-28T03:46:52.787Z","timestamp":1782618412787,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"waddyworks.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 23 Jun 2026 21:15:09 GMT","end":"Mon, 21 Sep 2026 21:15:08 GMT"},"fingerprint":{"sha1":"36:B3:8F:D5:4C:8F:D3:9A:A1:96:28:AF:1E:DD:B4:4C:A4:E3:76:39","sha256":"D0:18:E5:82:DB:FA:BD:AC:94:15:25:FE:BC:EA:EB:B8:A9:39:9A:89:98:DC:71:24:FE:95:4B:15:05:52:EF:C1"}}},"request":{"raw":"GET /wp-content/themes/progrisaas/js/scripts.js?ver=20210110 HTTP/1.1\r\nHost: waddyworks.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://waddyworks.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.31.1\r\ndate: Sun, 28 Jun 2026 03:46:52 GMT\r\ncontent-type: text/javascript\r\nvary: Accept-Encoding\r\nlast-modified: Wed, 24 Jun 2026 21:38:19 GMT\r\nx-proxy-cache: HIT\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx:1.31.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":12845,"size_decoded":3552,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (317), with CRLF line terminators","md5":"3adadb107cb6ffc58e1dc109d2eb5af6","sha1":"0f2eedfffa8ee8032adbc079052b24f42dcc78e1","sha256":"1bd8a04a236c85fbb7aeab530c6dbc1a0be47034a3bae4cd708e8c0dda577dc3","sha512":"d53dd1401596257739aec4425b8ef225864c3b370b974384010bb7f8aecaf9b426eb70e9be8c3beff2f1de231a6a05ed0954ac12be417df35d60367d92ce0971","ssdeep":"192:3g6CC5kMlR8Ic1S8I0Df2+/x/3nkERyFv:wDekIGICS8I0D++JPtR8v","tlshash":"6d423304feecbd6a55f7f319983e8901eb3dd22b40028656b9bd50ac6f71004e25dead","first_seen":"2023-04-13T14:29:49Z","last_seen":"2026-08-05T16:56:15.406234Z","times_seen":22,"resource_available":true,"data":null}},"time_used":419,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":419,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"waddyworks.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"waddyworks.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"waddyworks.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"waddyworks.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"waddyworks.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"waddyworks.com/wp-content/plugins/elementor/assets/css/conditionals/apple-webkit.min.css?ver=4.1.4","fqdn":"waddyworks.com","domain":"waddyworks.com","tld":"com"},"ip":{"addr":"192.249.120.161","port":443,"asn":22611,"as":"INMOTION","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://waddyworks.com/","date":"2026-06-28T03:46:52.774Z","timestamp":1782618412774,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"waddyworks.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 23 Jun 2026 21:15:09 GMT","end":"Mon, 21 Sep 2026 21:15:08 GMT"},"fingerprint":{"sha1":"36:B3:8F:D5:4C:8F:D3:9A:A1:96:28:AF:1E:DD:B4:4C:A4:E3:76:39","sha256":"D0:18:E5:82:DB:FA:BD:AC:94:15:25:FE:BC:EA:EB:B8:A9:39:9A:89:98:DC:71:24:FE:95:4B:15:05:52:EF:C1"}}},"request":{"raw":"GET /wp-content/plugins/elementor/assets/css/conditionals/apple-webkit.min.css?ver=4.1.4 HTTP/1.1\r\nHost: waddyworks.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://waddyworks.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.31.1\r\ndate: Sun, 28 Jun 2026 03:46:52 GMT\r\ncontent-type: text/css\r\nvary: Accept-Encoding\r\nlast-modified: Wed, 24 Jun 2026 21:40:50 GMT\r\nx-proxy-cache: HIT\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx:1.31.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":6713,"size_decoded":799,"mime_type":"text/css","magic":"ASCII text, with very long lines (6713), with no line terminators","md5":"f94a49c4961bc08d71abedf98d482d79","sha1":"1f71eca41def14e975ce1ba14313f635323a8d01","sha256":"cf502b45ef8bcae37a65822f78546f6cc7db74faf8f48850bf8a860262817fe6","sha512":"709ba29bb0c9d3e4ff5d505c9d40e51cc2aa069dec27809b17ea754d60f5aa30f7888d0a5aa7c96effaeb98b4bda0ecb0136f685532d073051c14691b2ab31a4","ssdeep":"192:lozzzlztzDTIeIUI8IxdEzWEznI1zkDmdz0zaz6zgsIXIBIhI6dJzLJzQIuz91rn:KnhBhXIwYY2+OhSnqmwsIBOt","tlshash":"e1d1a6757f0b6a358d6b2c5b1357a06f668080e9a182a342c04318035cfbfde7bb857d","first_seen":"2025-12-04T23:21:35.478119Z","last_seen":"2026-08-09T05:49:33.547596Z","times_seen":50218,"resource_available":false,"data":null}},"time_used":278,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":278,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"waddyworks.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"waddyworks.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"waddyworks.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"waddyworks.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"waddyworks.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"waddyworks.com/wp-content/themes/progrisaas/js/jquery.isotope.min.js?ver=20210110","fqdn":"waddyworks.com","domain":"waddyworks.com","tld":"com"},"ip":{"addr":"192.249.120.161","port":443,"asn":22611,"as":"INMOTION","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://waddyworks.com/","date":"2026-06-28T03:46:52.776Z","timestamp":1782618412776,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"waddyworks.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 23 Jun 2026 21:15:09 GMT","end":"Mon, 21 Sep 2026 21:15:08 GMT"},"fingerprint":{"sha1":"36:B3:8F:D5:4C:8F:D3:9A:A1:96:28:AF:1E:DD:B4:4C:A4:E3:76:39","sha256":"D0:18:E5:82:DB:FA:BD:AC:94:15:25:FE:BC:EA:EB:B8:A9:39:9A:89:98:DC:71:24:FE:95:4B:15:05:52:EF:C1"}}},"request":{"raw":"GET /wp-content/themes/progrisaas/js/jquery.isotope.min.js?ver=20210110 HTTP/1.1\r\nHost: waddyworks.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://waddyworks.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.31.1\r\ndate: Sun, 28 Jun 2026 03:46:52 GMT\r\ncontent-type: text/javascript\r\nvary: Accept-Encoding\r\nlast-modified: Wed, 24 Jun 2026 21:38:19 GMT\r\nx-proxy-cache: HIT\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx:1.31.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":35456,"size_decoded":10550,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (32019), with CRLF line terminators","md5":"5fb7c19c9c51cfb99f5ff942629f0f21","sha1":"14c7f59e73d2a99aa688c2443a9a9b24acbff43c","sha256":"a931e5af561b1f0efaf6cdb96aeac4c035c30756dd6edd1091da1a68747d35bc","sha512":"c634a129ea9a27dd22c8382b46a94f07465001f26a027707849d60b402f21470ee5f329d46902084f317705cda5873eeed22d0624ee21220e88f09d23f317039","ssdeep":"768:PAyxsGKyc1gfflZVP4eAnmc6FumKSshD6cD6GLQfq9SvDz231Fxt:/xVKDSfJP4Nnmc6FuCshD6cD6xS9ODzE","tlshash":"faf2d84f73403925468bf166926f160fb137a56c6a4790acba6ad8db1c79c0d6033fbc","first_seen":"2023-03-07T01:18:38Z","last_seen":"2026-08-09T06:30:48.623069Z","times_seen":6914,"resource_available":true,"data":null}},"time_used":276,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":276,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"waddyworks.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"waddyworks.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"waddyworks.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"waddyworks.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"waddyworks.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"lottie.host/109d0105-eaf7-4b9c-beb0-a5d8c1f1fc1e/V2Bvu8adT8.json","fqdn":"lottie.host","domain":"lottie.host","tld":"host"},"ip":{"addr":"52.84.50.31","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://waddyworks.com/","date":"2026-06-28T03:46:53.620Z","timestamp":1782618413620,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lottie.host","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Fri, 10 Apr 2026 00:00:00 GMT","end":"Sat, 24 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"7A:0B:2F:B8:B0:CF:81:E2:62:2C:F2:C1:74:3A:AD:E1:04:FA:B4:2D","sha256":"85:C9:E9:F0:50:5B:02:EC:98:FC:DD:11:D7:97:BA:EA:AE:96:4E:9C:37:65:43:94:7D:D8:EF:A0:3B:AF:80:4B"}}},"request":{"raw":"GET /109d0105-eaf7-4b9c-beb0-a5d8c1f1fc1e/V2Bvu8adT8.json HTTP/1.1\r\nHost: lottie.host\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://waddyworks.com/\r\nOrigin: https://waddyworks.