{"report_id":"c3340d16-6202-471d-97f2-83f2c6225efa","version":6,"status":"done","tags":[],"date":"2026-03-07T03:29:31Z","url":{"schema":"http","addr":"click.wospacstages.cc/","fqdn":"click.wospacstages.cc","domain":"wospacstages.cc","tld":"cc"},"ip":{"addr":"104.21.18.59","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"final":{"url":{"schema":"https","addr":"click.wospacstages.cc/","fqdn":"click.wospacstages.cc","domain":"wospacstages.cc","tld":"cc"},"title":"Barcelona Boarding Soccer Academy","dom":{"size":71935,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (20397)","md5":"766fd053da2e603f7732222386e234ff","sha1":"a03804cfb82adb366884563ce5994a27e1f811d6","sha256":"fec65c9500e4a70f55036c4ae345e9cfed5bf103800290cbf35322ae7d9e7b69","sha512":"3dfa0dc9b8dc37478226622e8f797ae449ed5df302490a20f7e56d8abd79afe785665505c58ed9d31844cb2c3b85dad1d30ab838808dd038b75d31a202b8907c","ssdeep":"1536:ZWkclksypQMn5826dbZobwemlUVuXwamgeUvCzX:ZWkclk9eFdbZobwemlUVugamxUvCzX","tlshash":"596397a052b408f5797f837b9e44a3189567e912c9093be5f0f3e19465cceb606e3b0e","dom_hash":"domhash2b8de329c96094f82c989e2a9c8eee6d","first_seen":"","last_seen":"","times_seen":0,"resource_available":false,"data":null}},"submit":{"url":{"schema":"http","addr":"click.wospacstages.cc/","fqdn":"click.wospacstages.cc","domain":"wospacstages.cc","tld":"cc"},"ip":{"addr":"104.21.18.59","port":0,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-04-11T03:29:31Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"z0yflva4pidy47h"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":1}},"detection":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"click.wospacstages.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null},"summary":[{"fqdn":"click.wospacstages.cc","ip":{"addr":"104.21.18.59","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"domain_registered":"2025-07-30","domain_rank":0,"first_seen":"2025-08-11T05:25:18.785296Z","last_seen":"2026-02-23T03:43:06.055233Z","alert_count":9,"request_count":9,"received_data":631607,"sent_data":4617,"comment":"","tags":null,"fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]},{"name":"PHP:7.4.33","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"WordPress Site Editor","description":"Full Site Editing enables users to design and customize their entire WordPress website with a block-based editor.","website":"https://wordpress.org/documentation/article/site-editor/","common_platform_enumeration":"","icon":"WordPress.svg","categories":["Page builders"]},{"name":"WordPress Block Editor","description":"Sites using the WordPress Block Editor, also known as Gutenberg.","website":"https://wordpress.org/gutenberg/","common_platform_enumeration":"","icon":"WordPress.svg","categories":["Page builders"]},{"name":"WordPress:6.9.1","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"click.wospacstages.cc/wp-includes/js/dist/script-modules/block-library/navigation/view.min.js?ver=b0f909c3ec791c383210","fqdn":"click.wospacstages.cc","domain":"wospacstages.cc","tld":"cc"},"ip":{"addr":"104.21.18.59","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"81f491adccda86aaf56a1ce68fa59b87","sha1":"c27ca491887c7fdad5a3ca67592173427cc861af","sha256":"efc3dac74026580ee6b527716e2e63ba29f2116a90d4a47a691438b9a2b86c2f","sha512":"809037c160df1990ac458f977252a4cb2629c748f1a8133240c9d2897b14ad58d2407d822fea9c61efeb19af1e72dc16b29c09c917dca024f4145f1977d1ff57","ssdeep":"","tlshash":"24610234306576b1aefe5ad8f3148428a3148581640b78717e1cb9ee58eef5391f0bea","size":3401,"data":"","first_seen":"2025-12-03T01:51:42.331168Z","last_seen":"2026-04-04T14:13:42.665653Z","times_seen":7029,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"click.wospacstages.cc/wp-includes/js/wp-emoji-loader.min.js","fqdn":"click.wospacstages.cc","domain":"wospacstages.cc","tld":"cc"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"f7f88d05aab4dd7639d5b0c4e535055a","sha1":"52375d5d0303a096c792f432675b493a962daf19","sha256":"61550de0ad12e1e944dcfc402f53