{"report_id":"c3a9339d-1d10-4759-9cfe-938c0c48ffe2","version":0,"status":"done","tags":[],"date":"2026-10-07T05:49:42Z","url":{"schema":"https","addr":"be-spotify.com/","fqdn":"be-spotify.com","domain":"be-spotify.com","tld":"com"},"ip":{"addr":"198.54.132.28","port":0,"asn":11878,"as":"tzulo, inc.","country":"Canada","country_code":"CA"},"final":{"url":{"schema":"https","addr":"be-spotify.com/","fqdn":"be-spotify.com","domain":"be-spotify.com","tld":"com"},"title":"koooj","dom":{"size":96339,"mime_type":"text/html; charset=utf-8","magic":"HTML document, Unicode text, UTF-8 text, with very long lines (39856)","md5":"6e9279266e6d14bcddea21d0609073d7","sha1":"9bcf486cc4d547df4ba4057bbf936837f2a241f2","sha256":"e8ae9f483793c6d65f8f01f50cb07f7e857563e0a8b25ce538f2b155ee0eb121","sha512":"091df09bb3ce4f02aaa1a8d04b7e9a21159cf08ab62bfb03451323c9ba071af3860baafaea9ef014f665614477b10f60c7379647e1123e05974b477582a38a13","ssdeep":"1536:GHOsypwYMIuHmqncd5Q2OZwD0MNlbCFVgeQNYNXKNH8XErn10n2ZobsemlUVuXwI:SO92WZobsemlUVug1mGTAEzjfLJ1W","tlshash":"bf938321d27884f9394b8f7a804db21af48aea10894527e6f6f551646ccdebf10fb70d","dom_hash":"domhashc0e1055d1a105378d16537c32372e382","first_seen":"2026-10-07T05:35:43.409949Z","last_seen":"2026-10-07T05:49:44.531558Z","times_seen":2,"resource_available":false,"data":null}},"submit":{"url":{"schema":"https","addr":"be-spotify.com/","fqdn":"be-spotify.com","domain":"be-spotify.com","tld":"com"},"ip":{"addr":"198.54.132.28","port":0,"asn":11878,"as":"tzulo, inc.","country":"Canada","country_code":"CA"},"tags":null,"meta":null},"settings":{"access":"public","device_type":"desktop","expires_at":"2027-11-11T05:49:42Z","useragent":"Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0","referer":"","cookies":null,"exit_node":"qguvgzjxzsgb3vs"},"stats":{"alert_count":{"ids":0,"urlquery":0,"analyzer":3}},"detection":{"ids":null,"analyzer":[{"sensor_name":"infosec_yara","sensor_type":"yara","title":"YARAhub by abuse.ch","description":"YARAhub by abuse.ch","scan_date":"2026-10-07","alert":"Detects SocGholish obfuscated variant first observed in July 2022","trigger":"be-spotify.com/wp-includes/js/dist/script-modules/interactivity/index.min.js?ver=efaa5193bbad9c60ffd1","verdict":"malware","severity":"medium","comment":"","link":"https://yaraify.abuse.ch/yarahub/","meta":{"author":"Ankit Anubhav -ankitanubhav.info","date":"2022-07-19","description":"Detects SocGholish obfuscated variant first observed in July 2022","malpedia_family":"js.fakeupdates","rule":"SocGholish_Variant_B","yarahub_author_email":"ankit.yara@inbox.ru","yarahub_author_twitter":"@ankit_anubhav","yarahub_license":"CC0 1.0","yarahub_reference_link":"https://twitter.com/ankit_anubhav/status/1549246034831781888","yarahub_reference_md5":"4fcc9569ca63cb2f5777954ac4c9290f","yarahub_rule_matching_tlp":"TLP:WHITE","yarahub_rule_sharing_tlp":"TLP:WHITE","yarahub_uuid":"df3d194a-c6bc-4440-bad9-461e0e7962fd"}},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"be-spotify.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-10-07","alert":"Phishing Block","trigger":"be-spotify.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null},"summary":[{"fqdn":"be-spotify.com","ip":{"addr":"198.54.132.28","port":443,"asn":11878,"as":"TZULO","country":"Canada","country_code":"CA"},"domain_registered":"2026-09-26","domain_rank":0,"first_seen":"2026-10-07T05:35:37.989354Z","last_seen":"2026-10-07T05:35:37.989354Z","alert_count":25,"request_count":12,"received_data":584865,"sent_data":5962,"comment":"","tags":null,"fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"WordPress Site Editor","description":"Full Site Editing enables users to design and customize their entire WordPress website with a block-based editor.","website":"https://wordpress.org/documentation/article/site-editor/","common_platform_enumeration":"","icon":"WordPress.svg","categories":["Page builders"]},{"name":"WordPress:7.1.3","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]},{"name":"PHP:8.1.34","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"WordPress Block Editor","description":"Sites using the WordPress Block Editor, also known as Gutenberg.","website":"https://wordpress.org/gutenberg/","common_platform_enumeration":"","icon":"WordPress.svg","categories":["Page builders"]}]}],"files":null,"artifacts":{"windows_shortcuts":null,"files":null,"telegram":null,"pdfs":null,"clipboard":null},"sensors":{"ids":null,"analyzer":null,"urlquery":null},"javascript":{"script":[{"url":{"schema":"https","addr":"be-spotify.com/wp-includes/js/dist/script-modules/interactivity/index.min.js?ver=efaa5193bbad9c60ffd1","fqdn":"be-spotify.com","domain":"be-spotify.com","tld":"com"},"ip":{"addr":"198.54.132.28","port":443,"asn":11878,"as":"TZULO","country":"Canada","country_code":"CA"},"introduction_type":"scriptElement","is_inline":false,"md5":"f0866401d2e6bf0b38495c9f278cf96a","sha1":"78a648d27819f61c8b8678d64632d2c35ac6801f","sha256":"726ac59577c8aeeec94c61bfb7791a709e401b5d871d35c39a65cd948f6124e3","sha512":"7889b5b5b511b2d7af4752fb4d4ae4edcf96b18351224867e39c5dbff54fb6fadf3e18a40bfa35cd803d34426e95623768e64a132282f1813525a7d1844f101f","ssdeep":"768:oqEYJ8Mc56JH6u0HpQPu3iU7bwUCD2XZjVV300FKKh:YYJC0cHWujsIl39KKh","tlshash":"37031af8b2a8703183ef50b5503f040bf3366968588d8068ba65d4eb68f454a51f7fbd","size":40106,"data":"","first_seen":"2026-05-21T20:58:39.683163Z","last_seen":"2026-10-11T09:39:10.607267Z","times_seen":13887,"alerts":{"ids":null,"analyzer":[{"sensor_name":"infosec_yara","sensor_type":"yara","title":"YARAhub by abuse.ch","description":"YARAhub by abuse.ch","scan_date":"2026-10-07","alert":"Detects SocGholish obfuscated variant first