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: application/json\r\ndate: Sun, 28 Jun 2026 03:44:36 GMT\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, PUT, POST\r\naccess-control-max-age: 1800\r\nlast-modified: Mon, 27 May 2024 12:54:48 GMT\r\ncontent-encoding: br\r\nx-amz-server-side-encryption: AES256\r\nx-amz-version-id: MWi3TrQfpjKnVlruxx1RAwzkFZo5W3RM\r\nserver: AmazonS3\r\netag: W/\"628e5df2b545f73a11e8091cd2b1a280\"\r\nvary: Origin,Accept-Encoding\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 d85ed2d2deba50aaf4938eae2cbcf3ac.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P3\r\nx-amz-cf-id: CcX8bW0tee1QIIKd5mbrmVrn2SYHgKnc15adM1qUfAIxuylS3Ugjtw==\r\nage: 138\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]},{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]}],"data":{"size":3484,"size_decoded":1564,"mime_type":"application/json","magic":"JSON text data","md5":"628e5df2b545f73a11e8091cd2b1a280","sha1":"bdd0796fbd34385284bcff16230ec06d67f330ce","sha256":"742965f0d6cc43ab06fe9a6848831ee07d1ecf3d2af4da7dbd4bfa9b8484ef37","sha512":"54c2baf56a40d1df46296a4413df3794d54affeafc527734cfc3c2a8f1774df6e8c5875449e9dc6674d62940b457ad8a7168bc59b429ca45183e4007b8ecd4fc","ssdeep":"","tlshash":"c7715c8983b102acf74528c0db8334d4cfc585576fc619bdd9b99d188be5a6e2302e17","first_seen":"2026-05-23T22:28:22.170374Z","last_seen":"2026-06-28T03:47:21.90074Z","times_seen":2,"resource_available":false,"data":null}},"time_used":56,"timings":{"blocked":29,"dns":0,"connect":0,"send":0,"wait":27,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"waddyworks.com/wp-content/plugins/elementor/assets/js/section-frontend-handlers.d85ab872da118940910d.bundle.min.js","fqdn":"waddyworks.com","domain":"waddyworks.com","tld":"com"},"ip":{"addr":"192.249.120.161","port":443,"asn":22611,"as":"INMOTION","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://waddyworks.com/","date":"2026-06-28T03:46:54.082Z","timestamp":1782618414082,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"waddyworks.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 23 Jun 2026 21:15:09 GMT","end":"Mon, 21 Sep 2026 21:15:08 GMT"},"fingerprint":{"sha1":"36:B3:8F:D5:4C:8F:D3:9A:A1:96:28:AF:1E:DD:B4:4C:A4:E3:76:39","sha256":"D0:18:E5:82:DB:FA:BD:AC:94:15:25:FE:BC:EA:EB:B8:A9:39:9A:89:98:DC:71:24:FE:95:4B:15:05:52:EF:C1"}}},"request":{"raw":"GET /wp-content/plugins/elementor/assets/js/section-frontend-handlers.d85ab872da118940910d.bundle.min.js HTTP/1.1\r\nHost: waddyworks.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://waddyworks.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.31.1\r\ndate: Sun, 28 Jun 2026 03:46:54 GMT\r\ncontent-type: text/javascript\r\nvary: Accept-Encoding\r\nlast-modified: Wed, 24 Jun 2026 21:40:50 GMT\r\nx-proxy-cache: HIT\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx:1.31.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":449,"size_decoded":488,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (449), with no line terminators","md5":"9dd361b7473936c5c8f5bf661c323973","sha1":"5c8f2bcac20956a31c9cff999d50b99f9ee8f9fd","sha256":"55922883b583583787dd3e36a6ee97b5bedc12eec38a24b6bd271d53b8ebf1c2","sha512":"4181a000ecc679d08f6cad5ddac0283744c6dcb07822a19d2552105e4a9191f1baa4a1590975a71325c56714a37084f8122afe463170ce54b5a56d1a1c7780c4","ssdeep":"","tlshash":"a4f05c7a70d278ff200b44520a97105de6a81cf5012961417fbd44382a75ea4a23139f","first_seen":"2025-06-30T23:09:48.860419Z","last_seen":"2026-08-09T06:28:42.333888Z","times_seen":93761,"resource_available":true,"data":null}},"time_used":162,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":162,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"waddyworks.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"waddyworks.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"waddyworks.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"waddyworks.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"waddyworks.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"waddyworks.com/wp-content/themes/progrisaas/js/elementor.js?ver=20210110","fqdn":"waddyworks.com","domain":"waddyworks.com","tld":"com"},"ip":{"addr":"192.249.120.161","port":443,"asn":22611,"as":"INMOTION","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://waddyworks.com/","date":"2026-06-28T03:46:52.784Z","timestamp":1782618412784,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"waddyworks.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 23 Jun 2026 21:15:09 GMT","end":"Mon, 21 Sep 2026 21:15:08 GMT"},"fingerprint":{"sha1":"36:B3:8F:D5:4C:8F:D3:9A:A1:96:28:AF:1E:DD:B4:4C:A4:E3:76:39","sha256":"D0:18:E5:82:DB:FA:BD:AC:94:15:25:FE:BC:EA:EB:B8:A9:39:9A:89:98:DC:71:24:FE:95:4B:15:05:52:EF:C1"}}},"request":{"raw":"GET /wp-content/themes/progrisaas/js/elementor.js?ver=20210110 HTTP/1.1\r\nHost: waddyworks.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://waddyworks.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.31.1\r\ndate: Sun, 28 Jun 2026 03:46:52 GMT\r\ncontent-type: text/javascript\r\nvary: Accept-Encoding\r\nlast-modified: Wed, 24 Jun 2026 21:38:19 GMT\r\nx-proxy-cache: HIT\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx:1.31.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":45567,"size_decoded":5600,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with CRLF line terminators","md5":"f35c8e643629a90358e219239d422dd7","sha1":"a5233c52bb9920e019b98062a8dfc1ede541a59c","sha256":"3b8c49654e7d325e08f92b59bbefcab63f46183e07a9cef6afd5ffa66b20b57a","sha512":"77ce268d638148aac8ddad3b9c91b731ecfb76ad1b843b6fa1cb1140c5432a108d784ea4f585b611bac752c745408511058de5f8b257d4f5f4fa829d3ab89670","ssdeep":"384:kqyEAWnYEy/gX+WaNIG9I7I2yV/I2yHNI2yQI2yYI2ysI2yuI2yGI2yFID9I2ywt:We2/g8OGesC3OtFJT7migKuWugYmITW4","tlshash":"be23611dbc9810629477e32bdf6ba504fb728a5b0000a362bdfd42a49f7045463adfed","first_seen":"2025-10-26T02:20:10.87535Z","last_seen":"2026-07-17T05:17:47.336664Z","times_seen":8,"resource_available":true,"data":null}},"time_used":421,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":421,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"waddyworks.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"waddyworks.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"waddyworks.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"waddyworks.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"waddyworks.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"waddyworks.com/wp-content/plugins/elementor/assets/js/frontend-modules.min.js?ver=4.1.4","fqdn":"waddyworks.com","domain":"waddyworks.com","tld":"com"},"ip":{"addr":"192.249.120.161","port":443,"asn":22611,"as":"INMOTION","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://waddyworks.com/","date":"2026-06-28T03:46:52.794Z","timestamp":1782618412794,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"waddyworks.