e05b3e0d216e5989c466c01ac2a5a91f7e1b","sha512":"148cae085c00199b92175bbd94b6bff082e371cc88979b01c88f43994c056fc5e8b0e7208a9cc1cdfe79ea4b44e7f0dc71591519160cd0a9acc0f3b5fd826cb9","ssdeep":"","tlshash":"7261759ae77a38dbb2f900f2697e0d47eb614436d6c8d438c9bda31418b5893c274b46","size":3395,"data":"","first_seen":"2026-03-07T03:29:42.183283Z","last_seen":"2026-03-07T03:29:42.183283Z","times_seen":1,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"click.wospacstages.cc/wp-includes/js/dist/script-modules/interactivity/index.min.js?ver=66c613f68580994bb00a","fqdn":"click.wospacstages.cc","domain":"wospacstages.cc","tld":"cc"},"ip":{"addr":"104.21.18.59","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"importedModule","is_inline":false,"md5":"4dc1083fadc3146eef9e178a635322d7","sha1":"4e30da47cbbd6c3b4bc243ef9196fdb54b8a5648","sha256":"222102c59fbeb8df4f97e143c264d83d794d74a6123486b03b9ecf32a5471918","sha512":"aa096ebe4c95e43225ee1f09450521632db53c9cd732d01e1492747a1f45cb0254cc2a443cd1f024314c86fa0eec441f20ae33c5ef4a55d6cb95bcb7b84d3384","ssdeep":"768:HeW4693pQRsx45G/0vTVhtFiBa7jJEbYlrEdORuHhYlxuQLSZEXdYqAOmp9mI66f:HeQ93u6/0vxh17thuhyQpgFbonUWqeou","tlshash":"bc03c7a4b065f03047e614a6907b051bf3356618344fc0e0f769e8ea78b919f6567f3e","size":41194,"data":"","first_seen":"2026-02-04T02:31:53.531475Z","last_seen":"2026-04-04T14:13:42.666166Z","times_seen":2207,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"click.wospacstages.cc/wp-includes/js/wp-emoji-release.min.js?ver=6.9.1","fqdn":"click.wospacstages.cc","domain":"wospacstages.cc","tld":"cc"},"ip":{"addr":"104.21.18.59","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"introduction_type":"scriptElement","is_inline":false,"md5":"f0cc9ba5cf46af0cd73d521803e3b07e","sha1":"7d2a74f87dc70a39eccce3bae1d4cc404cb134f4","sha256":"fd59b0ebf6282ed71647bf2f6e0d1925bbfd1f270865a832079ebb60259aabca","sha512":"7ec44f08676c195547a623504c7105ef3d0acea5839675599598043f3e0b5a3386452e3db6fbea90722f7be9e6effdae1b89c49e2b05b22b8c415616e07d471d","ssdeep":"384:WzevzApRZTbXU/3o//bEPhXgA5POkpJTX:Wsk9XU/3o//YpXgAs+hX","tlshash":"7fa2959ba33a4e8f343e3bd78d968f4dc9da555321c0e079dbefb6c169a00568274c80","size":22762,"data":"","first_seen":"2025-11-10T19:52:32.864936Z","last_seen":"2026-04-04T14:45:27.704066Z","times_seen":131632,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"click.wospacstages.cc/wp-block-template-skip-link-js-after","fqdn":"click.wospacstages.cc","domain":"wospacstages.cc","tld":"cc"},"ip":{"addr":"0.0.0.0","port":0,"asn":0,"as":"","country":"","country_code":"ZZ"},"introduction_type":"scriptElement","is_inline":false,"md5":"f2503d42344be200700719d878eedb0d","sha1":"67aac867d6a2a7b1f35744640c692c545d54aa7a","sha256":"559c1ed4ea88a4bcff829f969e18bf5bdb6fecfe660b0bc209731ec25ddafcf8","sha512":"976129377cfb54ad14e8bf9be66b3ed6dcbe9fcc3faf543c9913ca9683b0d9292c66310a897dab8dae55d522366879ebaeb4d8641687d0ded1a017ad0c533b5e","ssdeep":"","tlshash":"693195c4f21506f401662a39c4341bc9e2b92998f6db1ca7cc0c8c2cb1b256f46b6f7e","size":1475,"data":"","first_seen":"2025-12-06T08:22:01.899334Z","last_seen":"2026-04-04T01:23:16.790376Z","times_seen":9,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null},"http":[{"url":{"schema":"https","addr":"click.wospacstages.cc/wp-content/uploads/2025/07/cropped-wospac-32x32.png","fqdn":"click.wospacstages.cc","domain":"wospacstages.cc","tld":"cc"},"ip":{"addr":"104.21.18.59","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://click.wospacstages.cc/","date":"2026-03-07T03:29:11.290Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wospacstages.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 23 Jan 2026 07:52:10 GMT","end":"Thu, 23 Apr 2026 08:50:39 GMT"},"fingerprint":{"sha1":"30:4C:AB:39:DB:97:DA:83:A8:04:2B:F1:28:BC:D6:A8:42:15:F5:E0","sha256":"FD:78:AB:62:5F:29:9E:F7:FF:5E:62:CF:EB:29:7A:ED:09:48:A9:3D:FE:FA:61:26:D1:DE:E2:02:13:47:69:6D"}}},"request":{"raw":"GET /wp-content/uploads/2025/07/cropped-wospac-32x32.png HTTP/1.1\r\nHost: click.wospacstages.