observed in July 2022","trigger":"be-spotify.com/wp-includes/js/dist/script-modules/interactivity/index.min.js?ver=efaa5193bbad9c60ffd1","verdict":"malware","severity":"medium","comment":"","link":"https://yaraify.abuse.ch/yarahub/","meta":{"author":"Ankit Anubhav -ankitanubhav.info","date":"2022-07-19","description":"Detects SocGholish obfuscated variant first observed in July 2022","malpedia_family":"js.fakeupdates","rule":"SocGholish_Variant_B","yarahub_author_email":"ankit.yara@inbox.ru","yarahub_author_twitter":"@ankit_anubhav","yarahub_license":"CC0 1.0","yarahub_reference_link":"https://twitter.com/ankit_anubhav/status/1549246034831781888","yarahub_reference_md5":"4fcc9569ca63cb2f5777954ac4c9290f","yarahub_rule_matching_tlp":"TLP:WHITE","yarahub_rule_sharing_tlp":"TLP:WHITE","yarahub_uuid":"df3d194a-c6bc-4440-bad9-461e0e7962fd"}}],"urlquery":null}},{"url":{"schema":"https","addr":"be-spotify.com/controlpanel-bar-js-js-extra","fqdn":"be-spotify.com","domain":"be-spotify.com","tld":"com"},"ip":{"addr":"198.54.132.28","port":443,"asn":11878,"as":"TZULO","country":"Canada","country_code":"CA"},"introduction_type":"scriptElement","is_inline":false,"md5":"ff80e4e92ba7a891a46838f6aad7a910","sha1":"8b9d7c3c98895c7f38c030fe1f24c06f000eac0f","sha256":"6f979b5103346039e2951660530f218bfefd3cbb978910eec4b2b5efca5d23e5","sha512":"f0ead81ca56f85a14ee25284cf9187e9b7190d54a807a035c02defe3ad73d8c4b7a38c12be2f7db8db833ab5ca21d3317020c6a858e87ada2cb0100f6d5fc76b","ssdeep":"","tlshash":"e7f08043c1fc0bf98ade65bd227eeb159b4d8c13c156c1139a167cc009e45c371b7504","size":520,"data":"","first_seen":"2026-10-07T05:35:43.439429Z","last_seen":"2026-10-07T05:49:44.552898Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"be-spotify.com/wp-content/mu-plugins/controlpanel-connector/assets/js/controlpanelbar.js?ver=1.7.4","fqdn":"be-spotify.com","domain":"be-spotify.com","tld":"com"},"ip":{"addr":"198.54.132.28","port":443,"asn":11878,"as":"TZULO","country":"Canada","country_code":"CA"},"introduction_type":"scriptElement","is_inline":false,"md5":"330386d0dffc274332bfd11e50e1280e","sha1":"dff020415d6465ad5ba539fb05cca65a616dd685","sha256":"43003eef7da10fe6030dc65565da6f21b9d11c32f0bfbcee0fa77a133f6a9887","sha512":"82cdefe7ce3a1a52f6771b477ea72d2001abd15d987f6e45e8d692b45a9b9c6e408f89b2bb4bfbee403d18a5ff0947d74a78f4ac019106c9780da8121c99d056","ssdeep":"","tlshash":"8a41571a1af12276016774bd27df8d403d38a403d04ed936392dba44afc0a65ba73bc8","size":2269,"data":"","first_seen":"2026-04-30T01:50:30.018512Z","last_seen":"2026-10-07T05:49:44.539673Z","times_seen":17,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"be-spotify.com/wp-content/themes/extendable/assets/js/header.js?ver=2.1.9","fqdn":"be-spotify.com","domain":"be-spotify.com","tld":"com"},"ip":{"addr":"198.54.132.28","port":443,"asn":11878,"as":"TZULO","country":"Canada","country_code":"CA"},"introduction_type":"scriptElement","is_inline":false,"md5":"79c5237bf56c4247df7090c31171eee5","sha1":"c384730d987565e9867776e1a91f8e739c56560a","sha256":"0aee93f2d7c2015a32a397953665e7ae2d643347bbaaf24d65c68855ac302cb8","sha512":"9ab7ff35effb8d9c06b518e55f8640b994263d4cfff911a61bd303138c217897adc2c89ccb7f37d73f892269cae45b41be5f89fe65f4e6278dc5c2760bb589c8","ssdeep":"","tlshash":"d781d724a36c323e12fab19ae419a7d7773c0243b54309db9a4d989d21d44b8c2e1fd7","size":3960,"data":"","first_seen":"2026-05-28T01:27:32.104167Z","last_seen":"2026-10-11T06:36:42.187024Z","times_seen":736,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"be-spotify.com/wp-includes/js/wp-emoji-loader.min.js","fqdn":"be-spotify.com","domain":"be-spotify.com","tld":"com"},"ip":{"addr":"198.54.132.28","port":443,"asn":11878,"as":"TZULO","country":"Canada","country_code":"CA"},"introduction_type":"scriptElement","is_inline":false,"md5":"89447016daba74c5d8168376dc007b0e","sha1":"b494a4433a7506ed8f24add735f6dc2e6a8ced87","sha256":"0f58046cbe2caca8481ef537cde81a5672347002512c6457d10fc8c396e29ce2","sha512":"638c61b57b81d1ada509c2fb9c1759e15abba0badd86b962c4d5435123c96de172b05b6d5696d1031e9c29758efa88dc364d46c50f96d56b1cb2268e4ee9057b","ssdeep":"","tlshash":"8b618599eb7938db33fa01f3653a4d4beb614436e684d038c9ae631424b1893c375a5a","size":3404,"data":"","first_seen":"2026-10-07T05:35:43.443886Z","last_seen":"2026-10-07T05:49:44.55475Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"be-spotify.com/extendable-navigation_customizations-js-extra","fqdn":"be-spotify.com","domain":"be-spotify.com","tld":"com"},"ip":{"addr":"198.54.132.28","port":443,"asn":11878,"as":"TZULO","country":"Canada","country_code":"CA"},"introduction_type":"scriptElement","is_inline":false,"md5":"8ea059ed0503a41c4e5462f2fef75d62","sha1":"f1c2e17d7bf951292b17b5ec6609d75ad89580b0","sha256":"681a02f2ce513046439ca9cec96ac9282e4f18ddd60911e4c24d5e72cab9c083","sha512":"5154076d974385a5011e16ab1d1de915b401966cde18a9de716876564488bebabcdff54e4fd9714f3a805e47fcdfb5e063d1ee5982b25445015e8ee1ca993cef","ssdeep":"","tlshash":"52f09b55c5fc1f944852dc71169541635055dd41c49305a4d5d855851160d51ab59f41","size":463,"data":"","first_seen":"2026-10-07T05:35:43.441662Z","last_seen":"2026-10-07T05:49:44.555894Z","times_seen":2,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"be-spotify.com/wp-content/themes/extendable/assets/js/navigation-customization.js","fqdn":"be-spotify.com","domain":"be-spotify.com","tld":"com"},"ip":{"addr":"198.54.132.28","port":443,"asn":11878,"as":"TZULO","country":"Canada","country_code":"CA"},"introduction_type":"scriptElement","is_inline":false,"md5":"11eb9e73319f02ea7fe96f4892551e7c","sha1":"fb46f57727081fdf509132cb3fe99a1f782a1a89","sha256":"d991eb7f3f0b5d5b3c6545e61aa5bd936ca77bedcb4a52cd1c698b0a24bb789b","sha512