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 23 Jun 2026 21:15:09 GMT","end":"Mon, 21 Sep 2026 21:15:08 GMT"},"fingerprint":{"sha1":"36:B3:8F:D5:4C:8F:D3:9A:A1:96:28:AF:1E:DD:B4:4C:A4:E3:76:39","sha256":"D0:18:E5:82:DB:FA:BD:AC:94:15:25:FE:BC:EA:EB:B8:A9:39:9A:89:98:DC:71:24:FE:95:4B:15:05:52:EF:C1"}}},"request":{"raw":"GET /wp-content/plugins/elementor/assets/js/frontend-modules.min.js?ver=4.1.4 HTTP/1.1\r\nHost: waddyworks.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://waddyworks.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.31.1\r\ndate: Sun, 28 Jun 2026 03:46:52 GMT\r\ncontent-type: text/javascript\r\nvary: Accept-Encoding\r\nlast-modified: Wed, 24 Jun 2026 21:40:50 GMT\r\nx-proxy-cache: HIT\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx:1.31.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":50602,"size_decoded":16703,"mime_type":"text/javascript","magic":"JavaScript source, Unicode text, UTF-8 text, with very long lines (50601), with no line terminators","md5":"a3543601e9c09c9b8554ec6f6c8a2174","sha1":"8b05f21356996037f9d17fd012f43393238ac53c","sha256":"c66f47147d5fe3cceeaa47a93ff7440a328f859b049deec2f9d8f414e9137474","sha512":"3b5d80182a9b187171ceb59b4d384ad6b5e59dc0f5890cbdc0fb01109423a3ed847cfa88d67a0db8c84ed163985fb035b069f0530cf9b7a579c4ed47e67f56e9","ssdeep":"1536:yCyQ5RSSYeAjA6c9CST+I83Fy0K4cR8+yhiA2pXSz2faNQAzeLHeBHmjkVziNT:s+uhIAu","tlshash":"7633d9853652f4b70beb45da902f440af25718a8a40df4d5bfe9dce194b0d8e133ab78","first_seen":"2026-03-23T23:03:30.149895Z","last_seen":"2026-08-09T06:50:30.028549Z","times_seen":57042,"resource_available":true,"data":null}},"time_used":412,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":412,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"waddyworks.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"waddyworks.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"waddyworks.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"waddyworks.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"waddyworks.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"waddyworks.com/wp-content/themes/progrisaas/css/owl.carousel.min.css?ver=7.0","fqdn":"waddyworks.com","domain":"waddyworks.com","tld":"com"},"ip":{"addr":"192.249.120.161","port":443,"asn":22611,"as":"INMOTION","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://waddyworks.com/","date":"2026-06-28T03:46:52.711Z","timestamp":1782618412711,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"waddyworks.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 23 Jun 2026 21:15:09 GMT","end":"Mon, 21 Sep 2026 21:15:08 GMT"},"fingerprint":{"sha1":"36:B3:8F:D5:4C:8F:D3:9A:A1:96:28:AF:1E:DD:B4:4C:A4:E3:76:39","sha256":"D0:18:E5:82:DB:FA:BD:AC:94:15:25:FE:BC:EA:EB:B8:A9:39:9A:89:98:DC:71:24:FE:95:4B:15:05:52:EF:C1"}}},"request":{"raw":"GET /wp-content/themes/progrisaas/css/owl.carousel.min.css?ver=7.0 HTTP/1.1\r\nHost: waddyworks.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://waddyworks.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.31.1\r\ndate: Sun, 28 Jun 2026 03:46:52 GMT\r\ncontent-type: text/css\r\nvary: Accept-Encoding\r\nlast-modified: Wed, 24 Jun 2026 21:38:19 GMT\r\nx-proxy-cache: HIT\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx:1.31.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":4216,"size_decoded":1476,"mime_type":"text/css","magic":"ASCII text, with very long lines (3152), with CRLF line terminators","md5":"ddaedaaf495c49e09479684aeea34b49","sha1":"20af53f0c2f3407464a88766a0f339b61137c40c","sha256":"0fae81073a145d57a7d7c1436eaf12695b8b330504cd0c0b157a286bf860c18f","sha512":"0efdeabaa09e65297e9e487c40a2aa96faa3897f59cfa69f85f7e382ea62cadca0db50e0f87618e7ac6be33cc9ef5aefbaa9febb44769b799196f0869e02d387","ssdeep":"96:3QtgA6eA2+ldEK7pcXVxZaIJICNMeSRJlGgLL9d:0iHl2KxiTM5JEgPf","tlshash":"7391cfe4314a215e541f831119d85e87393ec862c96a0a99e1fbd314c799e2d213ffdf","first_seen":"2023-04-13T14:29:49Z","last_seen":"2026-08-06T00:56:34.519423Z","times_seen":241,"resource_available":false,"data":null}},"time_used":166,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":166,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"waddyworks.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"waddyworks.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"waddyworks.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"waddyworks.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"waddyworks.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"waddyworks.com/wp-content/plugins/elementor/assets/css/widget-heading.min.css?ver=4.1.4","fqdn":"waddyworks.com","domain":"waddyworks.com","tld":"com"},"ip":{"addr":"192.249.120.161","port":443,"asn":22611,"as":"INMOTION","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://waddyworks.com/","date":"2026-06-28T03:46:52.723Z","timestamp":1782618412723,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"waddyworks.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 23 Jun 2026 21:15:09 GMT","end":"Mon, 21 Sep 2026 21:15:08 GMT"},"fingerprint":{"sha1":"36:B3:8F:D5:4C:8F:D3:9A:A1:96:28:AF:1E:DD:B4:4C:A4:E3:76:39","sha256":"D0:18:E5:82:DB:FA:BD:AC:94:15:25:FE:BC:EA:EB:B8:A9:39:9A:89:98:DC:71:24:FE:95:4B:15:05:52:EF:C1"}}},"request":{"raw":"GET /wp-content/plugins/elementor/assets/css/widget-heading.min.css?ver=4.1.4 HTTP/1.1\r\nHost: waddyworks.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://waddyworks.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.31.1\r\ndate: Sun, 28 Jun 2026 03:46:52 GMT\r\ncontent-type: text/css\r\nvary: Accept-Encoding\r\nlast-modified: Wed, 24 Jun 2026 21:40:50 GMT\r\nx-proxy-cache: HIT\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx:1.31.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":560,"size_decoded":365,"mime_type":"text/css","magic":"ASCII text, with very long lines (560), with no line terminators","md5":"c3be9e612baf8fc4af612de8af4c0864","sha1":"f6b1366e30a459deefca035c5563f1c929c8ed10","sha256":"f68e889145cb0e47b7b190b2fdf087a9213a264ad33951512880c9f8bb6d0cd8","sha512":"aee455fe10d8126deb4d1015b6b4450ace4851e5b32890505af619f7863469c56b788b5d822849986759aa85efde260da77ed12bbb236ce2bf6629bf6759f4ca","ssdeep":"","tlshash":"f2f0c0237e4b94aa383f1d571083337c74944ec893a0a8d8e9fa91435cf4cb27330622","first_seen":"2023-10-14T23:00:09Z","last_seen":"2026-08-09T06:08:11.36396Z","times_seen":121901,"resource_available":false,"data":null}},"time_used":315,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":315,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"waddyworks.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"waddyworks.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"waddyworks.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"waddyworks.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"waddyworks.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"waddyworks.com/wp-content/plugins/elementor/assets/lib/animations/styles/e-animation-pulse.min.css?ver=4.1.4","fqdn":"waddyworks.com","domain":"waddyworks.com","tld":"com"},"ip":{"addr":"192.249.120.161","port":443,"asn":22611,"as":"INMOTION","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://waddyworks.com/","date":"2026-06-28T03:46:52.772Z","timestamp":1782618412772,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"waddyworks.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 23 Jun 2026 21:15:09 GMT","end":"Mon, 21 Sep 2026 21:15:08 GMT"},"fingerprint":{"sha1":"36:B3:8F:D5:4C:8F:D3:9A:A1:96:28:AF:1E:DD:B4:4C:A4:E3:76:39","sha256":"D0:18:E5:82:DB:FA:BD:AC:94:15:25:FE:BC:EA:EB:B8:A9:39:9A:89:98:DC:71:24:FE:95:4B:15:05:52:EF:C1"}}},"request":{"raw":"GET /wp-content/plugins/elementor/assets/lib/animations/styles/e-animation-pulse.min.css?ver=4.1.4 HTTP/1.1\r\nHost: waddyworks.