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://click.wospacstages.cc/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 07 Mar 2026 03:29:11 GMT\r\ncontent-type: image/png\r\ncontent-length: 1173\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 14 Mar 2026 03:29:11 GMT\r\nlast-modified: Wed, 30 Jul 2025 08:56:22 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nvary: User-Agent\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=%2BvBw%2FJkVS7Wq%2BnoRTWNC56HHRmFmjGjJWzRCJRu9%2Fh5uiNgskbMzJRMR5AMHV%2BnX9ANTlrYnlvPKHr6trfsWU7yP8NSPzzGeHwpT6SyMBFaNndVFvg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=6,i=?0\r\ncf-ray: 9d8683ad89411ae6-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":1173,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced","md5":"dca84f20e1d93d5a550e99d57a7c5490","sha1":"51b0cabc3d546bc11b8d0becb528c9fba47274e4","sha256":"587cc89bf78dc0b221946e2cfd2aea013550bf7ec6e1efe3796630f54afe0158","sha512":"5cc04ec1cdec9fdc4346650f4455b4e6ce273b1aae56c48f554407b1f6323500941f9ddb45e2633ece68f8ae52a4ad01ee2c2b7b5784796e9ab729699ef4d7b0","ssdeep":"","tlshash":"00210d919f0e083bf94d91f065fd44455cd35ab033ba71e4e7deca9310143b813c2500","first_seen":"2025-08-16T19:19:03.479517Z","last_seen":"2026-03-15T19:18:52.909967Z","times_seen":22,"resource_available":false,"data":null}},"time_used":540,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":540,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"click.wospacstages.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"click.wospacstages.cc/wp-content/plugins/newsletter/style.css?ver=8.4.2","fqdn":"click.wospacstages.cc","domain":"wospacstages.cc","tld":"cc"},"ip":{"addr":"104.21.18.59","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://click.wospacstages.cc/","date":"2026-03-07T03:29:09.677Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wospacstages.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 23 Jan 2026 07:52:10 GMT","end":"Thu, 23 Apr 2026 08:50:39 GMT"},"fingerprint":{"sha1":"30:4C:AB:39:DB:97:DA:83:A8:04:2B:F1:28:BC:D6:A8:42:15:F5:E0","sha256":"FD:78:AB:62:5F:29:9E:F7:FF:5E:62:CF:EB:29:7A:ED:09:48:A9:3D:FE:FA:61:26:D1:DE:E2:02:13:47:69:6D"}}},"request":{"raw":"GET /wp-content/plugins/newsletter/style.css?ver=8.4.2 HTTP/1.1\r\nHost: click.wospacstages.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://click.wospacstages.cc/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 07 Mar 2026 03:29:10 GMT\r\ncontent-type: text/css\r\ncontent-length: 1331\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 14 Mar 2026 03:29:10 GMT\r\nlast-modified: Wed, 30 Jul 2025 08:47:03 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding,User-Agent\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=s7r%2BiXvqxW675uDARhJeinqcRzPTVtcLIVUcCMsZ0jwIDK9%2FKXki%2FDKzyMDCIS5XVizRp%2Bgrj3d6Zd5WWFKHGAX9UnqLPskIu%2F5JCt5KIrLvn3MuZA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=2,i=?0\r\ncf-ray: 9d8683a378b31ae6-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":6792,"size_decoded":0,"mime_type":"text/css","magic":"ASCII text, with CRLF line terminators","md5":"fb5d24687889dd4144fa32e7161bd627","sha1":"ae3b93c243303afd514d90bd16166bbbeecc46cd","sha256":"74b7b401fa5db9ba5b9bfb878fe44fcee5d6d8cabdb4d8f86f2c5de52cf992b0","sha512":"a2bde9ba797d043e9fb22a2a628aede5e6829ef0b775123c4dd3a3783d3299d1b2c5023d803ca8df049e7e31fa028d327def1e9f6d223184e8a8986775e63bf4","ssdeep":"192:9EgIjALimpxKx/xbGV5LJxhdDxgy6TVF3vQkxgHyH9gHGT6F0zz:e","tlshash":"f3e1ce04cb406282a2765634bff68205fd21292be7008b677ee4b59c8f7db904973f9d","first_seen":"2024-03-11T15:42:09Z","last_seen":"2026-04-04T14:13:42.664997Z","times_seen":7865,"resource_available":false,"data":null}},"time_used":409,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":409,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"click.wospacstages.