":"af92cf9c824674c2979019fd9a596b5302dfcf0b2cbd46b943b3a9e8ca7cee98564cdcdc2ef016049166a903490d20f32875fca31a9c1f21357cc7c150f98289","ssdeep":"","tlshash":"2971212c56b31176056302afe7e7a1d0b960540bf906c4897fdec3483fc0a24ea62bda","size":3668,"data":"","first_seen":"2026-05-26T17:13:17.004516Z","last_seen":"2026-10-11T06:36:42.181389Z","times_seen":748,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"be-spotify.com/wp-includes/js/dist/script-modules/block-library/navigation/view.min.js?ver=1bf28ded04f9f188bdcb","fqdn":"be-spotify.com","domain":"be-spotify.com","tld":"com"},"ip":{"addr":"198.54.132.28","port":443,"asn":11878,"as":"TZULO","country":"Canada","country_code":"CA"},"introduction_type":"scriptElement","is_inline":false,"md5":"fa40dd851aca7b8c45de7991f13a8683","sha1":"4b9cb946ef66b3cc547f971b7915f023dd84da37","sha256":"fbe11af6f29f55ae480e2058aad3ac400315d2792c3b14346f016b70cebf3bb3","sha512":"51ea7694116308ed78b1a417f96ad0c41e842f8a94dd9640f3456c60ae53eea18fb908405c059675b56278986671c42d37f5d9049db2159558c10e73e1f50100","ssdeep":"","tlshash":"39517179726575b6cefe4788f330d538b3619dc1040a1442bd1806dfaaaeea1c1e1f6a","size":3033,"data":"","first_seen":"2026-07-31T14:57:46.364913Z","last_seen":"2026-10-11T09:39:10.609774Z","times_seen":2906,"alerts":{"ids":null,"analyzer":null,"urlquery":null}},{"url":{"schema":"https","addr":"be-spotify.com/wp-includes/js/wp-emoji-release.min.js?ver=7.1.3","fqdn":"be-spotify.com","domain":"be-spotify.com","tld":"com"},"ip":{"addr":"198.54.132.28","port":443,"asn":11878,"as":"TZULO","country":"Canada","country_code":"CA"},"introduction_type":"scriptElement","is_inline":false,"md5":"7dcb0bb1f67bc5cd9aa86bc0577108e3","sha1":"c90b1ed149a278c322a63f3a79443ccce5592382","sha256":"063840b4b3f5869e0f0d078bab8bd29cfb3a59ee85e8e3edbbec35a8fe846fd3","sha512":"d09c60fc702e1d3fb839685770b2626a64cbc6373ac4bf3a63c3536caef34f4f6caf76adfbd5c2d15bed6e1396ed4f3ca80f6673e3421b2ae2f9e7aa5ccf16f2","ssdeep":"384:WzevzApRZTbbUL3px/bEg1XgA5OOkpJTX:Wsk9bUL3px/YqXgAP+hX","tlshash":"79a2949ba33a4e8f343e3bd78d968f4dc9da555321c0e079dbefb6c169a00568274c90","size":22752,"data":"","first_seen":"2026-06-05T05:27:24.795617Z","last_seen":"2026-10-11T09:43:45.474325Z","times_seen":80889,"alerts":{"ids":null,"analyzer":null,"urlquery":null}}],"eval":null,"write":null,"console":null},"http":[{"url":{"schema":"https","addr":"be-spotify.com/wp-content/themes/extendable/style.css?ver=2.1.9","fqdn":"be-spotify.com","domain":"be-spotify.com","tld":"com"},"ip":{"addr":"198.54.132.28","port":443,"asn":11878,"as":"TZULO","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://be-spotify.com/","date":"2026-10-07T05:49:13.633Z","timestamp":1791352153633,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"autodiscover.be-spotify.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 26 Sep 2026 12:00:38 GMT","end":"Fri, 25 Dec 2026 12:00:37 GMT"},"fingerprint":{"sha1":"6E:3E:D5:B3:6B:80:B7:AF:0A:F1:27:83:D8:A8:E9:33:91:D9:1C:F2","sha256":"99:50:8F:7F:B4:B7:3F:7E:81:EE:6A:C5:39:7F:CF:98:11:CD:8B:DA:CF:F5:16:62:F4:C7:29:8D:A6:3C:C7:86"}}},"request":{"raw":"GET /wp-content/themes/extendable/style.css?ver=2.1.9 HTTP/1.1\r\nHost: be-spotify.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://be-spotify.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 14 Oct 2026 05:49:13 GMT\r\ncontent-type: text/css\r\nlast-modified: Sat, 26 Sep 2026 11:01:44 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 9950\r\ndate: Wed, 07 Oct 2026 05:49:13 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":48839,"size_decoded":10279,"mime_type":"text/css","magic":"Unicode text, UTF-8 text, with very long lines (5513)","md5":"a7b7dd7f8cdad42e55369171995f6c59","sha1":"1457f43fe0c258c97557d9d63dd22879e144dfe1","sha256":"5c4804b9769242024bcaba9f70c32c0c21c5d81873da4e97569a9349da0060ba","sha512":"39a581d5472fe2412307a9b2f2c9cfe1cab679ecacc941ccc8414868b7a62d3adedf17731852a88aafb30a9f9b05cceb2736d569efd180c5859158e9da0b921a","ssdeep":"768:ngyQT3tdpSwWkFww1B2f4h4u0Wcm7u4mzLxwrdB796D:ngyQTddpokFwwif4h4rPIBY","tlshash":"8223c750dda07ab82577e327e95aea10d6768502cb1129d6f3fed14d13cc36c40aeeca","first_seen":"2026-08-27T17:41:35.108751Z","last_seen":"2026-10-11T06:36:42.175897Z","times_seen":135,"resource_available":true,"data":null}},"time_used":111,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":111,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"be-spotify.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-10-07","alert":"Phishing Block","trigger":"be-spotify.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"be-spotify.com/wp-includes/js/dist/script-modules/interactivity/index.min.js?ver=efaa5193bbad9c60ffd1","fqdn":"be-spotify.com","domain":"be-spotify.com","tld":"com"},"ip":{"addr":"198.54.132.28","port":443,"asn":11878,"as":"TZULO","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://be-spotify.com/","date":"2026-10-07T05:49:13.640Z","timestamp":1791352153640,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"autodiscover.be-spotify.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 26 Sep 2026 12:00:38 GMT","end":"Fri, 25 Dec 2026 12:00:37 GMT"},"fingerprint":{"sha1":"6E:3E:D5:B3:6B:80:B7:AF:0A:F1:27:83:D8:A8:E9:33:91:D9:1C:F2","sha256":"99:50:8F:7F:B4:B7:3F:7E:81:EE:6A:C5:39:7F:CF:98:11:CD:8B:DA:CF:F5:16:62:F4:C7:29:8D:A6:3C:C7:86"}}},"request":{"raw":"GET /wp-includes/js/dist/script-modules/interactivity/index.min.js?ver=efaa5193bbad9c60ffd1 HTTP/1.1\r\nHost: be-spotify.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://be-spotify.