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://waddyworks.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.31.1\r\ndate: Sun, 28 Jun 2026 03:46:52 GMT\r\ncontent-type: text/css\r\nvary: Accept-Encoding\r\nlast-modified: Wed, 24 Jun 2026 21:40:50 GMT\r\nx-proxy-cache: HIT\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx:1.31.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":318,"size_decoded":383,"mime_type":"text/css","magic":"ASCII text, with very long lines (318), with no line terminators","md5":"16bcb3a939f7ace42f699cd23e5c1f21","sha1":"f542c08918c035480e8de6785ec9d32336c23313","sha256":"b304de7cdb731ce27ebf9eebbcd9024537dfbf596cbfef35ee2ad5ce5116715c","sha512":"65e80ad2eb26f3f21c072150756c863c549d47665a270298626683608fd31f083267fee106bb8c95cd350d4db000f84baedc10a099e03ccd536085186f316c45","ssdeep":"","tlshash":"b1e0b6d6aa07504a43770333958f1958cd740ec695179c7d71a5654e0d24ac9b3e363a","first_seen":"2024-09-11T16:49:22Z","last_seen":"2026-08-09T05:55:23.116895Z","times_seen":6868,"resource_available":false,"data":null}},"time_used":280,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":280,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"waddyworks.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"waddyworks.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"waddyworks.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"waddyworks.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"waddyworks.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"waddyworks.com/","fqdn":"waddyworks.com","domain":"waddyworks.com","tld":"com"},"ip":{"addr":"192.249.120.161","port":443,"asn":22611,"as":"INMOTION","country":"United States","country_code":"US"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-06-28T03:46:51.328Z","timestamp":1782618411328,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"waddyworks.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 23 Jun 2026 21:15:09 GMT","end":"Mon, 21 Sep 2026 21:15:08 GMT"},"fingerprint":{"sha1":"36:B3:8F:D5:4C:8F:D3:9A:A1:96:28:AF:1E:DD:B4:4C:A4:E3:76:39","sha256":"D0:18:E5:82:DB:FA:BD:AC:94:15:25:FE:BC:EA:EB:B8:A9:39:9A:89:98:DC:71:24:FE:95:4B:15:05:52:EF:C1"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: waddyworks.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.31.1\r\ndate: Sun, 28 Jun 2026 03:46:52 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nvary: Accept-Encoding\r\nlink: \u003chttps://waddyworks.com/wp-json/\u003e; rel=\"https://api.w.org/\", \u003chttps://waddyworks.com/wp-json/wp/v2/pages/7262\u003e; rel=\"alternate\"; title=\"JSON\"; type=\"application/json\", \u003chttps://waddyworks.com/\u003e; rel=shortlink\r\nx-proxy-cache: HIT\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"jQuery","description":"jQuery is a JavaScript library which is a free, open-source software designed to simplify HTML DOM tree traversal and manipulation, as well as event handling, CSS animation, and Ajax.","website":"https://jquery.com","common_platform_enumeration":"cpe:2.3:a:jquery:jquery:*:*:*:*:*:*:*:*","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"jsDelivr","description":"JSDelivr is a free public CDN for open-source projects. It can serve web files directly from the npm registry and GitHub repositories without any configuration.","website":"https://www.jsdelivr.com/","common_platform_enumeration":"","icon":"jsdelivr-icon.svg","categories":["CDN"]},{"name":"PHP","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"Bootstrap","description":"Bootstrap is a free and open-source CSS framework directed at responsive, mobile-first front-end web development. It contains CSS and JavaScript-based design templates for typography, forms, buttons, navigation, and other interface components.","website":"https://getbootstrap.com","common_platform_enumeration":"cpe:2.3:a:getbootstrap:bootstrap:*:*:*:*:*:*:*:*","icon":"Bootstrap.svg","categories":["UI frameworks"]},{"name":"Elementor:4.1.4","description":"Elementor is a website builder platform for professionals on WordPress.","website":"https://elementor.com","common_platform_enumeration":"","icon":"Elementor.svg","categories":["Page builders","WordPress plugins"]},{"name":"particles.js","description":"Particles.js is a JavaScript library for creating particles.","website":"https://github.com/VincentGarreau/particles.js","common_platform_enumeration":"","icon":"","categories":["JavaScript graphics"]},{"name":"Nginx:1.31.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]},{"name":"Easy Pie Chart","description":"Lightweight jQuery plugin to render and animate nice pie charts with the HTML5 canvas element.","website":"https://rendro.github.io/easy-pie-chart/","common_platform_enumeration":"","icon":"","categories":["JavaScript libraries"]},{"name":"LottieFiles","description":"LottieFiles is an open-source animation file format that's tiny, high quality, interactive, and can be manipulated at runtime.","website":"https://lottiefiles.com","common_platform_enumeration":"","icon":"LottieFiles.svg","categories":["Miscellaneous"]},{"name":"jQuery Migrate:3.4.1","description":"Query Migrate is a javascript library that allows you to preserve the compatibility of your jQuery code developed for versions of jQuery older than 1.9.","website":"https://github.com/jquery/jquery-migrate","common_platform_enumeration":"","icon":"jQuery.svg","categories":["JavaScript libraries"]},{"name":"OWL Carousel","description":"OWL Carousel is an enabled jQuery plugin that lets you create responsive carousel sliders.","website":"https://owlcarousel2.github.io/OwlCarousel2/","common_platform_enumeration":"","icon":"OWL Carousel.png","categories":["JavaScript libraries"]},{"name":"Font Awesome","description":"Font Awesome is a font and icon toolkit based on CSS and Less.","website":"https://fontawesome.com/","common_platform_enumeration":"","icon":"Font Awesome.svg","categories":["Font scripts"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]},{"name":"Unpkg","description":"Unpkg is a content delivery network for everything on npm.","website":"https://unpkg.com","common_platform_enumeration":"","icon":"Unpkg.png","categories":["CDN"]},{"name":"WordPress:7.0","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]}],"data":{"size":218310,"size_decoded":47019,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (9139), with CRLF, LF line terminators","md5":"385758add5b3690da9b38950790612a0","sha1":"00bec9ba5a0e3825f07f63c8b1ae4a0ef4b7e196","sha256":"619d12eeac8adb6e5e209b3b3413d8928885258732afdcc11bdd34ee02829870","sha512":"7dbfda1d507f3433c1b22102ce41aa7088f76654af82c85c2ade1379ffb0107915c91ed707d54260d0cc86a77d3c23889520f2ae3a106fbd2179885e5fd07205","ssdeep":"3072:7iis2lz9vOTxDd+Wb5twYceJEtvKEhFrlPNlLtw7B8Tskg:h9vit5ceJCvA","tlshash":"672429e137891479710f63dfc023360ca587aaf6eb1185f5f2fd1620a7b2c987aa3195","first_seen":"2026-06-28T03:47:21.986454Z","last_seen":"2026-06-28T03:47:21.986454Z","times_seen":1,"resource_available":true,"data":null}},"time_used":1024,"timings":{"blocked":-1,"dns":42,"connect":160,"send":0,"wait":164,"receive":0,"ssl":657},"alerts":{"ids":null,"analyzer":[{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"waddyworks.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"waddyworks.