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"click.wospacstages.cc/wp-includes/js/dist/script-modules/block-library/navigation/view.min.js?ver=b0f909c3ec791c383210","fqdn":"click.wospacstages.cc","domain":"wospacstages.cc","tld":"cc"},"ip":{"addr":"104.21.18.59","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://click.wospacstages.cc/","date":"2026-03-07T03:29:09.679Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wospacstages.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 23 Jan 2026 07:52:10 GMT","end":"Thu, 23 Apr 2026 08:50:39 GMT"},"fingerprint":{"sha1":"30:4C:AB:39:DB:97:DA:83:A8:04:2B:F1:28:BC:D6:A8:42:15:F5:E0","sha256":"FD:78:AB:62:5F:29:9E:F7:FF:5E:62:CF:EB:29:7A:ED:09:48:A9:3D:FE:FA:61:26:D1:DE:E2:02:13:47:69:6D"}}},"request":{"raw":"GET /wp-includes/js/dist/script-modules/block-library/navigation/view.min.js?ver=b0f909c3ec791c383210 HTTP/1.1\r\nHost: click.wospacstages.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://click.wospacstages.cc/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 07 Mar 2026 03:29:10 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 1057\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 14 Mar 2026 03:29:10 GMT\r\nlast-modified: Wed, 03 Dec 2025 10:56:21 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding,User-Agent\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=f6NaAbMcjP0AHHT%2BuNg3TXCHfdrLzh5PUAdnQs%2BTDv3sJEO0M1ubGD1YEmysSN6jDRl11U9LPH38JROazFT4jS%2BQHGXHczc7aFqoU8a7IW82ruYvSg%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: 9d8683a378b41ae6-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":3401,"size_decoded":0,"mime_type":"application/javascript","magic":"ASCII text, with very long lines (3401), with no line terminators","md5":"81f491adccda86aaf56a1ce68fa59b87","sha1":"c27ca491887c7fdad5a3ca67592173427cc861af","sha256":"efc3dac74026580ee6b527716e2e63ba29f2116a90d4a47a691438b9a2b86c2f","sha512":"809037c160df1990ac458f977252a4cb2629c748f1a8133240c9d2897b14ad58d2407d822fea9c61efeb19af1e72dc16b29c09c917dca024f4145f1977d1ff57","ssdeep":"","tlshash":"24610234306576b1aefe5ad8f3148428a3148581640b78717e1cb9ee58eef5391f0bea","first_seen":"2025-12-03T01:51:42.331168Z","last_seen":"2026-04-04T14:13:42.665653Z","times_seen":7029,"resource_available":true,"data":null}},"time_used":1073,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":1073,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"click.wospacstages.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"click.wospacstages.cc/wp-content/themes/twentytwentyfour/assets/fonts/inter/Inter-VariableFont_slnt,wght.woff2","fqdn":"click.wospacstages.cc","domain":"wospacstages.cc","tld":"cc"},"ip":{"addr":"104.21.18.59","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://click.wospacstages.cc/","date":"2026-03-07T03:29:10.100Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wospacstages.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 23 Jan 2026 07:52:10 GMT","end":"Thu, 23 Apr 2026 08:50:39 GMT"},"fingerprint":{"sha1":"30:4C:AB:39:DB:97:DA:83:A8:04:2B:F1:28:BC:D6:A8:42:15:F5:E0","sha256":"FD:78:AB:62:5F:29:9E:F7:FF:5E:62:CF:EB:29:7A:ED:09:48:A9:3D:FE:FA:61:26:D1:DE:E2:02:13:47:69:6D"}}},"request":{"raw":"GET /wp-content/themes/twentytwentyfour/assets/fonts/inter/Inter-VariableFont_slnt,wght.woff2 HTTP/1.1\r\nHost: click.wospacstages.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://click.wospacstages.cc/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 07 Mar 2026 03:29:10 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 326628\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 14 Mar 2026 03:29:10 GMT\r\nlast-modified: Tue, 26 Sep 2023 20:46:22 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nvary: User-Agent\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=jj6etVMkUr1IYfRQocj5Kzh8bJdmsAEcl4Tm%2BUZITdHh1NTUPXCd5Nc%2FsuFFB5hl7pT1U0g9dnt3Za9u7UQXoa7JYRzIdkI%2BqInWJmGR%2FL3lQh5u%2Bw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9d8683a618dd1ae6-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":326628,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 