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/javascript\r\nlast-modified: Sat, 26 Sep 2026 11:00:51 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 14887\r\ndate: Wed, 07 Oct 2026 05:49:13 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":40106,"size_decoded":15145,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (40105)","md5":"f0866401d2e6bf0b38495c9f278cf96a","sha1":"78a648d27819f61c8b8678d64632d2c35ac6801f","sha256":"726ac59577c8aeeec94c61bfb7791a709e401b5d871d35c39a65cd948f6124e3","sha512":"7889b5b5b511b2d7af4752fb4d4ae4edcf96b18351224867e39c5dbff54fb6fadf3e18a40bfa35cd803d34426e95623768e64a132282f1813525a7d1844f101f","ssdeep":"768:oqEYJ8Mc56JH6u0HpQPu3iU7bwUCD2XZjVV300FKKh:YYJC0cHWujsIl39KKh","tlshash":"37031af8b2a8703183ef50b5503f040bf3366968588d8068ba65d4eb68f454a51f7fbd","first_seen":"2026-05-21T20:58:39.683163Z","last_seen":"2026-10-11T09:39:10.607267Z","times_seen":13887,"resource_available":true,"data":null}},"time_used":112,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":112,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"infosec_yara","sensor_type":"yara","title":"YARAhub by abuse.ch","description":"YARAhub by abuse.ch","scan_date":"2026-10-07","alert":"Detects SocGholish obfuscated variant first observed in July 2022","trigger":"be-spotify.com/wp-includes/js/dist/script-modules/interactivity/index.min.js?ver=efaa5193bbad9c60ffd1","verdict":"malware","severity":"medium","comment":"","link":"https://yaraify.abuse.ch/yarahub/","meta":{"author":"Ankit Anubhav -ankitanubhav.info","date":"2022-07-19","description":"Detects SocGholish obfuscated variant first observed in July 2022","malpedia_family":"js.fakeupdates","rule":"SocGholish_Variant_B","yarahub_author_email":"ankit.yara@inbox.ru","yarahub_author_twitter":"@ankit_anubhav","yarahub_license":"CC0 1.0","yarahub_reference_link":"https://twitter.com/ankit_anubhav/status/1549246034831781888","yarahub_reference_md5":"4fcc9569ca63cb2f5777954ac4c9290f","yarahub_rule_matching_tlp":"TLP:WHITE","yarahub_rule_sharing_tlp":"TLP:WHITE","yarahub_uuid":"df3d194a-c6bc-4440-bad9-461e0e7962fd"}},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-10-07","alert":"Phishing Block","trigger":"be-spotify.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"be-spotify.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"be-spotify.com/wp-content/mu-plugins/controlpanel-connector/assets/js/controlpanelbar.js?ver=1.7.4","fqdn":"be-spotify.com","domain":"be-spotify.com","tld":"com"},"ip":{"addr":"198.54.132.28","port":443,"asn":11878,"as":"TZULO","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://be-spotify.com/","date":"2026-10-07T05:49:13.854Z","timestamp":1791352153854,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"autodiscover.be-spotify.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 26 Sep 2026 12:00:38 GMT","end":"Fri, 25 Dec 2026 12:00:37 GMT"},"fingerprint":{"sha1":"6E:3E:D5:B3:6B:80:B7:AF:0A:F1:27:83:D8:A8:E9:33:91:D9:1C:F2","sha256":"99:50:8F:7F:B4:B7:3F:7E:81:EE:6A:C5:39:7F:CF:98:11:CD:8B:DA:CF:F5:16:62:F4:C7:29:8D:A6:3C:C7:86"}}},"request":{"raw":"GET /wp-content/mu-plugins/controlpanel-connector/assets/js/controlpanelbar.js?ver=1.7.4 HTTP/1.1\r\nHost: be-spotify.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://be-spotify.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/javascript\r\nlast-modified: Fri, 18 Sep 2026 13:42:00 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 581\r\ndate: Wed, 07 Oct 2026 05:49:13 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":2269,"size_decoded":837,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text","md5":"330386d0dffc274332bfd11e50e1280e","sha1":"dff020415d6465ad5ba539fb05cca65a616dd685","sha256":"43003eef7da10fe6030dc65565da6f21b9d11c32f0bfbcee0fa77a133f6a9887","sha512":"82cdefe7ce3a1a52f6771b477ea72d2001abd15d987f6e45e8d692b45a9b9c6e408f89b2bb4bfbee403d18a5ff0947d74a78f4ac019106c9780da8121c99d056","ssdeep":"","tlshash":"8a41571a1af12276016774bd27df8d403d38a403d04ed936392dba44afc0a65ba73bc8","first_seen":"2026-04-30T01:50:30.018512Z","last_seen":"2026-10-07T05:49:44.539673Z","times_seen":17,"resource_available":true,"data":null}},"time_used":237,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":237,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-10-07","alert":"Phishing Block","trigger":"be-spotify.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"be-spotify.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"be-spotify.com/wp-content/themes/extendable/assets/js/navigation-customization.js","fqdn":"be-spotify.com","domain":"be-spotify.com","tld":"com"},"ip":{"addr":"198.54.132.28","port":443,"asn":11878,"as":"TZULO","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://be-spotify.com/","date":"2026-10-07T05:49:13.857Z","timestamp":1791352153857,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"autodiscover.be-spotify.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 26 Sep 2026 12:00:38 GMT","end":"Fri, 25 Dec 2026 12:00:37 GMT"},"fingerprint":{"sha1":"6E:3E:D5:B3:6B:80:B7:AF:0A:F1:27:83:D8:A8:E9:33:91:D9:1C:F2","sha256":"99:50:8F:7F:B4:B7:3F:7E:81:EE:6A:C5:39:7F:CF:98:11:CD:8B:DA:CF:F5:16:62:F4:C7:29:8D:A6:3C:C7:86"}}},"request":{"raw":"GET /wp-content/themes/extendable/assets/js/navigation-customization.js HTTP/1.1\r\nHost: be-spotify.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://be-spotify.