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"waddyworks.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"waddyworks.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"waddyworks.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"waddyworks.com/wp-content/uploads/2021/05/logo-client1.svg","fqdn":"waddyworks.com","domain":"waddyworks.com","tld":"com"},"ip":{"addr":"192.249.120.161","port":443,"asn":22611,"as":"INMOTION","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://waddyworks.com/","date":"2026-06-28T03:46:52.809Z","timestamp":1782618412809,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"waddyworks.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 23 Jun 2026 21:15:09 GMT","end":"Mon, 21 Sep 2026 21:15:08 GMT"},"fingerprint":{"sha1":"36:B3:8F:D5:4C:8F:D3:9A:A1:96:28:AF:1E:DD:B4:4C:A4:E3:76:39","sha256":"D0:18:E5:82:DB:FA:BD:AC:94:15:25:FE:BC:EA:EB:B8:A9:39:9A:89:98:DC:71:24:FE:95:4B:15:05:52:EF:C1"}}},"request":{"raw":"GET /wp-content/uploads/2021/05/logo-client1.svg HTTP/1.1\r\nHost: waddyworks.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://waddyworks.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.31.1\r\ndate: Sun, 28 Jun 2026 03:46:52 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 5041\r\nlast-modified: Wed, 24 Jun 2026 21:38:19 GMT\r\nvary: Accept-Encoding\r\netag: \"6a3c4e4b-13b1\"\r\nexpires: Sun, 05 Jul 2026 03:46:52 GMT\r\ncache-control: max-age=604800, public, must-revalidate\r\nx-proxy-cache: STATIC/PATH\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx:1.31.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":5041,"size_decoded":5424,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"247168b68430307ad82af71089372b41","sha1":"f49d668aa9273a6bb8d8b7b54be1de748aa74d39","sha256":"785c2bf9ead3c2560b087a3de5a904d9c342349437aa45e10e2c0547b78d700a","sha512":"d81736da87f503617c932311bd61e7c14ea7ad7542085765ed0d3976bc911448d2e4ae671d06e32f8e905c105ef7722f0c4cd06d2b84e64cfb474b2c3c397fc8","ssdeep":"96:rxSnXIsG3xdhhQhcG0qqAFKJADhnn8qE7qyJ7uaiGVstDtb1XJ2:rxyIjdjQhcG0IFKJOnk79ZuaibDtb1Xo","tlshash":"08a164e6bbd673e0f087f3d2e9110e70396b24792a14dbe6cf915ae0ed1546c85808e0","first_seen":"2026-05-23T22:28:22.029599Z","last_seen":"2026-06-28T03:47:21.987941Z","times_seen":2,"resource_available":false,"data":null}},"time_used":402,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":402,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"waddyworks.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"waddyworks.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"waddyworks.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"waddyworks.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"waddyworks.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/dmsans/v17/rP2Yp2ywxg089UriI5-g4vlH9VoD8Cmcqbu0-K6z8GXhnU0.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://waddyworks.com/","date":"2026-06-28T03:46:53.500Z","timestamp":1782618413500,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Jun 2026 08:38:09 GMT","end":"Mon, 31 Aug 2026 08:38:08 GMT"},"fingerprint":{"sha1":"AD:F1:0B:84:58:92:40:26:B7:10:85:A1:EA:3E:80:1E:FD:E6:A8:F3","sha256":"8F:94:50:CA:96:9B:D0:F9:09:5A:E2:3D:DC:C3:5D:F5:E0:80:CB:17:17:30:2C:CF:86:BD:FB:8B:1B:0B:6D:DE"}}},"request":{"raw":"GET /s/dmsans/v17/rP2Yp2ywxg089UriI5-g4vlH9VoD8Cmcqbu0-K6z8GXhnU0.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://waddyworks.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 36932\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 25 Jun 2026 04:37:42 GMT\r\nexpires: Fri, 25 Jun 2027 04:37:42 GMT\r\ncache-control: public, max-age=31536000\r\nage: 256151\r\nlast-modified: Wed, 10 Sep 2025 16:31:03 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":36932,"size_decoded":37745,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 36932, version 1.0","md5":"7c87a648293fbb5b2924aafaa59e8aea","sha1":"c57593e0adc4cf99dd9e67cb782242220a061a9d","sha256":"9fea608a947e67020c33cad9a6fe3d60c54119dfb8cff87768a8117a15ed7543","sha512":"764ced325a768dca84e1fb0cc458818239ce379dbcbdb324ee8849bbe15f54e3f0254ae6e52ee5a92741840637b4f9885d246a0978af23176b3acfe5b9cec23f","ssdeep":"768:mMQPOAQQKW6GccoXQ+OGpHNzXgtDM0SVu7P3nqtPl9Bf2csDpHUjbYE8j2:mMQz4W5og+tpH6tDJku73EPlPOcs5U/l","tlshash":"c0f2f23e7ea5691487c2b0be506b00935344c9bd37c18121bbb953f44ea67addc5d63c","first_seen":"2025-09-11T17:08:25.889763Z","last_seen":"2026-08-09T06:48:21.660221Z","times_seen":33100,"resource_available":false,"data":null}},"time_used":80,"timings":{"blocked":-1,"dns":2,"connect":31,"send":0,"wait":17,"receive":30,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"fonts.gstatic.com/s/dmsans/v17/rP2Yp2ywxg089UriI5-g4vlH9VoD8Cmcqbu0-K6z8GXhnU0.woff2","fqdn":"fonts.gstatic.com","domain":"gstatic.com","tld":"com"},"ip":{"addr":"142.250.178.35","port":443,"asn":15169,"as":"GOOGLE","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://waddyworks.com/","date":"2026-06-28T03:46:53.506Z","timestamp":1782618413506,"http_version":"HTTP/3","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"*.gstatic.com","organization":""},"issuer":{"commonName":"WE2","organization":"Google Trust Services"},"validity":{"start":"Mon, 08 Jun 2026 08:38:09 GMT","end":"Mon, 31 Aug 2026 08:38:08 GMT"},"fingerprint":{"sha1":"AD:F1:0B:84:58:92:40:26:B7:10:85:A1:EA:3E:80:1E:FD:E6:A8:F3","sha256":"8F:94:50:CA:96:9B:D0:F9:09:5A:E2:3D:DC:C3:5D:F5:E0:80:CB:17:17:30:2C:CF:86:BD:FB:8B:1B:0B:6D:DE"}}},"request":{"raw":"GET /s/dmsans/v17/rP2Yp2ywxg089UriI5-g4vlH9VoD8Cmcqbu0-K6z8GXhnU0.woff2 HTTP/1.1\r\nHost: fonts.gstatic.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nOrigin: https://waddyworks.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://fonts.googleapis.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 \r\naccept-ranges: bytes\r\naccess-control-allow-origin: *\r\ncontent-security-policy-report-only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/apps-themes\r\ncross-origin-resource-policy: cross-origin\r\ncross-origin-opener-policy: same-origin; report-to=\"apps-themes\"\r\nreport-to: {\"group\":\"apps-themes\",\"max_age\":2592000,\"endpoints\":[{\"url\":\"https://csp.withgoogle.com/csp/report-to/apps-themes\"}]}\r\ntiming-allow-origin: *\r\ncontent-length: 36932\r\nx-content-type-options: nosniff\r\nserver: sffe\r\nx-xss-protection: 0\r\ndate: Thu, 25 Jun 2026 04:37:42 GMT\r\nexpires: Fri, 25 Jun 2027 04:37:42 GMT\r\ncache-control: public, max-age=31536000\r\nage: 256151\r\nlast-modified: Wed, 10 Sep 2025 16:31:03 GMT\r\ncontent-type: font/woff2\r\nalt-svc: h3=\":443\"; ma=2592000,h3-29=\":443\"; ma=2592000\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":null,"data":{"size":36932,"size_decoded":37745,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 36932, version 1.0","md5":"7c87a648293fbb5b2924aafaa59e8aea","sha1":"c57593e0adc4cf99dd9e67cb782242220a061a9d","sha256":"9fea608a947e67020c33cad9a6fe3d60c54119dfb8cff87768a8117a15ed7543","sha512":"764ced325a768dca84e1fb0cc458818239ce379dbcbdb324ee8849bbe15f54e3f0254ae6e52ee5a92741840637b4f9885d246a0978af23176b3acfe5b9cec23f","ssdeep":"768:mMQPOAQQKW6GccoXQ+OGpHNzXgtDM0SVu7P3nqtPl9Bf2csDpHUjbYE8j2:mMQz4W5og+tpH6tDJku73EPlPOcs5U/l","tlshash":"c0f2f23e7ea5691487c2b0be506b00935344c9bd37c18121bbb953f44ea67addc5d63c","first_seen":"2025-09-11T17:08:25.889763Z","last_seen":"2026-08-09T06:48:21.660221Z","times_seen":33100,"resource_available":false,"data":null}},"time_used":73,"timings":{"blocked":24,"dns":0,"connect":0,"send":0,"wait":21,"receive":28,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lottie.host/7401522f-2d8b-4049-ad18-eb0edb6af224/CE9lFrNlEH.json","fqdn":"lottie.host","domain":"lottie.host","tld":"host"},"ip":{"addr":"52.84.50.31","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"fetch","requested_by":"https://waddyworks.com/","date":"2026-06-28T03:46:53.615Z","timestamp":1782618413615,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lottie.host","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Fri, 10 Apr 2026 00:00:00 GMT","end":"Sat, 24 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"7A:0B:2F:B8:B0:CF:81:E2:62:2C:F2:C1:74:3A:AD:E1:04:FA:B4:2D","sha256":"85:C9:E9:F0:50:5B:02:EC:98:FC:DD:11:D7:97:BA:EA:AE:96:4E:9C:37:65:43:94:7D:D8:EF:A0:3B:AF:80:4B"}}},"request":{"raw":"GET /7401522f-2d8b-4049-ad18-eb0edb6af224/CE9lFrNlEH.json HTTP/1.1\r\nHost: lottie.host\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nReferer: https://waddyworks.com/\r\nOrigin: https://waddyworks.