326628, version 1.0","md5":"9c9cff93a0d5a209225c1bae18d80a9d","sha1":"40546dbfd5c467c3257d8f3a4ad8af0d9995aeb6","sha256":"e931823ffd0b6cfd1624e3a7c1c49861ed3420297862e727f07e04c8be1cc89b","sha512":"6d60eba8b9ae8b8b85ac93d4da1f3ecac3d8472e9821f9a580ede27ed778b5aa590a5083ccb960602cc2b9d345fa17ed67355cac4a1d07427b1b4330a63abff1","ssdeep":"6144:xfpkCcEWnNlAharQ/P8TVcEbGEDyfVxBe3n/uhWxWFrzW/K/M/4GP:xf2CcnNlAwrqP8TVcEbgV63nqWV/6M4U","tlshash":"7b6423d7562e01f6ee6e19a700855e73f8ee2a326f7cf65c7c43a8f938a1c1464421e1","first_seen":"2023-05-10T07:09:06Z","last_seen":"2026-04-04T14:13:42.667696Z","times_seen":12262,"resource_available":false,"data":null}},"time_used":1163,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":648,"receive":515,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"click.wospacstages.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"click.wospacstages.cc/wp-content/uploads/2025/07/cropped-wospac-192x192.png","fqdn":"click.wospacstages.cc","domain":"wospacstages.cc","tld":"cc"},"ip":{"addr":"104.21.18.59","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://click.wospacstages.cc/","date":"2026-03-07T03:29:11.289Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wospacstages.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 23 Jan 2026 07:52:10 GMT","end":"Thu, 23 Apr 2026 08:50:39 GMT"},"fingerprint":{"sha1":"30:4C:AB:39:DB:97:DA:83:A8:04:2B:F1:28:BC:D6:A8:42:15:F5:E0","sha256":"FD:78:AB:62:5F:29:9E:F7:FF:5E:62:CF:EB:29:7A:ED:09:48:A9:3D:FE:FA:61:26:D1:DE:E2:02:13:47:69:6D"}}},"request":{"raw":"GET /wp-content/uploads/2025/07/cropped-wospac-192x192.png HTTP/1.1\r\nHost: click.wospacstages.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,*/*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://click.wospacstages.cc/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 07 Mar 2026 03:29:12 GMT\r\ncontent-type: image/png\r\ncontent-length: 4738\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 14 Mar 2026 03:29:12 GMT\r\nlast-modified: Wed, 30 Jul 2025 08:56:22 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nvary: User-Agent\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=WWlhmehHQncIuWsEJRrU7zTyWB0GaO5pHjcdw4RP%2B%2FkRhrXp2jzzMBMDEnOFND0G0PNSyZDQHXmFhd5RktMW15%2F4Wfn7RZK4m3xu%2FcbeF45yOlG1xw%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=6,i=?0\r\ncf-ray: 9d8683ad89401ae6-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":4738,"size_decoded":0,"mime_type":"image/png","magic":"PNG image data, 192 x 192, 8-bit/color RGBA, non-interlaced","md5":"f11101cf8e101382c41b7a0c5a3bacb3","sha1":"513b92688a376e167a73e9ced825fcd4be266cd8","sha256":"a677686c6fabbad62102b7d3a2f336805bb2ca51bcf30e6013140d5df0009d3d","sha512":"f095137253a4c43e58f532b4ebbf0615562f1e66556ff82181488db9b1878bb92e60b5bc991c99756f259ca5e9d9c4761d17f37396c8ecd304b70e987a2ce263","ssdeep":"96:3zv7PIFRL09IzBATsIIm5UxfqJv7X04vz3WmLCSKr2K4aUIrKS1e:4d0QU7TT3WX343ImSU","tlshash":"18a17eb09853b5d253f5301d88f6ec1b4055ad8e9263ea0ed216c967de139eef0051ec","first_seen":"2025-08-16T19:19:03.472917Z","last_seen":"2026-03-15T19:18:52.919169Z","times_seen":22,"resource_available":false,"data":null}},"time_used":969,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":969,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"click.wospacstages.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"click.wospacstages.cc/wp-includes/js/wp-emoji-release.min.js?ver=6.9.1","fqdn":"click.wospacstages.cc","domain":"wospacstages.cc","tld":"cc"},"ip":{"addr":"104.21.18.59","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://click.wospacstages.cc/","date":"2026-03-07T03:29:11.361Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wospacstages.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 23 Jan 2026 07:52:10 GMT","end":"Thu, 23 Apr 2026 08:50:39 GMT"},"fingerprint":{"sha1":"30:4C:AB:39:DB:97:DA:83:A8:04:2B:F1:28:BC:D6:A8:42:15:F5:E0","sha256":"FD:78:AB:62:5F:29:9E:F7:FF:5E:62:CF:EB:29:7A:ED:09:48:A9:3D:FE:FA:61:26:D1:DE:E2:02:13:47:69:6D"}}},"request":{"raw":"GET /wp-includes/js/wp-emoji-release.min.js?ver=6.9.1 HTTP/1.1\r\nHost: click.wospacstages.