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/javascript\r\nlast-modified: Sat, 26 Sep 2026 11:01:44 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 1078\r\ndate: Wed, 07 Oct 2026 05:49:13 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":3668,"size_decoded":1335,"mime_type":"text/javascript","magic":"JavaScript source, Unicode text, UTF-8 text","md5":"11eb9e73319f02ea7fe96f4892551e7c","sha1":"fb46f57727081fdf509132cb3fe99a1f782a1a89","sha256":"d991eb7f3f0b5d5b3c6545e61aa5bd936ca77bedcb4a52cd1c698b0a24bb789b","sha512":"af92cf9c824674c2979019fd9a596b5302dfcf0b2cbd46b943b3a9e8ca7cee98564cdcdc2ef016049166a903490d20f32875fca31a9c1f21357cc7c150f98289","ssdeep":"","tlshash":"2971212c56b31176056302afe7e7a1d0b960540bf906c4897fdec3483fc0a24ea62bda","first_seen":"2026-05-26T17:13:17.004516Z","last_seen":"2026-10-11T06:36:42.181389Z","times_seen":748,"resource_available":true,"data":null}},"time_used":234,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":234,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"be-spotify.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-10-07","alert":"Phishing Block","trigger":"be-spotify.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"be-spotify.com/favicon.ico","fqdn":"be-spotify.com","domain":"be-spotify.com","tld":"com"},"ip":{"addr":"198.54.132.28","port":443,"asn":11878,"as":"TZULO","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"img","requested_by":"https://be-spotify.com/","date":"2026-10-07T05:49:14.117Z","timestamp":1791352154117,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"autodiscover.be-spotify.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 26 Sep 2026 12:00:38 GMT","end":"Fri, 25 Dec 2026 12:00:37 GMT"},"fingerprint":{"sha1":"6E:3E:D5:B3:6B:80:B7:AF:0A:F1:27:83:D8:A8:E9:33:91:D9:1C:F2","sha256":"99:50:8F:7F:B4:B7:3F:7E:81:EE:6A:C5:39:7F:CF:98:11:CD:8B:DA:CF:F5:16:62:F4:C7:29:8D:A6:3C:C7:86"}}},"request":{"raw":"GET /favicon.ico HTTP/1.1\r\nHost: be-spotify.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: image/avif,image/webp,image/png,image/svg+xml,image/*;q=0.8,*/*;q=0.5\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://be-spotify.com/\r\nSec-Fetch-Dest: image\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=6\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 404 \r\ncache-control: private, no-cache, no-store, must-revalidate, max-age=0\r\npragma: no-cache\r\ncontent-type: text/html\r\ncontent-length: 1251\r\ndate: Wed, 07 Oct 2026 05:49:14 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"404","status_text":"Not Found","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":1251,"size_decoded":1479,"mime_type":"text/html","magic":"HTML document, ASCII text, with CRLF, LF line terminators","md5":"8150f458ed6fb9b1db4e5cfa57a1a281","sha1":"6e5726854d28687b560d7fdcb5c782c425c7dfb9","sha256":"4c13d452dd5d49671bd93ca32f2b4f85c78e39b6ab0ad1f38d98ed267f8fd896","sha512":"4cc6a112673aef8bb8bb8a385c26791b805d43bb707b509880e894f1c83bab4e16f13de187036c5f660c3bec1d286258396b7bde65c5d7945c5019665196818c","ssdeep":"","tlshash":"c021353ec1c1560ae0271164fbc1f7a86669825291970f703b9eb176f6cd0bb56a36c8","first_seen":"2024-02-08T16:48:55Z","last_seen":"2026-10-11T09:20:26.213378Z","times_seen":158725,"resource_available":true,"data":null}},"time_used":109,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":109,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"be-spotify.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-10-07","alert":"Phishing Block","trigger":"be-spotify.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"be-spotify.com/","fqdn":"be-spotify.com","domain":"be-spotify.com","tld":"com"},"ip":{"addr":"198.54.132.28","port":443,"asn":11878,"as":"TZULO","country":"Canada","country_code":"CA"},"is_navigation_request":true,"resource_type":"document","requested_by":"","date":"2026-10-07T05:49:10.438Z","timestamp":1791352150438,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"autodiscover.be-spotify.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 26 Sep 2026 12:00:38 GMT","end":"Fri, 25 Dec 2026 12:00:37 GMT"},"fingerprint":{"sha1":"6E:3E:D5:B3:6B:80:B7:AF:0A:F1:27:83:D8:A8:E9:33:91:D9:1C:F2","sha256":"99:50:8F:7F:B4:B7:3F:7E:81:EE:6A:C5:39:7F:CF:98:11:CD:8B:DA:CF:F5:16:62:F4:C7:29:8D:A6:3C:C7:86"}}},"request":{"raw":"GET / HTTP/1.1\r\nHost: be-spotify.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/html,application/xhtml+xml,application/xml;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nUpgrade-Insecure-Requests: 1\r\nSec-Fetch-Dest: document\r\nSec-Fetch-Mode: navigate\r\nSec-Fetch-Site: none\r\nPriority: u=0, i\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\nx-powered-by: PHP/8.1.34\r\ncontent-type: text/html; charset=UTF-8\r\nlink: \u003chttps://be-spotify.com/wp-json/\u003e; rel=\"https://api.w.org/\"\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ndate: Wed, 07 Oct 2026 05:49:13 GMT\r\nserver: LiteSpeed\r\nalt-svc: h3=\":443\"; ma=2592000, h3-29=\":443\"; ma=2592000\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"WordPress Site Editor","description":"Full Site Editing enables users to design and customize their entire WordPress website with a block-based editor.","website":"https://wordpress.org/documentation/article/site-editor/","common_platform_enumeration":"","icon":"WordPress.svg","categories":["Page builders"]},{"name":"WordPress:7.1.3","description":"WordPress is a free and open-source content management system written in PHP and paired with a MySQL or MariaDB database. Features include a plugin architecture and a template system.","website":"https://wordpress.org","common_platform_enumeration":"cpe:2.3:a:wordpress:wordpress:*:*:*:*:*:*:*:*","icon":"WordPress.svg","categories":["CMS","Blogs"]},{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]},{"name":"MySQL","description":"MySQL is an open-source relational database management system.","website":"https://mysql.com","common_platform_enumeration":"cpe:2.3:a:mysql:mysql:*:*:*:*:*:*:*:*","icon":"MySQL.svg","categories":["Databases"]},{"name":"PHP:8.1.34","description":"PHP