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: application/json\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, PUT, POST\r\naccess-control-max-age: 1800\r\nlast-modified: Wed, 21 Jun 2023 11:42:09 GMT\r\ncontent-encoding: br\r\nx-amz-server-side-encryption: AES256\r\nx-amz-version-id: .4C26IQCCg.vsF.jI0pWsqEX.R6VPBTw\r\nserver: AmazonS3\r\ndate: Sun, 28 Jun 2026 03:46:54 GMT\r\netag: W/\"da5b696132a7002af479a0b83755072d\"\r\nvary: Origin,Accept-Encoding\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 d85ed2d2deba50aaf4938eae2cbcf3ac.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P3\r\nx-amz-cf-id: gId_ph7PO2Ok_vAD_sTE_4R1cyE5OcYBhStjyZKi2yEE1X8TiO1QnA==\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":142142,"size_decoded":15008,"mime_type":"application/json","magic":"JSON text data","md5":"da5b696132a7002af479a0b83755072d","sha1":"0921fc2d6bafa366aa16919a4ff5408989da1acc","sha256":"5780b2ddb9b0680abe5d771efe2ee26de17b6e4ce050c4ed6b657041e0ee6a8d","sha512":"a31860bb741c7fe8de2f6b0c2f8ccda32b3104a4de25077173dda83335ec049ec2c0b381b1b73c116ec9513a693dab7fa50b3bd965e259ac2869f75917bd889d","ssdeep":"3072:P1UF7DS48LnOlFjHVYl8Wzwu6X9rllITxtHo1Xo1RrCD2Jl9lUUUll+Jl2TzJv4+:P1UF7DS48LnOlFjHVYl8Wzwu6X9rllIi","tlshash":"29d3dd8947a1c07cd65e2690ca4f74d9dfc49586cfc6485ca6beac248b89faf3300b57","first_seen":"2026-05-23T22:28:22.158581Z","last_seen":"2026-06-28T03:47:21.889731Z","times_seen":2,"resource_available":false,"data":null}},"time_used":56,"timings":{"blocked":31,"dns":0,"connect":0,"send":0,"wait":25,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"waddyworks.com/wp-includes/js/wp-emoji-release.min.js?ver=7.0","fqdn":"waddyworks.com","domain":"waddyworks.com","tld":"com"},"ip":{"addr":"192.249.120.161","port":443,"asn":22611,"as":"INMOTION","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://waddyworks.com/","date":"2026-06-28T03:46:54.824Z","timestamp":1782618414824,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"waddyworks.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 23 Jun 2026 21:15:09 GMT","end":"Mon, 21 Sep 2026 21:15:08 GMT"},"fingerprint":{"sha1":"36:B3:8F:D5:4C:8F:D3:9A:A1:96:28:AF:1E:DD:B4:4C:A4:E3:76:39","sha256":"D0:18:E5:82:DB:FA:BD:AC:94:15:25:FE:BC:EA:EB:B8:A9:39:9A:89:98:DC:71:24:FE:95:4B:15:05:52:EF:C1"}}},"request":{"raw":"GET /wp-includes/js/wp-emoji-release.min.js?ver=7.0 HTTP/1.1\r\nHost: waddyworks.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://waddyworks.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.31.1\r\ndate: Sun, 28 Jun 2026 03:46:54 GMT\r\ncontent-type: text/javascript\r\nvary: Accept-Encoding\r\nlast-modified: Fri, 07 Nov 2025 22:44:34 GMT\r\nx-proxy-cache: HIT\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx:1.31.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":22762,"size_decoded":5526,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (19823)","md5":"f0cc9ba5cf46af0cd73d521803e3b07e","sha1":"7d2a74f87dc70a39eccce3bae1d4cc404cb134f4","sha256":"fd59b0ebf6282ed71647bf2f6e0d1925bbfd1f270865a832079ebb60259aabca","sha512":"7ec44f08676c195547a623504c7105ef3d0acea5839675599598043f3e0b5a3386452e3db6fbea90722f7be9e6effdae1b89c49e2b05b22b8c415616e07d471d","ssdeep":"384:WzevzApRZTbXU/3o//bEPhXgA5POkpJTX:Wsk9XU/3o//YpXgAs+hX","tlshash":"7fa2959ba33a4e8f343e3bd78d968f4dc9da555321c0e079dbefb6c169a00568274c80","first_seen":"2025-11-10T19:52:32.864936Z","last_seen":"2026-08-09T06:17:56.993507Z","times_seen":310686,"resource_available":true,"data":null}},"time_used":166,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":166,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"waddyworks.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"waddyworks.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"waddyworks.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"waddyworks.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"waddyworks.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"s.w.org/images/core/emoji/17.0.2/svg/26a1.svg","fqdn":"s.w.org","domain":"w.org","tld":"org"},"ip":{"addr":"192.0.77.48","port":443,"asn":2635,"as":"AUTOMATTIC","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://waddyworks.com/","date":"2026-06-28T03:46:55.013Z","timestamp":1782618415013,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"s.w.org","organization":""},"issuer":{"commonName":"YE2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 23 Jun 2026 19:44:46 GMT","end":"Mon, 21 Sep 2026 19:44:45 GMT"},"fingerprint":{"sha1":"BD:56:B9:45:20:E2:D6:AF:A0:99:69:6F:6D:9E:65:F7:AC:CD:DB:26","sha256":"D5:EF:82:ED:A8:E3:27:81:64:4D:95:F4:A5:07:67:01:77:69:BB:A5:F5:BD:F0:6E:A2:DF:35:1A:24:92:0B:4F"}}},"request":{"raw":"GET /images/core/emoji/17.0.2/svg/26a1.svg HTTP/1.1\r\nHost: s.w.org\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-Fetch-Storage-Access: none\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://waddyworks.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: cross-site\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx\r\ndate: Sun, 28 Jun 2026 03:46:58 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 451\r\nlast-modified: Fri, 07 Nov 2025 05:21:38 GMT\r\nx-frame-options: SAMEORIGIN\r\nexpires: Thu, 31 Dec 2037 23:55:55 GMT\r\ncache-control: max-age=315360000\r\naccept-ranges: bytes\r\naccess-control-allow-methods: GET, HEAD\r\naccess-control-allow-origin: *\r\nalt-svc: clear\r\nx-nc: HIT arn 33\r\nserver-timing: a8c-cdn, dc;desc=arn, cache;desc=HIT;dur=1.0\r\nx-content-type-options: nosniff\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":451,"size_decoded":960,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"bcca43b1c7aa91d47f62962ce2422ae1","sha1":"6bd13c3ba629e5f79d9ddf15cc79b7dc34729638","sha256":"d3a6d0c18f6887f771aa3cd51db375e7a9588e1af63801cc100cd9bcc5bccaac","sha512":"17ca2fa881ffffb8be0e67b1d689c6e977df3ba079a4c36f8607b824763ae3c9e1f7d6791230ea71a4128d6826693c95f2b55a3297686a7b7c7939ea139bb596","ssdeep":"","tlshash":"07f0236163fd6658dacdc53cfba194c0f05ab0de01b9888897c69710127ff09b710411","first_seen":"2023-05-15T16:34:06Z","last_seen":"2026-08-09T03:31:21.955956Z","times_seen":3667,"resource_available":false,"data":null}},"time_used":3554,"timings":{"blocked":0,"dns":2,"connect":9,"send":0,"wait":9,"receive":0,"ssl":3534},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"lottie.host/a3725380-cbf6-43b8-a198-5f315a99a66a/m94QV3TNEX.json","fqdn":"lottie.host","domain":"lottie.host","tld":"host"},"ip":{"addr":"52.84.50.31","port":443,"asn":16509,"as":"AMAZON-02","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"xhr","requested_by":"https://waddyworks.com/","date":"2026-06-28T03:46:53.614Z","timestamp":1782618413614,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"lottie.host","organization":""},"issuer":{"commonName":"Amazon