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://click.wospacstages.cc/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 07 Mar 2026 03:29:11 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 4949\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 14 Mar 2026 03:29:11 GMT\r\nlast-modified: Wed, 03 Dec 2025 10:56:21 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding,User-Agent\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=aGU2x9qDuWxUSORsTqwnLKF0TljSd90eOaWSXlJ0utph4gm4XFw3DXQyKWc%2FppeUcjW4VjFX5thHHFSMaFXlFDnKYpTgh9iCU4%2BdwjKXBh1vxgtPIQ%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: 9d8683ae094c1ae6-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]}],"data":{"size":22762,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (19823)","md5":"f0cc9ba5cf46af0cd73d521803e3b07e","sha1":"7d2a74f87dc70a39eccce3bae1d4cc404cb134f4","sha256":"fd59b0ebf6282ed71647bf2f6e0d1925bbfd1f270865a832079ebb60259aabca","sha512":"7ec44f08676c195547a623504c7105ef3d0acea5839675599598043f3e0b5a3386452e3db6fbea90722f7be9e6effdae1b89c49e2b05b22b8c415616e07d471d","ssdeep":"384:WzevzApRZTbXU/3o//bEPhXgA5POkpJTX:Wsk9XU/3o//YpXgAs+hX","tlshash":"7fa2959ba33a4e8f343e3bd78d968f4dc9da555321c0e079dbefb6c169a00568274c80","first_seen":"2025-11-10T19:52:32.864936Z","last_seen":"2026-04-04T14:45:27.704066Z","times_seen":131632,"resource_available":true,"data":null}},"time_used":142,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":142,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"click.wospacstages.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"click.wospacstages.cc/","fqdn":"click.wospacstages.cc","domain":"wospacstages.cc","tld":"cc"},"ip":{"addr":"104.21.18.59","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-03-07T03:29:08.254Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wospacstages.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 23 Jan 2026 07:52:10 GMT","end":"Thu, 23 Apr 2026 08:50:39 GMT"},"fingerprint":{"sha1":"30:4C:AB:39:DB:97:DA:83:A8:04:2B:F1:28:BC:D6:A8:42:15:F5:E0","sha256":"FD:78:AB:62:5F:29:9E:F7:FF:5E:62:CF:EB:29:7A:ED:09:48:A9:3D:FE:FA:61:26:D1:DE:E2:02:13:47:69:6D"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: click.wospacstages.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nUpgrade-Insecure-Requests: 1\r\nConnection: keep-alive\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: cross-site\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 OK\r\ndate: Sat, 07 Mar 2026 03:29:09 GMT\r\ncontent-type: text/html; charset=UTF-8\r\nx-powered-by: PHP/7.4.33\r\nlink: \u003chttps://click.wospacstages.cc/wp-json/\u003e; rel=\"https://api.w.org/\", \u003chttps://click.wospacstages.cc/wp-json/wp/v2/pages/7\u003e; rel=\"alternate\"; title=\"JSON\"; type=\"application/json\", \u003chttps://click.wospacstages.cc/\u003e; rel=shortlink\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=fodE5l1tyQY8BejwO%2FBNVZEJmd2Ubp9yvIzzFTeM87hhRMwkhjSEaiT4h0DvcJ4SKj915BcN3axyPdpa9xOpY%2B%2BQrTx7ODEj88VbAQghzuGdC7EMYA%3D%3D\"}]}\r\nvary: Accept-Encoding,User-Agent\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: DYNAMIC\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\ncontent-encoding: br\r\ncf-ray: 9d86839acee3723c-OSL\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]},{"name":"PHP:7.4.33","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"WordPress Site Editor","description":"Full Site Editing enables users to design and customize their entire WordPress website with a block-based editor.","website":"https://wordpress.org/documentation/article/site-editor/","common_platform_enumeration":"","icon":"WordPress.svg","categories":["Page builders"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"WordPress Block Editor","description":"Sites using the WordPress Block Editor, also known as