is a general-purpose scripting language used for web development.","website":"https://php.net","common_platform_enumeration":"cpe:2.3:a:php:php:*:*:*:*:*:*:*:*","icon":"PHP.svg","categories":["Programming languages"]},{"name":"WordPress Block Editor","description":"Sites using the WordPress Block Editor, also known as Gutenberg.","website":"https://wordpress.org/gutenberg/","common_platform_enumeration":"","icon":"WordPress.svg","categories":["Page builders"]}],"data":{"size":95998,"size_decoded":16848,"mime_type":"text/html; charset=UTF-8","magic":"HTML document, ASCII text, with very long lines (39856)","md5":"44bd49ea5b203751188b9e0d8952f458","sha1":"d7f88ce61e8d0f94288b09fef8a8671bfa12caa5","sha256":"a832bb233740eabd5d6c94932f9399334db8ae52950e9f3b48cdc20447b26884","sha512":"25169a29edb8b889a4e479bce9fe86a2987b93e51b5434e69ec2e21535dfbd4c310759a76114c373351cc471a2a87733b68f2f78a0d4384a77c07636fbba8008","ssdeep":"1536:BIbypwYMIuHmqncd5Q2OZwD0MNlbCFVgeQNYNXKNH8XErn108uZMpd4wvSAIXuTW:BIm2pZMpd4wvSAIeTVP5AEzjfLJ1u","tlshash":"17938321d23884f9394b8f7a804db21af58aea10894527e6f6f551646ccdebf10fb70d","first_seen":"2026-10-07T05:35:43.419447Z","last_seen":"2026-10-07T05:49:44.546281Z","times_seen":2,"resource_available":true,"data":null}},"time_used":3008,"timings":{"blocked":-1,"dns":1115,"connect":107,"send":0,"wait":1565,"receive":0,"ssl":221},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"be-spotify.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-10-07","alert":"Phishing Block","trigger":"be-spotify.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"be-spotify.com/wp-content/themes/extendable/assets/fonts/inter/inter-variable.woff2","fqdn":"be-spotify.com","domain":"be-spotify.com","tld":"com"},"ip":{"addr":"198.54.132.28","port":443,"asn":11878,"as":"TZULO","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"font","requested_by":"https://be-spotify.com/","date":"2026-10-07T05:49:13.762Z","timestamp":1791352153762,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"autodiscover.be-spotify.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 26 Sep 2026 12:00:38 GMT","end":"Fri, 25 Dec 2026 12:00:37 GMT"},"fingerprint":{"sha1":"6E:3E:D5:B3:6B:80:B7:AF:0A:F1:27:83:D8:A8:E9:33:91:D9:1C:F2","sha256":"99:50:8F:7F:B4:B7:3F:7E:81:EE:6A:C5:39:7F:CF:98:11:CD:8B:DA:CF:F5:16:62:F4:C7:29:8D:A6:3C:C7:86"}}},"request":{"raw":"GET /wp-content/themes/extendable/assets/fonts/inter/inter-variable.woff2 HTTP/1.1\r\nHost: be-spotify.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: application/font-woff2;q=1.0,application/font-woff;q=0.9,*/*;q=0.8\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: identity\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://be-spotify.com/\r\nSec-Fetch-Dest: font\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 14 Oct 2026 05:49:13 GMT\r\ncontent-type: font/woff2\r\nlast-modified: Sat, 26 Sep 2026 11:01:44 GMT\r\naccept-ranges: bytes\r\ncontent-length: 326108\r\ndate: Wed, 07 Oct 2026 05:49:13 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":326108,"size_decoded":326396,"mime_type":"font/woff2","magic":"Web Open Font Format (Version 2), TrueType, length 326108, version 4.0","md5":"aed59f2e3de6dd2e59a887b0289222c9","sha1":"02112da6fe1133b81cc961dc35e5c8981acad376","sha256":"50cc74d8bfddf89e9f707548c1a95c8b8ea0f630afecb2c016ea3434f0eaa409","sha512":"894f206dd9918f48a5672f1b89c8fae6e68c7a05b0abe98c3e5dac24da7ea538c6dcd3903b5699014cf37a85199b40c66521dbec802b342cb7f8e1db076ee0ba","ssdeep":"6144:EkYW1MhKxiFuvYRL0P+oF42Wr5i5g6zQwRxeCQ+PWO4WA01Ctqt6Xe:EkYWehKxiFyYM+oF42Wr5i5g6zQwRxpj","tlshash":"ae642395aaf4e69bd97d053c1c05be2fc4c701103b52de8b8e495a1fd22d8c1eace1a7","first_seen":"2023-12-03T21:17:24Z","last_seen":"2026-10-11T03:38:00.911927Z","times_seen":1306,"resource_available":false,"data":null}},"time_used":328,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":112,"receive":216,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-10-07","alert":"Phishing Block","trigger":"be-spotify.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"be-spotify.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"be-spotify.com/wp-content/themes/extendable/assets/js/header.js?ver=2.1.9","fqdn":"be-spotify.com","domain":"be-spotify.com","tld":"com"},"ip":{"addr":"198.54.132.28","port":443,"asn":11878,"as":"TZULO","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://be-spotify.com/","date":"2026-10-07T05:49:13.855Z","timestamp":1791352153855,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"autodiscover.be-spotify.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 26 Sep 2026 12:00:38 GMT","end":"Fri, 25 Dec 2026 12:00:37 GMT"},"fingerprint":{"sha1":"6E:3E:D5:B3:6B:80:B7:AF:0A:F1:27:83:D8:A8:E9:33:91:D9:1C:F2","sha256":"99:50:8F:7F:B4:B7:3F:7E:81:EE:6A:C5:39:7F:CF:98:11:CD:8B:DA:CF:F5:16:62:F4:C7:29:8D:A6:3C:C7:86"}}},"request":{"raw":"GET /wp-content/themes/extendable/assets/js/header.js?ver=2.1.9 HTTP/1.1\r\nHost: be-spotify.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://be-spotify.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/javascript\r\nlast-modified: Sat, 26 Sep 2026 11:01:44 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 1455\r\ndate: Wed, 07 Oct 2026 05:49:13 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":3960,"size_decoded":1712,"mime_type":"text/javascript","magic":"JavaScript source, Unicode text, UTF-8 text","md5":"79c5237bf56c4247df7090c31171eee5","sha1":"c384730d987565e9867776e1a91f8e739c56560a","sha256":"0aee93f2d7c2015a32a397953665e7ae2d643347bbaaf24d65c68855ac302cb8","sha512":"9ab7ff35effb8d9c06b518e55f8640b994263d4cfff911a61bd303138c217897adc2c89ccb7f37d73f892269cae45b41be5f89fe65f4e6278dc5c2760bb589c8","ssdeep":"","tlshash":"d781d724a36c323e12fab19ae419a7d7773c0243b54309db9a4d989d21d44b8c2e1fd7","first_seen":"2026-05-28T01:27:32.104167Z","last_seen":"2026-10-11T06:36:42.187024Z","times_seen":736,"resource_available":true,"data":null}},"time_used":235,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":235,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-10-07","alert":"Phishing Block","trigger":"be-spotify.