RSA 2048 M04","organization":"Amazon"},"validity":{"start":"Fri, 10 Apr 2026 00:00:00 GMT","end":"Sat, 24 Oct 2026 23:59:59 GMT"},"fingerprint":{"sha1":"7A:0B:2F:B8:B0:CF:81:E2:62:2C:F2:C1:74:3A:AD:E1:04:FA:B4:2D","sha256":"85:C9:E9:F0:50:5B:02:EC:98:FC:DD:11:D7:97:BA:EA:AE:96:4E:9C:37:65:43:94:7D:D8:EF:A0:3B:AF:80:4B"}}},"request":{"raw":"GET /a3725380-cbf6-43b8-a198-5f315a99a66a/m94QV3TNEX.json HTTP/1.1\r\nHost: lottie.host\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nOrigin: https://waddyworks.com\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://waddyworks.com/\r\nSec-Fetch-Dest: empty\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: application/json\r\ndate: Sun, 28 Jun 2026 03:44:36 GMT\r\naccess-control-allow-origin: *\r\naccess-control-allow-methods: GET, PUT, POST\r\naccess-control-max-age: 1800\r\nlast-modified: Mon, 27 May 2024 06:34:08 GMT\r\ncontent-encoding: br\r\nx-amz-server-side-encryption: AES256\r\nx-amz-version-id: 0xpr6IxZaUYTaPOQC.1.ZmnBNMbeqhkx\r\nserver: AmazonS3\r\netag: W/\"5fe0d7a56f9e65ffc22637fa19fb77da\"\r\nvary: Origin,Accept-Encoding\r\nx-cache: Hit from cloudfront\r\nvia: 1.1 d85ed2d2deba50aaf4938eae2cbcf3ac.cloudfront.net (CloudFront)\r\nx-amz-cf-pop: OSL50-P3\r\nx-amz-cf-id: JMe7RQLBigvMSZEbNLgFWc8ebj5AUCFG547Hh3ckir5ujXgg2SuVQw==\r\nage: 138\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Amazon CloudFront","description":"Amazon CloudFront is a fast content delivery network (CDN) service that securely delivers data, videos, applications, and APIs to customers globally with low latency, high transfer speeds.","website":"https://aws.amazon.com/cloudfront/","common_platform_enumeration":"","icon":"Amazon Cloudfront.svg","categories":["CDN"]},{"name":"Amazon Web Services","description":"Amazon Web Services (AWS) is a comprehensive cloud services platform offering compute power, database storage, content delivery and other functionality.","website":"https://aws.amazon.com/","common_platform_enumeration":"","icon":"Amazon Web Services.svg","categories":["PaaS"]},{"name":"Amazon S3","description":"Amazon S3 or Amazon Simple Storage Service is a service offered by Amazon Web Services (AWS) that provides object storage through a web service interface.","website":"https://aws.amazon.com/s3/","common_platform_enumeration":"","icon":"Amazon S3.svg","categories":["CDN"]}],"data":{"size":32696,"size_decoded":3947,"mime_type":"application/json","magic":"JSON text data","md5":"5fe0d7a56f9e65ffc22637fa19fb77da","sha1":"3cd93867e04bfcaba2053648ddbae60db731b20d","sha256":"8156a744bb195f288bf9b2266681ee4fae0fff51ca625b206f0f09097a575e81","sha512":"319fdb17b3ddae350c893464c05f6faab0fc121f52048a8b2b30f1dac6750c3bf42d8989796ef824a18d6d6d5295d81247f24bc9ef5bda35a92ee2ce0f24fa36","ssdeep":"384:mILp/dlt1Rcslh8eJ9ALp9en4nxFEoI8YEEl:mILpxJ9ALp8n4nxFvI8LEl","tlshash":"bbe2ee89ca6142bceb1429d0cf5330948fe5c9436ec54dbedaba6d148bb55df2301b2b","first_seen":"2026-05-23T22:28:22.143251Z","last_seen":"2026-06-28T03:47:21.932111Z","times_seen":2,"resource_available":false,"data":null}},"time_used":97,"timings":{"blocked":31,"dns":0,"connect":0,"send":0,"wait":66,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"waddyworks.com/wp-content/uploads/2024/05/line.svg","fqdn":"waddyworks.com","domain":"waddyworks.com","tld":"com"},"ip":{"addr":"192.249.120.161","port":443,"asn":22611,"as":"INMOTION","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"lazy-img","requested_by":"https://waddyworks.com/","date":"2026-06-28T03:46:53.675Z","timestamp":1782618413675,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"waddyworks.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 23 Jun 2026 21:15:09 GMT","end":"Mon, 21 Sep 2026 21:15:08 GMT"},"fingerprint":{"sha1":"36:B3:8F:D5:4C:8F:D3:9A:A1:96:28:AF:1E:DD:B4:4C:A4:E3:76:39","sha256":"D0:18:E5:82:DB:FA:BD:AC:94:15:25:FE:BC:EA:EB:B8:A9:39:9A:89:98:DC:71:24:FE:95:4B:15:05:52:EF:C1"}}},"request":{"raw":"GET /wp-content/uploads/2024/05/line.svg HTTP/1.1\r\nHost: waddyworks.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://waddyworks.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=5, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.31.1\r\ndate: Sun, 28 Jun 2026 03:46:53 GMT\r\ncontent-type: image/svg+xml\r\ncontent-length: 774\r\nlast-modified: Wed, 24 Jun 2026 21:38:19 GMT\r\nvary: Accept-Encoding\r\netag: \"6a3c4e4b-306\"\r\nexpires: Sun, 05 Jul 2026 03:46:53 GMT\r\ncache-control: max-age=604800, public, must-revalidate\r\nx-proxy-cache: STATIC/PATH\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx:1.31.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":774,"size_decoded":1155,"mime_type":"image/svg+xml","magic":"SVG Scalable Vector Graphics image","md5":"ca7e8a5a7c33a25c42badce811c7f290","sha1":"63d4f3d3e4edf638c3beeb17e5dd6b3bb75374ff","sha256":"0f0e700cbe328890f47f77c5fa1013f1cf352337fdb8aefd407e167f325665f4","sha512":"48d746b1236ca56795ffcd3d20ab339473ca34c34795495fc2f9a14e8fe81cef4ec23ab074fb0c7c458f456b3d9d4e754074e2473a6635be8886169899f5b414","ssdeep":"","tlshash":"2101d0dcc3f869904a8ed7e0e720d0d4b465507daa724696c26d4a8cb145258dc4a96b","first_seen":"2026-05-23T22:28:22.154227Z","last_seen":"2026-06-28T03:47:21.990692Z","times_seen":2,"resource_available":false,"data":null}},"time_used":262,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":262,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"waddyworks.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"waddyworks.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"waddyworks.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"waddyworks.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"waddyworks.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"waddyworks.com/wp-content/uploads/elementor/css/post-6.css?ver=1782362031","fqdn":"waddyworks.com","domain":"waddyworks.com","tld":"com"},"ip":{"addr":"192.249.120.161","port":443,"asn":22611,"as":"INMOTION","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://waddyworks.com/","date":"2026-06-28T03:46:52.718Z","timestamp":1782618412718,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"waddyworks.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 23 Jun 2026 21:15:09 GMT","end":"Mon, 21 Sep 2026 21:15:08 GMT"},"fingerprint":{"sha1":"36:B3:8F:D5:4C:8F:D3:9A:A1:96:28:AF:1E:DD:B4:4C:A4:E3:76:39","sha256":"D0:18:E5:82:DB:FA:BD:AC:94:15:25:FE:BC:EA:EB:B8:A9:39:9A:89:98:DC:71:24:FE:95:4B:15:05:52:EF:C1"}}},"request":{"raw":"GET /wp-content/uploads/elementor/css/post-6.css?ver=1782362031 HTTP/1.1\r\nHost: waddyworks.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://waddyworks.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.31.1\r\ndate: Sun, 28 Jun 2026 03:46:52 GMT\r\ncontent-type: text/css\r\nlast-modified: Thu, 25 Jun 2026 04:33:51 GMT\r\nvary: Accept-Encoding\r\netag: W/\"6a3cafaf-4ad\"\r\nexpires: Sun, 05 Jul 2026 03:46:52 GMT\r\ncache-control: max-age=604800, public, must-revalidate\r\nx-proxy-cache: STATIC/PATH\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx:1.31.