Gutenberg.","website":"https://wordpress.org/gutenberg/","common_platform_enumeration":"","icon":"WordPress.svg","categories":["Page builders"]},{"name":"WordPress:6.9.1","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]}],"data":{"size":71748,"size_decoded":0,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (20397)","md5":"fed281c59801c999fc218abf4837fe39","sha1":"29dbd38aa4b98fa60b660089a1a23340dfe83349","sha256":"c1068eb905d7dd50b90e7cb8d80313809ecc607be6ad8015280c5522c84587f3","sha512":"809ffb5a4d36737f64e32db6b324b1a141d8893d6fee1281c4b73f46714987cff73fa0cf00321f3e3edbe648561ad8eb32343291d162d6b29e3e6206560787e4","ssdeep":"1536:8I+clkeypQMn58oodsZMpX4wvSAIXuTVFeUvCzb:8I+clk3e5dsZMpX4wvSAIeTV4UvCzb","tlshash":"8e63a7a057b448f5797f837b9e44a2189527e812ca093be5f0f3e15465ccea607e3b0e","first_seen":"2026-03-07T03:29:42.177566Z","last_seen":"2026-03-07T03:29:42.177566Z","times_seen":1,"resource_available":true,"data":null}},"time_used":1276,"timings":{"blocked":27,"dns":11,"connect":1,"send":0,"wait":1220,"receive":0,"ssl":13},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"click.wospacstages.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"click.wospacstages.cc/wp-content/themes/twentytwentyfour/assets/fonts/cardo/cardo_normal_400.woff2","fqdn":"click.wospacstages.cc","domain":"wospacstages.cc","tld":"cc"},"ip":{"addr":"104.21.18.59","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://click.wospacstages.cc/","date":"2026-03-07T03:29:10.104Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wospacstages.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 23 Jan 2026 07:52:10 GMT","end":"Thu, 23 Apr 2026 08:50:39 GMT"},"fingerprint":{"sha1":"30:4C:AB:39:DB:97:DA:83:A8:04:2B:F1:28:BC:D6:A8:42:15:F5:E0","sha256":"FD:78:AB:62:5F:29:9E:F7:FF:5E:62:CF:EB:29:7A:ED:09:48:A9:3D:FE:FA:61:26:D1:DE:E2:02:13:47:69:6D"}}},"request":{"raw":"GET /wp-content/themes/twentytwentyfour/assets/fonts/cardo/cardo_normal_400.woff2 HTTP/1.1\r\nHost: click.wospacstages.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: identity\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://click.wospacstages.cc/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 07 Mar 2026 03:29:10 GMT\r\ncontent-type: font/woff2\r\ncontent-length: 146060\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 14 Mar 2026 03:29:10 GMT\r\nlast-modified: Tue, 26 Sep 2023 20:46:22 GMT\r\naccept-ranges: bytes\r\nserver: cloudflare\r\nvary: User-Agent\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=xy9EgnNv2xbfSVg4vYzO20GVySvze1nDI%2B8Qzro3yTyxTs6J1apzhhDbeWxBYYRgJQmYKMFp19o4bPaiRpwZIS6NTOol8zYMfTd8iDrROSHi42IQrA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=4,i=?0\r\ncf-ray: 9d8683a628df1ae6-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]}],"data":{"size":146060,"size_decoded":0,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 146060, version 1.0","md5":"b782b01afc9646c7259701b07e2a71d0","sha1":"b86a6f0bf3fb4777160165dfe37ca4e99b90216e","sha256":"aa8042a77500cfe4a4893e2b7edbd54dded92768e40418fa0665bec8aae9ae18","sha512":"5f727d90952c324dfb9447c4ef702166844e456c614934bc266be072ed8ca681f8246cbc98b653fa45c6579bdad24dfaad04ebe8300f34774ed137254d208fe3","ssdeep":"3072:86eYDlgQh72091K9MIMjeIHT8edPDfeLSyxJjQ:84ZNh720IMIA8eoj8","tlshash":"e6e31376e110fc9723a55a5c1033a4b82a4ea8e7c188f0d4d1ef4a86effd46646c702f","first_seen":"2023-11-07T21:49:08Z","last_seen":"2026-04-04T14:13:42.668283Z","times_seen":9069,"resource_available":false,"data":null}},"time_used":997,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":628,"receive":369,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"click.wospacstages.