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"be-spotify.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"be-spotify.com/wp-includes/js/dist/script-modules/block-library/navigation/view.min.js?ver=1bf28ded04f9f188bdcb","fqdn":"be-spotify.com","domain":"be-spotify.com","tld":"com"},"ip":{"addr":"198.54.132.28","port":443,"asn":11878,"as":"TZULO","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://be-spotify.com/","date":"2026-10-07T05:49:13.859Z","timestamp":1791352153859,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"autodiscover.be-spotify.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 26 Sep 2026 12:00:38 GMT","end":"Fri, 25 Dec 2026 12:00:37 GMT"},"fingerprint":{"sha1":"6E:3E:D5:B3:6B:80:B7:AF:0A:F1:27:83:D8:A8:E9:33:91:D9:1C:F2","sha256":"99:50:8F:7F:B4:B7:3F:7E:81:EE:6A:C5:39:7F:CF:98:11:CD:8B:DA:CF:F5:16:62:F4:C7:29:8D:A6:3C:C7:86"}}},"request":{"raw":"GET /wp-includes/js/dist/script-modules/block-library/navigation/view.min.js?ver=1bf28ded04f9f188bdcb HTTP/1.1\r\nHost: be-spotify.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://be-spotify.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=4\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/javascript\r\nlast-modified: Sat, 26 Sep 2026 11:00:51 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 1004\r\ndate: Wed, 07 Oct 2026 05:49:13 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":3033,"size_decoded":1261,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (3032)","md5":"fa40dd851aca7b8c45de7991f13a8683","sha1":"4b9cb946ef66b3cc547f971b7915f023dd84da37","sha256":"fbe11af6f29f55ae480e2058aad3ac400315d2792c3b14346f016b70cebf3bb3","sha512":"51ea7694116308ed78b1a417f96ad0c41e842f8a94dd9640f3456c60ae53eea18fb908405c059675b56278986671c42d37f5d9049db2159558c10e73e1f50100","ssdeep":"","tlshash":"39517179726575b6cefe4788f330d538b3619dc1040a1442bd1806dfaaaeea1c1e1f6a","first_seen":"2026-07-31T14:57:46.364913Z","last_seen":"2026-10-11T09:39:10.609774Z","times_seen":2906,"resource_available":true,"data":null}},"time_used":232,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":232,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"be-spotify.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null},{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-10-07","alert":"Phishing Block","trigger":"be-spotify.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"be-spotify.com/wp-includes/js/wp-emoji-release.min.js?ver=7.1.3","fqdn":"be-spotify.com","domain":"be-spotify.com","tld":"com"},"ip":{"addr":"198.54.132.28","port":443,"asn":11878,"as":"TZULO","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"script","requested_by":"https://be-spotify.com/","date":"2026-10-07T05:49:14.269Z","timestamp":1791352154269,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"autodiscover.be-spotify.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 26 Sep 2026 12:00:38 GMT","end":"Fri, 25 Dec 2026 12:00:37 GMT"},"fingerprint":{"sha1":"6E:3E:D5:B3:6B:80:B7:AF:0A:F1:27:83:D8:A8:E9:33:91:D9:1C:F2","sha256":"99:50:8F:7F:B4:B7:3F:7E:81:EE:6A:C5:39:7F:CF:98:11:CD:8B:DA:CF:F5:16:62:F4:C7:29:8D:A6:3C:C7:86"}}},"request":{"raw":"GET /wp-includes/js/wp-emoji-release.min.js?ver=7.1.3 HTTP/1.1\r\nHost: be-spotify.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: */*\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://be-spotify.com/\r\nSec-Fetch-Dest: script\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncontent-type: text/javascript\r\nlast-modified: Sat, 26 Sep 2026 11:00:51 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 4974\r\ndate: Wed, 07 Oct 2026 05:49:14 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":22752,"size_decoded":5231,"mime_type":"text/javascript","magic":"JavaScript source, ASCII text, with very long lines (19813)","md5":"7dcb0bb1f67bc5cd9aa86bc0577108e3","sha1":"c90b1ed149a278c322a63f3a79443ccce5592382","sha256":"063840b4b3f5869e0f0d078bab8bd29cfb3a59ee85e8e3edbbec35a8fe846fd3","sha512":"d09c60fc702e1d3fb839685770b2626a64cbc6373ac4bf3a63c3536caef34f4f6caf76adfbd5c2d15bed6e1396ed4f3ca80f6673e3421b2ae2f9e7aa5ccf16f2","ssdeep":"384:WzevzApRZTbbUL3px/bEg1XgA5OOkpJTX:Wsk9bUL3px/YqXgAP+hX","tlshash":"79a2949ba33a4e8f343e3bd78d968f4dc9da555321c0e079dbefb6c169a00568274c90","first_seen":"2026-06-05T05:27:24.795617Z","last_seen":"2026-10-11T09:43:45.474325Z","times_seen":80889,"resource_available":true,"data":null}},"time_used":111,"timings":{"blocked":0,"dns":0,"connect":0,"send":0,"wait":111,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-10-07","alert":"Phishing Block","trigger":"be-spotify.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"be-spotify.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"be-spotify.com/wp-includes/blocks/navigation/style.min.css?ver=7.1.3","fqdn":"be-spotify.com","domain":"be-spotify.com","tld":"com"},"ip":{"addr":"198.54.132.28","port":443,"asn":11878,"as":"TZULO","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://be-spotify.com/","date":"2026-10-07T05:49:13.629Z","timestamp":1791352153629,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"autodiscover.be-spotify.