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1197,"size_decoded":728,"mime_type":"text/css","magic":"ASCII text, with very long lines (1197), with no line terminators","md5":"e5a44c695f62a1db3586d131f0116a8d","sha1":"ce306ec942091f70310774f5a3576caf397c9f5a","sha256":"abeec4b84f373d00616dfea8a9e699117e85fa2456ec62c3b4bc7c8647cfbbf1","sha512":"cdc189496061b9a336fbe6f1b4bda5fbfd9186ef032c54456707d5148f52fc104a97ffd18663897cc497e8973b2fc8acdc3ecfd612b8678be28b61625dbc4817","ssdeep":"","tlshash":"9a2133457a23d422e17b083f91d3b02c011ce45fa25f8adff81d8649f8beb066228643","first_seen":"2026-05-23T22:28:22.304771Z","last_seen":"2026-06-28T03:47:21.992062Z","times_seen":2,"resource_available":false,"data":null}},"time_used":167,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":167,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"waddyworks.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"waddyworks.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"waddyworks.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"waddyworks.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"waddyworks.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"waddyworks.com/wp-content/uploads/2024/05/favicon.png","fqdn":"waddyworks.com","domain":"waddyworks.com","tld":"com"},"ip":{"addr":"192.249.120.161","port":443,"asn":22611,"as":"INMOTION","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://waddyworks.com/","date":"2026-06-28T03:46:53.942Z","timestamp":1782618413942,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"waddyworks.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 23 Jun 2026 21:15:09 GMT","end":"Mon, 21 Sep 2026 21:15:08 GMT"},"fingerprint":{"sha1":"36:B3:8F:D5:4C:8F:D3:9A:A1:96:28:AF:1E:DD:B4:4C:A4:E3:76:39","sha256":"D0:18:E5:82:DB:FA:BD:AC:94:15:25:FE:BC:EA:EB:B8:A9:39:9A:89:98:DC:71:24:FE:95:4B:15:05:52:EF:C1"}}},"request":{"raw":"GET /wp-content/uploads/2024/05/favicon.png HTTP/1.1\r\nHost: waddyworks.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://waddyworks.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.31.1\r\ndate: Sun, 28 Jun 2026 03:46:54 GMT\r\ncontent-type: image/png\r\ncontent-length: 31530\r\nlast-modified: Wed, 24 Jun 2026 21:38:19 GMT\r\nvary: Accept-Encoding\r\netag: \"6a3c4e4b-7b2a\"\r\nexpires: Sun, 05 Jul 2026 03:46:54 GMT\r\ncache-control: max-age=604800, public, must-revalidate\r\nx-proxy-cache: STATIC/PATH\r\naccept-ranges: bytes\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx:1.31.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":31530,"size_decoded":31910,"mime_type":"image/png","magic":"PNG image data, 201 x 163, 8-bit/color RGBA, non-interlaced","md5":"a21476839b70a2b4db8033f51537cd78","sha1":"bb5d0783c5a789220fa1d02ca4a3463bbac0a56d","sha256":"16e58da7ae2e6c808e13200f56cc9122d399ef925801a5d5eda276e164e7bb55","sha512":"e7d754b4deca20ac2c105a65d5492a0e927de399d852d0585a3a7a02b1224cdebe779036db247fc97733de251108392158485a73cfffa3bfce51dfe2e1f8f741","ssdeep":"768:nfocVRPvXdI/1MpOy32rs9nfTXP6qYWc3oQt25w:nfzVBlIkOy32rwLyqYWcOW","tlshash":"13e2f15548c06e85c71cf6d754a28c21d686dc866f84ca151eeec2f38abd329b772983","first_seen":"2026-05-23T22:28:22.021588Z","last_seen":"2026-06-28T03:47:21.872811Z","times_seen":2,"resource_available":false,"data":null}},"time_used":165,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":164,"receive":1,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"waddyworks.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"waddyworks.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"waddyworks.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"waddyworks.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"waddyworks.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"waddyworks.com/wp-content/plugins/elementor/assets/js/text-editor.45609661e409413f1cef.bundle.min.js","fqdn":"waddyworks.com","domain":"waddyworks.com","tld":"com"},"ip":{"addr":"192.249.120.161","port":443,"asn":22611,"as":"INMOTION","country":"United States","country_code":"US"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://waddyworks.com/","date":"2026-06-28T03:46:54.090Z","timestamp":1782618414090,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_256_GCM_SHA384","key_group_name":"P384","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"waddyworks.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Tue, 23 Jun 2026 21:15:09 GMT","end":"Mon, 21 Sep 2026 21:15:08 GMT"},"fingerprint":{"sha1":"36:B3:8F:D5:4C:8F:D3:9A:A1:96:28:AF:1E:DD:B4:4C:A4:E3:76:39","sha256":"D0:18:E5:82:DB:FA:BD:AC:94:15:25:FE:BC:EA:EB:B8:A9:39:9A:89:98:DC:71:24:FE:95:4B:15:05:52:EF:C1"}}},"request":{"raw":"GET /wp-content/plugins/elementor/assets/js/text-editor.45609661e409413f1cef.bundle.min.js HTTP/1.1\r\nHost: waddyworks.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://waddyworks.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nserver: nginx/1.31.1\r\ndate: Sun, 28 Jun 2026 03:46:54 GMT\r\ncontent-type: text/javascript\r\nvary: Accept-Encoding\r\nlast-modified: Wed, 24 Jun 2026 21:40:50 GMT\r\nx-proxy-cache: HIT\r\ncontent-encoding: br\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"","fingerprints":[{"name":"Nginx:1.31.1","description":"Nginx is a web server that can also be used as a reverse proxy, load balancer, mail proxy and HTTP cache.","website":"https://nginx.org/en","common_platform_enumeration":"cpe:2.3:a:f5:nginx:*:*:*:*:*:*:*:*","icon":"Nginx.svg","categories":["Web servers","Reverse proxies"]}],"data":{"size":1348,"size_decoded":875,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (1348), with no line terminators","md5":"b272ececde530e5621637a7e529abc8b","sha1":"a3fedafc836049d71aa3b1d9ddc1debcd6f73dd2","sha256":"4543f55b0b8bc8fe912da8ddd1da7b07d0e8d3e77a824295a6bccd90d4f8aa13","sha512":"d2efaf6be07605e855c348a6fd5aad58520f20912188578a3711de8840a9cd29e41860b49b36d3d7a72082077c9dcdfe8571e0279985a771cac102a520f7b020","ssdeep":"","tlshash":"f62112b371a2dded48df148a34522d16f2574d5db8caa01ef5aa08df24b2e843362634","first_seen":"2025-10-22T21:27:55.827503Z","last_seen":"2026-08-09T06:50:30.065476Z","times_seen":127624,"resource_available":true,"data":null}},"time_used":178,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":178,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"ultradns","sensor_type":"DNS","title":"DigiCert UltraDNS","description":"DigiCert UltraDNS","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"waddyworks.com","verdict":"malicious","severity":"medium","comment":"","link":"https://vercara.digicert.com/ultra-dns-public","meta":null},{"sensor_name":"hagezi","sensor_type":"DNS","title":"Hagezi Threat Feed","description":"Hagezi Threat Feed","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"waddyworks.com","verdict":"malicious","severity":"medium","comment":"","link":"https://github.com/hagezi/dns-blocklists","meta":null},{"sensor_name":"quad9","sensor_type":"DNS","title":"Quad9 DNS","description":"Quad9 DNS","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"waddyworks.com","verdict":"malicious","severity":"medium","comment":"Sinkholed in DNS","link":"https://www.quad9.net","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"waddyworks.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"cloudflare_dns","sensor_type":"DNS","title":"Cloudflare DNS","description":"Cloudflare DNS","scan_date":"2026-06-28","alert":"Sinkholed","trigger":"waddyworks.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.cloudflare.com/application-services/products/dns/","meta":null}],"urlquery":null}}]}