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"click.wospacstages.cc/wp-includes/js/dist/script-modules/interactivity/index.min.js?ver=66c613f68580994bb00a","fqdn":"click.wospacstages.cc","domain":"wospacstages.cc","tld":"cc"},"ip":{"addr":"104.21.18.59","port":443,"asn":13335,"as":"CLOUDFLARENET","country":"","country_code":"zz"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://click.wospacstages.cc/","date":"2026-03-07T03:29:10.757Z","timestamp":0,"http_version":"","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"x25519","signature_name":"ECDSA-P256-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"wospacstages.cc","organization":""},"issuer":{"commonName":"WE1","organization":"Google Trust Services"},"validity":{"start":"Fri, 23 Jan 2026 07:52:10 GMT","end":"Thu, 23 Apr 2026 08:50:39 GMT"},"fingerprint":{"sha1":"30:4C:AB:39:DB:97:DA:83:A8:04:2B:F1:28:BC:D6:A8:42:15:F5:E0","sha256":"FD:78:AB:62:5F:29:9E:F7:FF:5E:62:CF:EB:29:7A:ED:09:48:A9:3D:FE:FA:61:26:D1:DE:E2:02:13:47:69:6D"}}},"request":{"raw":"GET /wp-includes/js/dist/script-modules/interactivity/index.min.js?ver=66c613f68580994bb00a HTTP/1.1\r\nHost: click.wospacstages.cc\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.5\r\nAccept-Encoding: gzip, deflate, br\r\nDNT: 1\r\nConnection: keep-alive\r\nReferer: https://click.wospacstages.cc/wp-includes/js/dist/script-modules/block-library/navigation/view.min.js?ver=b0f909c3ec791c383210\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/3 200 OK\r\ndate: Sat, 07 Mar 2026 03:29:11 GMT\r\ncontent-type: application/javascript\r\ncontent-length: 14617\r\ncache-control: public, max-age=604800\r\nexpires: Sat, 14 Mar 2026 03:29:11 GMT\r\nlast-modified: Wed, 04 Feb 2026 10:44:57 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding,User-Agent\r\nserver: cloudflare\r\nalt-svc: h3=\":443\"; ma=86400\r\nx-turbo-charged-by: LiteSpeed\r\ncf-cache-status: MISS\r\nreport-to: {\"group\":\"cf-nel\",\"max_age\":604800,\"endpoints\":[{\"url\":\"https://a.nel.cloudflare.com/report/v4?s=EWGrSO5B5N1JUPzSfTNK4pxjeF%2BCxoQF22M4532WJc0vDeZk5g5RcYMzCgNgWsfNJOJHAFxRsnHuKToiDUGtn5ewdrCy%2BnLbKnAd1QGbKjn4UZNEzA%3D%3D\"}]}\r\nnel: {\"report_to\":\"cf-nel\",\"success_fraction\":0.0,\"max_age\":604800}\r\npriority: u=3,i=?0\r\ncf-ray: 9d8683aa391b1ae6-OSL\r\nserver-timing: cfExtPri\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"Litespeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://wordpress.org/plugins/litespeed-cache/","common_platform_enumeration":"","icon":"litespeed-cache.png","categories":["Caching","WordPress plugins"]},{"name":"Cloudflare","description":"Cloudflare is a web-infrastructure and website-security company, providing content-delivery-network services, DDoS mitigation, Internet security, and distributed domain-name-server services.","website":"https://www.cloudflare.com","common_platform_enumeration":"","icon":"CloudFlare.svg","categories":["CDN"]},{"name":"LiteSpeed Cache","description":"LiteSpeed Cache is an all-in-one site acceleration plugin for WordPress.","website":"https://www.litespeedtech.com/products/cache-plugins/wordpress-acceleration","common_platform_enumeration":"","icon":"LiteSpeed.svg","categories":["Caching","WordPress plugins"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":41194,"size_decoded":0,"mime_type":"application/javascript","magic":"JavaScript source, ASCII text, with very long lines (41194), with no line terminators","md5":"4dc1083fadc3146eef9e178a635322d7","sha1":"4e30da47cbbd6c3b4bc243ef9196fdb54b8a5648","sha256":"222102c59fbeb8df4f97e143c264d83d794d74a6123486b03b9ecf32a5471918","sha512":"aa096ebe4c95e43225ee1f09450521632db53c9cd732d01e1492747a1f45cb0254cc2a443cd1f024314c86fa0eec441f20ae33c5ef4a55d6cb95bcb7b84d3384","ssdeep":"768:HeW4693pQRsx45G/0vTVhtFiBa7jJEbYlrEdORuHhYlxuQLSZEXdYqAOmp9mI66f:HeQ93u6/0vxh17thuhyQpgFbonUWqeou","tlshash":"bc03c7a4b065f03047e614a6907b051bf3356618344fc0e0f769e8ea78b919f6567f3e","first_seen":"2026-02-04T02:31:53.531475Z","last_seen":"2026-04-04T14:13:42.666166Z","times_seen":2207,"resource_available":true,"data":null}},"time_used":514,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":400,"receive":114,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-03-07","alert":"Sinkholed","trigger":"click.wospacstages.cc","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}