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 26 Sep 2026 12:00:38 GMT","end":"Fri, 25 Dec 2026 12:00:37 GMT"},"fingerprint":{"sha1":"6E:3E:D5:B3:6B:80:B7:AF:0A:F1:27:83:D8:A8:E9:33:91:D9:1C:F2","sha256":"99:50:8F:7F:B4:B7:3F:7E:81:EE:6A:C5:39:7F:CF:98:11:CD:8B:DA:CF:F5:16:62:F4:C7:29:8D:A6:3C:C7:86"}}},"request":{"raw":"GET /wp-includes/blocks/navigation/style.min.css?ver=7.1.3 HTTP/1.1\r\nHost: be-spotify.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://be-spotify.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 14 Oct 2026 05:49:13 GMT\r\ncontent-type: text/css\r\nlast-modified: Sat, 26 Sep 2026 11:00:50 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 2348\r\ndate: Wed, 07 Oct 2026 05:49:13 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":20776,"size_decoded":2677,"mime_type":"text/css","magic":"ASCII text, with very long lines (20776), with no line terminators","md5":"52314f0976fd06afc7a9bc305bf2f39c","sha1":"8830882b9876d959489386df254e31c096f81d91","sha256":"bfb2953c6eced1909de016645ff3d2da8cdbae613f956356a47188c8cc3e2dae","sha512":"d0d246270e71ac3b21d06160753f009750e7cf2386536ff59e3069867497642c8fb5903342e6f7bbb0223aaa8091c505cc189a3cb3b4ceca7448cb441a3fe278","ssdeep":"384:SsFyo7lc6g7jiUsA5zy1FW9X3MiUMFMTMqMfM3MqMSMWMCM9MVMz/UYvnkxrV7eG:SsFyo7lc6g7jiUsA5zy1FW9HMiUMFMTJ","tlshash":"fd92e3c05fb0acf4a9bb933b6e5490148623e903c5097ad5a0f3e694b68db545bd3f0b","first_seen":"2026-06-18T10:59:08.340618Z","last_seen":"2026-10-11T10:21:51.037579Z","times_seen":4591,"resource_available":true,"data":null}},"time_used":112,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":112,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-10-07","alert":"Phishing Block","trigger":"be-spotify.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"be-spotify.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}},{"url":{"schema":"https","addr":"be-spotify.com/wp-content/mu-plugins/controlpanel-connector/assets/css/controlpanelbar.css?ver=1.7.4","fqdn":"be-spotify.com","domain":"be-spotify.com","tld":"com"},"ip":{"addr":"198.54.132.28","port":443,"asn":11878,"as":"TZULO","country":"Canada","country_code":"CA"},"is_navigation_request":false,"resource_type":"stylesheet","requested_by":"https://be-spotify.com/","date":"2026-10-07T05:49:13.631Z","timestamp":1791352153631,"http_version":"HTTP/2","security_state":"secure","security_info":{"cipher_suite":"TLS_AES_128_GCM_SHA256","key_group_name":"mlkem768x25519","signature_name":"RSA-PSS-SHA256","protocol":"TLSv1.3","cert":{"subject":{"commonName":"autodiscover.be-spotify.com","organization":""},"issuer":{"commonName":"YR2","organization":"Let's Encrypt"},"validity":{"start":"Sat, 26 Sep 2026 12:00:38 GMT","end":"Fri, 25 Dec 2026 12:00:37 GMT"},"fingerprint":{"sha1":"6E:3E:D5:B3:6B:80:B7:AF:0A:F1:27:83:D8:A8:E9:33:91:D9:1C:F2","sha256":"99:50:8F:7F:B4:B7:3F:7E:81:EE:6A:C5:39:7F:CF:98:11:CD:8B:DA:CF:F5:16:62:F4:C7:29:8D:A6:3C:C7:86"}}},"request":{"raw":"GET /wp-content/mu-plugins/controlpanel-connector/assets/css/controlpanelbar.css?ver=1.7.4 HTTP/1.1\r\nHost: be-spotify.com\r\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64; rv:134.0) Gecko/20100101 Firefox/134.0\r\nAccept: text/css,*/*;q=0.1\r\nAccept-Language: en-US,en;q=0.9\r\nAccept-Encoding: gzip, deflate, br, zstd\r\nSec-GPC: 1\r\nConnection: keep-alive\r\nReferer: https://be-spotify.com/\r\nSec-Fetch-Dest: style\r\nSec-Fetch-Mode: no-cors\r\nSec-Fetch-Site: same-origin\r\nPriority: u=2\r\nPragma: no-cache\r\nCache-Control: no-cache\r\n\r\n","headers":null,"cookies":null,"method":"GET"},"response":{"raw":"HTTP/2 200 \r\ncache-control: public, max-age=604800\r\nexpires: Wed, 14 Oct 2026 05:49:13 GMT\r\ncontent-type: text/css\r\nlast-modified: Fri, 18 Sep 2026 13:42:00 GMT\r\naccept-ranges: bytes\r\ncontent-encoding: br\r\nvary: Accept-Encoding\r\ncontent-length: 1791\r\ndate: Wed, 07 Oct 2026 05:49:13 GMT\r\nserver: LiteSpeed\r\nX-Firefox-Spdy: h2\r\n\r\n","headers":null,"cookies":null,"status_code":"200","status_text":"OK","fingerprints":[{"name":"LiteSpeed","description":"LiteSpeed is a high-scalability web server.","website":"https://litespeedtech.com","common_platform_enumeration":"cpe:2.3:a:litespeedtech:litespeed_web_server:*:*:*:*:*:*:*:*","icon":"LiteSpeed.svg","categories":["Web servers"]}],"data":{"size":12733,"size_decoded":2120,"mime_type":"text/css","magic":"ASCII text","md5":"408e8c231f5586fbc36502d45e9c1c37","sha1":"25e88702d99d0ac4d05badbe3541deb7d1e7a3a1","sha256":"5d4fd9947b677ef469f23016b96b0cdc74cd644131956cb87dfbdd48a834245d","sha512":"0078f2ba108e035792cd47cac841a419fe2adf3dbf3bb2d81c0c7e9898d9b073e2a927d3c3bc0eef9fdc54f4556256e043da5368d24d13711ba71f49ac2560f9","ssdeep":"192:4xDn8nO+GJu/lNsuf2OybnJU7t5OhtiwOLmwrVZtLZeyCV/5gtNjNfCQSjANoNfo:i8npGJu/tdEJUZ5obOLmwrabmj","tlshash":"da42c0537b763790045f469c6b9eed71291d9043e20bc8be339c7a54afc23963a77a40","first_seen":"2026-10-06T10:49:20.851964Z","last_seen":"2026-10-07T05:49:44.55223Z","times_seen":3,"resource_available":true,"data":null}},"time_used":113,"timings":{"blocked":-1,"dns":0,"connect":0,"send":0,"wait":113,"receive":0,"ssl":0},"alerts":{"ids":null,"analyzer":[{"sensor_name":"opendns","sensor_type":"DNS","title":"OpenDNS","description":"OpenDNS","scan_date":"2026-10-07","alert":"Phishing Block","trigger":"be-spotify.com","verdict":"phishing","severity":"medium","comment":"","link":"https://www.opendns.com/","meta":null},{"sensor_name":"dns4eu","sensor_type":"DNS","title":"DNS4EU","description":"DNS4EU","scan_date":"2026-10-07","alert":"Sinkholed","trigger":"be-spotify.com","verdict":"malicious","severity":"medium","comment":"","link":"https://www.joindns4.eu/","meta":null}],"urlquery":null}}]}